| |
| |||||||
Log-Analyse und Auswertung: Malware verhindert MBAM/Windows DefenderWindows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML |
 |
13.07.2017, 19:47
| #16 |
 |  Malware verhindert MBAM/Windows Defender Addition 1/2: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 11-07-2017
durchgeführt von Raphael (13-07-2017 20:36:20)
Gestartet von F:\Downloads
Windows 10 Home Version 1703 (X64) (2017-05-30 17:32:24)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3946114199-4031152989-3939253435-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3946114199-4031152989-3939253435-503 - Limited - Disabled)
Gast (S-1-5-21-3946114199-4031152989-3939253435-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-3946114199-4031152989-3939253435-1002 - Limited - Enabled)
Raphael (S-1-5-21-3946114199-4031152989-3939253435-1000 - Administrator - Enabled) => C:\Users\Raphael
Silvia (S-1-5-21-3946114199-4031152989-3939253435-1003 - Limited - Enabled) => C:\Users\Silvia
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
AS: Malwarebytes (Enabled - Up to date) {98619B37-4FC4-67F2-1C99-EEF6D47DBD96}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (HKLM-x32\...\7-Zip) (Version: - )
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (HKLM-x32\...\{77DCDCE3-2DED-62F3-8154-05E745472D07}) (Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 17.009.20058 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
Adobe Flash Player 26 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 26.0.0.137 - Adobe Systems Incorporated)
Advertising Center (HKLM-x32\...\{B2EC4A38-B545-4A00-8214-13FE0E915E6D}) (Version: 0.0.0.2 - Nero AG) Hidden
AirDroid 3.3.2.0 (HKLM-x32\...\AirDroid) (Version: 3.3.2.0 - Sand Studio)
Airline Tycoon 2 Patch v1.27 (HKLM-x32\...\AirlineTycoon2_is1) (Version: - Kalypso Media)
ALDI Bestellsoftware 4.12.2 (HKLM-x32\...\ALDI Bestellsoftware) (Version: 4.12.2 - ORWO Net)
Allgemeine Runtime Files (x86) (HKLM\...\{1F6D1DB5-82B5-41A4-85A2-0A382C142A35}_is1) (Version: 1.0.5.1 - Sereby Corporation)
Amazon MP3-Downloader 1.0.18 (HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\Amazon MP3-Downloader) (Version: 1.0.18 - Amazon Services LLC)
AMD Settings (HKLM\...\WUCCCApp) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.)
AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 9.0.000.8 - Advanced Micro Devices, Inc.)
Anno 1701 (HKLM-x32\...\{A2433A63-5F5D-40E5-B529-9123C2B3E734}) (Version: 1.02 - Sunflowers)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
aquasuite (HKLM-x32\...\aquasuite5) (Version: 2017-1.3 - Aqua Computer GmbH & Co. KG)
ArcaniA - Gothic 4 (HKLM-x32\...\{EE74D039-45D7-44E9-BF95-B9CFB015964F}_is1) (Version: - JoWooD Entertainment AG)
Arduino (HKLM-x32\...\Arduino) (Version: 1.6.9 - Arduino LLC)
ARMA 2 Operation Arrowhead Uninstall (HKLM-x32\...\ARMA 2 Operation Arrowhead) (Version: - )
ArmA 2 Uninstall (HKLM-x32\...\ArmA 2) (Version: - )
Arma Cold War Assault Uninstall (HKLM-x32\...\Arma Cold War Assault) (Version: - )
ArmA Uninstall (HKLM-x32\...\ArmA) (Version: - )
ArtMoney SE v7.39.1 (HKLM-x32\...\ArtMoney SE_is1) (Version: 7.39 - System SoftLab)
ASUS GPU Tweak (HKLM-x32\...\{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.1.1.2 - ASUSTek COMPUTER INC.) Hidden
ASUS GPU Tweak (HKLM-x32\...\InstallShield_{532F6E8A-AF97-41C3-915F-39F718EC07D1}) (Version: 2.1.1.2 - ASUSTek COMPUTER INC.)
ASUS Utility (HKLM-x32\...\{003A5708-9078-45C9-A2FE-EBBF422B3D0A}) (Version: 1.00.0000 - ASUSTek) Hidden
ASUS VGA Driver (HKLM-x32\...\{90157C5D-D791-4D36-8C2B-7553DC01D601}) (Version: 3.0.0.1 - Ihr Firmenname) Hidden
Atmel JungoUSB (HKLM-x32\...\{495AA4EB-6AF7-4D8E-89E0-EDEFD1D58950}) (Version: 6.2.86 - Atmel) Hidden
Atmel LibUSB (HKLM-x32\...\{89D20A20-5E12-435E-ABD6-C85461114332}) (Version: 6.2.38 - Atmel) Hidden
Atmel SeggerUSB (HKLM-x32\...\{586416F9-AACB-424A-B3B4-CFA7A850A6E6}) (Version: 6.2.22 - Atmel) Hidden
Atmel Studio InfFiles (HKLM-x32\...\{DD8CABB7-6F70-46CB-A3C7-A544E3BFF0A7}) (Version: 6.2.80 - Atmel Corporation) Hidden
Atmel USB Driver Package (HKLM-x32\...\{0b919373-80a6-47d9-8542-540e14f914dc}) (Version: 6.2.241 - Atmel)
Atmel WinUSB (HKLM-x32\...\{4884F982-C0BF-48FD-BF05-4517757984C9}) (Version: 6.2.22 - Atmel) Hidden
Autodesk DWG TrueView 2018 - English (HKLM\...\DWG TrueView 2018 - English) (Version: 22.0.50.0 - Autodesk)
B4A Trial v5.20 (HKLM-x32\...\{DA51676B-4318-4AF6-B94F-A8A9067622AD}_is1) (Version: - Anywhere Software)
BASCOM-AVR (HKLM-x32\...\{47F94730-ABD2-47F6-920E-EA8CDB6DD0C6}_is1) (Version: 2.0.7.5 - MCS Electronics)
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A1) (Version: - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version: - )
Blender (HKLM\...\{2BBF253B-4DC9-49DA-AE78-5991452AC317}) (Version: 2.78.2 - Blender Foundation)
Blood & Gold: Caribbean! (HKLM\...\Steam App 413710) (Version: - Snowbird Games)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version: - Sledgehammer Games)
Call of Duty: Advanced Warfare (HKLM-x32\...\Steam App 209650) (Version: - Sledgehammer Games)
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward)
Catalyst Control Center Next Localization BR (HKLM\...\{118C2119-84B6-E32C-63E2-B56DBCF41CE5}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{3E245378-BF77-6946-C6F6-096DBE5EAB82}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{55A4D3AB-C8DF-26B2-89A8-7E16E1E40700}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization BR (HKLM\...\{E7AA1A02-575C-14C6-FBEF-4BE6D46A5B74}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{365AEAB2-4CF3-7CBB-0DAC-E9E14B688E65}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{45907537-804A-514F-5280-5F4F12A6DCBC}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{5A083A57-10D6-D4E5-292C-F274870E73A4}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHS (HKLM\...\{EB6C44F1-0F78-FE10-BC63-90BA50AB0CE9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{7ABC6D83-816E-6D48-E65D-B0CEDD294E4E}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{962364E4-08BB-347D-32E7-2B789F37BF8A}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{B26D75B8-FAB7-6F8B-767F-BAF975383D91}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CHT (HKLM\...\{DF0D7C1C-72B6-9FFB-DF66-B3720237BB80}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{238F6F6F-2544-86CF-3AB6-2CDADAB58CF0}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{36EDC500-E4C0-371C-9865-08450415C1E9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{A0407E39-2AA4-60B3-885F-3C5347B6909E}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization CS (HKLM\...\{C3EE628C-7394-FE2C-0C90-C05284EB528D}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{0989D0EA-AFF3-5F9A-3D25-20EE133E409B}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{2F544F46-5F6E-97BB-3550-A0242A3C5754}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{4C2FB7FD-89FD-BA5C-585A-3811F326AD34}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DA (HKLM\...\{EC688BD0-240D-AE40-55F3-234E54919AE6}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{A8689A0F-5928-7300-B82B-C5E85131B7BA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{D74218A3-C503-57EF-AC9F-2220082E7ADE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{E27224E3-7913-DA1E-5B08-9BEEC8FEE3D1}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization DE (HKLM\...\{FC4086D6-E345-5F43-08BB-280FB57DAF49}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{76AAF56B-93D8-161D-809A-EC05F3B913DA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{95A52FC1-C728-841D-1BFC-CC793B77B0A4}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{DA433FCF-90A1-19A5-65A7-FDF82DE4826D}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization EL (HKLM\...\{F8EBE530-A4D5-BF51-F623-3787E6B8A878}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{063CED74-F5F0-870E-DC9C-2D78FDEDA3EE}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{42FBD43F-DE53-6D4D-5134-E3C93B45CBEF}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{949F125B-A6CC-5A5E-EEE7-4AC50305C1FA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization ES (HKLM\...\{A22CDEBA-6DB5-12CD-F6CE-6238C2D78363}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{13BB60AA-88F7-4B1F-2DEC-D81EEDE8B3AA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{20D46801-147B-30AD-7C5A-AC4560A79096}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{AC85CF50-9A55-0103-ADBF-365C37603AA4}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FI (HKLM\...\{C0BFC67D-E447-02C8-6046-C078DFE9EC97}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{22C39711-2747-D264-319A-1550BEEAAEC6}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{37AA6227-FF2C-95AC-87C0-45DCC0BB87DA}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{94C72EBE-2908-F0AC-62DA-D61951830F8F}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization FR (HKLM\...\{B349892D-B015-033C-4CA8-3635E6B655D7}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{1DBACFDB-5E43-7882-36BD-53526D34BD22}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{5B987681-3652-492B-6A11-E02AC0FE5959}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{BE8D6AB1-3049-2F0C-67FA-00C0A5D321A3}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization HU (HKLM\...\{EB328356-1DF0-1CCE-3607-6361DD329219}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{26567561-DFB2-2B63-9BA8-6A490ED37016}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{86BFE5B4-1FCE-3C02-6373-92B1AE6431E8}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{87E6EC29-AEC5-28CB-F773-93EB6C1B8A2B}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization IT (HKLM\...\{A91FC4BF-C1EC-ADCA-79D1-F4F0671F1D60}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{0742432E-42D9-2240-4CA1-8595CCCBAA77}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{0809FEC1-EF86-51E9-8210-DC1B1BDB6745}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{CA55697D-BD74-3ED8-6B21-D7EDAD3B7D02}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization JA (HKLM\...\{ED75A775-03A7-F214-868D-497748707968}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{07BFBD5C-2F63-6828-1B61-B41A44113F3B}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{5FD706FF-6AD8-E372-A35A-879409982655}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{CFC860C8-4F51-E08C-A74C-2E444ED06160}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization KO (HKLM\...\{EAEAA839-44F4-22DF-D1CC-88C3B2A3D4B1}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{9338D693-38B7-1ED4-9B42-BFA1D5600CCB}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{A3973655-E448-4A1B-477C-988A79D132D9}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{A4E7CA0C-84EB-5E29-2F04-06C4E4790C2F}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NL (HKLM\...\{E6038D3E-5D87-8DF7-6D05-BE7532C3E73E}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{59D2664C-949B-7FA7-9880-ECB993B6616A}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{6DC92550-D065-4B36-C4D3-D8D7A702A7A7}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{C971C145-258D-6650-7088-13DDB161327A}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization NO (HKLM\...\{DFAD9DAC-4768-C8BB-4E0E-5239605A9BEA}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{970A40CA-46AB-986C-1798-976ED0EA00FA}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{B2A83706-3F14-1532-20CD-B4EE715A8945}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{EBA09DAF-14B4-7BE7-676E-6E2FB21EDBDD}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization PL (HKLM\...\{FFBFBD1F-B160-A119-7C43-8584FA2E5665}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{44ED2CDA-4197-E9E9-B328-26E1FB749116}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4707CBFC-8ED4-463E-0FF9-DE86F4A743E9}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{4D1D5407-9B69-6422-629C-8518A26004A4}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization RU (HKLM\...\{9AA4DD93-94BF-22EA-C9D2-7084F304A31B}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{3450566C-4561-0EE8-B1AB-D5C79CCE8D2C}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{379D900B-A785-6DB0-012E-434356A365B3}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{A8379BAB-59A9-C0A3-8BCC-4852EA403692}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization SV (HKLM\...\{C14A3A5B-8A86-C239-37D7-158211778C54}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{24DF617A-CD23-6E6A-126B-23630D2781CE}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{366C4FB5-CF6E-258B-418D-E6D29549A278}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{A50C89BC-8D8E-8828-824A-7171F6D583D5}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TH (HKLM\...\{FCE8438C-3272-D63F-479F-670F082B294B}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{0B5633F0-C415-2F08-671E-4C9E2FAACD45}) (Version: 2015.1129.2307.41591 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{25D1751E-7CA2-5F6D-0125-0A16E47AF9FE}) (Version: 2016.0624.1251.21301 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{83DDDFD8-AD42-72F9-E4F1-5456FDB304C9}) (Version: 2017.0424.2119.36535 - Advanced Micro Devices, Inc.) Hidden
Catalyst Control Center Next Localization TR (HKLM\...\{B10089DE-934F-6E0F-683A-B788F89348DF}) (Version: 2016.1121.1657.30480 - Advanced Micro Devices, Inc.) Hidden
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
chip 1-click download service (HKLM-x32\...\{503CA94E-0834-4CEE-AD92-BA17AF4E809A}) (Version: 3.6.9.0 - Chip Digital GmbH)
Cities XXL (HKLM-x32\...\Steam App 313010) (Version: - Focus Home Interactive)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version: - Colossal Order Ltd.)
Command & Conquer™ and The Covert Operations™ (HKLM-x32\...\{050E298D-C9B8-4582-A332-26201268A297}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Command & Conquer™ Red Alert, Counterstrike and The Aftermath (HKLM-x32\...\{B9A7CCBE-48F7-4B3E-BD20-76ADDD4DC69F}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Command & Conquer™ Renegade (HKLM-x32\...\{24DFBE4C-FD7F-48F2-A7D9-D1A0929B2113}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
compasX 19.6 (HKLM-x32\...\{D0A26D5D-CC81-4CA7-9F5B-95C53DB98C41}) (Version: 19.6 - TELENOT electronic GmbH)
Core Temp 1.5.1 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.5.1 - ALCPU)
CPUID CPU-Z 1.77 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
Creation Kit (HKLM-x32\...\Steam App 202480) (Version: - bgs.bethsoft.com)
Curse (HKLM-x32\...\{1F2611FB-6F69-4AA8-BECD-243BD8CB45F3}) (Version: 6.0.0.0 - Curse)
D3DX10 (HKLM-x32\...\{E09C4DB7-630C-4F06-A631-8EA7239923AF}) (Version: 15.4.2368.0902 - Microsoft) Hidden
Darksiders II (HKLM-x32\...\Steam App 50650) (Version: - Vigil Games)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.31.37.1020 - Electronic Arts Inc.)
DiRT Showdown (HKLM-x32\...\Steam App 201700) (Version: - Codemasters)
dm-Fotowelt (HKLM-x32\...\dm-Fotowelt) (Version: 5.1.5 - CEWE Stiftung u Co. KGaA)
DOOM (HKLM\...\Steam App 379720) (Version: - id Software)
Dropbox (HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\Dropbox) (Version: 29.4.20 - Dropbox, Inc.)
Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts)
DWG TrueView 2018 - English (HKLM\...\{28B89EEF-1028-0409-0100-CF3F3A09B77D}) (Version: 22.0.50.0 - Autodesk) Hidden
EAGLE 6.5.0 (HKLM-x32\...\EAGLE 6.5.0) (Version: 6.5.0 - CadSoft Computer GmbH)
ELECTRA Freeware 4.50 (HKLM-x32\...\ELECTRA_is1) (Version: - KONEKT)
Europa Universalis IV (HKLM-x32\...\Steam App 236850) (Version: - Paradox Development Studio)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
Far Cry 3 (HKLM-x32\...\{E3B9C5A9-BD7A-4B56-B754-FAEA7DD6FA88}) (Version: 1.05 - Ubisoft)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version: - Ubisoft)
Farming Simulator 2013 (HKLM\...\Steam App 220260) (Version: - Giants Software)
FIFA 13 (HKLM-x32\...\{A29E18C2-7AB1-4b6b-848C-5D5E2C85F0C0}) (Version: 1.8.0.0 - Electronic Arts)
FileZilla Client 3.23.0.2 (HKLM-x32\...\FileZilla Client) (Version: 3.23.0.2 - Tim Kosse)
FINAL FANTASY VII (HKLM-x32\...\Steam App 39140) (Version: - Square Enix)
Fotogalerie (HKLM-x32\...\{0FD66C6F-4023-4C74-AF8E-9B8B2053868E}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Free YouTube Download (HKLM-x32\...\Free YouTube Download_is1) (Version: 4.1.7.426 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.61.805 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.61.805 - DVDVideoSoft Ltd.)
