Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Win 7 Sp1 64Bit. Ein Trojaner plagt mich.

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 08.08.2015, 12:06   #1
Christoph B.
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Hallo zusammen,

Seit einigen Tagen plagt wohl ein Trojaner meinen Rechner. Habe, nachdem sich dann automatisch AVG 2015 installiert hatte meinen Virenscanner (Avast 2015, konstenlose Version) mal eine vollständige Überprüfung machen lassen, leider ohne Ergebnis.

Habe dann diesen manuell deinstalliert und AdwCleaner laufen lassen.

Das Ergebnis war Folgendes:

Code:
ATTFilter
# AdwCleaner v4.208 - Bericht erstellt 08/08/2015 um 11:26:01
# Aktualisiert 09/07/2015 von Xplode
# Datenbank : 2015-08-01.1 [Server]
# Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64)
# Benutzername : ******* - *******
# Gestarted von : C:\Users\*******\Downloads\adwcleaner_4.208.exe
# Option : Suchlauf

***** [ Dienste ] *****


***** [ Dateien / Ordner ] *****


***** [ Geplante Tasks ] *****


***** [ Verknüpfungen ] *****


***** [ Registrierungsdatenbank ] *****

Daten Gefunden : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local>

***** [ Internetbrowser ] *****

-\\ Internet Explorer v11.0.9600.17909


-\\ Mozilla Firefox v30.0 (de)


-\\ Google Chrome v44.0.2403.130


-\\ Chromium v


*************************

AdwCleaner[R0].txt - [845 Bytes] - [08/08/2015 11:26:01]

########## EOF - C:\AdwCleaner\AdwCleaner[R0].txt - [903 Bytes] ##########
         
Habe daraufhin etwas gegooglet und bin auf Eure Seite gestoßen und bitte nun um Hilfe.

Code:
ATTFilter
defogger_disable by jpshortstuff (23.02.10.1)
Log created at 12:44 on 08/08/2015 (*****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015
durchgeführt von ***** (Administrator) auf ***** (08-08-2015 12:49:44)
Gestartet von C:\Users\*****\Desktop
Geladene Profile: ***** (Verfügbare Profile: *****)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Computec Media AG) C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe
(Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe
() C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe
(Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe
(Curse) C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(NCSOFT Corporation) C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe
(Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6412904 2011-11-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1157224 2011-10-20] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12616 2011-12-15] (Alienware)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-06-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.)
HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [528360 2014-03-08] (NCSOFT Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-31] ()
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify Web Helper] => C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-06] (Spotify Ltd)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Blasc3] => C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe [485888 2014-08-28] (Computec Media AG)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Akamai NetSession Interface] => C:\Users\*****\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Amazon Music] => C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] ()
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-06] (Spotify Ltd)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Dropbox Update] => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112"
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)
AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden
AppInit_DLLs:  C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden
AppInit_DLLs-x32:  C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-10-16] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-01-23] ()
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-08]
ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-22]
ShortcutTarget: GameRanger.lnk -> C:\Users\*****\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-22] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
CHR HKLM\SOFTWARE\Policies\Google: Richtlinienbeschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-22] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-22] (Avast Software s.r.o.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden
Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden
Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & '
Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & '
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{3A84EB8B-D610-4EB8-B42A-FAED5407B372}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-10-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-10-16] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-01] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-05] (The Happy Cloud)
FF Extension: Kein Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default\Extensions\1438986229_xpi [2015-08-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23]

Chrome: 
=======
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast SafePrice) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-06]
CHR Extension: (Avast Online Security) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-22]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-22] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-22] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 MSI_ODD_Service; c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe [76800 2011-10-05] (Micro-Star Int'l Co., Ltd.) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S2 0136381358887401mcinstcleanup; C:\Windows\TEMP\013638~1.EXE C:\PROGRA~2\COMMON~1\McAfee\INSTAL~1\cleanup.ini -cleanup -nolog -service

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-22] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-22] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-22] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-22] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.)
S2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-22] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-22] ()
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 NTIOLib_X64; C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys [14136 2010-01-18] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-22] (Avast Software)
U3 Winsock; kein ImagePath
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0; \??\c:\program files\alienware\supportassist\pcdsrvc_x64.pkms [X]
U3 pgtirpow; \??\C:\Users\CHRIST~1\AppData\Local\Temp\pgtirpow.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-08 12:47 - 2015-08-08 12:47 - 02169856 _____ (Farbar) C:\Users\*****\Downloads\FRST64 (1).exe
2015-08-08 12:46 - 2015-08-08 12:46 - 02169856 _____ (Farbar) C:\Users\*****\Downloads\FRST64.exe
2015-08-08 12:44 - 2015-08-08 12:44 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2015-08-08 11:52 - 2015-08-08 11:59 - 00001010 _____ C:\Users\*****\Desktop\AdwCleaner[R1].txt
2015-08-08 11:49 - 2015-08-08 11:49 - 00380416 _____ C:\Users\*****\Downloads\n4ldsfo8.exe
2015-08-08 11:47 - 2015-08-08 11:47 - 00380416 _____ C:\Users\*****\Downloads\fo8kzmij.exe
2015-08-08 11:42 - 2015-08-08 12:49 - 00028358 _____ C:\Users\*****\Desktop\FRST.txt
2015-08-08 11:42 - 2015-08-08 12:49 - 00000000 ____D C:\FRST
2015-08-08 11:42 - 2015-08-08 12:02 - 00094850 _____ C:\Users\*****\Desktop\Addition.txt
2015-08-08 11:41 - 2015-08-08 12:44 - 02169856 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2015-08-08 11:39 - 2015-08-08 12:44 - 00000492 _____ C:\Users\*****\Desktop\defogger_disable.log
2015-08-08 11:39 - 2015-08-08 11:39 - 00000000 _____ C:\Users\*****\defogger_reenable
2015-08-08 11:38 - 2015-08-08 11:38 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2015-08-08 11:37 - 2015-08-08 12:03 - 00002648 _____ C:\Users\*****\Desktop\Anti-Maleware Suchlauf.txt
2015-08-08 11:35 - 2015-08-08 11:35 - 00002658 _____ C:\Anti-Maleware Suchlauf.txt
2015-08-08 11:26 - 2015-08-08 11:58 - 00000958 _____ C:\Users\*****\Desktop\AdwCleaner[R0].txt
2015-08-08 11:24 - 2015-08-08 11:25 - 02248704 _____ C:\Users\*****\Desktop\adwcleaner_4.208.exe
2015-08-08 01:09 - 2015-08-08 11:18 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-08 01:09 - 2015-08-08 01:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-08 01:09 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-08 01:09 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-08 01:09 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-08 01:07 - 2015-08-08 01:08 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\*****\Downloads\mbam-setup-2.1.8.1057.exe
2015-08-08 00:26 - 2015-08-08 00:26 - 00000306 __RSH C:\ProgramData\ntuser.pol
2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Users\*****\Downloads\Neuer Ordner
2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Program Files\{E9BD9858-0527-4940-9AC3-BFFCAD328F7B}
2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Program Files (x86)\{A25BAB8C-2F3B-4864-9FF0-542E5994EDE5}
2015-08-08 00:22 - 2015-08-08 00:23 - 00517448 _____ ( ) C:\Users\*****\Downloads\WarCraft_WindowsModifier.zip.exe
2015-08-06 19:44 - 2015-08-08 11:56 - 00000000 ____D C:\AdwCleaner
2015-08-06 12:35 - 2015-08-06 12:35 - 01865516 _____ C:\Users\Apps\musixmatch-lyrics-cp.spa
2015-08-06 12:35 - 2015-08-06 12:35 - 00449780 _____ C:\Users\snapshot_blob.bin
2015-08-06 12:35 - 2015-08-06 12:35 - 00410937 _____ C:\Users\natives_blob.bin
2015-08-05 04:00 - 2015-08-05 04:00 - 00000000 _____ C:\Windows\SysWOW64\sho7EEC.tmp
2015-08-05 03:30 - 2015-08-05 03:38 - 00008989 _____ C:\Users\*****\Downloads\All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz
2015-08-05 03:30 - 2015-08-05 03:30 - 00010361 _____ C:\Users\*****\Downloads\.All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz,
2015-08-05 02:12 - 2015-08-06 01:21 - 00007152 _____ C:\Users\*****\Downloads\Forrest_Gump_-_4_trombones.mscz
2015-08-05 02:12 - 2015-08-05 03:51 - 00007074 _____ C:\Users\*****\Downloads\.Forrest_Gump_-_4_trombones.mscz,
2015-08-04 23:41 - 2015-08-04 23:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\dlg
2015-08-04 23:40 - 2015-08-04 23:48 - 00000000 ____D C:\Users\*****\Documents\Apowersoft Free Audio Recorder
2015-08-04 23:39 - 2015-08-04 23:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apowersoft
2015-08-04 23:39 - 2015-08-04 23:39 - 00000000 ____D C:\Program Files (x86)\Apowersoft
2015-08-04 23:38 - 2015-08-04 23:38 - 07976008 _____ (APOWERSOFT LIMITED ) C:\Windows\SysWOW64\free-audio-recorder-computerbild.exe
2015-08-04 23:37 - 2015-08-04 23:37 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG
2015-08-04 23:36 - 2015-08-04 23:36 - 00000000 ____D C:\Users\*****\AppData\Local\Avg
2015-08-04 23:34 - 2015-08-08 11:20 - 00000000 ____D C:\Users\*****\Tracing
2015-08-04 23:30 - 2015-08-04 23:38 - 00000000 ____D C:\ProgramData\AVG
2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Windows\de
2015-08-04 23:29 - 2015-08-08 11:17 - 00000386 _____ C:\Windows\Tasks\RNKCKUYTBN1.job
2015-08-04 23:29 - 2015-08-04 23:29 - 00002908 _____ C:\Windows\System32\Tasks\RNKCKUYTBN1
2015-08-04 23:29 - 2015-08-04 23:29 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00000020 _____ C:\Windows\pôL
2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\ProgramData\7b24ec7cc000461ebe26d116b88142c8
2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-04 23:28 - 2015-08-04 23:28 - 00516720 _____ ( ) C:\Users\*****\Downloads\free-audio-recorder-computerbild_CB-DL-Manager.exe
2015-08-04 23:27 - 2015-08-04 23:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-08-04 23:27 - 2015-08-04 23:27 - 00000000 ____D C:\Program Files\Windows Live
2015-08-04 23:27 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-08-04 23:26 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-08-04 23:26 - 2015-08-04 23:26 - 00081303 _____ C:\Users\*****\Documents\Unbenannt (2).wma
2015-08-04 23:25 - 2015-08-04 23:25 - 00054363 _____ C:\Users\*****\Documents\Unbenannt.wma
2015-08-04 23:21 - 2015-08-04 23:21 - 00002234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-08-04 23:19 - 2015-08-07 16:02 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live
2015-08-04 23:19 - 2015-08-04 23:19 - 02746203 _____ C:\Users\*****\Downloads\Vorbemerkung.mp4
2015-08-04 23:18 - 2015-08-04 23:18 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe
2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syntrillium
2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syntrillium
2015-08-04 22:59 - 2015-08-05 00:44 - 00000000 ____D C:\cool
2015-08-04 22:59 - 2015-08-04 23:28 - 00003967 _____ C:\Windows\cool.ini
2015-08-04 22:59 - 1997-05-01 15:01 - 00127023 _____ C:\Windows\c96unins.exe
2015-08-04 22:59 - 1997-04-29 08:06 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00140288 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3214_4.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00090624 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\pnc32301.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00085504 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\encdnet.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00072704 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3228_8.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00013824 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra32dnet.dll
2015-08-04 22:58 - 2015-08-04 22:58 - 02178955 _____ C:\Users\*****\Downloads\31939_c96setup.exe
2015-08-02 08:41 - 2015-08-07 16:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\OBS
2015-08-02 08:41 - 2015-08-02 20:16 - 00000000 ____D C:\Program Files\OBS
2015-08-02 08:41 - 2015-08-02 08:41 - 07413584 _____ C:\Users\*****\Downloads\OBS_0_653b_Installer.exe
2015-08-02 08:41 - 2015-08-02 08:41 - 00000937 _____ C:\Users\*****\Desktop\Open Broadcaster Software.lnk
2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Program Files (x86)\OBS
2015-08-01 06:22 - 2015-08-07 04:20 - 00000000 ____D C:\Users\*****\Documents\Dateien bis 01.August 2015
2015-07-31 16:52 - 2015-07-31 16:52 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-27 03:45 - 2015-07-27 03:45 - 00000000 _____ C:\Windows\SysWOW64\shoDE3D.tmp
2015-07-26 13:49 - 2015-07-26 13:49 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-22 17:51 - 2015-07-22 17:51 - 00001715 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-07-22 17:51 - 2015-07-22 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-07-22 17:45 - 2015-07-22 17:45 - 00001847 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 17:43 - 2015-07-22 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-07-22 04:59 - 2015-07-22 05:01 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta
2015-07-22 04:33 - 2015-07-22 04:59 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta
2015-07-22 02:54 - 2015-07-22 02:54 - 00000000 ____D C:\Users\*****\AppData\Local\CEF
2015-07-21 19:51 - 2015-07-21 19:51 - 00002043 _____ C:\Users\Public\Desktop\Star Wars - Galactic Battlegrounds.lnk
2015-07-21 19:51 - 2015-07-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-07-21 19:51 - 2000-06-23 22:05 - 00136704 _____ (Ligos Corporation) C:\Windows\SysWOW64\iacenc.dll
2015-07-21 19:51 - 2000-06-22 21:09 - 00056320 _____ C:\Windows\SysWOW64\iyvu9_32.dll
2015-07-21 19:50 - 2015-07-21 19:50 - 00000000 ____D C:\GOG Games
2015-07-21 19:44 - 2015-07-21 19:48 - 569047376 _____ (GOG.com ) C:\Users\*****\Downloads\setup_sw_galactic_battlegrounds_saga_german_2.0.0.2.exe
2015-07-21 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-17 18:17 - 2015-07-17 18:22 - 26401485 _____ (diclovit ) C:\Users\*****\Downloads\dmp_9.9.0_setup.exe
2015-07-16 19:35 - 2015-07-16 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2015-07-15 15:39 - 2015-07-15 15:39 - 18524336 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 14:52 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 14:52 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 14:52 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 14:52 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 14:52 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 14:52 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 14:52 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 14:52 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 14:52 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 14:52 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 14:51 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 14:51 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 14:51 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 14:51 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 14:51 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 14:51 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 14:51 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 14:51 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 14:51 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 14:51 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 14:51 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 14:51 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 14:49 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 14:49 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 14:49 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 14:49 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 14:49 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 14:49 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 14:49 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 14:49 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 14:49 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 14:49 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 14:49 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 14:49 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 14:49 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 14:49 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 14:49 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 14:49 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 14:49 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 14:49 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 14:49 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 14:49 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 14:49 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 14:49 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 14:49 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 14:49 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 14:49 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 14:49 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 14:49 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 14:49 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 14:49 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 14:49 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 14:49 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 14:49 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 14:49 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 14:49 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 14:49 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 14:49 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 14:49 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 14:49 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 14:49 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 14:49 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 14:49 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 14:49 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 14:49 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 14:49 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 14:46 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 14:46 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 14:46 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 14:46 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 14:46 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 14:46 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 14:46 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 14:46 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 14:46 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 14:46 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 14:46 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 14:46 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 14:46 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 14:46 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 14:46 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 14:46 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 14:46 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 14:46 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 14:46 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 14:46 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 14:45 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 14:45 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 14:45 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 14:45 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 14:45 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 14:45 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 14:45 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 14:45 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 14:45 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-10 19:28 - 2015-07-28 11:36 - 00000000 ___HD C:\$Windows.~BT
2015-07-10 06:09 - 2015-07-10 06:09 - 00000000 _____ C:\Windows\SysWOW64\shoBEEC.tmp

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-08 12:46 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-08 12:46 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-08 12:39 - 2013-03-02 18:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-08 12:36 - 2013-01-23 00:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Spotify
2015-08-08 12:22 - 2015-06-18 00:11 - 00001264 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job
2015-08-08 12:22 - 2013-01-31 03:57 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files
2015-08-08 12:21 - 2013-01-23 00:16 - 00000000 ____D C:\Users\*****\AppData\Local\Deployment
2015-08-08 12:05 - 2013-01-23 11:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-08 11:46 - 2012-01-20 14:08 - 01167793 _____ C:\Windows\WindowsUpdate.log
2015-08-08 11:39 - 2013-01-22 22:43 - 00000000 ____D C:\Users\*****
2015-08-08 11:22 - 2013-01-30 11:43 - 00000000 ___RD C:\Users\*****\Dropbox
2015-08-08 11:21 - 2013-01-30 11:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox
2015-08-08 11:21 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Local\Spotify
2015-08-08 11:19 - 2013-01-22 23:13 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-08 11:17 - 2013-01-22 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-08 11:17 - 2012-01-20 14:06 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-08 11:17 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-08 11:17 - 2009-07-14 06:51 - 00177306 _____ C:\Windows\setupact.log
2015-08-08 11:16 - 2010-11-21 05:47 - 00443606 _____ C:\Windows\PFRO.log
2015-08-08 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-08 10:30 - 2014-07-23 14:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-08-08 00:29 - 2013-10-06 00:59 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net
2015-08-08 00:26 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-08 00:14 - 2014-11-28 17:31 - 00001043 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk
2015-08-08 00:10 - 2014-01-19 02:16 - 00000958 _____ C:\Users\Public\Desktop\Warcraft III.lnk
2015-08-06 16:51 - 2015-03-31 14:10 - 00003504 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-08-06 12:35 - 2015-06-01 08:16 - 00602180 _____ C:\Users\Apps\local-files-desktop.spa
2015-08-06 12:35 - 2015-05-23 23:37 - 00158566 _____ C:\Users\Apps\hub.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 45066808 _____ C:\Users\libcef.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 10207504 _____ C:\Users\icudtl.dat
2015-08-06 12:35 - 2015-04-27 22:25 - 07675448 _____ (Spotify Ltd) C:\Users\Spotify.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 04487782 _____ C:\Users\devtools_resources.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 02332541 _____ C:\Users\Apps\musixmatch-lyrics.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 02184260 _____ C:\Users\cef.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 02157552 _____ C:\Users\Apps\glue-resources.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 02018360 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 01649208 _____ C:\Users\libGLESv2.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00967736 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00900089 _____ C:\Users\Apps\zlink.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00838712 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00721136 _____ C:\Users\Apps\browse.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00622967 _____ C:\Users\cef_200_percent.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00606828 _____ C:\Users\Apps\playlist-desktop.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00542847 _____ C:\Users\Apps\notification-center.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00530001 _____ C:\Users\Apps\settings.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00528578 _____ C:\Users\Apps\collection.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00512594 _____ C:\Users\Apps\genre.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00508698 _____ C:\Users\Apps\collection-artist.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00504671 _____ C:\Users\Apps\discover.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00471783 _____ C:\Users\Apps\messages.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00468951 _____ C:\Users\cef_100_percent.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00466223 _____ C:\Users\Apps\collection-album.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00451113 _____ C:\Users\Apps\social-feed.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00444041 _____ C:\Users\Apps\article.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00416475 _____ C:\Users\Apps\album.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00395528 _____ C:\Users\Apps\collection-songs.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00392161 _____ C:\Users\Apps\zlogin.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00383262 _____ C:\Users\Apps\social-chart.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00368227 _____ C:\Users\Apps\charts.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00366817 _____ C:\Users\Apps\buddy-list.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00363479 _____ C:\Users\Apps\artist.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00304572 _____ C:\Users\Apps\radio.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00278727 _____ C:\Users\Apps\folder.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00274437 _____ C:\Users\Apps\share.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00257997 _____ C:\Users\Apps\zlink-queue.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00244918 _____ C:\Users\Apps\profile.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00236396 _____ C:\Users\Apps\chart.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00216723 _____ C:\Users\Apps\search.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00216045 _____ C:\Users\Apps\findfriends.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00196416 _____ C:\Users\Apps\suggest.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00158229 _____ C:\Users\Apps\follow.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00098360 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00080952 _____ C:\Users\libEGL.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00080587 _____ C:\Users\Apps\about.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00073272 _____ C:\Users\wow_helper.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00072701 _____ C:\Users\Apps\error.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00053462 _____ C:\Users\Apps\ad.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00050934 _____ C:\Users\Apps\licenses.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00014086 _____ C:\Users\locales\en-US.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00008009 _____ C:\Users\locales\el.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00007791 _____ C:\Users\locales\ru.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00007076 _____ C:\Users\locales\ja.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006969 _____ C:\Users\locales\hu.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006950 _____ C:\Users\locales\fr-CA.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006899 _____ C:\Users\locales\fr.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006876 _____ C:\Users\locales\fi.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006875 _____ C:\Users\locales\pl.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006808 _____ C:\Users\locales\es-419.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006793 _____ C:\Users\locales\nl.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006756 _____ C:\Users\locales\de.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006740 _____ C:\Users\locales\zsm.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006739 _____ C:\Users\locales\it.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006731 _____ C:\Users\locales\es.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006726 _____ C:\Users\locales\tr.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006719 _____ C:\Users\locales\zh-Hant.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006717 _____ C:\Users\locales\pt-BR.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006672 _____ C:\Users\locales\sv.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006540 _____ C:\Users\locales\arb.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006469 _____ C:\Users\locales\en.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00000020 _____ C:\Users\inst_ver.dat
2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 ____D C:\Users\locales
2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 _____ C:\Users\Christoph.redir
2015-08-05 15:29 - 2015-06-18 00:11 - 00001212 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job
2015-08-05 03:08 - 2013-01-23 11:02 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-04 23:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-08-04 23:22 - 2013-01-23 11:16 - 00389020 _____ C:\Windows\DirectX.log
2015-08-04 19:02 - 2010-11-21 08:50 - 00710954 _____ C:\Windows\system32\perfh007.dat
2015-08-04 19:02 - 2010-11-21 08:50 - 00155026 _____ C:\Windows\system32\perfc007.dat
2015-08-04 19:02 - 2009-07-14 07:13 - 01653366 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-04 16:17 - 2013-10-06 00:59 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-02 22:10 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TS3Client
2015-08-02 03:38 - 2014-02-13 13:02 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-29 19:26 - 2014-01-15 18:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-07-29 15:16 - 2013-01-23 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2015-07-29 00:47 - 2014-04-30 14:58 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-28 11:41 - 2011-02-11 19:13 - 00000000 ____D C:\Windows\panther
2015-07-26 13:55 - 2013-01-24 11:45 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-07-26 13:55 - 2012-01-20 15:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-07-25 13:04 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-23 00:25 - 2014-06-27 13:39 - 00000000 ____D C:\Program Files (x86)\World of Warcraft Beta
2015-07-22 17:51 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iTunes
2015-07-22 17:50 - 2015-04-08 17:29 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iPod
2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-07-22 17:50 - 2013-05-19 20:53 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-07-22 16:36 - 2014-11-14 03:45 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList
2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList
2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList
2015-07-22 05:05 - 2014-10-29 06:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-07-22 05:00 - 2013-01-22 23:56 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-07-22 03:27 - 2013-11-12 15:59 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-22 03:09 - 2009-07-14 06:45 - 00493600 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-21 19:51 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-19 21:50 - 2013-01-23 00:37 - 00000000 ____D C:\Spiele
2015-07-19 21:49 - 2013-01-23 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War
2015-07-18 16:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-18 15:17 - 2015-06-18 00:11 - 00004254 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA
2015-07-18 15:17 - 2015-06-18 00:11 - 00003858 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core
2015-07-18 00:06 - 2013-05-30 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-07-17 18:25 - 2014-06-12 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack
2015-07-17 02:02 - 2014-11-03 05:58 - 00000000 ____D C:\NVIDIA
2015-07-16 20:03 - 2014-06-28 17:28 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2015-07-16 19:35 - 2014-09-29 12:12 - 00001220 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk
2015-07-16 19:35 - 2014-09-29 12:08 - 00000000 __SHD C:\AI_RecycleBin
2015-07-16 19:34 - 2014-06-28 17:28 - 00000000 __SHD C:\Windows\SysWOW64\AI_RecycleBin
2015-07-16 00:00 - 2013-01-23 11:01 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 00:00 - 2013-01-22 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 23:08 - 2014-12-10 04:10 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-15 17:30 - 2013-08-13 22:49 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 15:39 - 2013-03-02 18:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-15 15:39 - 2013-03-02 18:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-15 15:39 - 2012-01-20 15:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-15 05:58 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-10-29 12:08 - 2012-10-29 12:08 - 0134954 _____ () C:\Program Files\changelog.txt
2012-10-29 12:08 - 2012-10-29 12:08 - 0024252 _____ () C:\Program Files\license.txt
2013-04-29 11:41 - 2013-04-29 11:56 - 0000040 _____ () C:\Users\*****\AppData\Roaming\gnuplot_history
2015-01-04 03:45 - 2015-01-04 03:45 - 0000103 _____ () C:\Users\*****\AppData\Local\fusioncache.dat
2013-07-27 16:10 - 2013-07-27 16:10 - 0000040 _____ () C:\ProgramData\ra3.ini