Frontplatten Designer (HKLM\...\Frontplatten Designer) (Version: 5.0.1 - Schaeffer AG)
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Futuremark SystemInfo (HKLM-x32\...\{BEE64C14-BEF1-4610-8A68-A16EAA47B882}) (Version: 4.0.0.0 - Futuremark Corporation)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version: - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 59.0.3071.115 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Grand Theft Auto: Episodes from Liberty City (HKLM-x32\...\{5454083B-1308-4485-BF17-111000038701}) (Version: 1.0.0003.135 - Rockstar Games Inc.) Hidden
Grand Theft Auto: Episodes From Liberty City (HKLM-x32\...\{61B8B2F9-D8DA-4B24-89A9-DB09F38A4899}) (Version: 1.1.0.0 - Rockstar Games)
Hearts of Iron III - Their Finest Hour version 4.02 (HKLM-x32\...\{25D080C2-19A4-427D-A12A-979D674B57F8}}_is1) (Version: 4.02 - Paradox Interactive)
Hearts of Iron III (HKLM-x32\...\Steam App 25890) (Version: - Paradox Interactive)
Hearts of Iron IV (HKLM\...\Steam App 394360) (Version: - Paradox Development Studios)
Heaven Benchmark version 4.0 (HKLM-x32\...\Unigine Heaven Benchmark (Basic Edition)_is1) (Version: 4.0 - Unigine Corp.)
Helium (HKLM-x32\...\{9A781940-AC41-4D5E-8E1E-76A04B916FB9}) (Version: 1.0.0 - ClockworkMod)
Hex-Editor MX (HKLM-x32\...\{7FC7AD70-1DF3-4B84-9AA2-4FB680F45572}_is1) (Version: 6.0 - NEXT-Soft)
Hotfix für Microsoft Visual Basic 2010 Express - DEU (KB2635973) (HKLM-x32\...\{CCAC7E52-ECCE-3C4D-B1BE-BC2ACF1C1C0E}.KB2635973) (Version: 1 - Microsoft Corporation)
ImagXpress (HKLM-x32\...\{A8F2089B-1F79-4BF6-B385-A2C2B0B9A74D}) (Version: 7.0.74.0 - Nero AG) Hidden
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.0.10.1464 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 9.17.10.2932 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.8.251 - Intel Corporation)
IPTInstaller (HKLM-x32\...\{6965F2F4-1CD2-4F42-A8EF-9EF433F9AA72}) (Version: 4.0.4 - HTC)
Jagged Alliance - Back in Action (HKLM-x32\...\Steam App 57740) (Version: - Coreplay GmbH)
Java 8 Update 131 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Java 8 Update 131 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180131F0}) (Version: 8.0.1310.11 - Oracle Corporation)
Junk Mail filter update (HKLM-x32\...\{F6F30C28-38AA-4DBA-AE0B-7E30238E61BB}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version: - Avalanche Studios)
Just Cause 2: Multiplayer Mod (HKLM-x32\...\Steam App 259080) (Version: - Avalanche Studios)
Lidl-Fotos (HKLM-x32\...\Lidl-Fotos_is1) (Version: - )
LinCity-NG 2.0 (HKLM-x32\...\LinCity-NG_is1) (Version: - LinCity-NG Developers)
LOGO!Soft Comfort V6.1 (HKLM-x32\...\LOGO!Soft Comfort V6.1) (Version: 6.1.0.0 - Siemens AG)
LOGO!Soft Comfort V7.1 (HKLM\...\LOGO!Soft Comfort V7.1 ) (Version: 7.1.0.0 - Siemens AG)
LTspice IV (HKLM-x32\...\LTspice IV) (Version: - )
Malwarebytes Version 3.1.2.1733 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.1.2.1733 - Malwarebytes)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.280 - Electronic Arts)
MEGAsync (HKLM-x32\...\MEGAsync) (Version: - Mega Limited)
MegaTrainer Ultimate Version 1.4.8.1 (HKLM-x32\...\{68A5CFDB-E05C-46BC-B2EB-988D1E2C2444}_is1) (Version: 1.4.8.1 - MegaDev)
Men of War (Nur entfernen) (HKLM-x32\...\{137D91E1-2347-4EAC-BB0B-CC06C6B92A52}_is1) (Version: 1.0.2.0 - 1C)
Men of War patch Version 1.17.5.1 (HKLM-x32\...\{E8169D02-FE93-4916-856E-223D0415DE20}_is1) (Version: 1.17.5.1 - 1C Company)
Menu Templates - Pack 1 (HKLM-x32\...\{56ABA277-EE53-4478-A607-FA42208FF5A9}) (Version: 9.6.0.0 - Nero AG) Hidden
Menu Templates - Starter Kit (HKLM-x32\...\{B78120A0-CF84-4366-A393-4D0A59BC546C}) (Version: 9.6.0.0 - Nero AG) Hidden
Microsoft .NET Framework 4 Multi-Targeting Pack (HKLM-x32\...\{CFEF48A8-BFB8-3EAC-8BA5-DE4F8AA267CE}) (Version: 4.0.30319 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Help Viewer 1.1 (HKLM\...\Microsoft Help Viewer 1.1) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Help Viewer 1.1 Language Pack - DEU (HKLM\...\Microsoft Help Viewer 1.1 Language Pack - DEU) (Version: 1.1.40219 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50907.0 - Microsoft Corporation)
Microsoft SkyDrive (HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\SkyDriveSetup.exe) (Version: 16.4.6013.0910 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server 2008 (64-bit) (HKLM\...\Microsoft SQL Server 10 Release) (Version: - Microsoft Corporation)
Microsoft SQL Server 2008 Browser (HKLM-x32\...\{4AF2248C-B3DF-46FB-9596-87F5DB193689}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 Native Client (HKLM\...\{8325FD0C-2FDB-46C3-921A-3A78385EA972}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft SQL Server 2008 R2 Management Objects (HKLM-x32\...\{77F1F8AD-51B8-4490-AEEC-BF480073E0FC}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{0125D081-30D0-4A97-82A8-C28D444B6256}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server Compact 3.5 SP2 x64 DEU (HKLM\...\{C3EAE456-7E7A-451F-80EF-F34C7A13C558}) (Version: 3.5.8080.0 - Microsoft Corporation)
Microsoft SQL Server System CLR Types (HKLM-x32\...\{877B76B2-F83F-4F5A-B28D-3F398641ADB6}) (Version: 10.50.1750.9 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{28D06854-572C-4A65-83E5-F8CAF26B9FDC}) (Version: 10.1.2531.0 - Microsoft Corporation)
Microsoft Visual Basic 2010 Express - DEU (HKLM-x32\...\Microsoft Visual Basic 2010 Express - DEU) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61187 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61186 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.7523 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.7523 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.7523 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Runtime - 10.0.40219 (HKLM\...\{1C7C8AAF-A16D-32E8-89E5-F6D165DE0BCE}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Runtime - 10.0.40219 (HKLM-x32\...\{5D9ED403-94DE-3BA0-B1D6-71F4BDA412E6}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61135 (HKLM\...\{37B8F9C7-03FB-3253-8781-2517C99D7C00}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61135 (HKLM\...\{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61135 (HKLM-x32\...\{B175520C-86A2-35A7-8619-86DC379688B9}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61135 (HKLM-x32\...\{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}) (Version: 11.0.61135 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.40660 (HKLM-x32\...\{82f2609e-68ba-408d-963f-530ad8809435}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.40660 (HKLM-x32\...\{577ff5ba-39aa-4d8c-a3a9-f95012763438}) (Version: 12.0.40660.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25017 (HKLM-x32\...\{e9d78d68-c26c-4da7-9158-99355d8ef3ad}) (Version: 14.10.25017.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25017 (HKLM-x32\...\{58b3beca-b999-4f6f-a48c-81681136a620}) (Version: 14.10.25017.0 - Microsoft Corporation)
Microsoft Visual J# 2.0 Redistributable Package - SE (x64) (HKLM\...\Microsoft Visual J# 2.0 Redistributable Package - SE (x64)) (Version: - Microsoft Corporation)
Microsoft Visual Studio 2010 ADO.NET Entity Framework Tools (HKLM-x32\...\{616C6F39-4CE1-3434-A665-2F6A04C09A7F}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Express Prerequisites x64 - DEU (HKLM\...\{3C983A67-DFB2-3D3D-AD9E-CA1A5A09FD18}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Service Pack 1 (HKLM-x32\...\Microsoft Visual Studio 2010 Service Pack 1) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Shell (Isolated) - ENU (HKLM-x32\...\{D64B6984-242F-32BC-B008-752806E5FC44}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Might & Magic X Legacy (HKLM-x32\...\Uplay Install 401) (Version: 1.3 - Ubisoft)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Minecraft Editor 64 bits (HKLM\...\{64C3313F-DAD0-461C-B6B2-37586B67F98B}) (Version: 1.9.7 - Axialmedia)
Mount & Blade: With Fire and Sword (HKLM-x32\...\Steam App 48720) (Version: - )
Movie Maker (HKLM-x32\...\{45898170-E68C-4F02-AA35-C2186BF347A3}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Maker (HKLM-x32\...\{6066D3FE-3692-4449-A3C8-D1EAA2C0E9E7}) (Version: 16.4.3508.0205 - Microsoft Corporation) Hidden
Movie Templates - Starter Kit (HKLM-x32\...\{E498385E-1C51-459A-B45F-1721E37AA1A0}) (Version: 9.6.0.0 - Nero AG) Hidden
Mozilla Firefox 54.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 54.0.1 (x86 de)) (Version: 54.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 54.0.1 - Mozilla)
MSXML 4.0 SP2 (KB954430) (HKLM-x32\...\{86493ADD-824D-4B8E-BD72-8C5DCDC52A71}) (Version: 4.20.9870.0 - Microsoft Corporation)
MSXML 4.0 SP2 (KB973688) (HKLM-x32\...\{F662A8E6-F4DC-41A2-901E-8C11F044BDEC}) (Version: 4.20.9876.0 - Microsoft Corporation)
MTX (HKLM-x32\...\{6583D00E-0924-4950-8BE9-5D09FE70B333}) (Version: 1.0.0 - mektek.net)
MusicBrainz Picard (HKLM-x32\...\MusicBrainz Picard) (Version: 1.1 - MusicBrainz)
Nero 9 Essentials (HKLM-x32\...\{3ce857f4-e185-4fe0-b26f-542c5c6c895e}) (Version: - Nero AG)
NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM-x32\...\{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.01.10 - NETGEAR) Hidden
NETGEAR WG111v3 wireless USB 2.0 adapter (HKLM-x32\...\InstallShield_{5396FBD8-8BD7-47F9-92AE-F62F13D5A11D}) (Version: 1.01.10 - NETGEAR)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.9 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.9.2 - Notepad++ Team)
NSU (HKLM-x32\...\{A3EA81D6-07A2-4116-9EA3-60B741572FD6}) (Version: 2.02.1030 - ZyXEL)
NVIDIA PhysX (HKLM-x32\...\{64467D47-FFE4-4FBC-ABBA-A0DB829A17EB}) (Version: 9.12.0613 - NVIDIA Corporation)
ohm_lib (HKLM-x32\...\{74A6FE5F-E688-4B09-B67B-046BCD22253D}) (Version: 1.0.0 - Microsoft)
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
OpenOffice 4.1.3 (HKLM-x32\...\{8D5FCC56-BB9F-4122-923C-71753F50F6F5}) (Version: 4.13.9783 - Apache Software Foundation)
Oracle VM VirtualBox 4.3.20 (HKLM\...\{86401870-7AB7-4A8D-8AD6-12B27DF2E6E3}) (Version: 4.3.20 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.4.13.6637 - Electronic Arts, Inc.)
paint.net (HKLM\...\{6AC1101E-7561-43C9-BEEA-4AB1D220D8FF}) (Version: 4.0.13 - dotPDN LLC)
Personal Backup 5.8.10.0 (64-bit) (HKLM\...\Personal Backup 5_is1) (Version: 5.8.10.0 - Dr. J. Rathlev)
PlaysTV (HKLM-x32\...\PlaysTV) (Version: 1.15.6-r117528-release - Plays.tv, LLC)
Port Royale 3 (HKLM-x32\...\{E07A21E5-1C16-41E7-9617-2D38CF3A642C}) (Version: 1.3.2.0 - Gaming Minds Studios GmbH)
ProfiCAD 7.5.8 (HKLM-x32\...\ProfiCAD_is1) (Version: - )
ProtectDisc Driver, Version 11 (HKLM-x32\...\ProtectDisc Driver 11) (Version: 11.0.0.14 - ProtectDisc Software GmbH)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Rainmeter (HKLM-x32\...\Rainmeter) (Version: 4.0 beta r2627 - )
Raptr (HKLM-x32\...\Raptr) (Version: 5.2.7-r116720-release - Raptr, Inc)
Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound)
Razer Megalodon Firmware Updater (HKLM-x32\...\{C67A3F9D-E55D-4288-B4EC-1B9863EFB288}) (Version: 2.12.02 - Razer USA Ltd.)
Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 2.20.15.616 - Razer Inc.)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.9.422.2016 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7910 - Realtek Semiconductor Corp.)
Risen - ModStarter 1.3.4.1 (Online Mods DB version) (HKLM-x32\...\Risen - ModStarter_is1) (Version: - LordOfWAR(WorldOfRisen.de), Odin68(Mighty DWARF Mod-Team))
Risen (HKLM-x32\...\{155F4A0E-76ED-45A2-91FB-FF2A2133C31A}) (Version: 1.00.0000 - Deep Silver)
RivaTuner Statistics Server 6.5.0 Beta 5 (HKLM-x32\...\RTSS) (Version: 6.5.0 Beta 5 - Unwinder)
S.T.A.L.K.E.R. - Clear Sky (HKLM-x32\...\S.T.A.L.K.E.R. - Clear Sky_is1) (Version: 1.0001 - Deep Silver)
Samsung Universal Scan Driver (HKLM-x32\...\Samsung Universal Scan Driver) (Version: 1.2.6.0 - Samsung Electronics Co., Ltd.)
Samsung_MonSetup (HKLM-x32\...\{8EA79DBF-D637-448A-89D6-410A087A4493}) (Version: 1.00.0000 - Samsung)
ScummVM (HKLM-x32\...\ScummVM_is1) (Version: - The ScummVM Team)
Service Pack 1 für SQL Server 2008 (KB 968369) (64-bit) (HKLM\...\KB968369) (Version: 10.1.2531.0 - Microsoft Corporation)
Shadow of Fear 8842 RC3 (HKLM-x32\...\Shadow_0) (Version: 8842 RC3 - Microsoft Games)
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version: - 2K Games, Inc.)
SketchUp 2017 (HKLM\...\{C711666A-E8CC-4E2A-802F-BAA35E76045F}) (Version: 17.2.2555 - Trimble Navigation Limited)
Solve Elec 2.5 (HKLM-x32\...\Solve Elec_is1) (Version: - )
SpeedFan (remove only) (HKLM-x32\...\SpeedFan) (Version: - )
Sql Server Customer Experience Improvement Program (HKLM\...\{2F14965D-567B-4E59-ADEB-0A2CC1E3ADDF}) (Version: 10.1.2531.0 - Microsoft Corporation) Hidden
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Super-Charger (HKLM-x32\...\{7CDF10DD-A9B5-4DA3-AB95-E193248D4369}_is1) (Version: 1.2.010 - MSI)
Sweet Home 3D version 4.1 (HKLM-x32\...\Sweet Home 3D_is1) (Version: - eTeks)
Sweet Home 3D version 5.2 (HKLM\...\Sweet Home 3D_is1) (Version: 5.2 - eTeks)
Syberia II (HKLM-x32\...\{BF1534B0-BE09-457E-A4CF-0EFC803125F2}) (Version: 1.0.0.16 - Microids)
Target 3001! V16 discover (HKLM-x32\...\Target 3001! V16 discover) (Version: - Ing. Buero FRIEDRICH)
Target 3001! V16 pcb-pool (HKLM-x32\...\Target 3001! V16 pcb-pool) (Version: - Ing. Buero FRIEDRICH)
Target 3001! V18 pcb-pool (HKLM-x32\...\Target 3001! V18 pcb-pool) (Version: - Ing. Buero FRIEDRICH)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.41110 - TeamViewer)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Elder Scrolls V: Skyrim Special Edition (HKLM\...\Steam App 489830) (Version: - Bethesda Game Studios)
The Guild 2 - Renaissance (HKLM-x32\...\{THEGUILDREN-0010-2010-300520102330}_is1) (Version: - JoWooD Entertainment AG)
The Guild II Venice Version 3.5 (HKLM-x32\...\{8DDACFE4-8415-43EC-80CB-966F4318AC39}_is1) (Version: 3.5 - Nordic Games GmbH)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.31.0.0 - GOG.com)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
tiptoi® Manager 3.1.6 (HKLM-x32\...\9978-5763-2995-5228) (Version: 3.1.6 - Ravensburger AG)
Titan Quest (HKLM-x32\...\{412B69AF-C352-4F6F-A318-B92B3CB9ACC6}) (Version: 1.00.0000 - Iron Lore)
Tom Clancy's The Division (HKLM\...\Steam App 365590) (Version: - Massive Entertainment)
Ultima 8 (HKLM-x32\...\{428C6B01-D292-46F9-9321-75668ED17DA2}) (Version: 1.0.0.1 - Electronic Arts)
Unity Web Player (HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\UnityWebPlayer) (Version: 5.1.2f1 - Unity Technologies ApS)
Unterstützungsdateien für Microsoft SQL Server 2008-Setup (HKLM\...\{6AF73222-EE90-434C-AE7E-B96F70A68D89}) (Version: 10.1.2731.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 2.0 - Ubisoft)
Visual Basic 5.0 Enterprise Edition (HKLM-x32\...\VB5) (Version: - )
Visual Studio 2010 Tools for SQL Server Compact 3.5 SP2 DEU (HKLM-x32\...\{CFCB8616-A5D1-4281-80E8-389F685BFAE2}) (Version: 4.0.8080.0 - Microsoft Corporation)
VTech Download Agent Library (HKLM-x32\...\{DB083AE1-3354-4AAD-BD44-5F2CC4B2ECE6}) (Version: 1.00.0000 - VTech) Hidden
VTech Download Manager (HKLM-x32\...\VTechDownloadManager) (Version: - VTech)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0-2) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1) (Version: 1.0.3.1 - LunarG, Inc.) Hidden
Vulkan Run Time Libraries 1.0.3.1 (HKLM\...\VulkanRT1.0.3.1-2) (Version: 1.0.3.1 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.37.0 (HKLM\...\VulkanRT1.0.37.0) (Version: 1.0.37.0 - LunarG, Inc.)
Wartung Samsung CLX-3180 Series (HKLM-x32\...\Samsung CLX-3180 Series) (Version: - Samsung Electronics Co., Ltd.)
WEB.DE MailCheck für Mozilla Firefox (HKLM-x32\...\1&1 Mail & Media GmbH Toolbar FF) (Version: 3.0.2.1739 - 1&1 Mail & Media GmbH)
WestwoodChat (HKLM-x32\...\{7CAE6A67-AF7B-4A6A-8705-8AFACA45BB60}) (Version: 1.0.0.0 - WestwoodChat)
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
Windows 10 Update and Privacy Settings (HKLM\...\{293F2009-0145-450B-B4AA-063D43FB368C}) (Version: 1.0.13.0 - Microsoft Corporation)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3508.0205 - Microsoft Corporation)
Windows-Treiberpaket - Segger (jlink) USB (04/11/2012 2.6.8.2) (HKLM\...\419546AE8E4244C647A348987F769803F43B9C4F) (Version: 04/11/2012 2.6.8.2 - Segger)
Windows-Treiberpaket - SEGGER (usbser) Ports (01/25/2012 6.0.2600.4) (HKLM\...\BD6BF8BBF7BE0D0091163F649A1A423B7EB9D4F1) (Version: 01/25/2012 6.0.2600.4 - SEGGER)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment)
X Rebirth (HKLM-x32\...\Steam App 2870) (Version: - Egosoft)
XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{3faa4380-a399-11cf-a466-00805fe418f6}\InprocServer32 -> C:\Program Files\Autodesk\DWG TrueView 2018 - English\en-US\dwgviewrficn.dll (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\WINDOWS\system32\igfxEM.exe (Intel Corporation)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Raphael\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{B6EB585B-B467-4E46-A9C7-48D7D6FD26CB}\localserver32 -> C:\Program Files\Autodesk\DWG TrueView 2018 - English\dwgviewr.exe (Autodesk, Inc.)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Raphael\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Raphael\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Raphael\AppData\Local\Microsoft\SkyDrive\16.4.6013.0910\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
CustomCLSID: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll => Keine Datei
ShellIconOverlayIdentifiers: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ShellIconOverlayIdentifiers: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ShellIconOverlayIdentifiers: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei
ShellIconOverlayIdentifiers: [AutoCAD Digital Signatures Icon Overlay Handler] -> {36A21736-36C2-4C11-8ACB-D4136F2B57BD} => C:\WINDOWS\system32\AcSignIcon.dll [2017-02-15] (Autodesk, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll -> Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll -> Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll -> Keine Datei
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.24.dll -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ MEGA (Pending)] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX32.dll [2017-06-07] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Synced)] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX32.dll [2017-06-07] ()
ShellIconOverlayIdentifiers-x32: [ MEGA (Syncing)] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX32.dll [2017-06-07] ()
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} => -> Keine Datei
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt.16.0.dll [2017-06-26] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt.16.0.dll [2017-06-26] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt.16.0.dll [2017-06-26] (Dropbox, Inc.)
ContextMenuHandlers01: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers01: [AcShellExtension.AcContextMenuHandler] -> {2E7A2C6C-B938-40a4-BA1C-C7EC982DC202} => C:\Program Files\Common Files\Autodesk Shared\AcShellEx\AcShellExtension.dll [2017-02-15] (Autodesk)
ContextMenuHandlers01: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => C:\Program Files (x86)\Notepad++\NppShell_06.dll [2016-05-18] ()
ContextMenuHandlers01: [Cover Designer] -> {73FCA462-9BD5-4065-A73F-A8E5F6904EF7} => -> Keine Datei
ContextMenuHandlers01: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ContextMenuHandlers02: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ContextMenuHandlers03: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers03: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ContextMenuHandlers04: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => C:\Program Files (x86)\7-Zip\7-zip.dll [2010-11-18] (Igor Pavlov)
ContextMenuHandlers04: [MEGA (Context menu)] -> {0229E5E7-09E9-45CF-9228-0228EC7D5F17} => C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll [2017-06-07] ()
ContextMenuHandlers05: [ACE] -> {5E2121EE-0300-11D4-8D3B-444553540000} => C:\Program Files\AMD\CNext\CNext\atiacm64.dll [2017-04-24] (Advanced Micro Devices, Inc.)
ContextMenuHandlers05: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} => -> Keine Datei
ContextMenuHandlers05: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} => -> Keine Datei
ContextMenuHandlers05: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} => C:\WINDOWS\system32\igfxDTCM.dll [2016-05-03] (Intel Corporation)
ContextMenuHandlers06: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-05-09] (Malwarebytes)
ContextMenuHandlers1_S-1-5-21-3946114199-4031152989-3939253435-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll -> Keine Datei
ContextMenuHandlers4_S-1-5-21-3946114199-4031152989-3939253435-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll -> Keine Datei
ContextMenuHandlers5_S-1-5-21-3946114199-4031152989-3939253435-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Raphael\AppData\Roaming\Dropbox\bin\DropboxExt64.14.0.dll -> Keine Datei
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {0484B896-8179-4E1B-A47F-12DD84B2C288} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {054F143D-BED6-4F03-AB18-8C68E578BF2D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {058D9DF8-1776-4727-A412-2861179AD6CB} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {084F94A3-CC70-47F8-9A5A-DBD26CCF9D36} - System32\Tasks\CooRink Portable => Rundll32.exe "C:\Program Files\CooRink Portable\CooRink Portable.dll",QqJnzFgBAjtK <==== ACHTUNG
Task: {11CCB11C-E6D0-486E-B02F-75B1EA539C0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {17D34AC5-16AE-47EF-9656-62C5E4C17ADE} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {1A12D34C-42AA-42C9-8A7B-8056D985E1B1} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1BEAFB71-0D00-4944-B618-4336CA14BCED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1D889A13-F855-40BA-9032-10343F23FFDB} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {1E0ACFEA-2883-47AC-8257-47019CCA67C7} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {2500375E-8E49-429E-BF2A-FFED226DDD19} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3946114199-4031152989-3939253435-1000Core1d23cd699aebef8 => C:\Users\Raphael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-12] (Dropbox, Inc.)
Task: {2919501E-0B84-4348-8564-E56A8DD43CE5} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2017-04-25] (Adobe Systems Incorporated)
Task: {2AEBC444-CC48-4A6D-966E-8997B78B8D05} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
Task: {2C7FD148-E5A4-49EE-9946-8713A920116F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {3D0F7DFB-68E5-44CB-81A0-34852F41D45D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {481B398C-E7EC-43AB-BB32-825EA7550B8A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {4CEC537E-E301-4772-BA72-F4192374F1E8} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\WINDOWS\ehome\MCUpdate.exe
Task: {5192D95E-AD5D-4ACB-80A2-1AB8E47F6FC3} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Silvia\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {526A0AC0-36E2-4285-A407-3CD99D3A9F87} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {615316D1-CD11-4F47-95D9-8685D7B9116E} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {638275E4-6D9E-405C-865F-2C7BFC2C0903} - System32\Tasks\MSIAfterburner => C:\Program Files (x86)\MSI Afterburner\MSIAfterburner.exe
Task: {779D2B3A-C451-46B4-AD26-61D3C7D7DD53} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\WINDOWS\ehome\mcupdate.exe
Task: {789B7C15-30F9-4453-9BFD-4B81183C34B6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {7A30E4E0-6A3B-44D3-BFC0-21CFD91D6F25} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {7B4087BE-215F-4197-BFFB-BB74D0BE80A4} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-3946114199-4031152989-3939253435-1000UA1d23cd699b86bf1 => C:\Users\Raphael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2016-11-12] (Dropbox, Inc.)
Task: {7C10554F-CCDB-42CB-B321-8090660CAC01} - System32\Tasks\StartCN => C:\Program Files\AMD\CNext\CNext\cncmd.exe [2017-04-24] (Advanced Micro Devices, Inc.)
Task: {8256470E-DCD2-4505-BBD8-85FF5D377688} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {82EB5F11-5A7F-454B-9236-AE6632594A60} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8AFF1C46-45DC-472A-BA63-EBB8C93A30EC} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-22] (Google Inc.)
Task: {8B257691-F808-47B4-BF55-6B90D862CE23} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {8BA8D0D5-843E-483D-BFDE-43B31695CA94} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\WINDOWS\ehome\ehrec.exe
Task: {8BEE47D6-1D0D-4E73-B883-5F1BCDCCFF67} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-07-13] (Adobe Systems Incorporated)
Task: {8C12AC11-C158-4058-9534-E2E89A2A4EB8} - System32\Tasks\OneDrive Standalone Update Task v2 => C:\Users\Raphael\AppData\Local\Microsoft\OneDrive\OneDriveStandaloneUpdater.exe
Task: {9FEF19A2-FE31-434B-A145-A5B07FB3F7AC} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {A0B7A1F9-2965-4168-AC65-FFDE335ABFBD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {A162A85E-A78A-4A55-89D0-5D767940720C} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\WINDOWS\ehome\ehrec.exe
Task: {B2DE7F2F-5DF0-41B7-AF64-53F4A85EACE1} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BB21631A-8E55-438E-B030-1F488E6A2708} - System32\Tasks\SwapHome => Rundll32.exe "C:\Program Files\SwapHome\SwapHome.dll",ysTDXoPrsTD <==== ACHTUNG
Task: {BBE91F70-138E-4CA5-8DA6-E51E68CE8CAD} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {BCC3F4E0-D953-42DA-A816-74E53543A2D2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {BE969B6D-8B6F-433B-B9AC-D1009D2E2249} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-01-22] (Google Inc.)
Task: {C43837BF-36DB-4C65-A648-032489F46DDE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {D1E5AA6D-8927-4DA9-975F-69B70BA6818E} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D496BA9E-17CA-4B9F-A278-5063DEBF74C0} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {D8E153A9-9B8E-4C46-A62D-749991C24FFB} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {E06CF480-154B-4F4F-A31C-9B78867890B6} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\WINDOWS\ehome\mcupdate.exe
Task: {E156016E-CCA9-452B-8250-5B713FBC142F} - System32\Tasks\{E4940BAB-8064-4FA8-9FC2-D5086AC50294} => pcalua.exe -a "C:\Users\Raphael\AppData\Local\Temp\Temp1_d2a536_4e9f3e7be5271.zip\FInal 7.exe" <==== ACHTUNG
Task: {E2BCEDA5-D072-4357-89C8-4E1B63B0DDAF} - System32\Tasks\aquasuite autostart => C:\Program Files\aquasuite\aquasuite.exe [2016-12-07] (Aqua Computer GmbH & Co. KG)
Task: {E2F18998-AF21-42E2-8A16-6C948C1D872E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\WINDOWS\ehome\mcupdate.exe
Task: {EB05EA3F-20C0-43C8-9F7C-F20E903A4F92} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {EEFFC121-9772-4D37-9A1F-8DF00AD5BA37} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\WINDOWS\ehome\ehPrivJob.exe
Task: {FBCA7BEA-731B-431D-862E-06E5FC876936} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\WINDOWS\ehome\ehPrivJob.exe
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-3946114199-4031152989-3939253435-1000Core1d23cd699aebef8.job => C:\Users\Raphael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-3946114199-4031152989-3939253435-1000UA1d23cd699b86bf1.job => C:\Users\Raphael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
==================== Verknüpfungen & WMI ========================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
Shortcut: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TARGET 3001! V18 pcb-pool\Online Hilfe.lnk -> hxxp://server.ibfriedrich.com/wiki/ibfwikide/index.ph
Shortcut: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TARGET 3001! V16 pcb-pool\Online Hilfe.lnk -> hxxp://server.ibfriedrich.com/wiki/ibfwikide/index.ph
Shortcut: C:\Users\Raphael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\TARGET 3001! V16 discover\Online Hilfe.lnk -> hxxp://server.ibfriedrich.com/wiki/ibfwikide/index.ph
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2011-06-22 10:44 - 2011-06-22 10:44 - 00034304 _____ () C:\WINDOWS\System32\sst2cl6.dll
2012-01-17 11:24 - 2012-01-17 11:24 - 00055296 _____ () C:\Windows\SysWOW64\ASGT.exe
2017-07-02 23:08 - 2017-07-11 20:01 - 02270664 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2012-10-08 17:04 - 2012-10-08 17:04 - 00166912 _____ () C:\Program Files (x86)\HTC\Internet Pass-Through\PassThruSvr.exe
2012-12-25 17:33 - 2012-12-25 17:33 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2011-01-27 15:28 - 2011-01-27 15:28 - 00706048 _____ () C:\WINDOWS\system32\SnMinDrv.dll
2015-11-05 01:11 - 2015-11-05 01:12 - 00188072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe
2017-03-18 22:58 - 2017-03-18 22:58 - 00138000 _____ () C:\WINDOWS\SYSTEM32\inputhost.dll
2017-06-07 22:09 - 2017-06-07 22:09 - 00598528 _____ () C:\Users\Raphael\AppData\Local\MEGAsync\ShellExtX64.dll
2017-03-18 22:59 - 2017-03-20 06:36 - 01731072 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-06-21 17:59 - 2017-06-21 18:00 - 00074752 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-06-21 17:59 - 2017-06-21 18:00 - 00203264 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-06-21 17:59 - 2017-06-21 18:00 - 43454464 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-06-21 17:59 - 2017-06-21 18:00 - 02437120 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.18.614.0_x64__kzf8qxf38zg5c\skypert.dll
2016-09-12 12:51 - 2016-09-12 12:51 - 00118272 _____ () C:\Program Files\Rainmeter\Plugins\SpeedFanPlugin.DLL
2016-10-12 21:44 - 2016-10-12 21:44 - 00018432 _____ () C:\Users\Raphael\AppData\Roaming\Rainmeter\Plugins\GPUInfo_ohm.dll
2016-09-12 12:51 - 2016-09-12 12:51 - 00096256 _____ () C:\Program Files\Rainmeter\Plugins\PingPlugin.DLL
2015-08-22 20:35 - 2016-04-26 13:42 - 00110952 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\zlib1.dll
2015-08-22 20:35 - 2016-04-26 13:42 - 00020328 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_system-vc120-mt-1_56.dll
2015-08-22 20:35 - 2016-04-26 13:42 - 00104296 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_filesystem-vc120-mt-1_56.dll
2015-08-22 20:35 - 2016-04-26 13:42 - 00343400 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\collector.dll
2015-08-22 20:35 - 2016-04-26 13:42 - 00378728 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\stat.dll
2015-08-22 20:35 - 2016-04-26 13:42 - 00044392 _____ () C:\Program Files (x86)\Common Files\DVDVideoSoft\lib\boost_date_time-vc120-mt-1_56.dll
2016-09-13 22:07 - 2016-09-13 22:07 - 00033280 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\cx_Logging.cp35-win32.pyd
2016-08-16 00:38 - 2016-08-16 00:38 - 00103424 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32api.pyd
2016-01-12 00:11 - 2016-01-12 00:11 - 00111616 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pywintypes35.dll
2016-08-16 00:38 - 2016-08-16 00:38 - 00041984 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32process.pyd
2016-01-12 00:12 - 2016-01-12 00:12 - 00405504 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\pythoncom35.dll
2016-08-16 00:38 - 2016-08-16 00:38 - 00173568 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\win32gui.pyd
2016-08-16 00:33 - 2016-08-16 00:33 - 01934336 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtGui.pyd
2016-08-16 00:33 - 2016-08-16 00:33 - 00077824 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\sip.pyd
2016-08-16 00:33 - 2016-08-16 00:33 - 01780736 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtCore.pyd
2016-08-16 00:33 - 2016-08-16 00:33 - 00505856 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtNetwork.pyd
2016-08-16 00:33 - 2016-08-16 00:33 - 03812864 _____ () C:\Program Files (x86)\Raptr Inc\PlaysTV\PyQt5.QtWidgets.pyd
2016-10-06 22:43 - 2017-05-03 20:16 - 02493440 _____ () F:\Origin\libGLESv2.dll
2012-09-07 20:35 - 2012-03-29 07:18 - 01198872 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
AlternateDataStreams: C:\ProgramData\Reprise:wupeogjxlctlfudivq`qsp`28hfm [0]
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\Software\Classes\.scr: DWGTrueViewScriptFile => C:\WINDOWS\system32\notepad.exe "%1"
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
IE trusted site: HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\localhost -> localhost
==================== Hosts Inhalt: ==========================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 04:34 - 2017-07-02 23:13 - 00001694 _____ C:\WINDOWS\system32\Drivers\etc\hosts
127.0.0.1 wemsofts.com
127.0.0.1 bongadoom.com
127.0.0.1 wepcmainsystem.com
127.0.0.1 internalcampaigntargets.com
127.0.0.1 bongadoom.com
127.0.0.1 getthefilenow.com
127.0.0.1 bigpicturepop.com
127.0.0.1 wizzcaster.com
127.0.0.1 bestoffersfortoday.com
127.0.0.1 wepcmainsystem.com
127.0.0.1 agent.wizztrakys.com
127.0.0.1 csdimonetize.com
127.0.0.1 dl.azalee.site
127.0.0.1 titiaredh.com
127.0.0.1 wepcdisplaysystem.com
127.0.0.1 wepcanalyticsystem.com
127.0.0.1 healthydownload.com
127.0.0.1 leading2download.com
127.0.0.1 dwl0.wizzlabs.com
127.0.0.1 dwl1.wizzlabs.com
127.0.0.1 installpixel.com
127.0.0.1 burningcube.ru
127.0.0.1 mess1.wizzmonetize.com
127.0.0.1 dl.azalee.site
127.0.0.1 dl.smashdl.com
127.0.0.1 downloadmyhost.com
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Raphael\Pictures\SGE_Wallpaper_Wappen-Rot_1920x1080.jpg
DNS Servers: 192.168.0.1 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Warn)
Windows Firewall ist aktiviert.