Einige Dateien in TEMP:
====================
C:\Users\*****\AppData\Local\Temp\drm_dialogs.dll
C:\Users\*****\AppData\Local\Temp\drm_dyndata_7330017.dll
C:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpkctbxr.dll
C:\Users\*****\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\*****\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\*****\AppData\Local\Temp\FileSystemView.dll
C:\Users\*****\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\*****\AppData\Local\Temp\Gw2.exe
C:\Users\*****\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\*****\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\*****\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\*****\AppData\Local\Temp\nvStInst.exe
C:\Users\*****\AppData\Local\Temp\OfficeSetup.exe
C:\Users\*****\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\*****\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\*****\AppData\Local\Temp\SkypeSetup.exe
C:\Users\*****\AppData\Local\Temp\SpotifyUpgrader.exe
C:\Users\*****\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\*****\AppData\Local\Temp\tmp7C6C.tmp.exe
C:\Users\*****\AppData\Local\Temp\_is4596.exe
C:\Users\*****\AppData\Local\Temp\_is494E.exe
C:\Users\*****\AppData\Local\Temp\_is5EAC.exe
C:\Users\*****\AppData\Local\Temp\_is620C.exe
C:\Users\*****\AppData\Local\Temp\_is6DEE.exe
C:\Users\*****\AppData\Local\Temp\_is8D69.exe
C:\Users\*****\AppData\Local\Temp\_is9DBE.exe
C:\Users\*****\AppData\Local\Temp\_isB3F2.exe
C:\Users\*****\AppData\Local\Temp\_isEDF2.exe
C:\Users\*****\AppData\Local\Temp\_isFA20.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-02 08:13

==================== Ende von log ============================
         
Durch die Addition.txt wird mein Text hier zu lang. Ich füge diese als Zip dem Beitrag hinzu. Wenn gewünscht, kann ich sie hier aber auch noch zusätzlich in einem weiteren Beitrag in diesem Thread niederschreiben.

Das Programm GMER funktionierte beim Ausführen nicht.

Alt 08.08.2015, 13:04   #2
M-K-D-B
/// TB-Ausbilder
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.






Mein Name ist Matthias und ich werde dir bei der Bereinigung deines Computers helfen.


Bitte beachte folgende Hinweise:
  • Falls wir Hinweise auf illegal erworbene Software finden, werden wir den Support unterbrechen bis jegliche Art von illegaler Software vom Rechner entfernt wurde.
  • Lies dir die Anleitungen sorgfältig durch. Solltest du Probleme haben, stoppe mit deiner Bearbeitung und beschreibe mir dein Problem so gut es geht.
  • Solltest du mir nicht innerhalb von 3 Tagen antworten, gehe ich davon aus, dass du keine Hilfe mehr benötigst. Dann lösche ich dein Thema aus meinem Abo. Solltest du einmal länger abwesend sein, so gib mir bitte Bescheid!
  • Während der Bereinigung bitte nichts installieren oder deinstallieren, außer ich bitte dich darum!
  • Bitte beachten: Download bei filepony.de: So ladet Ihr unsere Tools richtig!
  • Alle zu verwendenen Programme sind auf dem Desktop abzuspeichern und von dort zu starten!


Bitte arbeite alle Schritte in der vorgegebenen Reihefolge nacheinander ab und poste alle Logdateien in CODE-Tags:
So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert deinem Helfer massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu groß für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:
  • Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
  • Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
  • Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
  • Klicke aauf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Danke für deine Mitarbeit!




Schritt 1
Deaktiviere bitte dein Antivirenprogramm, da es die Entfernung von DownloadProtect blockieren kann.
Bitte downloade DownloadProtectCleaner und speichere die Datei auf dem Desktop.
  • Speichere alle Arbeiten und schließe alle noch offenen Programme und Browser.
  • Starte die DownloadProtectCleaner.exe.
  • Drücke eine beliebige Taste, um den Entfernungsprozess zu starten.
  • Wenn das Tool fertig ist, wird es automatisch einen Neustart durchführen.
  • Nach dem Neustart sollte DownloadProtect entfernt sein. Solltest du trotzdem noch Reste entdecken, so teile mir das bitte mit.






Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.







Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.







Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Scan.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei von MBAM,
  • die Logdatei von JRT,
  • die beiden neuen Logdateien von FRST.
__________________

__________________

Alt 08.08.2015, 16:53   #3
Christoph B.
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Hallo Matthias,

Zuerst einmal möchte ich Dir für Deine schnelle Hilfe danken.

Bericht von Malware Anti-Malwarbytes:

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 08.08.2015
Suchlaufzeit: 16:06
Protokolldatei: Zweiter Suchlauf MwB.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.08.08.01
Rootkit-Datenbank: v2015.08.06.01
Lizenz: Testversion
Malware-Schutz: Aktiviert
Schutz vor bösartigen Websites: Aktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: Christoph Buldt

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 434855
Abgelaufene Zeit: 26 Min., 51 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
Bericht Junkware Removal Tool:
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.5.5 (08.05.2015:1)
OS: Windows 7 Home Premium x64
Ran by ***** on 08.08.2015 at 17:36:56,47
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services

Successfully deleted: [Service] 0136381358887401mcinstcleanup [Reboot required]



~~~ Tasks

Successfully deleted: [Task] C:\Windows\system32\tasks\PCDEventLauncherTask
Successfully deleted: [Task] C:\Windows\system32\tasks\PCDoctorBackgroundMonitorTask



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\Windows\SysWOW64\sho2940.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\sho3E75.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\sho5ACC.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\sho6832.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\sho7EEC.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\sho8F42.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoAA0A.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoAEA3.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoBEEC.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoC1A9.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoD01A.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoDE3D.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoE432.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoEEB5.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoF75C.tmp
Successfully deleted: [File] C:\Windows\SysWOW64\shoFAA3.tmp