|
|
13.07.2017, 19:48
| #17 |
| | Malware verhindert MBAM/Windows Defender Addition 2/2:
__________________Code:
ATTFilter ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
HKLM\...\StartupApproved\Run32: => "AgentMonitor"
HKLM\...\StartupApproved\Run32: => "BlueStacks Agent"
HKLM\...\StartupApproved\Run32: => "PlaysTV"
HKLM\...\StartupApproved\Run32: => "Raptr"
HKLM\...\StartupApproved\Run32: => "Razer Synapse"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\StartupFolder: => "OpenOffice.org 3.3.lnk"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\StartupFolder: => "Curse.lnk"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\StartupFolder: => "MEGAsync.lnk"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\Run: => "AmazonMP3DownloaderHelper"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\Run: => "Dropbox Update"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\Run: => "OneDriveSetup"
HKU\S-1-5-21-3946114199-4031152989-3939253435-1000\...\StartupApproved\Run: => "Steam"
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{2C4E116D-D715-4CB1-91A3-9C0370CBD7BD}] => (Allow) G:\Games\Installed\Syberia II\Syberia2.exe
FirewallRules: [{2A84A75C-C4A4-4C11-9236-9A64769FAE49}] => (Allow) G:\Games\Installed\Syberia II\Syberia2.exe
FirewallRules: [{6E5E38BE-E8ED-49C9-8FD3-8F60D6108AD7}] => (Allow) F:\Steam\SteamApps\common\Blood & Gold Caribbean!\Launcher.exe
FirewallRules: [{1F36614E-E430-4628-9800-E4F3112D8C0F}] => (Allow) F:\Steam\SteamApps\common\Blood & Gold Caribbean!\Launcher.exe
FirewallRules: [{EFAD043A-14DF-4CE8-AF31-5EFDB46EE6E4}] => (Allow) F:\Steam\SteamApps\common\DOOM\DOOMx64.exe
FirewallRules: [{7183A495-8F3D-42A8-81A0-932AB3926E36}] => (Allow) F:\Steam\SteamApps\common\DOOM\DOOMx64.exe
FirewallRules: [{174DA33C-0D5B-4EE0-B6B3-428645B756D5}] => (Allow) G:\Games\Installed\Anno 2070\InitEngine.exe
FirewallRules: [{72BB4C4D-0C67-48BE-AFDE-7641911F069A}] => (Allow) G:\Games\Installed\Anno 2070\InitEngine.exe
FirewallRules: [{01A12F25-883A-4AF9-9FFB-F1845ED5D73C}] => (Allow) G:\Games\Installed\Anno 2070\AutoPatcher.exe
FirewallRules: [{62F4A5E5-B96F-4A88-87E1-F26FA431D172}] => (Allow) G:\Games\Installed\Anno 2070\AutoPatcher.exe
FirewallRules: [{660290BE-E1CF-48A6-AB24-8F294A394F39}] => (Allow) G:\Games\Installed\Anno 2070\Anno5.exe
FirewallRules: [{5DE65E60-317E-4AB4-8491-133F4D15D88D}] => (Allow) G:\Games\Installed\Anno 2070\Anno5.exe
FirewallRules: [UDP Query User{190A429D-652D-4F17-AF73-7D9A72641378}G:\games\installed\mass effect 2\binaries\me2game.exe] => (Allow) G:\games\installed\mass effect 2\binaries\me2game.exe
FirewallRules: [TCP Query User{6CE87BBB-8B74-499C-BAAC-C3A1EE4D624C}G:\games\installed\mass effect 2\binaries\me2game.exe] => (Allow) G:\games\installed\mass effect 2\binaries\me2game.exe
FirewallRules: [{789578DA-CC70-4474-B3E1-87F10D62CB6F}] => (Allow) G:\Games\Installed\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{D3A50C79-C713-4182-B1BD-9692FB370003}] => (Allow) G:\Games\Installed\Mass Effect 2\Binaries\MassEffect2.exe
FirewallRules: [{961D430E-5093-4F79-B06D-941F3872EFCD}] => (Allow) F:\Steam\SteamApps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [{D9E293DB-210E-4D16-97C2-FEE54B793938}] => (Allow) F:\Steam\SteamApps\common\Skyrim Special Edition\SkyrimSELauncher.exe
FirewallRules: [UDP Query User{ADC5B833-384A-42AE-BFAA-59083BD7B8ED}G:\games\installed\diablo 3\diablo iii\x64\diablo iii64.exe] => (Allow) G:\games\installed\diablo 3\diablo iii\x64\diablo iii64.exe
FirewallRules: [TCP Query User{A84B3B3F-5D42-4303-9B8A-DCD73E59BD3D}G:\games\installed\diablo 3\diablo iii\x64\diablo iii64.exe] => (Allow) G:\games\installed\diablo 3\diablo iii\x64\diablo iii64.exe
FirewallRules: [{B6B42FE4-E624-4D5B-8C7F-384447C24E5C}] => (Allow) G:\Games\Installed\Command and Conquer Red Alert\RA95Launcher.exe
FirewallRules: [{96D4942F-3D38-4FC8-B9AE-3475771F900A}] => (Allow) G:\Games\Installed\Command and Conquer Red Alert\RA95Launcher.exe
FirewallRules: [{9115FC70-4933-4E3E-95E1-70BC33531F30}] => (Allow) F:\Steam\SteamApps\common\Blood & Gold Caribbean!\bg_caribbean.exe
FirewallRules: [{93FFE842-F985-449E-A6E7-2678D96BF5F8}] => (Allow) F:\Steam\SteamApps\common\Blood & Gold Caribbean!\bg_caribbean.exe
FirewallRules: [{45AC7331-05B2-457E-B25A-46D48DE5308A}] => (Allow) G:\Games\Installed\CNC and The Covert Operations\CNC95Launcher.exe
FirewallRules: [{4A7E415B-DFAF-48C5-8814-D3737152C15F}] => (Allow) G:\Games\Installed\CNC and The Covert Operations\CNC95Launcher.exe
FirewallRules: [UDP Query User{23FDA948-3650-4296-B6B4-4D485FC0209D}C:\users\raphael\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\raphael\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{8D469DE0-3DDC-4045-96F4-3F71BE99DC76}C:\users\raphael\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\raphael\documents\curse\minecraft\install\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{497EB8D8-89AE-4E99-9FE4-64DAF157AEAA}] => (Allow) G:\Games\Installed\Renegade\RenegadeLauncher.exe
FirewallRules: [{33C46438-CE0C-4AD0-B945-CA90D0D35E39}] => (Allow) G:\Games\Installed\Renegade\RenegadeLauncher.exe
FirewallRules: [{594A89CE-013B-4539-9015-AA0B0972177C}] => (Allow) F:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{DEA9153B-F399-465E-9935-67FA23B9579D}] => (Allow) F:\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{4C6F0419-AA4A-485E-B089-CCE6207B34CD}] => (Allow) G:\Games\Installed\FIFA 13\Game\fifa13.exe
FirewallRules: [{4999AD50-2C0F-48E8-888A-DBC49108C6F9}] => (Allow) G:\Games\Installed\FIFA 13\Game\fifa13.exe
FirewallRules: [{CA518199-9B60-4598-A689-C2408014F46F}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{75412833-0FCC-45D9-90D7-D1B959276121}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{783A052A-017F-4F3E-87A0-2B9A5F287EB7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{9486DC9A-18E3-46C1-B959-97306C509A10}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{6CD2F35B-746F-43BD-B9A9-5519DFA470D7}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{1FD2174B-A1CF-4BD6-9897-C4F0721ED3E1}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [UDP Query User{2832BC30-1C31-41C8-8B9B-5FDBFA021E42}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [TCP Query User{22F882A1-1C68-46EE-91C5-4D13110472DF}C:\program files\java\jre1.8.0_111\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_111\bin\javaw.exe
FirewallRules: [{4E093346-5FCD-4C4B-AD11-B21DD5771319}] => (Allow) G:\Games\Installed\Dungeon Keeper\DATA\DOSBox\DOSBox.exe
FirewallRules: [{426065C9-5B32-4586-95FB-B68A0B939D27}] => (Allow) G:\Games\Installed\Dungeon Keeper\DATA\DOSBox\DOSBox.exe
FirewallRules: [{4799A43D-867B-4394-91AA-8C8DEF8ED975}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{0091700C-D79F-4D9A-B5C3-2322EAED40F2}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{BB544271-25C3-4FBD-AB4B-C0A45A8C2A08}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{2F2DD3F3-9149-4A1F-96AB-407B622D7C9B}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{C6200654-677B-4D7D-9D67-511CA0AA12E8}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{A231760C-49C4-4877-BCAC-64E6945DFAB4}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe
FirewallRules: [{8A478D77-DD62-49DF-9A6C-89135444BBCD}] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{D92DD2F6-8493-46A4-A711-EDE887E7260D}] => (Block) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [UDP Query User{35105382-6E23-455A-B8A7-681633A14A9D}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [TCP Query User{65154D9E-6680-476D-B755-E121B5C3DD74}C:\program files\java\jre1.8.0_91\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_91\bin\javaw.exe
FirewallRules: [{4F2D53A6-9A0E-4097-ADE5-FD68BEE213E0}] => (Block) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [{E9495722-9BFC-4731-8B73-5BF418E30AD0}] => (Block) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [UDP Query User{0E40C65B-9DB4-4D1B-B9B4-31BFC96EEC53}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [TCP Query User{3184FE95-5C85-4DAF-9E39-0B3228BCD775}C:\program files (x86)\arduino\java\bin\javaw.exe] => (Allow) C:\program files (x86)\arduino\java\bin\javaw.exe
FirewallRules: [{F5BC4839-E01D-4B6A-9ED3-0AB88CD17F15}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{E872D337-013E-4AB7-9830-4560A31C2A57}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe
FirewallRules: [{4A925840-2E84-4338-81AC-01035EA9CD37}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{D8880B03-0955-48A3-AB28-70A5E4078E61}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe
FirewallRules: [{55067876-5D10-4FD9-B881-DC9B4A8499AF}] => (Allow) F:\Steam\SteamApps\common\Tom Clancy's The Division\thedivision.exe
FirewallRules: [{0BFBC947-E9C2-43A2-8C19-D0E31EB8084C}] => (Allow) F:\Steam\SteamApps\common\Tom Clancy's The Division\thedivision.exe
FirewallRules: [{377C5813-D787-4B48-8C8D-68186FC3E26E}] => (Allow) F:\Steam\SteamApps\common\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{AF9CC8D3-BCAD-4FA6-8F60-55DA36E6C658}] => (Allow) F:\Steam\SteamApps\common\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{7B7FE4F2-E46C-4960-9D19-50C3AF803B2F}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa_setup.exe
FirewallRules: [{6C8ECA6C-FE1F-4FE2-918B-D14380CBD2CD}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa_setup.exe
FirewallRules: [{509F40A7-31BD-4E52-AA80-5492538746D2}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa.exe
FirewallRules: [{8E4A75EB-1F41-452D-90D0-148C1EC492C7}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa.exe
FirewallRules: [{FDEF9D06-F35D-4753-A196-E1C6F8BFD4A7}] => (Allow) F:\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{4129763A-9364-4DAE-8656-15C71CF3171A}] => (Allow) F:\Steam\SteamApps\common\FINAL FANTASY VII\FF7_Launcher.exe
FirewallRules: [{5CD374BD-153D-419F-91AD-D0B3519754DE}] => (Allow) F:\Steam\SteamApps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{1B7FB2C8-ACB1-4A21-BAD0-84CEC1822A09}] => (Allow) F:\Steam\SteamApps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{9E14C0DB-FB7C-45B1-8EEF-1AD7601E3327}] => (Allow) F:\Steam\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{599F1B02-B594-42A7-AF26-997D0636842C}] => (Allow) F:\Steam\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{21EAB44B-DCDF-4B1C-B3CA-E3063BDF3E02}] => (Allow) G:\Games\Installed\Might & Magic 10 - Legacy\Might and Magic X Legacy.exe
FirewallRules: [{7E62D139-9B00-4893-8F79-7FDD78DBD3A4}] => (Allow) G:\Games\Installed\Might & Magic 10 - Legacy\Might and Magic X Legacy.exe
FirewallRules: [{3938F357-E024-4EF0-A3C9-6544A85DBF2C}] => (Allow) C:\Users\Raphael\AppData\Roaming\Andy\Setup.exe
FirewallRules: [{801C8B2C-048A-446A-B8CE-FD89A33B4684}] => (Allow) C:\Users\Raphael\AppData\Roaming\Andy\Setup.exe
FirewallRules: [{448E91BF-3E45-423F-9200-58071B90F01B}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{EB7DABC0-93CC-4C38-92A9-08D3CB5124CF}] => (Allow) C:\Program Files\Andy\HandyAndy.exe
FirewallRules: [{916CAE76-F0DD-463F-94A2-667B8FA25A16}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{16FDBBFD-7EB7-4F27-AA05-6D4240248A60}] => (Allow) C:\Program Files\Andy\andy.exe
FirewallRules: [{74428F5A-450D-489E-A0C7-10B39C335ADE}] => (Allow) F:\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{BBCCAF73-D611-488F-85C8-CD2282A26E98}] => (Allow) F:\Steam\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{B41B1289-28A3-40FE-84C3-DACC9F222D51}] => (Allow) F:\Steam\SteamApps\common\X Rebirth\XRebirth.exe
FirewallRules: [{8F57AFBF-C3E4-4F28-AEE0-552B1008CF48}] => (Allow) F:\Steam\SteamApps\common\X Rebirth\XRebirth.exe
FirewallRules: [{B7720823-D5DF-4ADA-98A1-42D7295F1D11}] => (Allow) G:\Games\Installed\Ultima 8\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{94345CC6-AA8E-4BB5-A10C-5F259384CECE}] => (Allow) G:\Games\Installed\Ultima 8\Game\Game\DOSBox\DOSBox.exe
FirewallRules: [{C5AF3133-BDB4-4AEA-B657-D5548B4ED88C}] => (Allow) G:\Games\Installed\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{E3ACF104-E62D-4FA5-901C-21FEBE85E286}] => (Allow) G:\Games\Installed\Command and Conquer Red Alert II\RA2Launcher.exe
FirewallRules: [{9035CBED-DACE-4116-BEF0-E2A2391F4F79}] => (Allow) G:\Games\Installed\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe
FirewallRules: [{725ACEA1-B76B-4596-B250-147C6A057892}] => (Allow) G:\Games\Installed\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe
FirewallRules: [{4462AE5A-2CCA-47A9-82B2-A28EE64705D4}] => (Allow) LPort=7882
FirewallRules: [UDP Query User{606C32D3-C852-4803-8714-B23485BF9BE5}F:\unity\editor\unity.exe] => (Allow) F:\unity\editor\unity.exe
FirewallRules: [TCP Query User{2597D949-4602-4E60-AB8D-51D0CE5D59BB}F:\unity\editor\unity.exe] => (Allow) F:\unity\editor\unity.exe
FirewallRules: [{98650E9F-DD14-4C97-BB7A-5A67BD72A08A}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{D298B339-6766-47EE-9116-7FC5C82CCC99}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{E9DC7E5C-2145-44C0-BD51-7D9BDE50D5F3}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{3F941660-5562-46A2-9429-ACDDF2791ADE}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [UDP Query User{51CC1E08-79FD-437A-B9AF-0BD00583B7A4}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [TCP Query User{96FF3726-690F-4D66-B274-A8B30A81BCB6}C:\windows\system32\java.exe] => (Allow) C:\windows\system32\java.exe
FirewallRules: [UDP Query User{4AF6CF16-B40A-44F0-90BE-B02B681FB097}G:\games\installed\mohaa\mohaa.exe] => (Allow) G:\games\installed\mohaa\mohaa.exe
FirewallRules: [TCP Query User{5AD315DF-F028-4F9D-BC5F-96EF2E3E5DF1}G:\games\installed\mohaa\mohaa.exe] => (Allow) G:\games\installed\mohaa\mohaa.exe
FirewallRules: [UDP Query User{0BC9C68B-2A04-46C0-B0ED-87AB6522659B}G:\games\installed\mtx\mtx.exe] => (Allow) G:\games\installed\mtx\mtx.exe
FirewallRules: [TCP Query User{2AD2C5D2-5EFA-44E1-B7BD-4C6BAC54D785}G:\games\installed\mtx\mtx.exe] => (Allow) G:\games\installed\mtx\mtx.exe
FirewallRules: [UDP Query User{74A2A5C2-0FF3-47EA-97BC-680011F7BF32}G:\games\installed\company of heroes - tales of valor\relicdownloader\relicdownloader.exe] => (Block) G:\games\installed\company of heroes - tales of valor\relicdownloader\relicdownloader.exe
FirewallRules: [TCP Query User{1C166455-EA87-493D-B17F-98F2AF44ED3E}G:\games\installed\company of heroes - tales of valor\relicdownloader\relicdownloader.exe] => (Block) G:\games\installed\company of heroes - tales of valor\relicdownloader\relicdownloader.exe
FirewallRules: [UDP Query User{62D2F10B-0F6C-4040-97E6-B0762F9DA85F}G:\games\installed\company of heroes - tales of valor\reliccoh.exe] => (Allow) G:\games\installed\company of heroes - tales of valor\reliccoh.exe
FirewallRules: [TCP Query User{1633CDF9-11BB-4D39-B331-26D9CA9EACED}G:\games\installed\company of heroes - tales of valor\reliccoh.exe] => (Allow) G:\games\installed\company of heroes - tales of valor\reliccoh.exe
FirewallRules: [{E95CCC39-E44C-4DAA-946A-1C0BACC6FC9C}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{1D9D908D-54CE-4E2D-A483-B0EB62715706}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{EDB18E21-257B-439A-8415-1035F93138BC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{D0EE1AB1-0F1E-4D09-9A28-CAB76853ADC0}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{759D9CB2-F777-466A-9A20-8AD84E580044}] => (Allow) C:\Program Files (x86)\Kalypso Media\Port Royale 3\PortRoyale3.exe
FirewallRules: [{6BA7A881-6DB9-4BD1-AADB-7C9DA9B5C149}] => (Allow) G:\Games\Installed\GTA - Episodes from Liberty City\EFLC\EFLC.exe
FirewallRules: [{E3C22C52-E398-478E-A710-FB0E41F96A3A}] => (Allow) G:\Games\Installed\GTA - Episodes from Liberty City\EFLC\EFLC.exe
FirewallRules: [{6CA4C141-E02C-49E3-BF59-76598427D135}] => (Allow) G:\Games\Installed\GTA - Episodes from Liberty City\EFLC\LaunchEFLC.exe
FirewallRules: [{77BB468B-C745-4FEE-A933-83A9DEEF13C3}] => (Allow) G:\Games\Installed\GTA - Episodes from Liberty City\EFLC\LaunchEFLC.exe
FirewallRules: [{A13AC988-AA11-4731-BD2A-481ABD112092}] => (Allow) G:\Games\Installed\Stalker - Clear Sky\bin\dedicated\xrEngine.exe
FirewallRules: [{70F8FADA-862E-420E-A1D4-E36B1EF1F99B}] => (Allow) G:\Games\Installed\Stalker - Clear Sky\bin\dedicated\xrEngine.exe
FirewallRules: [{85105F96-C78F-41F0-A2CE-15E1165CA69D}] => (Allow) G:\Games\Installed\Stalker - Clear Sky\bin\xrEngine.exe
FirewallRules: [{9EF12E7F-27E9-4390-AD74-6C83D23D4B00}] => (Allow) G:\Games\Installed\Stalker - Clear Sky\bin\xrEngine.exe
FirewallRules: [{E7CF29A6-B400-4B55-85B9-DF8CD1914E0C}] => (Allow) F:\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{9A5860DA-1B4C-4CF2-9D62-055F0CE81B85}] => (Allow) F:\Steam\SteamApps\common\Cities_Skylines\Cities.exe
FirewallRules: [{50233585-16F1-42D3-BB01-AB7679B556CB}] => (Allow) F:\Steam\SteamApps\common\Cities XXL\CitiesXXL.exe
FirewallRules: [{FADA3BD2-F5E8-49C4-8B14-2555B8F93036}] => (Allow) F:\Steam\SteamApps\common\Cities XXL\CitiesXXL.exe
FirewallRules: [{8377FF38-114B-4ABE-B778-EC60399021B6}] => (Allow) F:\Steam\SteamApps\common\jabia\JaggedAllianceBIA.exe
FirewallRules: [{F0BA9B76-ED30-41C7-A494-B5255C216E74}] => (Allow) F:\Steam\SteamApps\common\jabia\JaggedAllianceBIA.exe
FirewallRules: [{80C06701-1967-41AC-B49E-C4D0AF41D0BF}] => (Allow) G:\Games\Installed\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{5D3B0610-D19E-4F4F-9953-00BF0D439AFB}] => (Allow) G:\Games\Installed\Theme Hospital\data\Game\DOSBox\LAUNCHER.exe
FirewallRules: [{73626890-47A0-418F-8CB1-AE4506DC7F9B}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{DC0B7474-AD4E-4C0E-9D9D-F035A75D99FB}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{3B329762-A431-4D91-A123-4A51F6718068}] => (Allow) F:\Steam\SteamApps\common\Europa Universalis IV\eu4.exe
FirewallRules: [{FA71A84E-CABB-4772-9CB1-9DC5FABEA117}] => (Allow) F:\Steam\SteamApps\common\Europa Universalis IV\eu4.exe
FirewallRules: [{D2F2F8D4-F7F1-4AD8-AA6E-9AC095F7E763}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{7992B106-DBCA-45CF-9848-48CA7F774696}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{0565681D-971C-421D-B7A5-D7455753F2F0}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{1FC817AB-D938-4214-9B5B-A2A2A52B91BF}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [UDP Query User{C7386C87-96BF-4F55-9FA6-68447510E270}G:\games\installed\fifa manager 13\manager13.exe] => (Block) G:\games\installed\fifa manager 13\manager13.exe
FirewallRules: [TCP Query User{C78AA092-4428-42B3-9952-E98287A681E4}G:\games\installed\fifa manager 13\manager13.exe] => (Block) G:\games\installed\fifa manager 13\manager13.exe
FirewallRules: [UDP Query User{C9835174-352E-4E17-863A-DF9BF8187342}C:\users\raphael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\raphael\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{84BBF49F-D47F-4CA3-8AAF-23E0FAB91307}C:\users\raphael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\raphael\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{75A6D304-6D66-42F4-BB78-9F15A1F147A3}C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [TCP Query User{199F68F6-D3C2-4656-9258-871CD11E22DE}C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe] => (Allow) C:\program files (x86)\atmel\atmel studio 6.2\atmelstudio.exe
FirewallRules: [{A2B57FCF-E38D-4A59-952B-869A4BA666B6}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{E00DBD43-AF0A-485B-9F4C-E05DA444E9E6}] => (Allow) LPort=1900
FirewallRules: [{29A3C295-0317-4FD4-ACD0-6C196DFFF0B1}] => (Allow) LPort=2869
FirewallRules: [{F3A589DF-7F15-47E7-B37C-167C4413BC03}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{1C9679CD-063D-4135-9157-4FCEED04B6DF}] => (Allow) C:\Users\Raphael\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{595B532A-3DD8-45F0-A836-2958B53193A2}] => (Allow) F:\Steam\bin\steamwebhelper.exe
FirewallRules: [{2043C4DC-410B-4D6F-BEB0-3F9AD82978EB}] => (Allow) F:\Steam\bin\steamwebhelper.exe
FirewallRules: [{290C3520-2B37-4B0E-9EC9-C2858B1C88CD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{EC35E65C-68C8-489F-8833-75856D739BD9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [UDP Query User{F8B1350C-2C7C-4A2A-91C9-D76DE0BD640B}C:\programdata\battle.net\agent\agent.3182\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3182\agent.exe
FirewallRules: [TCP Query User{03933842-C770-4244-8887-9DA75EC42B9E}C:\programdata\battle.net\agent\agent.3182\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3182\agent.exe
FirewallRules: [{7000BE5B-7D54-4D03-A437-23E61C0FCF8C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{17884AE8-7058-40A9-9197-54A99E185BB6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [UDP Query User{A219D754-8A85-4DF9-9D44-DD441F2C5F9E}C:\programdata\battle.net\agent\agent.3109\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3109\agent.exe
FirewallRules: [TCP Query User{2D7A0F55-8B84-481F-9E97-892FF7A610C1}C:\programdata\battle.net\agent\agent.3109\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3109\agent.exe
FirewallRules: [{AF8E277E-2F14-484B-A512-648F97BA8F58}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{37E86662-7B05-429F-86F3-550CEA6D95A7}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{1D4D2A0C-1A54-4580-85A9-7551A801987C}] => (Allow) G:\Games\Installed\Battle.net\Battle.net.exe
FirewallRules: [{E1CE9F84-447D-4E37-B0EC-43A8DF566EF5}] => (Allow) G:\Games\Installed\Battle.net\Battle.net.exe
FirewallRules: [{97D78EC8-8DEB-4AAA-984E-C744D47E97D1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{530F7B57-084C-4E83-95EB-B1AD8CF5DE62}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [UDP Query User{59C94A42-DA5B-468B-8B46-DB584E1F8FB2}C:\users\raphael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Allow) C:\users\raphael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [TCP Query User{60108FBB-0760-4F61-B292-507C04DB26B8}C:\users\raphael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light] => (Allow) C:\users\raphael\appdata\local\temp\jivexviewer\jre\bin\jivex[dv] light
FirewallRules: [UDP Query User{20504C4E-A1BB-4244-8D44-93E30DEE8D51}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [TCP Query User{EC18E7ED-63E6-4496-AFA3-7C76826ADEA5}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{8D3B9A13-C4D8-41AB-BD15-0D7253285C12}D:\programme\emule\emule.exe] => (Allow) D:\programme\emule\emule.exe
FirewallRules: [TCP Query User{B294DB8C-72B7-41CD-AE06-21541D6570BE}D:\programme\emule\emule.exe] => (Allow) D:\programme\emule\emule.exe
FirewallRules: [UDP Query User{F84B8968-92BF-43EC-BFD5-13210CDB0584}C:\program files (x86)\microsoft games\freelancer\exe\freelancer.exe] => (Allow) C:\program files (x86)\microsoft games\freelancer\exe\freelancer.exe
FirewallRules: [TCP Query User{26B4B2C2-C30A-46C3-9C7F-CCAE9834F530}C:\program files (x86)\microsoft games\freelancer\exe\freelancer.exe] => (Allow) C:\program files (x86)\microsoft games\freelancer\exe\freelancer.exe
FirewallRules: [UDP Query User{A1712B56-3C79-4D46-9AB3-CDDEB2A38515}G:\games\installed\anno 1701\anno1701.exe] => (Allow) G:\games\installed\anno 1701\anno1701.exe
FirewallRules: [TCP Query User{BB75F8B5-80B0-4F92-B66F-BC3AEB7B40ED}G:\games\installed\anno 1701\anno1701.exe] => (Allow) G:\games\installed\anno 1701\anno1701.exe
FirewallRules: [UDP Query User{95A1FFB2-0D1E-469D-9A31-CC1FF32CD07A}C:\program files (x86)\mcs electronics\bascom-avr\bascavr.exe] => (Allow) C:\program files (x86)\mcs electronics\bascom-avr\bascavr.exe
FirewallRules: [TCP Query User{A61C2823-9034-4FAD-BA2F-6243DFEA7776}C:\program files (x86)\mcs electronics\bascom-avr\bascavr.exe] => (Allow) C:\program files (x86)\mcs electronics\bascom-avr\bascavr.exe
FirewallRules: [{D4FB4D09-4061-4EC4-A95D-2FA8B85AD633}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{F0C00CBE-7706-4F39-A52A-4BD34DE51BC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [UDP Query User{BE8682A3-89D1-4F00-8035-F47A9F3FC170}F:\steam\steam.exe] => (Allow) F:\steam\steam.exe
FirewallRules: [TCP Query User{C0C503DA-036F-4E03-8872-AC8157188E94}F:\steam\steam.exe] => (Allow) F:\steam\steam.exe
FirewallRules: [{28C334CF-717E-4D43-8905-CC4F17305D4D}] => (Allow) F:\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{D984BB69-6F15-450D-AA98-3C7BEA72BB23}] => (Allow) F:\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{C0121668-2F63-4131-905D-410700EAEF61}] => (Allow) F:\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{224251C6-26A5-44C3-BE90-0AB74E6F7734}] => (Allow) F:\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{C8B16472-C0E2-4AC2-AA8B-482FE7951E3D}] => (Allow) F:\Steam\SteamApps\common\skyrim\CreationKit.exe
FirewallRules: [{3A0893C7-5B4B-4AE1-A63F-44E78A5CB743}] => (Allow) F:\Steam\SteamApps\common\skyrim\CreationKit.exe
FirewallRules: [{3ED0E5CA-A575-45D7-B510-A3B8E25D7538}] => (Allow) F:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [{44AEAAB5-0BEC-44E3-AD00-5AF143A8BEB0}] => (Allow) F:\Steam\SteamApps\common\Darksiders 2\Darksiders2.exe
FirewallRules: [UDP Query User{AA8E91A5-9C97-4CA8-9366-4D11249A45E1}G:\games\installed\diablo 3\diablo iii\diablo iii.exe] => (Allow) G:\games\installed\diablo 3\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{CA582549-DC96-499F-9E3B-25B71364C158}G:\games\installed\diablo 3\diablo iii\diablo iii.exe] => (Allow) G:\games\installed\diablo 3\diablo iii\diablo iii.exe
FirewallRules: [{4121EA75-FC78-4BA1-954C-4FF416AC558C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{156D36CB-E206-466B-9707-9B8ECFEF51EF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{4D81CDFF-7644-4CD0-AF16-035088D73DC1}] => (Allow) F:\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{A59A11AE-FE0A-48C9-B82C-7E64EE7C319A}] => (Allow) F:\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{D21321F0-93EA-48E2-8C5D-04CAA7B34D31}] => (Allow) C:\Users\Raphael\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{AEF76037-D110-4000-A364-05872FEE2735}] => (Allow) C:\Users\Raphael\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{9577366C-B4DE-4FB1-AA8D-1FAEFCEDA279}] => (Allow) F:\Steam\SteamApps\common\Mount & Blade With Fire and Sword\mb_wfas.exe
FirewallRules: [{CB9CC515-C1E0-4814-A373-89054834E697}] => (Allow) F:\Steam\SteamApps\common\Mount & Blade With Fire and Sword\mb_wfas.exe
FirewallRules: [{E9C69B8A-226D-4A9A-8FE7-32E186F0E20D}] => (Allow) F:\Steam\SteamApps\common\Hearts of Iron 3\hoi3.exe
FirewallRules: [{FC1DADDF-D4A4-46D3-AD54-A13A6D16B422}] => (Allow) F:\Steam\SteamApps\common\Hearts of Iron 3\hoi3.exe
FirewallRules: [{A09E4811-9090-4EA6-AFD9-B0382736F6F1}] => (Allow) F:\Steam\SteamApps\common\fallout new vegas\FalloutNVLauncher.exe
FirewallRules: [{C57EFACF-D8A4-4A6F-9AC6-50C7FFDD3557}] => (Allow) F:\Steam\SteamApps\common\fallout new vegas\FalloutNVLauncher.exe
FirewallRules: [UDP Query User{95BAAFB0-CDE7-4485-8CF2-D6DAC567FCFF}G:\games\installed\sacred 2\system\s2gs.exe] => (Allow) G:\games\installed\sacred 2\system\s2gs.exe
FirewallRules: [TCP Query User{A6496F57-FED3-46C5-8991-5A9921B7B596}G:\games\installed\sacred 2\system\s2gs.exe] => (Allow) G:\games\installed\sacred 2\system\s2gs.exe
FirewallRules: [UDP Query User{B98665C7-8178-4B47-80D0-E511CB586F37}G:\games\installed\silent hunter 5\goblineditorapp.exe] => (Block) G:\games\installed\silent hunter 5\goblineditorapp.exe
FirewallRules: [TCP Query User{7A86DA73-9BB9-4097-9FB0-A1D95F91D83F}G:\games\installed\silent hunter 5\goblineditorapp.exe] => (Block) G:\games\installed\silent hunter 5\goblineditorapp.exe
FirewallRules: [UDP Query User{ACC8D44E-6B80-46EF-90DD-3EC712E6FE4C}G:\games\installed\stronghold crusader\stronghold_crusader_extreme.exe] => (Allow) G:\games\installed\stronghold crusader\stronghold_crusader_extreme.exe
FirewallRules: [TCP Query User{5C58628F-1AC8-4963-9BC0-9D521AA68565}G:\games\installed\stronghold crusader\stronghold_crusader_extreme.exe] => (Allow) G:\games\installed\stronghold crusader\stronghold_crusader_extreme.exe
FirewallRules: [UDP Query User{59C6756C-2AB3-4B3C-9ABF-35AA82603E08}G:\games\installed\stronghold crusader\stronghold crusader.exe] => (Allow) G:\games\installed\stronghold crusader\stronghold crusader.exe
FirewallRules: [TCP Query User{4A053A81-284E-4355-8E6A-446826264372}G:\games\installed\stronghold crusader\stronghold crusader.exe] => (Allow) G:\games\installed\stronghold crusader\stronghold crusader.exe
FirewallRules: [UDP Query User{F7AB25AB-AE90-4096-8F20-4F105DE3D0BA}G:\games\installed\stronghold 2\stronghold2.exe] => (Allow) G:\games\installed\stronghold 2\stronghold2.exe
FirewallRules: [TCP Query User{45D0FF32-44CE-4F02-9143-1CE70F62B96A}G:\games\installed\stronghold 2\stronghold2.exe] => (Allow) G:\games\installed\stronghold 2\stronghold2.exe
FirewallRules: [UDP Query User{CF9207A2-606A-4631-B209-FA54653FF91B}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [TCP Query User{4AE70B9F-831F-4334-AB8A-D7DA7C675383}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{B921AEB4-703F-4081-B9D0-BBB2A07E8542}G:\games\installed\stronghold\stronghold.exe] => (Allow) G:\games\installed\stronghold\stronghold.exe
FirewallRules: [TCP Query User{0487B5E2-3BEC-4F71-B4D5-D443EB1FF8D0}G:\games\installed\stronghold\stronghold.exe] => (Allow) G:\games\installed\stronghold\stronghold.exe