~~~ Folders

Successfully deleted: [Folder] C:\ai_recyclebin
Successfully deleted: [Folder] C:\ProgramData\google
Successfully deleted: [Folder] C:\Windows\SysWOW64\ai_recyclebin
Successfully deleted: [Folder] C:\ProgramData\7b24ec7cc000461ebe26d116b88142c8



~~~ Chrome


[C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\*****\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 08.08.2015 at 17:41:20,66
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         
FRST.txt:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:08-08-2015
durchgeführt von ***** (Administrator) auf ***** (08-08-2015 17:43:10)
Gestartet von C:\Users\*****\Desktop
Geladene Profile: ***** (Verfügbare Profile: *****)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6412904 2011-11-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1157224 2011-10-20] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12616 2011-12-15] (Alienware)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-06-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.)
HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [528360 2014-03-08] (NCSOFT Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-31] ()
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify Web Helper] => C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-06] (Spotify Ltd)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Blasc3] => C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe [485888 2014-08-28] (Computec Media AG)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Akamai NetSession Interface] => C:\Users\*****\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Amazon Music] => C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] ()
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-06] (Spotify Ltd)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Dropbox Update] => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112"
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)
AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden
AppInit_DLLs:  C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden
AppInit_DLLs-x32:  C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-10-16] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-01-23] ()
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-08]
ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-22]
ShortcutTarget: GameRanger.lnk -> C:\Users\*****\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-22] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-22] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-22] (Avast Software s.r.o.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden
Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden
Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & '
Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & '
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{3A84EB8B-D610-4EB8-B42A-FAED5407B372}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-10-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-10-16] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-01] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-05] (The Happy Cloud)
FF Extension: Kein Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default\Extensions\1438986229_xpi [2015-08-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23]

Chrome: 
=======
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast SafePrice) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-06]
CHR Extension: (Avast Online Security) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-22]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-22] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-22] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
S2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.)
S2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.)
S2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 MSI_ODD_Service; c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe [76800 2011-10-05] (Micro-Star Int'l Co., Ltd.) [Datei ist nicht signiert]
S2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
S2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
S2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-22] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-22] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-22] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-22] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-22] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-22] ()
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 NTIOLib_X64; C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys [14136 2010-01-18] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-22] (Avast Software)
U3 Winsock; kein ImagePath
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 PCDSRVC{90AB3B40-A9A6E5C8-06020200}_0; \??\c:\program files\alienware\supportassist\pcdsrvc_x64.pkms [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-08 17:41 - 2015-08-08 17:41 - 00002602 _____ C:\Users\*****\Desktop\JRT.txt
2015-08-08 17:36 - 2015-08-08 17:36 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Desktop\JRT.exe
2015-08-08 17:31 - 2015-08-08 17:31 - 00001813 _____ C:\Users\*****\Desktop\MWAB.txt
2015-08-08 16:34 - 2015-08-08 16:34 - 00001225 _____ C:\Users\*****\Desktop\Zweiter Suchlauf MwB.txt
2015-08-08 15:56 - 2015-08-08 16:35 - 00226304 _____ C:\Users\*****\Desktop\DownloadProtectCleaner-reboot.exe
2015-08-08 15:54 - 2015-08-08 15:54 - 00326656 _____ C:\Users\*****\Desktop\DownloadProtectCleaner.exe
2015-08-08 13:04 - 2015-08-08 13:04 - 00023526 _____ C:\Users\*****\Desktop\Addition.zip
2015-08-08 12:44 - 2015-08-08 12:44 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2015-08-08 11:52 - 2015-08-08 11:59 - 00001010 _____ C:\Users\*****\Desktop\AdwCleaner[R1].txt
2015-08-08 11:49 - 2015-08-08 11:49 - 00380416 _____ C:\Users\*****\Desktop\n4ldsfo8.exe
2015-08-08 11:47 - 2015-08-08 11:47 - 00380416 _____ C:\Users\*****\Desktop\fo8kzmij.exe
2015-08-08 11:42 - 2015-08-08 17:43 - 00024423 _____ C:\Users\*****\Desktop\FRST.txt
2015-08-08 11:42 - 2015-08-08 17:43 - 00000000 ____D C:\FRST
2015-08-08 11:42 - 2015-08-08 12:51 - 00094858 _____ C:\Users\*****\Desktop\Addition.txt
2015-08-08 11:41 - 2015-08-08 12:44 - 02169856 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2015-08-08 11:39 - 2015-08-08 12:44 - 00000492 _____ C:\Users\*****\Desktop\defogger_disable.log
2015-08-08 11:39 - 2015-08-08 11:39 - 00000000 _____ C:\Users\*****\defogger_reenable
2015-08-08 11:38 - 2015-08-08 11:38 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2015-08-08 11:37 - 2015-08-08 12:03 - 00002648 _____ C:\Users\*****\Desktop\Anti-Maleware Suchlauf.txt
2015-08-08 11:35 - 2015-08-08 11:35 - 00002658 _____ C:\Anti-Maleware Suchlauf.txt
2015-08-08 11:26 - 2015-08-08 11:58 - 00000958 _____ C:\Users\*****\Desktop\AdwCleaner[R0].txt
2015-08-08 11:24 - 2015-08-08 11:25 - 02248704 _____ C:\Users\*****\Desktop\adwcleaner_4.208.exe
2015-08-08 01:09 - 2015-08-08 16:38 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-08 01:09 - 2015-08-08 01:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-08 01:09 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-08 01:09 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-08 01:09 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Users\*****\Downloads\Neuer Ordner
2015-08-06 19:44 - 2015-08-08 11:56 - 00000000 ____D C:\AdwCleaner
2015-08-06 12:35 - 2015-08-06 12:35 - 01865516 _____ C:\Users\Apps\musixmatch-lyrics-cp.spa
2015-08-06 12:35 - 2015-08-06 12:35 - 00449780 _____ C:\Users\snapshot_blob.bin
2015-08-06 12:35 - 2015-08-06 12:35 - 00410937 _____ C:\Users\natives_blob.bin
2015-08-05 03:30 - 2015-08-05 03:38 - 00008989 _____ C:\Users\*****\Downloads\All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz
2015-08-05 03:30 - 2015-08-05 03:30 - 00010361 _____ C:\Users\*****\Downloads\.All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz,
2015-08-05 02:12 - 2015-08-06 01:21 - 00007152 _____ C:\Users\*****\Downloads\Forrest_Gump_-_4_trombones.mscz
2015-08-05 02:12 - 2015-08-05 03:51 - 00007074 _____ C:\Users\*****\Downloads\.Forrest_Gump_-_4_trombones.mscz,
2015-08-04 23:41 - 2015-08-04 23:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\dlg
2015-08-04 23:40 - 2015-08-04 23:48 - 00000000 ____D C:\Users\*****\Documents\Apowersoft Free Audio Recorder
2015-08-04 23:39 - 2015-08-04 23:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apowersoft
2015-08-04 23:39 - 2015-08-04 23:39 - 00000000 ____D C:\Program Files (x86)\Apowersoft
2015-08-04 23:38 - 2015-08-04 23:38 - 07976008 _____ (APOWERSOFT LIMITED ) C:\Windows\SysWOW64\free-audio-recorder-computerbild.exe
2015-08-04 23:37 - 2015-08-04 23:37 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG
2015-08-04 23:36 - 2015-08-04 23:36 - 00000000 ____D C:\Users\*****\AppData\Local\Avg
2015-08-04 23:34 - 2015-08-08 16:40 - 00000000 ____D C:\Users\*****\Tracing
2015-08-04 23:30 - 2015-08-04 23:38 - 00000000 ____D C:\ProgramData\AVG
2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Windows\de
2015-08-04 23:29 - 2015-08-08 16:38 - 00000386 _____ C:\Windows\Tasks\RNKCKUYTBN1.job
2015-08-04 23:29 - 2015-08-04 23:29 - 00002908 _____ C:\Windows\System32\Tasks\RNKCKUYTBN1
2015-08-04 23:29 - 2015-08-04 23:29 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00000020 _____ C:\Windows\pôL
2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-04 23:28 - 2015-08-04 23:28 - 00516720 _____ ( ) C:\Users\*****\Downloads\free-audio-recorder-computerbild_CB-DL-Manager.exe
2015-08-04 23:27 - 2015-08-04 23:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-08-04 23:27 - 2015-08-04 23:27 - 00000000 ____D C:\Program Files\Windows Live
2015-08-04 23:27 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-08-04 23:26 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-08-04 23:26 - 2015-08-04 23:26 - 00081303 _____ C:\Users\*****\Documents\Unbenannt (2).wma
2015-08-04 23:25 - 2015-08-04 23:25 - 00054363 _____ C:\Users\*****\Documents\Unbenannt.wma
2015-08-04 23:21 - 2015-08-04 23:21 - 00002234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-08-04 23:19 - 2015-08-07 16:02 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live
2015-08-04 23:19 - 2015-08-04 23:19 - 02746203 _____ C:\Users\*****\Downloads\Vorbemerkung.mp4
2015-08-04 23:18 - 2015-08-04 23:18 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe
2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syntrillium
2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syntrillium
2015-08-04 22:59 - 2015-08-05 00:44 - 00000000 ____D C:\cool
2015-08-04 22:59 - 2015-08-04 23:28 - 00003967 _____ C:\Windows\cool.ini
2015-08-04 22:59 - 1997-05-01 15:01 - 00127023 _____ C:\Windows\c96unins.exe
2015-08-04 22:59 - 1997-04-29 08:06 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00140288 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3214_4.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00090624 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\pnc32301.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00085504 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\encdnet.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00072704 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3228_8.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00013824 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra32dnet.dll
2015-08-04 22:58 - 2015-08-04 22:58 - 02178955 _____ C:\Users\*****\Downloads\31939_c96setup.exe
2015-08-02 08:41 - 2015-08-07 16:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\OBS
2015-08-02 08:41 - 2015-08-02 20:16 - 00000000 ____D C:\Program Files\OBS
2015-08-02 08:41 - 2015-08-02 08:41 - 07413584 _____ C:\Users\*****\Downloads\OBS_0_653b_Installer.exe
2015-08-02 08:41 - 2015-08-02 08:41 - 00000937 _____ C:\Users\*****\Desktop\Open Broadcaster Software.lnk
2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Program Files (x86)\OBS
2015-08-01 06:22 - 2015-08-07 04:20 - 00000000 ____D C:\Users\*****\Documents\Dateien bis 01.August 2015
2015-07-31 16:52 - 2015-07-31 16:52 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-26 13:49 - 2015-07-26 13:49 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-22 17:51 - 2015-07-22 17:51 - 00001715 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-07-22 17:51 - 2015-07-22 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-07-22 17:45 - 2015-07-22 17:45 - 00001847 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 17:43 - 2015-07-22 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-07-22 04:59 - 2015-07-22 05:01 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta
2015-07-22 04:33 - 2015-07-22 04:59 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta
2015-07-22 02:54 - 2015-07-22 02:54 - 00000000 ____D C:\Users\*****\AppData\Local\CEF
2015-07-21 19:51 - 2015-07-21 19:51 - 00002043 _____ C:\Users\Public\Desktop\Star Wars - Galactic Battlegrounds.lnk
2015-07-21 19:51 - 2015-07-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-07-21 19:51 - 2000-06-23 22:05 - 00136704 _____ (Ligos Corporation) C:\Windows\SysWOW64\iacenc.dll
2015-07-21 19:51 - 2000-06-22 21:09 - 00056320 _____ C:\Windows\SysWOW64\iyvu9_32.dll
2015-07-21 19:50 - 2015-07-21 19:50 - 00000000 ____D C:\GOG Games
2015-07-21 19:44 - 2015-07-21 19:48 - 569047376 _____ (GOG.com ) C:\Users\*****\Downloads\setup_sw_galactic_battlegrounds_saga_german_2.0.0.2.exe
2015-07-21 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-17 18:17 - 2015-07-17 18:22 - 26401485 _____ (diclovit ) C:\Users\*****\Downloads\dmp_9.9.0_setup.exe