FirewallRules: [{3388B7AD-CA7B-4025-82C1-A3F24DD4B104}] => (Allow) G:\Games\Installed\Farcry 3\bin\FC3Editor.exe
FirewallRules: [{01F68BAA-2164-4004-91DD-3C53040F9B5B}] => (Allow) G:\Games\Installed\Farcry 3\bin\FC3Editor.exe
FirewallRules: [{A4386F28-A3B0-47C2-9BDD-23FDB27F85BB}] => (Allow) G:\Games\Installed\Farcry 3\bin\FC3Updater.exe
FirewallRules: [{4ACF4F30-6A5F-4FDD-AD7E-88AD61103152}] => (Allow) G:\Games\Installed\Farcry 3\bin\FC3Updater.exe
FirewallRules: [{A03F447F-95FB-4AD3-BFA3-4016D9D13708}] => (Allow) G:\Games\Installed\Farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [{2B7830F5-7FE9-401F-9D65-8708CCC434A9}] => (Allow) G:\Games\Installed\Farcry 3\bin\farcry3_d3d11.exe
FirewallRules: [{0C87B412-BDD1-4306-B18C-E7D56D549438}] => (Allow) G:\Games\Installed\Farcry 3\bin\farcry3.exe
FirewallRules: [{E8D72497-42A6-4E37-9ADB-0F9426439C06}] => (Allow) G:\Games\Installed\Farcry 3\bin\farcry3.exe
FirewallRules: [{5F7CBF1D-82CE-4D7F-94BA-644B2FAA02F9}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8745C613-656D-451D-BEAE-54AB316CD0F1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{81D3BA50-D636-4DFE-B530-259BEBC4DA7E}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{A7215349-0092-4EB9-BA71-AA80843444B0}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{58A59899-C2AA-44EA-9D31-F0CFF5E8C865}] => (Allow) F:\Steam\SteamApps\common\dirt showdown\showdown.exe
FirewallRules: [{5FEC985E-3BAF-442C-9264-4A12576EF736}] => (Allow) F:\Steam\SteamApps\common\dirt showdown\showdown.exe
FirewallRules: [{BE20B14C-55D7-470B-957F-B8DF556A671C}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{CE30ECDC-C9DF-4AB9-84A8-9DAA3C865589}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{80A3D9C7-0C8D-474F-B6D2-5E2AC6F393C9}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{29D58B63-61BD-471B-8409-3A361B4F1E93}] => (Allow) F:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [UDP Query User{BBDFC2E5-255D-44E9-930B-DE93E27D5B8F}C:\program files (x86)\musicbrainz picard\picard.exe] => (Allow) C:\program files (x86)\musicbrainz picard\picard.exe
FirewallRules: [TCP Query User{D454BF7E-F037-44EC-9AD7-978C6E799BE7}C:\program files (x86)\musicbrainz picard\picard.exe] => (Allow) C:\program files (x86)\musicbrainz picard\picard.exe
FirewallRules: [UDP Query User{275E33BB-2E99-4837-825E-3FBBEB5A0067}C:\program files (x86)\zyxel\nsu\nsu.exe] => (Allow) C:\program files (x86)\zyxel\nsu\nsu.exe
FirewallRules: [TCP Query User{B1257F71-DCF9-4756-9776-7C1912EA395F}C:\program files (x86)\zyxel\nsu\nsu.exe] => (Allow) C:\program files (x86)\zyxel\nsu\nsu.exe
FirewallRules: [UDP Query User{7D3B88C1-94E0-436E-B8DA-C86EAAFD5DEC}G:\games\installed\steamlibrary\steamapps\common\call of duty modern warfare 2\iw4sp.exe] => (Block) G:\games\installed\steamlibrary\steamapps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [TCP Query User{D97BFCD2-998F-429A-B067-E64C14D15F6A}G:\games\installed\steamlibrary\steamapps\common\call of duty modern warfare 2\iw4sp.exe] => (Block) G:\games\installed\steamlibrary\steamapps\common\call of duty modern warfare 2\iw4sp.exe
FirewallRules: [{1A85B8A0-9791-4886-A48D-E38E1A8A2CF3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{7580372C-3659-4670-B459-9D2269870E30}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{46EB5038-D5C0-45E2-87B5-5D601CE0339F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{606EDAB8-883A-4AD8-94D4-8E11700F4DA1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{E0A7110F-4758-4E71-9084-8F117FD3B3EF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{43C142C7-F6C7-4BB6-8414-28ABA1392325}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Farming Simulator 2013\FarmingSimulator2013Game.exe
FirewallRules: [{21C1F9D3-F1C7-49DA-9E00-9CBF27E4C9A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{73C18CB9-49EB-498C-A9E6-76316CF1A343}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B1D552EE-328D-4D6F-89DE-0A1A03FA2C1E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [{6BCA3869-C81F-46D2-B0D7-7C515FC44CF2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe
FirewallRules: [UDP Query User{B2105485-2684-4B3A-824B-D0DFB81F075C}G:\games\diablo 3\diablo iii\diablo iii.exe] => (Allow) G:\games\diablo 3\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{33A5E969-9162-4710-87FD-01AEC77000C9}G:\games\diablo 3\diablo iii\diablo iii.exe] => (Allow) G:\games\diablo 3\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{D6EAFC87-6C85-4F45-85BA-E620B472220A}G:\games\installed\mechwarrior 4\mw4mercs.exe] => (Allow) G:\games\installed\mechwarrior 4\mw4mercs.exe
FirewallRules: [TCP Query User{8269B233-4E47-4A38-86AB-DFB901B10BD3}G:\games\installed\mechwarrior 4\mw4mercs.exe] => (Allow) G:\games\installed\mechwarrior 4\mw4mercs.exe
FirewallRules: [{3F553D91-4734-4C41-90F8-BA021CF2252C}] => (Allow) G:\Games\Installed\Bohemia Interactive\arma2OA.exe
FirewallRules: [{AEC96F81-A3E2-408A-9E75-D870EA945A01}] => (Allow) G:\Games\Installed\Bohemia Interactive\arma2OA.exe
FirewallRules: [{4F973B0D-0245-45AA-B293-3F67595FCA9B}] => (Allow) G:\Games\Installed\Bohemia Interactive\arma2.exe
FirewallRules: [{4B87C2D1-3396-441B-9BD0-ED08C600B1F4}] => (Allow) G:\Games\Installed\Bohemia Interactive\arma2.exe
FirewallRules: [{C0EA0A4F-5F21-4F32-BF37-74FD275E0DD8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{DB9CF879-ABD4-40DA-8B66-23BDB2530EAE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1363\Agent.exe
FirewallRules: [{353EE97E-08D3-403A-98BD-4D67ED028D09}] => (Allow) G:\Games\Installed\ArmA\arma_server.exe
FirewallRules: [{A54F19D9-C456-4E5C-83F6-1A9ADEDB69B6}] => (Allow) G:\Games\Installed\ArmA\arma_server.exe
FirewallRules: [{5AAEB360-7F29-4F40-B773-CCF7F043710B}] => (Allow) G:\Games\Installed\ArmA\arma.exe
FirewallRules: [{B7CB25A9-F0C1-4047-B8F8-8588E0257D79}] => (Allow) G:\Games\Installed\ArmA\arma.exe
FirewallRules: [{2847CFD6-D357-45BF-A374-66AAAC65AEE3}] => (Allow) G:\Games\Installed\Bohemia Interactive\ColdWarAssault_Server.exe
FirewallRules: [{42C1F91F-8624-46E1-ABBD-9D932388DA88}] => (Allow) G:\Games\Installed\Bohemia Interactive\ColdWarAssault_Server.exe
FirewallRules: [{223B1954-19D5-4A8F-85A5-A7A9735D7CAA}] => (Allow) G:\Games\Installed\Bohemia Interactive\ColdWarAssault.exe
FirewallRules: [{A38DC24D-C7B8-4164-95C4-00EF32CA5935}] => (Allow) G:\Games\Installed\Bohemia Interactive\ColdWarAssault.exe
FirewallRules: [{4360F54A-7FB9-4783-B436-6BC0417D62F3}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ICCUpdater.exe
FirewallRules: [{4C82523D-1792-493A-BAFD-1B031ECED5B5}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\ICCUpdater.exe
FirewallRules: [{155D2A2A-E62E-4A4A-8716-1EF9B61C845C}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\USDAgent.exe
FirewallRules: [{6399D845-F8A7-4672-9E94-8D126D79F2E6}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Scan Driver\USDAgent.exe
FirewallRules: [{9FC1C746-356B-483E-9010-04A4240C253A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{4069ABD4-FDE7-4DFF-82C0-9E5337CAB9C1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{CAC89030-842A-43AF-A856-68189635E026}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{51E4DEC4-509E-4722-8DFD-C0D05FF1BE78}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1267\Agent.exe
FirewallRules: [{059CA906-D79C-4D3F-8632-C9475A6A2D1F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe
FirewallRules: [{6E2335AB-34AC-42FC-9740-B487071DB3E8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe
FirewallRules: [UDP Query User{DBC1451B-E7F4-4912-85EA-1DBA60F42D3E}G:\games\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe] => (Allow) G:\games\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe
FirewallRules: [TCP Query User{DA785DDB-D2AC-40D2-9317-13FB1907C833}G:\games\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe] => (Allow) G:\games\world of warcraft\temp\wow-4.3-5.0.15890-enus-downloader.exe
FirewallRules: [{E0FEC11B-D8D4-4783-A382-F649FCA9A792}] => (Allow) G:\Games\World of Warcraft\Launcher.patch.exe
FirewallRules: [{FDD52CD3-8B60-4BFE-A58E-12C074DD67F1}] => (Allow) G:\Games\World of Warcraft\Launcher.patch.exe
FirewallRules: [UDP Query User{84DA5BDA-D978-42AE-B7EF-687D9197961D}G:\games\world of warcraft\launcher.exe] => (Allow) G:\games\world of warcraft\launcher.exe
FirewallRules: [TCP Query User{1907FB46-25AA-4EEB-886A-79F5E72C15FC}G:\games\world of warcraft\launcher.exe] => (Allow) G:\games\world of warcraft\launcher.exe
FirewallRules: [{5BCF122D-F60D-4F70-B198-919E9EF5D256}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dirt showdown\showdown.exe
FirewallRules: [{BB1DFF9A-D1F2-48D1-9283-7C0B36EF63E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\dirt showdown\showdown.exe
FirewallRules: [{BB116CCA-80C3-4F4D-9C9F-4FECE1C2B546}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{13441382-FF49-4FDC-92D0-DCE3E8847D12}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{E10B7FE6-7106-4AFC-8F27-460037F92C39}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [UDP Query User{A8FB516D-886E-434D-87CE-BCF8C5C1AF4B}C:\program files (x86)\airdroid\airdroid.exe] => (Allow) C:\program files (x86)\airdroid\airdroid.exe
FirewallRules: [TCP Query User{45E5C51D-10D1-4C27-9C81-32AA7D557621}G:\games\installed\.minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) G:\games\installed\.minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{1F1400CD-54BC-43B8-BB7E-898BDAF0FCA5}G:\games\installed\.minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) G:\games\installed\.minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{AFB0A761-FFDB-4B7C-AB3E-56FD9458AEDF}] => (Allow) F:\Steam\SteamApps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [{A93A3937-FE7C-4A63-A899-EFF10CB3B8AE}] => (Allow) F:\Steam\SteamApps\common\Hearts of Iron IV\hoi4.exe
FirewallRules: [{6D29FC8B-7D04-48E5-83DA-F0D14173183B}] => (Allow) G:\Games\Installed\Far Cry Primal\bin\FCPrimal.exe
FirewallRules: [{491BF064-40DE-4083-8330-7A9738A59FB4}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{45277417-8EA4-4B6B-BF9D-5EC099A5AE25}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa_setup.exe
FirewallRules: [{A75AEEDE-7FBF-4078-9D42-750173958964}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa_setup.exe
FirewallRules: [{62955289-573C-4464-92E0-D33341364D17}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa.exe
FirewallRules: [{458F62DB-6EAE-4E0E-B644-AE9D0F733F7A}] => (Allow) G:\Games\Installed\Medal of Honor Pacific Assault\mohpa.exe
FirewallRules: [{91373339-C451-473F-BEBA-A5139879D7E0}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{13B1E357-E582-460F-94B8-EE36DA6A4680}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{ABAC7599-8AAE-4FFE-B0AC-27113127EF34}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{A9EFCAC4-8679-48D3-81DF-B45A5663820A}] => (Allow) G:\Games\Installed\The Sims 4\Game\Bin\TS4_x64.exe
FirewallRules: [{A5EC54EB-2AC0-473C-8870-EDDB1F8A45C9}] => (Allow) G:\Games\Installed\FIFA Manager 13\Manager13.exe
FirewallRules: [{8C9BBA92-2BF8-47A6-B31F-0B944064B3BA}] => (Allow) G:\Games\Installed\FIFA Manager 13\Manager13.exe
FirewallRules: [{53452A78-073A-45B4-A7A1-CC76B9D08905}] => (Allow) C:\WINDOWS\system32\rundll32.exe
FirewallRules: [{07050E64-F1B0-401E-AFB4-D59855A7A0C0}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [{01CE60FB-9949-4136-9B9A-599B8065CB22}] => (Allow) C:\Windows\System32\rundll32.exe
FirewallRules: [TCP Query User{4ACAEF1E-B592-45C3-8370-F1DB61F74033}G:\games\installed\fifa manager 13\manager16-17.exe] => (Allow) G:\games\installed\fifa manager 13\manager16-17.exe
FirewallRules: [UDP Query User{FFAE2281-9D5D-457E-B57A-0E617A3E4457}G:\games\installed\fifa manager 13\manager16-17.exe] => (Allow) G:\games\installed\fifa manager 13\manager16-17.exe
==================== Wiederherstellungspunkte =========================
ACHTUNG: Systemwiederherstellung ist deaktiviert
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (07/13/2017 08:33:49 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Monitor.exe, Version: 1.1.0.3, Zeitstempel: 0x4f912217
Name des fehlerhaften Moduls: Exeio.dll, Version: 1.0.2.7, Zeitstempel: 0x4f8f7487
Ausnahmecode: 0xc0000005
Fehleroffset: 0x00004317
ID des fehlerhaften Prozesses: 0x1fd0
Startzeit der fehlerhaften Anwendung: 0x01d2fc0691634822
Pfad der fehlerhaften Anwendung: C:\Program Files (x86)\ASUS\GPU Tweak\Monitor.exe
Pfad des fehlerhaften Moduls: C:\Program Files (x86)\ASUS\GPU Tweak\Exeio.dll
Berichtskennung: 3dbe364f-5fda-46b8-8572-5142b7a5f349
Vollständiger Name des fehlerhaften Pakets:
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
Error: (07/13/2017 11:16:11 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:15:53 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:12:12 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:09:36 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:09:29 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:09:17 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:07:56 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:05:48 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Error: (07/13/2017 11:03:59 AM) (Source: ATIeRecord) (EventID: 16387) (User: )
Description: ATI EEU Service event error
Systemfehler:
=============
Error: (07/13/2017 08:31:18 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (07/13/2017 08:31:17 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.
Error: (07/13/2017 10:56:40 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der angegebene Dienst kann nicht gestartet werden. Er ist deaktiviert oder nicht mit aktivierten Geräten verbunden.
Error: (07/13/2017 10:56:39 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "CldFlt" wurde aufgrund folgenden Fehlers nicht gestartet:
Die Anforderung wird nicht unterstützt.
Error: (07/13/2017 10:56:08 AM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" ist vom Dienst "Windows Search" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde:
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
Error: (07/13/2017 10:56:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
Error: (07/13/2017 10:56:08 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
Die Anforderung wird nicht unterstützt.
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (07/13/2017 10:56:08 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.
Error: (07/13/2017 10:56:08 AM) (Source: Service Control Manager) (EventID: 7038) (User: )
Description: Der Dienst "WSearch" konnte sich nicht als "NT AUTHORITY\SYSTEM" mit dem aktuellen Kennwort aufgrund des folgenden Fehlers anmelden:
Die Anforderung wird nicht unterstützt.
Vergewissern Sie sich, dass der Dienst richtig konfiguriert ist im Dienste-Snap-In in der Microsoft Management Console (MMC).
Error: (07/13/2017 10:55:39 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
CodeIntegrity:
===================================
Date: 2017-07-06 20:02:38.418
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-07-06 20:02:38.362
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-07-06 20:01:59.223
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-07-06 20:01:59.152
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Windows\assembly\GAC\ADODB\7.0.3300.0__b03f5f7f11d50a3a\ADODB.dll that did not meet the Microsoft signing level requirements.
Date: 2017-07-02 22:48:45.442
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-07-02 22:48:45.442
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-07-02 21:57:01.286
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-07-02 21:57:01.285
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-07-02 21:30:01.993
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
Date: 2017-07-02 21:30:01.993
Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume2\Program Files\Bonjour\mdnsNSP.dll that did not meet the Custom 3 / Antimalware signing level requirements.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-3570K CPU @ 3.40GHz
Prozentuale Nutzung des RAM: 32%
Installierter physikalischer RAM: 8072.42 MB
Verfügbarer physikalischer RAM: 5441.6 MB
Summe virtueller Speicher: 16264.42 MB
Verfügbarer virtueller Speicher: 13325.97 MB
==================== Laufwerke ================================
Drive c: (SSD) (Fixed) (Total:118.7 GB) (Free:2.49 GB) NTFS
Drive d: (Alte Platte) (Fixed) (Total:465.75 GB) (Free:465.6 GB) NTFS
Drive e: (SYSTEM RESERVED) (Fixed) (Total:0.1 GB) (Free:0.07 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive f: (Daten/Musik/Steam) (Fixed) (Total:689.95 GB) (Free:220.07 GB) NTFS
Drive g: (Spiele) (Fixed) (Total:690.21 GB) (Free:95.58 GB) NTFS
==================== MBR & Partitionstabelle ==================
==================== Ende von Addition.txt ============================
|
|
15.07.2017, 18:15
| #18 |
| /// Winkelfunktion /// TB-Süch-Tiger™   | Malware verhindert MBAM/Windows Defender FRST-Fix
__________________Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschränkung <==== ACHTUNG
Task: {054F143D-BED6-4F03-AB18-8C68E578BF2D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {084F94A3-CC70-47F8-9A5A-DBD26CCF9D36} - System32\Tasks\CooRink Portable => Rundll32.exe "C:\Program Files\CooRink Portable\CooRink Portable.dll",QqJnzFgBAjtK <==== ACHTUNG
Task: {11CCB11C-E6D0-486E-B02F-75B1EA539C0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {17D34AC5-16AE-47EF-9656-62C5E4C17ADE} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {1BEAFB71-0D00-4944-B618-4336CA14BCED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1E0ACFEA-2883-47AC-8257-47019CCA67C7} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {2AEBC444-CC48-4A6D-966E-8997B78B8D05} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
Task: {2C7FD148-E5A4-49EE-9946-8713A920116F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {3D0F7DFB-68E5-44CB-81A0-34852F41D45D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {481B398C-E7EC-43AB-BB32-825EA7550B8A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {526A0AC0-36E2-4285-A407-3CD99D3A9F87} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {789B7C15-30F9-4453-9BFD-4B81183C34B6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {7A30E4E0-6A3B-44D3-BFC0-21CFD91D6F25} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A0B7A1F9-2965-4168-AC65-FFDE335ABFBD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {BB21631A-8E55-438E-B030-1F488E6A2708} - System32\Tasks\SwapHome => Rundll32.exe "C:\Program Files\SwapHome\SwapHome.dll",ysTDXoPrsTD <==== ACHTUNG
Task: {BCC3F4E0-D953-42DA-A816-74E53543A2D2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C43837BF-36DB-4C65-A648-032489F46DDE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {E156016E-CCA9-452B-8250-5B713FBC142F} - System32\Tasks\{E4940BAB-8064-4FA8-9FC2-D5086AC50294} => pcalua.exe -a "C:\Users\Raphael\AppData\Local\Temp\Temp1_d2a536_4e9f3e7be5271.zip\FInal 7.exe" <==== ACHTUNG
C:\ProgramData\xml39BA.tmp
C:\ProgramData\xml456F.tmp
C:\ProgramData\xml49A4.tmp
C:\ProgramData\xml4DAB.tmp
C:\Users\Raphael\pb-setup-x64-5.8.0602.exe
hosts:
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ |
|
15.07.2017, 19:50
| #19 |
| | Malware verhindert MBAM/Windows Defender Nur für mich Laien zum gröbsten Verständnis: Du gehst die frst-Log-Einträge durch, erkennst was nicht dahin gehört und schreibst, je nach gefundenen Einträgen, von Hand so etwas wie die fixlist.txt? Fixlog.txt: Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 15-07-2017
durchgeführt von Raphael (15-07-2017 20:36:30) Run:2
Gestartet von C:\Users\Raphael\Desktop\FRST
Geladene Profile: Raphael (Verfügbare Profile: Raphael & Silvia & Browsergame & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender: Beschr�nkung <==== ACHTUNG
Task: {054F143D-BED6-4F03-AB18-8C68E578BF2D} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {084F94A3-CC70-47F8-9A5A-DBD26CCF9D36} - System32\Tasks\CooRink Portable => Rundll32.exe "C:\Program Files\CooRink Portable\CooRink Portable.dll",QqJnzFgBAjtK <==== ACHTUNG
Task: {11CCB11C-E6D0-486E-B02F-75B1EA539C0D} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {17D34AC5-16AE-47EF-9656-62C5E4C17ADE} - \Microsoft\Windows\Setup\gwx\rundetector -> Keine Datei <==== ACHTUNG
Task: {1BEAFB71-0D00-4944-B618-4336CA14BCED} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {1E0ACFEA-2883-47AC-8257-47019CCA67C7} - \Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d -> Keine Datei <==== ACHTUNG
Task: {2AEBC444-CC48-4A6D-966E-8997B78B8D05} - \Microsoft\Windows\Setup\GWXTriggers\Time-Weekend -> Keine Datei <==== ACHTUNG
Task: {2C7FD148-E5A4-49EE-9946-8713A920116F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {3D0F7DFB-68E5-44CB-81A0-34852F41D45D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {481B398C-E7EC-43AB-BB32-825EA7550B8A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {526A0AC0-36E2-4285-A407-3CD99D3A9F87} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime -> Keine Datei <==== ACHTUNG
Task: {789B7C15-30F9-4453-9BFD-4B81183C34B6} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {7A30E4E0-6A3B-44D3-BFC0-21CFD91D6F25} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {A0B7A1F9-2965-4168-AC65-FFDE335ABFBD} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {BB21631A-8E55-438E-B030-1F488E6A2708} - System32\Tasks\SwapHome => Rundll32.exe "C:\Program Files\SwapHome\SwapHome.dll",ysTDXoPrsTD <==== ACHTUNG
Task: {BCC3F4E0-D953-42DA-A816-74E53543A2D2} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {C43837BF-36DB-4C65-A648-032489F46DDE} - \Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime -> Keine Datei <==== ACHTUNG
Task: {E156016E-CCA9-452B-8250-5B713FBC142F} - System32\Tasks\{E4940BAB-8064-4FA8-9FC2-D5086AC50294} => pcalua.exe -a "C:\Users\Raphael\AppData\Local\Temp\Temp1_d2a536_4e9f3e7be5271.zip\FInal 7.exe" <==== ACHTUNG
C:\ProgramData\xml39BA.tmp
C:\ProgramData\xml456F.tmp
C:\ProgramData\xml49A4.tmp
C:\ProgramData\xml4DAB.tmp
C:\Users\Raphael\pb-setup-x64-5.8.0602.exe
hosts:
emptytemp:
*****************
HKLM\SOFTWARE\Policies\Microsoft\Windows Defender => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{054F143D-BED6-4F03-AB18-8C68E578BF2D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{054F143D-BED6-4F03-AB18-8C68E578BF2D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{084F94A3-CC70-47F8-9A5A-DBD26CCF9D36} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{084F94A3-CC70-47F8-9A5A-DBD26CCF9D36} => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\CooRink Portable => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\CooRink Portable => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{11CCB11C-E6D0-486E-B02F-75B1EA539C0D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{11CCB11C-E6D0-486E-B02F-75B1EA539C0D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{17D34AC5-16AE-47EF-9656-62C5E4C17ADE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{17D34AC5-16AE-47EF-9656-62C5E4C17ADE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\rundetector => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1BEAFB71-0D00-4944-B618-4336CA14BCED} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1BEAFB71-0D00-4944-B618-4336CA14BCED} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{1E0ACFEA-2883-47AC-8257-47019CCA67C7} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{1E0ACFEA-2883-47AC-8257-47019CCA67C7} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OnIdle-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2AEBC444-CC48-4A6D-966E-8997B78B8D05} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2AEBC444-CC48-4A6D-966E-8997B78B8D05} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-Weekend => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{2C7FD148-E5A4-49EE-9946-8713A920116F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{2C7FD148-E5A4-49EE-9946-8713A920116F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfig => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{3D0F7DFB-68E5-44CB-81A0-34852F41D45D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{3D0F7DFB-68E5-44CB-81A0-34852F41D45D} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Logon-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Logon\{481B398C-E7EC-43AB-BB32-825EA7550B8A} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{481B398C-E7EC-43AB-BB32-825EA7550B8A} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\launchtrayprocess => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{526A0AC0-36E2-4285-A407-3CD99D3A9F87} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{526A0AC0-36E2-4285-A407-3CD99D3A9F87} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeTime => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{789B7C15-30F9-4453-9BFD-4B81183C34B6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{789B7C15-30F9-4453-9BFD-4B81183C34B6} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{7A30E4E0-6A3B-44D3-BFC0-21CFD91D6F25} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{7A30E4E0-6A3B-44D3-BFC0-21CFD91D6F25} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\Time-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{A0B7A1F9-2965-4168-AC65-FFDE335ABFBD} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{A0B7A1F9-2965-4168-AC65-FFDE335ABFBD} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Boot\{BB21631A-8E55-438E-B030-1F488E6A2708} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BB21631A-8E55-438E-B030-1F488E6A2708} => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\SwapHome => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\SwapHome => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{BCC3F4E0-D953-42DA-A816-74E53543A2D2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{BCC3F4E0-D953-42DA-A816-74E53543A2D2} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{C43837BF-36DB-4C65-A648-032489F46DDE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{C43837BF-36DB-4C65-A648-032489F46DDE} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\Microsoft\Windows\Setup\GWXTriggers\ScheduleUpgradeReminderTime => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Plain\{E156016E-CCA9-452B-8250-5B713FBC142F} => Schlüssel erfolgreich entfernt
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{E156016E-CCA9-452B-8250-5B713FBC142F} => Schlüssel erfolgreich entfernt
C:\WINDOWS\System32\Tasks\{E4940BAB-8064-4FA8-9FC2-D5086AC50294} => erfolgreich verschoben
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\{E4940BAB-8064-4FA8-9FC2-D5086AC50294} => Schlüssel erfolgreich entfernt
C:\ProgramData\xml39BA.tmp => erfolgreich verschoben
C:\ProgramData\xml456F.tmp => erfolgreich verschoben
C:\ProgramData\xml49A4.tmp => erfolgreich verschoben
C:\ProgramData\xml4DAB.tmp => erfolgreich verschoben
C:\Users\Raphael\pb-setup-x64-5.8.0602.exe => erfolgreich verschoben
C:\Windows\System32\Drivers\etc\hosts => erfolgreich verschoben
Hosts erfolgreich wiederhergestellt.
=========== EmptyTemp: ==========
BITS transfer queue => 7364608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 62528118 B
Java, Flash, Steam htmlcache => 448545895 B
Windows/system/drivers => 10309079 B
Edge => 682397 B
Chrome => 126510945 B
Firefox => 362814312 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 23330 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile32 => 0 B
LocalService => 9794 B
NetworkService => 1145882 B
Raphael => 377421169 B
Silvia => 662927 B
Browsergame => 33058 B
DefaultAppPool => 33058 B
RecycleBin => 0 B
EmptyTemp: => 1.3 GB temporäre Dateien entfernt.
================================
Das System musste neu gestartet werden.
==== Ende von Fixlog 20:42:02 ====
|
|
15.07.2017, 20:00
| #20 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware verhindert MBAM/Windows Defender Ja, so grob ausgedrückt ist das richtig. Kontrollscans mit (1) MBAM, (2) ESET und (3) SecurityCheck bitte: 1. Schritt: Malwarebytes Version 3 Downloade Dir bitte Malwarebytes Anti-Malware 3
2. Schritt: ESET ESET Online Scanner
3. Schritt: SecurityCheck Downloade Dir bitte  SecurityCheck und:
__________________ Logfiles bitte immer in CODE-Tags posten  |
|
24.07.2017, 19:37
| #21 |
| | Malware verhindert MBAM/Windows Defender Puh, das hat gedauert.  Wenn das System so sicher aussieht, dass ich meine Daten-Festplatte wieder anklemmen kann, lass es mich bitte wissen. Die war zum Zeitpunkt der Infektion verbunden und wurde vor dem ersten reboot getrennt. mbam: Code:
ATTFilter Malwarebytes
www.malwarebytes.com
-Protokolldetails-
Scan-Datum: 23.07.17
Scan-Zeit: 18:42
Protokolldatei: mbam.txt
Administrator: Ja
-Softwaredaten-
Version: 3.1.2.1733
Komponentenversion: 1.0.160
Version des Aktualisierungspakets: 1.0.2421
Lizenz: Kostenlos
-Systemdaten-
Betriebssystem: Windows 10 (Build 15063.483)
CPU: x64
Dateisystem: NTFS
Benutzer: Raphael-PC\Raphael
-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 525588
Erkannte Bedrohungen: 0
(keine bösartigen Elemente erkannt)
In die Quarantäne verschobene Bedrohungen: 0
(keine bösartigen Elemente erkannt)
Abgelaufene Zeit: 2 Min., 15 Sek.
-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert
-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)
Modul: 0
(keine bösartigen Elemente erkannt)
Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)
Registrierungswert: 0
(keine bösartigen Elemente erkannt)
Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)
Daten-Stream: 0
(keine bösartigen Elemente erkannt)
Ordner: 0
(keine bösartigen Elemente erkannt)
Datei: 0
(keine bösartigen Elemente erkannt)
Physischer Sektor: 0
(keine bösartigen Elemente erkannt)
(end)
Code:
ATTFilter ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=8af9671cb006ee4bb16025ed3eaf15e4
# end=init
# utc_time=2017-07-23 04:47:02
# local_time=2017-07-23 06:47:02 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=41221
Update Finalize
Updated modules version: 0
Old modules - leave modules
Update Init
Update Download
Update Init
Update Download
Update Finalize
Updated modules version: 34151
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=8af9671cb006ee4bb16025ed3eaf15e4
# end=updated
# utc_time=2017-07-23 04:53:28
# local_time=2017-07-23 06:53:28 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=8af9671cb006ee4bb16025ed3eaf15e4
# engine=34151
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2017-07-23 11:52:51
# local_time=2017-07-24 01:52:51 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 102053 10986967 0 0
# scanned=1492644
# found=27
# cleaned=0
# scan_time=25162
sh=FE4E5945DC1378C204B0C8D22EF232D0527C5D1D ft=1 fh=da4139fe0bd881fb vn="Variante von Win32/Tencent.I eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\uvdqspkuyqeepsjkulmgbthmsdbjslye\QQLive\10.0.126.0\QQLiveUninstaller.exe"
sh=22705B53BF6D28AACC0B60B923CEC22F1A647BE5 ft=1 fh=5ad60394b88a55e2 vn="Variante von Win32/Tencent.I eventuell unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\quarantine\files\uvdqspkuyqeepsjkulmgbthmsdbjslye\QQLive\10.0.126.0\Statistics.exe"
sh=C9741CF5E05C68FDA98BB113304112D28F8EAADE ft=1 fh=ce9c0dd30469c76d vn="Variante von Win32/Adware.Zdengo.AP Anwendung" ac=I fn="C:\Program Files (x86)\fL3y0Saiyu\kl.dll"
sh=4ECBA863B1B0960B4F8625C4B1550B50E64FE5C3 ft=1 fh=2a76b5bf83321e37 vn="Variante von Win64/CoinMiner.BO Trojaner" ac=I fn="C:\Windows\C_02iu47.dat"
sh=897FD37A4F97BA9BBC92108AA1FB16C970EACBF0 ft=1 fh=58662848aaacab1c vn="Variante von Win32/Toolbar.Conduit.AU eventuell unerwünschte Anwendung" ac=I fn="F:\Downloads\FreeYouTubeDownload_3.1.42.1212.exe"
sh=6B5F38728DC3795D5ABB299B327A3DA19091FA2B ft=1 fh=17a09c7c1b316e91 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="F:\Downloads\Malwarebytes Malware Scanner - CHIP-Installer.exe"
sh=4346A841127E4249C18EE47E531263237E36385D ft=1 fh=1137f17dc9eb2a40 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="F:\Downloads\Rufus - CHIP-Installer.exe"
sh=14CF5835E970519777D4FA107CC6788D633C2F05 ft=1 fh=160688b2adc15029 vn="Variante von Win32/DownloadSponsor.A eventuell unerwünschte Anwendung" ac=I fn="F:\Downloads\SEUS_v10_1.3.1_RC3_Installer - CHIP-Downloader.exe"
sh=341332AE4BB819B24D07E43B117ECB2073D8F6A6 ft=1 fh=2925cd76262f60ff vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="F:\Downloads\SpeedFan - CHIP-Installer.exe"
sh=14C6EB66240B1B22D3F776BDD3D95ADF9D74447B ft=1 fh=85830ac9ecea12f2 vn="Variante von Win32/DownloadSponsor.C eventuell unerwünschte Anwendung" ac=I fn="F:\Downloads\Visual Basic 2010 Express - CHIP-Installer.exe"
sh=C1EF1515653AA7B1B3B4E70B52D33B2AEB9DC0F6 ft=1 fh=3456d1047018b4d4 vn="Mehrere Bedrohungen" ac=I fn="F:\Safety\Programm Archiv\Sonstiges\Dk26.exe"
sh=36BCE38891C305BA5DCAD479EE3501CC0E2738E6 ft=0 fh=0000000000000000 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-04-03 190000\Backup Files 2011-04-03 190000\Backup files 2.zip"
sh=D63F3017B296BE79EC3481F396D6C09B01E0EF27 ft=0 fh=0000000000000000 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-04-03 190000\Backup Files 2011-04-03 190000\Backup files 3.zip"
sh=8FF80880AF48A255FDBDD872436D7EDABDD9B420 ft=0 fh=0000000000000000 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-04-03 190000\Backup Files 2011-06-19 190000\Backup files 1.zip"
sh=30BB7A21B723A4FFB19F57625BD76939CDE3EF69 ft=0 fh=0000000000000000 vn="JS/TrojanClicker.Agent.NCI.Gen Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-04-03 190000\Backup Files 2011-07-28 181255\Backup files 1.zip"
sh=000B821141AA00082178B25DC735DBCE4C238CC3 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-04-03 190000\Backup Files 2011-08-21 190000\Backup files 1.zip"
sh=46FE4A96A1DE7AD53DFA524E03F8A39680D33A84 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-10-16 190000\Backup files 12.zip"
sh=EB9FC9E65BD31FA02CAAB619C8A03AEBC94BB3AA ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-10-16 190000\Backup files 16.zip"
sh=EB83C320204161F2A7C59AB641C2C78693FF508E ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-10-16 190000\Backup files 5.zip"
sh=1F07A9AB959E2ECCCD947030EA1955CE3B7669DE ft=0 fh=0000000000000000 vn="Mehrere Bedrohungen" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-10-16 190000\Backup files 9.zip"
sh=16C027B0A1DAE18B022A38902B183DE8CFB32426 ft=0 fh=0000000000000000 vn="HTML/Hoax.Agent.H.Gen Anwendung" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-11-13 204441\Backup files 3.zip"
sh=6BC787BF330C1CCFD9E68A3E6BFE84E257567D0F ft=0 fh=0000000000000000 vn="HTML/Hoax.Agent.H.Gen Anwendung" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-12-25 212026\Backup files 14.zip"
sh=17F25438217A2BD99045FE622B2397F788A4A130 ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-12-25 212026\Backup files 15.zip"
sh=6206DE9B73DF39868F497703BB297E5C3F6CA84F ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-12-25 212026\Backup files 20.zip"
sh=E106AB581CCA45098ED07C6B533EEB577A76858A ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-12-25 212026\Backup files 3.zip"
sh=AF3111B7BAD2AA2BDE4734C9B4D26C6F31070EEA ft=0 fh=0000000000000000 vn="HTML/ScrInject.B Trojaner" ac=I fn="G:\RAPHAEL-PC\Backup Set 2011-10-16 190000\Backup Files 2011-12-25 212026\Backup files 9.zip"
sh=7F21BD5D54E478F3B7095BA7232AC83892E3730F ft=0 fh=0000000000000000 vn="Win32/SoftonicDownloader.A eventuell unerwünschte Anwendung" ac=I fn="G:\RAPHAEL-PC\Backup Set 2012-03-25 190001\Backup Files 2012-03-25 190001\Backup files 7.zip"
Code:
ATTFilter Results of screen317's Security Check version 1.009 x64 (UAC is enabled) Internet Explorer 11 ``````````````Antivirus/Firewall Check:`````````````` Windows Defender WMI entry may not exist for antivirus; attempting automatic update. `````````Anti-malware/Other Utilities Check:````````` Java 8 Update 131 Java version 32-bit out of Date! Adobe Flash Player 26.0.0.137 Mozilla Firefox (54.0.1) Google Chrome (59.0.3071.115) Google Chrome (SetupMetrics...) ````````Process Check: objlist.exe by Laurent```````` Windows Defender MSMpEng.exe Malwarebytes Anti-Malware mbamservice.exe Malwarebytes Anti-Malware mbamtray.exe Windows Defender MSASCuiL.exe `````````````````System Health check````````````````` Total Fragmentation on Drive C: % ````````````````````End of Log`````````````````````` |
|
24.07.2017, 21:27
| #22 | |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware verhindert MBAM/Windows DefenderZitat:
Die verarschen ihre Kunden aus reiner Profitgier. Siehe auch http://www.trojaner-board.de/168364-...mpfehlung.html und CHIP-Installer - was ist das? - Anleitungen FRST-Fix Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft! Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster. Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument Code:
ATTFilter C:\Windows\C_02iu47.dat
F:\Downloads\FreeYouTubeDownload_3.1.42.1212.exe
F:\Downloads\*CHIP-Installer.exe
F:\Safety\Programm Archiv\Sonstiges\Dk26.exe
G:\RAPHAEL-PC\Backup Set 2011-04-03 190000
G:\RAPHAEL-PC\Backup Set 2011-10-16 190000
G:\RAPHAEL-PC\Backup Set 2012-03-25 190001
emptytemp:
Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.07.2017, 19:14
| #23 |
| | Malware verhindert MBAM/Windows Defender Das Profil "Browsergame" kommt mir spanisch vor  Code:
ATTFilter Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 23-07-2017
durchgeführt von Raphael (25-07-2017 20:08:56) Run:3
Gestartet von C:\Users\Raphael\Desktop\FRST
Geladene Profile: Raphael (Verfügbare Profile: Raphael & Silvia & Browsergame & DefaultAppPool)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
C:\Windows\C_02iu47.dat
F:\Downloads\FreeYouTubeDownload_3.1.42.1212.exe
F:\Downloads\*CHIP-Installer.exe
F:\Safety\Programm Archiv\Sonstiges\Dk26.exe
G:\RAPHAEL-PC\Backup Set 2011-04-03 190000
G:\RAPHAEL-PC\Backup Set 2011-10-16 190000
G:\RAPHAEL-PC\Backup Set 2012-03-25 190001
emptytemp:
*****************
C:\Windows\C_02iu47.dat => erfolgreich verschoben
F:\Downloads\FreeYouTubeDownload_3.1.42.1212.exe => erfolgreich verschoben
=========== "F:\Downloads\*CHIP-Installer.exe" ==========
F:\Downloads\Malwarebytes Malware Scanner - CHIP-Installer.exe => erfolgreich verschoben
F:\Downloads\Rufus - CHIP-Installer.exe => erfolgreich verschoben
F:\Downloads\SpeedFan - CHIP-Installer.exe => erfolgreich verschoben
F:\Downloads\Visual Basic 2010 Express - CHIP-Installer.exe => erfolgreich verschoben
========= Ende -> "F:\Downloads\*CHIP-Installer.exe" ========
F:\Safety\Programm Archiv\Sonstiges\Dk26.exe => erfolgreich verschoben
"G:\RAPHAEL-PC\Backup Set 2011-04-03 190000" Ordner verschieben:
Konnte nicht verschoben werden "G:\RAPHAEL-PC\Backup Set 2011-04-03 190000" => ist geplant bei Neustart verschoben zu werden.
"G:\RAPHAEL-PC\Backup Set 2011-10-16 190000" Ordner verschieben:
Konnte nicht verschoben werden "G:\RAPHAEL-PC\Backup Set 2011-10-16 190000" => ist geplant bei Neustart verschoben zu werden.
"G:\RAPHAEL-PC\Backup Set 2012-03-25 190001" Ordner verschieben:
Konnte nicht verschoben werden "G:\RAPHAEL-PC\Backup Set 2012-03-25 190001" => ist geplant bei Neustart verschoben zu werden.
=========== EmptyTemp: ==========
BITS transfer queue => 7364608 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 24428080 B
Java, Flash, Steam htmlcache => 140844 B
Windows/system/drivers => 141010 B
Edge => 0 B
Chrome => 0 B
Firefox => 373085135 B
Opera => 0 B
Temp, IE cache, history, cookies, recent:
Default => 0 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile32 => 128 B
LocalService => 788 B
NetworkService => 36582 B
Raphael => 6366381 B
Silvia => 0 B
Browsergame => 0 B
DefaultAppPool => 0 B
RecycleBin => 0 B
EmptyTemp: => 392.5 MB temporäre Dateien entfernt.
================================
Ergebnis der geplanten Datei-Verschiebungen (Start-Modus: Normal) (Datum&Uhrzeit: 25-07-2017 20:09:54)
"G:\RAPHAEL-PC\Backup Set 2011-04-03 190000" => Konnte nicht verschoben werden
"G:\RAPHAEL-PC\Backup Set 2011-10-16 190000" => Konnte nicht verschoben werden
"G:\RAPHAEL-PC\Backup Set 2012-03-25 190001" => Konnte nicht verschoben werden
==== Ende vom Fixlog 20:10:09 ====
|
|
25.07.2017, 20:34
| #24 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware verhindert MBAM/Windows Defender Da existiert aber kein User zu. Was ist jetzt noch an Problemen offen?
__________________ Logfiles bitte immer in CODE-Tags posten |
|
25.07.2017, 20:51
| #25 |
| | Malware verhindert MBAM/Windows Defender Mir fällt nichts auf, was nicht so sein soll. Vielen Dank erstmal fürs Aufräumen. Ich habe nach wie vor meine Backup Festplatte vom System getrennt. Die war zum Zeitpunkt der Infektion per SATA verbunden und ist vor dem nächsten Reboot getrennt worden. Kann wieder dran und dann nochmal scannen? |
|
25.07.2017, 21:01
| #26 |
| /// Winkelfunktion /// TB-Süch-Tiger™ | Malware verhindert MBAM/Windows Defender ja kann gemacht werden Dann wären wir durch!  Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...  und/oder das Forum mit einer kleinen Spende  unterstützen.  Abschließend müssen wir noch ein paar Schritte unternehmen, um dein System aufzuräumen (cleanup mit DelFix) und abzusichern; ich poste dir dazu mal meine Lesestoffe. Wichtiger als irgendein AV ist ein vernünftiger Umgang, also gewisse Verhaltensregeln am Gerät mit Internetzugang, und ein paar grundsätzliche Absicherungen. Deswegen kommen die zuerst. Gliederung:
 Lesestoff:Cleanup Alle Logs gepostet? Dann lade Dir bitte  DelFix herunter.
Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst. Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen. Lesestoff:Grundsätzliches Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups deiner wichtigen Dateien oder des Systems (genaueres dazu im Lesestoff zu Backups) Finger weg von Registry-Cleanern, Optimizern usw!!! - die Performancesteigerung ist umstritten bis ganz klar nicht belegbar, dafür hast du ein großes Risiko dein System zu zerstören v.a. bei Registry-Operationen. Das Beste ist, die windowseigene Datenträgerbereinigung zu verwenden - und die Registry in Ruhe zu lassen! Softwareinstallationen und Aktualisierungen Für Windows gibt es seit einiger Zeit einen brauchbaren Paketmanager, der mit einfachen Befehlen es erlaubt, automatisiert Software herunterzuladen und zu installieren. Das erspart eine Menge Arbeit, denn ohne einen Paketmanager muss man jedes Programm selbst prüfen und separat manuell updaten, vorher manuell noch runterladen etc. pp. - siehe auch --> http://www.trojaner-board.de/186035-...r-windows.html Ich empfehle daher, alle Programme, sofern verfügbar, über chocolatey zu installieren. Falls du schon mit Linux zu tun hattest, wird dir die Syntax sehr vertraut sein. Die FAQs zu choco findest du da --> Chocolatey: Häufig gestellte Fragen (englisch) Für den seltenen Fall, dass du das benötigte Programm NICHT im repository von chocolatey findest: Lade diese Software immer von einem sauberen Portal wie  . Finger weg von chip.de oder softonic!Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen. Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner. Lesestoff:Absicherung Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch sicherheitsrelevante Software sollte immer in aktueller Version vorliegen - sofern benötigt, wenn nicht benötigt natürlich sinnigerweise deinstallieren oder Alternativen verwenden (und diese aktuell halten). Das zeitnahe Einspielen von Updates ist erforderlich, damit Sicherheitslücken geschlossen werden; Sicherheitslücken werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren. Besonders aufpassen bzgl. der Aktualität musst du bei folgender Software:
Optional:  NoScript verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen. NoScript kann gerade bei technisch nicht allzu versierten Nutzern beim Surfen zum Nervfaktor werden; ob das Tool geeignet ist, muss jeder selbst mal ausprobieren und dann für sich entscheiden. Alternativen zu NoScript (wenn um das das Verhindern von Usertracking und Werbung auf Webseiten) geht wären da Ghostery oder uBlock. Ghostery ist eine sehr bekannte Erweiterung, die aber auch in Kritik geraten ist, vgl. dazu bitte diesen Thread => Ghostery schleift Werbung durch Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.Lesestoff:Virenscanner + Firewall Vorab sei erwähnt, dass man niemals die Schutzwirkung eines Virenscanners überbewerten darf! Die Dinger sind mittlerweile auch unter Windows stark umstritten und können Probleme bereiten, die man so ohne AV einfach nicht haben wird. Zudem werden sie auch niemals jeden Schädling finden können. Aussagen der Anbieter dieser Software entpuppen sich regelmäßig als Marketinggeblubber. Lies dazu => Aus aktuellem Anlass: Antivirus-Schlangenöl | Elias Schwerdtfeger und => http://www.golem.de/news/antivirenso...12-125148.html Verwende also MAXIMAL ein einziges der folgenden AVs mit Echtzeitscanner und stets aktueller Signaturendatenbank; verwende immer nur reine Virenscanner (keine Produkte mit Suite oder Internet Security in Namen, denn diese bringen kontraproduktive Firewalls mit - die Windows-Firewall ist alles was benötigt wird!)
Microsoft Security Essentials (MSE) ist ab Windows 8 fest eingebaut, wenn du also Windows 8, 8.1 oder 10 und dich für MSE entschieden hast, brauchst du nicht extra MSE zu installieren. Bei Windows 7 muss es aber manuell installiert oder über die Windows Updates als optionales Update bezogen werden. Selbstverständlich ist ein legales/aktiviertes Windows Voraussetzung dafür. Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und/oder mit dem ESET Online Scanner scannen. Lesestoff:Backup-/Image-Tools IMHO sind Wiederherstellungspunkte nix weiter als eine Notlösung, wer sich auf was Funktionierendes verlassen will und muss, kommt um echte Backup/Imaging Software nicht herum. Ich nehme unter Windows immer Drive Snapshot - Disk Image Backup for Windows NT/2000/XP/2003/X64 Damit man sinnvolle Backups hat muss man regelmäßig zB wöchentlich ein Image auf eine separate externe Festplatte erstellen. Diese externe Festplatte wird nur dann angeschlossen, wenn man das Backup erstellen will (oder etwas wiederherstellen muss), sonsten bleibt sie aus Sicherheitsgründen sicher im Schrank verwahrt - allein schon aus dem Grund, die Backups vor Krypto-Trojaner zu schützen. Option 1: Drivesnapshot Offizielle TB-Anleitung --> http://www.trojaner-board.de/186299-...esnapshot.html  Drive Snapshot - Disk Image Backup for Windows NT/2000/XP/2003/X64 Download (32-Bit) => http://www.drivesnapshot.de/download/snapshot.exe Download (64-Bit) => http://www.drivesnapshot.de/download/snapshot64.exe Es gibt da auch leicht abgespeckte Versionen von Acronis TrueImage gratis wenn man Platten von Seagate und/oder Western Digital hat. Vllt sagen diese Programme dir mehr zu. Mein Favorit aber ist das kleine o.g. Drivesnapshot. Option 2: Seagate DiscWizard Download => Seagate DiscWizard - Download - Filepony Screenshots: http://filepony.de/screenshot/seagate_discwizard5.jpg http://filepony.de/screenshot/seagate_discwizard4.png http://filepony.de/screenshot/seagate_discwizard3.jpg Option 3: Acronis TrueImage WD Edition Download => Acronis True Image WD Edition - Download - Filepony Screenshots: http://filepony.de/screenshot/acroni...d_edition1.jpg http://filepony.de/screenshot/acroni...d_edition2.jpg
__________________ Logfiles bitte immer in CODE-Tags posten Geändert von cosinus (25.07.2017 um 21:14 Uhr) |
|
| Themen zu Malware verhindert MBAM/Windows Defender |
| adware, bonjour, computer, desktop, firefox, flash player, google, home, homepage, kaspersky, malware, mozilla, prozesse, realtek, registry, rundll, scan, security, sekunden, software, starten, system, usb, werbung, windows, windowsapps |