2015-07-16 19:35 - 2015-07-16 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2015-07-15 15:39 - 2015-07-15 15:39 - 18524336 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 14:52 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 14:52 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 14:52 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 14:52 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 14:52 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 14:52 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 14:52 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 14:52 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 14:52 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 14:52 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 14:51 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 14:51 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 14:51 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 14:51 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 14:51 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 14:51 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 14:51 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 14:51 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 14:51 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 14:51 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 14:51 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 14:51 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 14:49 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 14:49 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 14:49 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 14:49 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 14:49 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 14:49 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 14:49 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 14:49 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 14:49 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 14:49 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 14:49 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 14:49 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 14:49 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 14:49 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 14:49 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 14:49 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 14:49 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 14:49 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 14:49 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 14:49 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 14:49 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 14:49 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 14:49 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 14:49 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 14:49 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 14:49 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 14:49 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 14:49 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 14:49 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 14:49 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 14:49 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 14:49 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 14:49 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 14:49 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 14:49 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 14:49 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 14:49 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 14:49 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 14:49 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 14:49 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 14:49 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 14:49 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 14:49 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 14:49 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 14:46 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 14:46 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 14:46 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 14:46 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 14:46 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 14:46 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 14:46 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 14:46 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 14:46 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 14:46 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 14:46 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 14:46 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 14:46 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 14:46 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 14:46 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 14:46 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 14:46 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 14:46 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 14:46 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 14:46 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 14:45 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 14:45 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 14:45 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 14:45 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 14:45 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 14:45 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 14:45 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 14:45 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 14:45 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-10 19:28 - 2015-07-28 11:36 - 00000000 ___HD C:\$Windows.~BT

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-08 17:39 - 2013-03-02 18:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-08 17:22 - 2015-06-18 00:11 - 00001264 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job
2015-08-08 17:10 - 2013-01-31 03:57 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files
2015-08-08 17:05 - 2013-01-23 11:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-08 16:48 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-08 16:48 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-08 16:43 - 2012-01-20 14:08 - 01226554 _____ C:\Windows\WindowsUpdate.log
2015-08-08 16:42 - 2013-01-30 11:43 - 00000000 ___RD C:\Users\*****\Dropbox
2015-08-08 16:42 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Local\Spotify
2015-08-08 16:41 - 2013-01-30 11:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox
2015-08-08 16:41 - 2013-01-23 00:16 - 00000000 ____D C:\Users\*****\AppData\Local\Deployment
2015-08-08 16:41 - 2013-01-23 00:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Spotify
2015-08-08 16:39 - 2013-01-22 23:13 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-08 16:38 - 2013-01-22 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-08 16:38 - 2009-07-14 06:51 - 00177810 _____ C:\Windows\setupact.log
2015-08-08 16:37 - 2012-01-20 14:06 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-08 16:37 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-08 16:01 - 2014-07-23 14:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-08-08 15:45 - 2010-11-21 05:47 - 00444226 _____ C:\Windows\PFRO.log
2015-08-08 11:39 - 2013-01-22 22:43 - 00000000 ____D C:\Users\*****
2015-08-08 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-08 00:29 - 2013-10-06 00:59 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net
2015-08-08 00:26 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-08 00:14 - 2014-11-28 17:31 - 00001043 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk
2015-08-08 00:10 - 2014-01-19 02:16 - 00000958 _____ C:\Users\Public\Desktop\Warcraft III.lnk
2015-08-06 12:35 - 2015-06-01 08:16 - 00602180 _____ C:\Users\Apps\local-files-desktop.spa
2015-08-06 12:35 - 2015-05-23 23:37 - 00158566 _____ C:\Users\Apps\hub.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 45066808 _____ C:\Users\libcef.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 10207504 _____ C:\Users\icudtl.dat
2015-08-06 12:35 - 2015-04-27 22:25 - 07675448 _____ (Spotify Ltd) C:\Users\Spotify.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 04487782 _____ C:\Users\devtools_resources.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 02332541 _____ C:\Users\Apps\musixmatch-lyrics.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 02184260 _____ C:\Users\cef.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 02157552 _____ C:\Users\Apps\glue-resources.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 02018360 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 01649208 _____ C:\Users\libGLESv2.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00967736 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00900089 _____ C:\Users\Apps\zlink.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00838712 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00721136 _____ C:\Users\Apps\browse.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00622967 _____ C:\Users\cef_200_percent.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00606828 _____ C:\Users\Apps\playlist-desktop.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00542847 _____ C:\Users\Apps\notification-center.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00530001 _____ C:\Users\Apps\settings.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00528578 _____ C:\Users\Apps\collection.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00512594 _____ C:\Users\Apps\genre.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00508698 _____ C:\Users\Apps\collection-artist.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00504671 _____ C:\Users\Apps\discover.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00471783 _____ C:\Users\Apps\messages.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00468951 _____ C:\Users\cef_100_percent.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00466223 _____ C:\Users\Apps\collection-album.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00451113 _____ C:\Users\Apps\social-feed.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00444041 _____ C:\Users\Apps\article.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00416475 _____ C:\Users\Apps\album.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00395528 _____ C:\Users\Apps\collection-songs.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00392161 _____ C:\Users\Apps\zlogin.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00383262 _____ C:\Users\Apps\social-chart.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00368227 _____ C:\Users\Apps\charts.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00366817 _____ C:\Users\Apps\buddy-list.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00363479 _____ C:\Users\Apps\artist.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00304572 _____ C:\Users\Apps\radio.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00278727 _____ C:\Users\Apps\folder.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00274437 _____ C:\Users\Apps\share.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00257997 _____ C:\Users\Apps\zlink-queue.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00244918 _____ C:\Users\Apps\profile.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00236396 _____ C:\Users\Apps\chart.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00216723 _____ C:\Users\Apps\search.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00216045 _____ C:\Users\Apps\findfriends.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00196416 _____ C:\Users\Apps\suggest.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00158229 _____ C:\Users\Apps\follow.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00098360 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00080952 _____ C:\Users\libEGL.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00080587 _____ C:\Users\Apps\about.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00073272 _____ C:\Users\wow_helper.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00072701 _____ C:\Users\Apps\error.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00053462 _____ C:\Users\Apps\ad.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00050934 _____ C:\Users\Apps\licenses.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00014086 _____ C:\Users\locales\en-US.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00008009 _____ C:\Users\locales\el.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00007791 _____ C:\Users\locales\ru.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00007076 _____ C:\Users\locales\ja.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006969 _____ C:\Users\locales\hu.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006950 _____ C:\Users\locales\fr-CA.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006899 _____ C:\Users\locales\fr.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006876 _____ C:\Users\locales\fi.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006875 _____ C:\Users\locales\pl.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006808 _____ C:\Users\locales\es-419.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006793 _____ C:\Users\locales\nl.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006756 _____ C:\Users\locales\de.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006740 _____ C:\Users\locales\zsm.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006739 _____ C:\Users\locales\it.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006731 _____ C:\Users\locales\es.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006726 _____ C:\Users\locales\tr.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006719 _____ C:\Users\locales\zh-Hant.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006717 _____ C:\Users\locales\pt-BR.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006672 _____ C:\Users\locales\sv.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006540 _____ C:\Users\locales\arb.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006469 _____ C:\Users\locales\en.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00000020 _____ C:\Users\inst_ver.dat
2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 ____D C:\Users\locales
2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 _____ C:\Users\Christoph.redir
2015-08-05 15:29 - 2015-06-18 00:11 - 00001212 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job
2015-08-05 03:08 - 2013-01-23 11:02 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-04 23:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-08-04 23:22 - 2013-01-23 11:16 - 00389020 _____ C:\Windows\DirectX.log
2015-08-04 19:02 - 2010-11-21 08:50 - 00710954 _____ C:\Windows\system32\perfh007.dat
2015-08-04 19:02 - 2010-11-21 08:50 - 00155026 _____ C:\Windows\system32\perfc007.dat
2015-08-04 19:02 - 2009-07-14 07:13 - 01653366 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-04 16:17 - 2013-10-06 00:59 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-02 22:10 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TS3Client
2015-08-02 03:38 - 2014-02-13 13:02 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-29 19:26 - 2014-01-15 18:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-07-29 15:16 - 2013-01-23 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2015-07-29 00:47 - 2014-04-30 14:58 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-28 11:41 - 2011-02-11 19:13 - 00000000 ____D C:\Windows\panther
2015-07-26 13:55 - 2013-01-24 11:45 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-07-26 13:55 - 2012-01-20 15:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-07-25 13:04 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-23 00:25 - 2014-06-27 13:39 - 00000000 ____D C:\Program Files (x86)\World of Warcraft Beta
2015-07-22 17:51 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iTunes
2015-07-22 17:50 - 2015-04-08 17:29 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iPod
2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-07-22 17:50 - 2013-05-19 20:53 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-07-22 16:36 - 2014-11-14 03:45 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList
2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList
2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList
2015-07-22 05:05 - 2014-10-29 06:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-07-22 05:00 - 2013-01-22 23:56 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-07-22 03:27 - 2013-11-12 15:59 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-22 03:09 - 2009-07-14 06:45 - 00493600 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-21 19:51 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-19 21:50 - 2013-01-23 00:37 - 00000000 ____D C:\Spiele
2015-07-19 21:49 - 2013-01-23 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War
2015-07-18 16:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-18 15:17 - 2015-06-18 00:11 - 00004254 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA
2015-07-18 15:17 - 2015-06-18 00:11 - 00003858 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core
2015-07-18 00:06 - 2013-05-30 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-07-17 18:25 - 2014-06-12 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack
2015-07-17 02:02 - 2014-11-03 05:58 - 00000000 ____D C:\NVIDIA
2015-07-16 20:03 - 2014-06-28 17:28 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2015-07-16 19:35 - 2014-09-29 12:12 - 00001220 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk
2015-07-16 00:00 - 2013-01-23 11:01 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 00:00 - 2013-01-22 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 23:08 - 2014-12-10 04:10 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-15 17:30 - 2013-08-13 22:49 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 15:39 - 2013-03-02 18:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-15 15:39 - 2013-03-02 18:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-15 15:39 - 2012-01-20 15:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-15 05:58 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-10-29 12:08 - 2012-10-29 12:08 - 0134954 _____ () C:\Program Files\changelog.txt
2012-10-29 12:08 - 2012-10-29 12:08 - 0024252 _____ () C:\Program Files\license.txt
2013-04-29 11:41 - 2013-04-29 11:56 - 0000040 _____ () C:\Users\*****\AppData\Roaming\gnuplot_history
2015-01-04 03:45 - 2015-01-04 03:45 - 0000103 _____ () C:\Users\*****\AppData\Local\fusioncache.dat
2013-07-27 16:10 - 2013-07-27 16:10 - 0000040 _____ () C:\ProgramData\ra3.ini

Einige Dateien in TEMP:
====================
C:\Users\*****\AppData\Local\Temp\drm_dialogs.dll
C:\Users\*****\AppData\Local\Temp\drm_dyndata_7330017.dll
C:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpc9wfed.dll
C:\Users\*****\AppData\Local\Temp\DseShExt-x64.dll
C:\Users\*****\AppData\Local\Temp\DseShExt-x86.dll
C:\Users\*****\AppData\Local\Temp\FileSystemView.dll
C:\Users\*****\AppData\Local\Temp\GameuxInstallHelper.dll
C:\Users\*****\AppData\Local\Temp\Gw2.exe
C:\Users\*****\AppData\Local\Temp\jre-7u11-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u13-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u15-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u25-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u45-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u51-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-7u55-windows-i586-iftw.exe
C:\Users\*****\AppData\Local\Temp\jre-8u45-windows-au.exe
C:\Users\*****\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\*****\AppData\Local\Temp\nvStereoApiI64.dll
C:\Users\*****\AppData\Local\Temp\nvStInst.exe
C:\Users\*****\AppData\Local\Temp\OfficeSetup.exe
C:\Users\*****\AppData\Local\Temp\SDShelEx-win32.dll
C:\Users\*****\AppData\Local\Temp\SDShelEx-x64.dll
C:\Users\*****\AppData\Local\Temp\SkypeSetup.exe
C:\Users\*****\AppData\Local\Temp\SpotifyUpgrader.exe
C:\Users\*****\AppData\Local\Temp\swt-win32-3740.dll
C:\Users\*****\AppData\Local\Temp\tmp7C6C.tmp.exe
C:\Users\*****\AppData\Local\Temp\_is4596.exe
C:\Users\*****\AppData\Local\Temp\_is494E.exe
C:\Users\*****\AppData\Local\Temp\_is5EAC.exe
C:\Users\*****\AppData\Local\Temp\_is620C.exe
C:\Users\*****\AppData\Local\Temp\_is6DEE.exe
C:\Users\*****\AppData\Local\Temp\_is8D69.exe
C:\Users\*****\AppData\Local\Temp\_is9DBE.exe
C:\Users\*****\AppData\Local\Temp\_isB3F2.exe
C:\Users\*****\AppData\Local\Temp\_isEDF2.exe
C:\Users\*****\AppData\Local\Temp\_isFA20.exe


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-02 08:13

==================== Ende von log ============================
         
Die Addition.txt Logfile kommt in einem zweiten Beitrag, da die Länge des ersten sonst überschritten wird.
__________________

Alt 08.08.2015, 16:54   #4
Christoph B.
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Und hier das Attention.txt Logfile:

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:08-08-2015
durchgeführt von ***** (2015-08-08 17:43:45)
Gestartet von C:\Users\*****\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2025296424-690445150-2269518065-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2025296424-690445150-2269518065-1334 - Limited - Enabled)
***** (S-1-5-21-2025296424-690445150-2269518065-1001 - Administrator - Enabled) => C:\Users\*****
Gast (S-1-5-21-2025296424-690445150-2269518065-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2025296424-690445150-2269518065-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader X (10.1.15) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.15 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Age of Mythology: Extended Edition (HKLM-x32\...\Steam App 266840) (Version:  - SkyBox Labs)
Age of Wonders 2 (HKLM-x32\...\Steam App 61510) (Version:  - Triumph Studios)
Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version:  - Triumph Studios)
Aion (HKLM-x32\...\{B9291CA2-6FA5-44EA-8EE0-923EB32ADAAB}) (Version: 4.0.0.3 - NC Interactive, LLC)
Akamai NetSession Interface (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alienware Command Center (HKLM-x32\...\InstallShield_{131A7AD3-1078-4B08-95E6-B457D18C40DF}) (Version: 2.7.24.0 - Alienware Corp.)
Alienware Command Center (Version: 2.7.24.0 - Alienware Corp.) Hidden
Amazon Music (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Amazon Amazon Music) (Version: 3.7.0.693 - Amazon Services LLC)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Blasc3 (HKLM-x32\...\{59FD1BDF-FEC7-403E-97FC-FBE437154BD2}) (Version: 1.0.0 - Computec Media AG)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Content Transfer (HKLM-x32\...\{CFADE4AF-C0CF-4A04-A776-741318F1658F}) (Version: 1.3.0.23190 - Sony Corporation)
Cool Edit 96 (HKLM-x32\...\Cool Edit 96) (Version:  - )
Cossacks II: Battle for Europe (HKLM-x32\...\Steam App 4890) (Version:  - GSC Game World)
Cossacks: Art of War (HKLM-x32\...\Steam App 4870) (Version:  - GSC Game World)
Cossacks: Back to War (HKLM-x32\...\Steam App 4850) (Version:  - GSC Game World)
Cossacks: European Wars (HKLM-x32\...\Steam App 4880) (Version:  - GSC Game World)
Curse Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dawn of Fantasy: Kingdom Wars (HKLM-x32\...\Steam App 227180) (Version:  - Reverie World Studios)
Dell Data Vault (Version: 4.3.4.0 - Dell Inc.) Hidden
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.0.47 - Dell)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
diclovit's mod pack 9.9.0 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 9.9.0 - diclovit)
Disciples III: Renaissance (HKLM-x32\...\Steam App 33670) (Version:  - Akella)
Dropbox (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
DUNGEONS - Steam Special Edition (HKLM-x32\...\Steam App 57650) (Version:  - Realmforge Studios)
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version:  - The Creative Assembly)
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameRanger (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\GameRanger) (Version:  - GameRanger Technologies)
GameSpy Comrade (HKLM-x32\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy)
gnuplot 4.6.3 (HKLM-x32\...\{AB419AC3-9BC1-4EC5-A75B-4D8870DD651F}_is1) (Version: 4.6.3 - gnuplot development team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)
Google Drive (HKLM-x32\...\{6EA8B94E-D869-4D96-88DF-5E1ECE1D6876}) (Version: 1.23.9648.8824 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
Grand Ages: Rome (HKLM-x32\...\Steam App 23450) (Version:  - Haemimont Games)
GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Happy Cloud Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\HappyCloud) (Version: 4.28 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)
Imperium Romanum: Gold Edition (HKLM-x32\...\Steam App 23400) (Version:  - Haemimont Games)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2462 - Intel Corporation)
iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
LibreOffice 4.0.1.2 (HKLM-x32\...\{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}) (Version: 4.0.1.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Americas (HKLM-x32\...\{75983B66-804C-40D1-BA13-64DAF652A6F1}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Britannia (HKLM-x32\...\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Crusades (HKLM-x32\...\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Teutonic (HKLM-x32\...\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}) (Version: 1.03.000 - SEGA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSI ODD Monitor (HKLM-x32\...\InstallShield_{B7D9BAAA-F068-4BF8-B929-462C3A8AB677}) (Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.)
MSI ODD Monitor (x32 Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) Hidden
Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig)
MuseScore 1.3 (HKLM-x32\...\MuseScore) (Version: 1.3.0 - Werner Schweer and Others)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NWZ-E450 WALKMAN Guide (HKLM-x32\...\{0A6C2811-AD29-473F-8086-F0B401276DEC}) (Version: 2.1.0.17210 - Sony Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6494 - Realtek Semiconductor Corp.)
Rome: Total War - Alexander (HKLM-x32\...\Steam App 4770) (Version:  - The Creative Assembly)
Rome: Total War (HKLM-x32\...\Steam App 4760) (Version:  - The Creative Assembly)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Shogun - Total War - Gold Edition (HKLM-x32\...\{8A03FE64-0C8B-4E8F-B488-F36BA40A8640}) (Version: 1.00.0000 - The Creative Assembly)
Sid Meier's Civilization 4 Complete (HKLM-x32\...\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}) (Version: 1.74 - Firaxis Games)
Spotify (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB)
Star Trek Online (HKLM-x32\...\Star Trek Online) (Version:  - Cryptic Studios)
Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version:  - Petroglyph)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
STAR WARS® - Galactic Battlegrounds Saga (HKLM-x32\...\1421404646_is1) (Version: 2.0.0.2 - GOG.com)
StarCraft (HKLM-x32\...\StarCraft) (Version:  - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.0.23077 - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version:  - FireFly Studios)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH)
TeXnicCenter Version 2.0 Beta 1 (HKLM\...\TeXnicCenter_is1) (Version: 2.0 Beta 1 - The TeXnicCenter Team)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version:  - Turbine, Inc.)
Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)
Tropico (HKLM-x32\...\Steam App 33520) (Version:  - PopTop Software)
Unity Web Player (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - Blizzard Entertainment)
Warhammer Online: Age of Reckoning (HKLM-x32\...\Warhammer Online: Age of Reckoning) (Version:  - Electronic Arts)
Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version:  - Relic Entertainment)
WildStar (HKLM-x32\...\WildStar) (Version:  - NCSOFT)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version:  - Wargaming.net)
World of Warships (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
XSplit Gamecaster (HKLM-x32\...\{D7BEC6E9-5E86-44FF-AA21-23DA71ED676B}) (Version: 2.4.1506.1243 - SplitmediaLabs)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{cbd31018-8e26-442c-b791-0d5a2dc52d3f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

19-06-2015 19:37:03 Windows Update
23-06-2015 12:36:31 Windows Update
26-06-2015 16:59:35 Windows Update
30-06-2015 11:08:50 Windows Update
07-07-2015 14:45:41 Windows Update
08-07-2015 02:13:35 DirectX 9.0 wurde installiert
10-07-2015 16:15:57 Windows Update
14-07-2015 14:14:07 Windows Update
15-07-2015 05:57:23 Windows Update
15-07-2015 17:24:02 Windows Update
16-07-2015 19:32:26 Installed XSplit Gamecaster
19-07-2015 21:48:26 Entfernt Rome - Total War - Gold Edition
21-07-2015 15:31:51 Windows Update
22-07-2015 03:00:16 Windows Update
28-07-2015 10:05:34 Windows Update
29-07-2015 00:45:23 Windows Update
01-08-2015 17:37:44 Windows Update
04-08-2015 23:19:46 Windows Live Essentials
04-08-2015 23:22:07 DirectX wurde installiert
04-08-2015 23:23:13 DirectX wurde installiert
04-08-2015 23:24:28 DirectX wurde installiert
04-08-2015 23:26:47 WLSetup
04-08-2015 23:41:48 AVG PC TuneUp 2015 wird entfernt
04-08-2015 23:42:44 AVG PC TuneUp 2015 wird entfernt
04-08-2015 23:43:37 AVG PC TuneUp 2015 (de-DE) wird entfernt
04-08-2015 23:51:33 Windows Update
08-08-2015 00:50:40 AVG PC TuneUp 2015 wird entfernt
08-08-2015 00:53:07 AVG PC TuneUp 2015 (de-DE) wird entfernt
08-08-2015 00:53:55 Windows Update
08-08-2015 17:37:13 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {03C20EC4-40F1-4736-B58B-841D9238FE78} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {0E897781-5457-4E56-AC1D-4958A8151EE7} - System32\Tasks\{FEFF5C65-B1CE-4B65-B02C-D0B2955F5EDB} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-90.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist"
Task: {169D9857-DBC1-4668-805B-E07AE111DF57} - System32\Tasks\RNKCKUYTBN1 => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG
Task: {30DC20C1-9AD5-46DC-914C-05F55D57FCEB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {36A75BD1-C1FC-43E5-B5D9-278175107813} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation)
Task: {4069B3FC-2DA2-447A-9744-EFEA6A95E0F3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {4465B507-AD8A-4E9A-B9B0-417D14EE6E6E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {65D30786-D67E-476F-A07B-31AE1240421E} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2015-04-26] (Apple Inc.)
Task: {727C874E-08D9-48F5-AD14-2CF779759EF6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.)
Task: {87A603EB-E64F-4596-B57E-20E465F8C720} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {B3BCD2E7-F24D-4AC6-8AFC-17322662FBB2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {B8318A20-6BA9-4F3F-A8B8-E5FE073B0513} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)
Task: {C4EC3CD5-60E7-422C-8F52-5B2924ACD6A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {D00721E5-2540-483F-8323-4AE71B53791C} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {D0CA070E-7436-46EF-9128-D0DDBD4451B5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {D5D16122-8D52-49BA-A53F-060CF711B465} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-06-11] (Dell Inc.)
Task: {F4BF3CD9-278D-4500-9875-1A825B8A5A9B} - System32\Tasks\{13FFD5A0-546B-4A2E-A0F2-8AC4715EF0B9} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-100-sp1.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\RNKCKUYTBN1.job => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-11-03 05:59 - 2014-10-16 18:54 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2014-03-21 17:20 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-22 22:32 - 2015-04-22 22:32 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-22 22:32 - 2015-04-22 22:32 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-08-08 10:32 - 2015-08-08 10:32 - 02960384 _____ () C:\Program Files\AVAST Software\Avast\defs\15080800\algo.dll
2012-01-20 22:54 - 2014-10-16 18:54 - 00013120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-04-22 22:32 - 2015-04-22 22:32 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-08-08 00:26 - 2015-08-08 00:26 - 00012288 _____ () C:\Program Files (x86)\Google\Chrome\Application\WTSAPI32.dll
2015-08-05 03:08 - 2015-07-31 08:19 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libglesv2.dll
2015-08-05 03:08 - 2015-07-31 08:19 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libegl.dll
2015-08-05 03:08 - 2015-07-31 08:19 - 16308040 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\PepperFlash\pepflashplayer.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer trusted/restricted ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2025296424-690445150-2269518065-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{0251ACFB-8F10-4242-82D5-75D58E223008}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe
FirewallRules: [UDP Query User{ADC9FDE2-F4EB-4C85-9582-A86AF231B1DB}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe
FirewallRules: [{EE519961-DFE1-47CB-ABC2-400DC1206F93}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{0EBA76C8-A25F-4899-A025-7AB08C5BDB40}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{50935E8B-8DD1-455D-A9BB-A8D648BBF707}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{F638167A-5DC7-4D25-8AA7-2F1CC486DBB2}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{914446D5-53EB-4EDB-94D7-F23CAFAADA5B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe
FirewallRules: [{C7EA0C2E-5216-4808-8AEA-1E0749EA260E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe
FirewallRules: [{CB4993E2-1739-4AF0-B269-A182883F794E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{F64284A3-396B-4F0D-9295-73FAF85A9549}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [TCP Query User{015752AF-CC12-4844-9107-5B23BB3FE8AB}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{7C437135-EF71-4065-9981-FD87E5C8DEBA}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe
FirewallRules: [{349F76F6-0E43-4A72-AAFC-247A6842E9E4}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{CC92EC73-9332-4A30-B762-4780B8AC809D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{BA0DC8FF-F484-48E1-B463-D91F2F1BA6CA}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{C79CA4D9-C1A4-4ED6-A73F-BB2339CD0261}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{943A8B51-7349-45DC-9254-E0EFB47EB7DA}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [UDP Query User{E3577156-3EA3-4A26-946B-870F42C076A5}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [{8F64E7C7-F2B4-43AF-B4BE-FDDF2C613262}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [{4B9DA593-42B8-4232-BD37-70284244BBFC}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{EFCD4C90-EA06-40FD-AD9A-2E50601401DD}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [UDP Query User{A7122FFD-F591-4013-9ECA-0FF851E65155}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [{309A7FC0-7F0D-4344-8484-814CEA4213A0}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{12F0F1B9-46B7-4DF1-8DCD-448D9EADA4EA}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{8FFD5267-9A2B-48C2-8F06-BFC2AF806F29}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [UDP Query User{03F5CCBC-11D8-4E50-9810-1EC1CF981A39}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [{B9401DBC-3331-46B0-9CA3-77038CCD2C6E}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{DF284FCB-ED45-452B-BAC1-BEEC4A455B14}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{11D3468E-4DCB-4BD5-B3E8-7F1E27A948F5}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{A41BA3B0-96D6-40AB-9FCA-BCD1B2791EEF}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{42A3892E-23BE-439B-9507-F7619A426826}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{4E23E1FB-C0D6-49E9-AAB1-27D72C79F843}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{C741D5EB-A2E2-4675-9E05-866F8BB21349}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{FBECEDCA-5409-45AC-B941-9424882B389B}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [{43AED376-03F3-4844-8621-F24C53765706}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [{F8F95744-2953-4E94-BB46-3F5616602006}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe
FirewallRules: [{4AE95902-BE71-4EC9-AB5D-98260BC2CFFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe
FirewallRules: [TCP Query User{5FF02B8C-680A-4FE8-AC98-B3E0218FFB4C}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{6C752DA4-F222-4E54-A846-4E10047EB128}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [{5D2B5538-9D14-41FE-A7D6-6152D5B14D31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{B71B1F03-5326-4897-A528-8ED39B1A1C49}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{3CEF8494-3EF5-4D6F-95FE-2C2108688812}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{E02C4A51-8790-44F2-BFFB-32DC03E24486}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{24BF9231-06B3-4962-84DF-419C8030F114}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{A76F92AA-6071-4133-9D03-E692D3459DDA}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{E4C884D4-7FC4-4C78-8E06-DCD37188AF90}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{B4C1BA76-4008-4E6F-B4C5-E63C5A9A4962}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{7D7E9C8C-DEBD-4B86-A24F-00E54BDDA613}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C635E2E8-0684-4EAF-B6A3-712055BF595D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BA861A84-22A8-4F0B-A836-07BC1BC84599}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt
FirewallRules: [{24030535-9C04-4370-B3B8-2FFDD5419CC0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt
FirewallRules: [{EEB28177-078B-47A4-A1E9-32CB98A1B998}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf
FirewallRules: [{C757B3B0-8F6F-4803-9A30-086BC588C713}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf
FirewallRules: [{EC7636C5-27E0-44E4-AE2B-C951ABCBE837}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html
FirewallRules: [{9C1BDABF-2443-4B1D-8D40-09EAC3498DC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html
FirewallRules: [{3DC71454-4E25-4044-9C2F-2A36067BF271}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf
FirewallRules: [{7ECB4059-9323-422C-A4E8-47AD5BEA7A63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf
FirewallRules: [{45FF3A56-0CF5-4337-A78F-49E65B1DE721}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{D79A69F9-026C-4197-AB97-16CA202E638C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [TCP Query User{80DA892B-37F0-4281-AD10-BB3F5E7E8381}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{42E5E64D-7ED8-44E4-9DB1-085EF7B8B41E}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [{C13CEAD8-59FF-497D-9A4F-5E0370FFD512}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4D1FC9AB-F8D1-4F7D-9673-0B2544313F51}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{54575BE3-5FC3-4F08-95E5-33AB82BC1E54}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{578D9506-D945-43B6-B9B2-203B50311BBA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B2ADAAD8-60DE-4BD9-8D4E-D797C5D00140}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{55F46406-342A-44B8-8C59-FCE17E82013D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{BF4E595F-8E17-4043-9FB7-C3A94C12D244}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{EE9D656A-5709-41A1-A241-9B83DD5C36CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{7AEAD203-01C2-4850-AE70-6B08C5ABC495}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{95AE7B89-390A-496F-B196-F0EBED984870}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{084B75D9-AF72-4409-8C88-6DBBD3665E0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{DDD30F9A-3050-4B07-B288-2CFC3D1FF1D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{895C1FD9-A7C3-490D-BBFA-5840A6E956A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [{D155A490-7844-42C7-A178-1C09AA7FC231}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [{A6196099-492C-466F-ADCB-44469AF7B84F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{6B24D139-7AC0-46FB-BBB7-62B4B444D691}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{68A02C29-E545-4F3F-B1B1-ECE94A0FC97A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{4D8CCB77-F9AE-46F2-8A78-BF9B6850DF62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [TCP Query User{CB28A092-7F4B-4D49-AA5C-3981737BA3E4}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [UDP Query User{F0193006-DDBF-4469-98E5-165044C5D09A}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [TCP Query User{E9FDD513-4F3E-4852-BBEB-EB08DAD7F562}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{EFDD6A7A-C4F8-44F5-A2B5-39A5B70A77F6}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{DF5D6BD4-01C5-4576-841E-907E29BF701E}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{70EBBC55-7CC3-49C5-BA00-A38A0EAB5E78}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe
FirewallRules: [{DD4A98A4-3190-41EE-AB6B-AA87AA3FB2FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe
FirewallRules: [{80704D14-32F9-4725-915D-5855A73903FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe
FirewallRules: [{C4C50AF8-FDBD-4E7D-BF98-38B934C58F8A}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{8202CD3A-B7B2-4026-9017-87F7CDA99928}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{C9BC03BB-898B-43EB-A357-2A7690041E96}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe
FirewallRules: [UDP Query User{1662C0B1-6221-4F19-B7C5-571C2321F5E2}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe
FirewallRules: [{2DDEC01C-6A21-42B8-A287-8F182BAEDF6D}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{F829CDDC-B1FC-4955-B765-889D62F4D8AE}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{AF1A7839-A8BB-4F69-B9E2-1540096716F6}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{16F7A5B3-4B1C-4085-8971-BDA6A5C0EE44}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{A87862CF-AD30-4A2B-A516-465016EFA16B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{D0B48795-5047-463A-9371-5F33DCEE8E63}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{BD4D1AC5-D483-4E5D-A14A-4DC840DAA775}] => (Allow) C:\Users\*****\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{624E29F4-9DA6-4F81-8DE4-95CE91C4A6A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe
FirewallRules: [{26476F6A-D8DE-4A93-ADEF-B7F0FFFFA7DC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe
FirewallRules: [{0D3AF0A8-8801-4B78-842E-90B7BAD4D95C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{96576DF3-5A5D-4783-BA82-A978082F390F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{AB234224-89F6-49AC-984F-3E790888E7B0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [{88E49BE1-6DD3-4682-93B0-401DAFA5EF22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [{E7F1B4BD-BCA4-453C-9EC4-2374538A57AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{6C1189A1-95D1-4122-8DE2-350D79E8DF6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{2A11819A-4F18-4FA1-BBD7-D56CB04D8360}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{0A0BD680-BBDD-4964-A896-111EBD886B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{5B22CC13-BFFC-4D5F-BD71-F5063CCE892F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [{939CF113-423A-4321-9F36-3D3172E9AB13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [TCP Query User{D8A05BD9-4C60-4C76-A77A-872D3EC843E3}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{FAA01B96-B795-44BD-BDE0-BF6D45F95B77}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{F704AC56-3787-48A1-B60E-D4AAD4A4E386}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{83ACC9A2-0CB6-4157-9CC9-FBBEF6040CBF}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{CA31BFEE-0F8B-4024-8E23-47AF5C3D03C8}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{DC684C0E-C6CF-46FE-B2F1-3E611685C5FD}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{46055201-620C-4BCD-94CC-4099AB13B541}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{E0B1E5DB-731E-4E07-AE2D-6A3EA6476A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [TCP Query User{0D9ED852-5DD9-4654-9D9E-9C1DD6DB4A69}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [UDP Query User{C68D42DD-55F8-4558-BEFF-08352016E6AB}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [TCP Query User{28DE63A4-CA9C-4313-81A7-7E30D89C41E8}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe
FirewallRules: [UDP Query User{0929412C-38BA-45B1-9BA5-A6B072C1B3F5}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe
FirewallRules: [TCP Query User{5F3DC4B3-E3B9-4EC5-98F1-655FD5587AF3}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{55E61591-BF26-4593-8E9E-153D7AFFD62D}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{66A92318-33CF-47FC-8A56-901C809EDAB9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{0B455E08-7215-4A7B-8F6E-76D4E9BBECF6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{5D4EAA31-BAA6-4C40-B9D7-3A3A57B61A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{DC23C8A2-4C71-49D7-9D8B-A3C39A438E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{32DD98BC-2B6C-4BD0-9F95-38A526213637}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{0DF7E29E-4627-4010-8E4E-795C62170D46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{95A75987-BF1E-4D2B-8F25-F18FF281A6D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{F29C65E1-A615-404B-A72A-AFE401666C18}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{284CE0CC-41B4-4A9A-80BA-0AB19AB1C27F}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe
FirewallRules: [UDP Query User{28CF3ACF-A0AE-433C-B758-0F5416684912}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe
FirewallRules: [{3F8D1AA0-FDF1-463B-A672-FFC4A5F27A01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F2EF8C94-6BB8-4B99-9A95-AEA7E27EA59F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{7A66ABAB-C574-41A4-AFE3-95F43948DFBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe
FirewallRules: [{763F94C6-4057-459E-958C-B8F38FCBAFA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe
FirewallRules: [{72C41947-E771-4F58-9B66-3159CA4309C6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE
FirewallRules: [{5E709D9D-4769-4849-80E1-70D56CAFBB5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE
FirewallRules: [{E5836997-BD8A-444C-A42F-146734D12D0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe
FirewallRules: [{B03C5E02-C80C-45A8-8DD8-EAD69CD12468}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe
FirewallRules: [{5C05E1DC-FB5C-40C1-9250-F55E4D38F666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe
FirewallRules: [{672FC1B7-C190-4EDD-81DD-9F31DD5CA392}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe
FirewallRules: [{EDC9526A-FCD4-4A27-BDB0-02040DFE634A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe
FirewallRules: [{A8002DC8-B4C3-4E67-BCF3-09B36DA4DF87}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe
FirewallRules: [TCP Query User{4C1BCE32-CCB2-476C-AA49-5CE419A2B51F}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe
FirewallRules: [UDP Query User{84A74773-E34A-4B2A-BA58-85E60E551BF2}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe
FirewallRules: [{764C0B6E-EF20-444A-98C9-0475EED188E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe
FirewallRules: [{E7183E39-39AD-49F2-88A2-AC6F33FB0836}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe
FirewallRules: [{72FFA2F5-7067-4C40-8CC9-00F352A790C9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [TCP Query User{092F9E08-81F4-4C78-813D-256F61EBC7D4}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{DE830FD1-5A12-4461-84C7-83ACAAA7AF17}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [{7D08CB81-5A97-49D4-8786-0536F3468AF1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{DC025869-8125-442D-8C68-FA82F9CCDC4F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{81213F41-FDF4-4CD6-B16B-DF5BAC2C96BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{05F72280-7DF9-4CCB-AC89-193F5F821AFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{69CBA4F3-6075-4156-BEE1-3D90ECC59DC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{160AADED-5837-49B2-9A80-1C9E41EB64BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{CDEED061-B078-45CD-B523-59104B55E39E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{07120651-2E37-49A8-8E73-72124163EFF0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{C27D5DF9-ECBA-4F0C-99A4-F963D67283EF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{44601D48-28E3-4A21-BDE3-24F1E2E41655}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{2EEF1A05-42E4-4F0A-9E91-C26F2987FDE1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{8A3F3961-8340-41AC-9276-CC735803FBC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{E0CE7F32-573B-4383-89E8-ADDA887EC05D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{11B0EEBB-FEF8-44DD-91F2-1B76046921E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{485B1DA4-3473-4337-8D14-904AE2349099}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{F85F7861-3927-4786-A50E-8019C9BD45B1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{4141D8F6-B1ED-4D33-968C-65E6728F044B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{37DA2E0A-0C1B-4E91-82C5-731DB056BEC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{FE194A7A-3F19-4A59-A46A-C04C6341FBE8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{CBE25DEE-B29C-4747-91DE-7419F2E7E42E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{A2465D6C-8849-43A2-9F59-2DC913C3D8EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{FE25420B-B1F5-4592-A17E-09033A636F85}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{45D1BA0B-0E2D-4A19-A9DE-A380EC6A9AEB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{0067A891-CBED-4815-B2D9-F549AB73E8FC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{EE12FAB7-66C9-459B-A67A-C2C320D9BFB9}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F6A37288-865D-4031-B856-66EAAD29F8DA}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe
FirewallRules: [{33528BD2-21DE-4B47-84AD-E30DBC14FA0A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{18B81AF8-8A09-4719-B0B8-01BBCBD2093B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1E5BC73E-05CA-47B9-AB6D-A58FB7E8681D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{D6A4DCEF-3BF1-4A05-A0A8-2B7E97E02497}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{DB163982-259D-4F73-8F0B-59D23C4ADA22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{2D62B4C2-6E7E-434C-8565-9057ED30F8D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{D0722FB1-E41D-47DE-8F3B-513DD58D60E9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{2FA375AE-FAE3-4CA4-81A2-E27DD18DE170}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{284FF3D0-9031-4127-9107-1AF1B0A59002}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{64ED5AED-D8AB-4295-945C-AFEA943DAC2F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{66349D78-172B-4492-A79E-498E53642382}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{D01CCD26-5B59-419B-A26A-4403BCC035D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{24AAF877-3C25-4916-B251-CDE779C0A033}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{91BCFF5B-FCEE-487A-B60A-5702EEC831C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{4AB85794-AA74-4EA4-A95F-B74716639EB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{E35AB98E-72F3-4BE8-A92B-8ED6F73D7AF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{6734A585-A9ED-4413-BEA3-29F303C7A35D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{FEF460D3-6D89-4629-8CA0-E2542A595F40}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{76C85B40-77D6-40F1-8515-44424B0E7C8A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{B51ED9FB-02E5-421E-8C73-3B2E4E2E4ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{DB6E781E-7A9D-4010-90F3-CBEDD5F2B05D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{6D4E4E4E-4D4A-4EF1-A6FA-2031EE12AF28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{B2F74E8D-6356-490A-870C-514D2E7A6A06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe
FirewallRules: [{14ECF0D5-8C32-4367-98F7-4C817402BDE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe
FirewallRules: [{CEF4C40A-C4DE-4C7E-956D-1D26419CB58A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe
FirewallRules: [{A2708FCA-432B-412E-B206-C0DFB1A27107}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe
FirewallRules: [{296F9BE3-B10E-4989-8763-24026D4765C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe
FirewallRules: [{48AAB6BE-6774-4B6C-A48B-9C433BB1150C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe
FirewallRules: [{182B9192-EEF2-4988-9614-83F3C9127A20}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe
FirewallRules: [{4EE6A53C-9516-405B-BCF9-7F3482853648}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe
FirewallRules: [{7CCDE8F5-6BC8-4E63-A073-691929B28326}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{EFA7A645-1C6F-4F99-8A87-9C9093875683}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{973449FF-EEB6-4194-9041-97FCBBEEA4D3}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{FB80D76E-234F-418B-AD57-6895A8FFC3B1}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{17BD02AF-CB8C-4850-BC3B-C17988F08D0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{0E96E7B9-500F-4BD6-BEA0-CD74B4AF6A74}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [TCP Query User{222AF928-B487-4ABF-8DE2-39D9251C8BB9}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [UDP Query User{247B8F40-4C7E-4242-9107-08CEEBB2AC34}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [{12649B92-3DD0-471D-B876-E582037200D1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8A444CB3-9B24-4528-AE42-8E24E45A829A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F0660EA7-1406-4995-9627-AF62F3516145}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{03FC81DF-28DC-44C7-A740-05F4F1A7E1C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{4E8965C4-48E0-4A14-8B91-3EFBA57CCBE8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{17911242-E19B-4BAE-B170-AC187A34D1B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{56D1A343-2EF6-4D75-8D54-F1E05B6E29DD}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{49EB5140-8CA1-4036-80E3-D00A247AFC56}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [{69846FFB-ABF1-4324-B680-E3DC1ED53D5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe
FirewallRules: [{9E428734-13B5-441E-91CE-E314FAD80674}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe
FirewallRules: [{FEA5A4C6-C218-427B-8D13-0512D5B02606}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B48C8E32-FAD6-448F-B17F-5F2758B91A96}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{3C6AF60C-FF76-4F3E-A289-810DD59F72BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe
FirewallRules: [{AFE9E6DE-8C75-4F8D-A3C5-AA7ED41ACEFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe
FirewallRules: [{DB4E9A26-FF74-4B87-ABA1-7327DB6C8409}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe
FirewallRules: [{3935C411-E419-49EF-929C-9B76FCF4F265}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe
FirewallRules: [{DDF6892C-FFAA-4250-BEEE-CCCEC26428BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe
FirewallRules: [{28D732BF-87D0-438A-A609-5840825B1BBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe
FirewallRules: [{EA5946D6-C7D7-484A-8B48-1F983701D10A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe
FirewallRules: [{8D439FCC-7044-4AB8-9264-7894FFB8AC72}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe
FirewallRules: [TCP Query User{58A81076-8275-43E3-B870-B020E086A82F}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe
FirewallRules: [UDP Query User{6FF15508-5BF8-4BD0-882D-CF3A2F9EFFD4}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe
FirewallRules: [TCP Query User{87FFE026-5E60-47AE-A3BE-22EA19FFAF54}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [UDP Query User{91C55B66-6018-4EE8-B57D-62D1894BA95C}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [{969152DF-1CCF-411E-9BB8-DB5BD1738C35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe
FirewallRules: [{5C4EAEF4-6A83-4408-9A0B-B304231DF5B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe
FirewallRules: [{26A666C8-AEC7-47BB-9ECC-6A029C76962E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe
FirewallRules: [{73DEC31D-F4D4-4E0F-B05F-F6CA80BF3D27}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe
FirewallRules: [{B664A03F-1900-4311-8C91-A7BECC601B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{580E11C3-A79B-42C7-AA06-272AC1FD3FD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{1CE37571-84AF-4ABB-A8C0-0F49D43E7B06}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{A65F6C16-20BE-4EF6-A47F-1BDC1CB877A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [TCP Query User{418D07BE-F299-45FD-A943-B229AC5CDFF7}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{B596FDD7-D7DF-4C4E-B4C0-FEF78AA31B56}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [{7FE1BCA9-6A41-464F-AB3F-3890D2BE994E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe
FirewallRules: [{74FB7430-B31F-4491-81F2-AEDE20A30555}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe
FirewallRules: [TCP Query User{2CF3AF33-F6DD-4B4E-A781-9E8AECA4B2DB}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe
FirewallRules: [UDP Query User{F955A202-37F3-48F3-9963-3F577936D3D8}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe
FirewallRules: [TCP Query User{C4E26481-2674-4E8D-888C-F4B97390FEC8}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe
FirewallRules: [UDP Query User{0B8D3671-F421-4CDC-8F93-696568A6BF3A}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe
FirewallRules: [{4A804C86-3D0E-41DE-A04B-2059EACF56AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe
FirewallRules: [{9FDE1B25-0444-4B25-B783-01466B019093}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe
FirewallRules: [{86FA98A5-C32A-4C18-B172-6FA5F7A3E6FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe
FirewallRules: [{0F614910-EB72-40D7-8D1A-DB05AE45268B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe
FirewallRules: [{2D909357-E1CC-4059-9BE2-F378B8FD27ED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{AF215EA1-D65E-4EEC-B881-54BB260931F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{A314D191-236D-40ED-A97C-84B1382CD9D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{FB41B73B-9FB7-40C0-A815-91B5844F0A86}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{86E95A74-3C2D-4477-AA16-63B960533EBE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{C62F2282-A632-4D45-A993-C605397278FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{4970D921-573D-41C4-A499-D902776D0A75}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{5DA59697-126A-43BC-A76C-0FE5808F4CCD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{DD125661-074D-4809-9CF5-D27BC63247FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{C7B96FA9-D8B3-4918-9FC5-8F0A026D9ABF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [TCP Query User{B0C11404-E047-4560-8C3E-2101487BFD17}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{5B614511-D2B5-42B2-8EFF-12DC63099362}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [{6FA08711-FA02-40F8-805A-A5BD4A8AD497}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{E0735F4D-C016-4CEA-992A-5BFCA16FA16F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [TCP Query User{531CD087-1FD3-427F-AEEF-9BF33B602A34}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DE727DD4-956D-4030-AD53-B120E8617707}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{015258E0-1C61-470D-ABD0-03EE61DCB927}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{4E8E48CF-080F-4BF7-829B-631C0722201C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{3A8335AE-1D56-420A-9BDA-366BCA204C4D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{40A574E9-9006-452E-9FCE-C35C7E812858}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe
FirewallRules: [TCP Query User{7BFB73E4-059E-4EED-BCEC-962029B4051E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{6DB8B4CD-B390-4FFD-9DEB-9FB8AC5F2269}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [{17D45D55-4125-48F6-AF03-BF7B3AC59F85}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{63368E35-39D1-46FA-BFA9-A5D306C7A786}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{FDB0D517-2621-49BA-8597-775AB1E8A634}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{A3697632-BF0A-4456-A039-157A637BE1DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{231218A3-A868-490B-B030-86724B751BE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{30C2BA34-E739-474A-AC9B-93121BF7C8F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [TCP Query User{53B8DBD5-45C0-43D1-B13B-CB81DFC1B16A}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{8C707E14-4627-48DC-8728-B5A339D9ABA6}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [{43BDEF27-F8F0-4345-9C7D-C2BF58CBB437}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe
FirewallRules: [{E38F3897-DD1B-4976-AE52-F8948D2BB03C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe
FirewallRules: [{D205C38A-492F-4E56-8801-15058FCFC727}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe
FirewallRules: [{EC3782A0-77B6-4B0A-84AA-E761E30432FE}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe
FirewallRules: [TCP Query User{28011C1A-4696-4E42-965F-ECE7815D1622}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{0EB3380C-9299-40AB-8DDA-DCF9B6087A14}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{B7ECFE66-DF75-4475-B1DB-D567E76E0EA5}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{44719AD9-4ABF-4838-AA5F-77A657E4AAC1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [{E3E0B992-FD0D-44A1-9586-C4506C473FA2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{A6FD4105-28B5-444D-9386-5DFDE2C14A88}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{8A2CF538-1720-4AC5-9F70-C86C962079F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{97CFB8D5-F8A3-4846-89CA-B467D49799E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{F33EE6CA-7BE1-46BE-81C8-F4BD07142991}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{A989471E-8638-431E-BEA7-5E54F3082EFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{7C9D21DF-71D7-4C87-9C83-89933FB885C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{235D4BEF-91AB-4A6E-8544-862644AC41B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{FD7F8105-195E-4FA7-9D06-58BB46664F9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{C1E509A6-9625-4C8F-ADB5-7C010B4FE60B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{CBD45096-A07E-45AE-8636-E292FDAFABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{9AD02822-07CD-4D8E-A516-A8B8B0DC174C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{CDB75FA1-71E4-43C1-8089-F1863611FE36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe
FirewallRules: [{28DD4323-0A6F-4FB6-A483-DD98025EC013}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe
FirewallRules: [{4D87DB15-E63B-48D5-BA12-B4BAAD0BFE9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe
FirewallRules: [{B19ABA1C-9040-4FE8-876C-2D54E7429DFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe
FirewallRules: [{44341CF7-ED26-4B09-BE7B-8446914DD25E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe
FirewallRules: [{E823473E-E459-483A-9F1D-04771754E682}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe
FirewallRules: [TCP Query User{41F66013-E76E-478D-B5AF-C717F6488426}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{044E35C7-522D-4C58-B75A-70DED3A3FD2F}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe
FirewallRules: [TCP Query User{92DAD1C6-8E81-4C18-90D4-9BF3A3B224D4}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe
FirewallRules: [UDP Query User{8C200012-F04E-41F1-999E-28C84B1757B7}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe
FirewallRules: [TCP Query User{89F2BBBC-3ADA-415C-8A60-75C998A85EA9}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{4D9A295B-93BF-464C-8E14-DB2E4ECE2CCB}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [TCP Query User{E585902E-45FB-459E-9833-D51B3A0B97FA}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [UDP Query User{65B80045-A974-4840-A504-1716D37F8292}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [TCP Query User{283F0FDB-5D18-4F6C-A46B-A191A532FE1E}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{019383CE-32E6-4661-8CE8-6A6939D05215}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [{BD7D71B3-8412-4386-B4D7-4575D87D5493}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{814D5851-E61E-42F5-B6E5-D3C3A05F0D09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4A6C6276-8A80-4477-BA8B-12FC552E90B9}] => (Allow) LPort=2869
FirewallRules: [{E1B4F73D-B362-4B08-9CB3-30C171E1C3CF}] => (Allow) LPort=1900
FirewallRules: [{71D1E2BF-B86A-4C9A-A9EC-7F3078EA4515}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{555FF4A6-13F9-4E46-8275-9BEA4F1B89FF}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe
FirewallRules: [{526A9CE3-1D4E-4FCA-9EAF-919C328E0DDE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe
FirewallRules: [{6C3427F9-7B29-4CAA-B40D-43C2814D5E12}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/08/2015 04:38:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 03:59:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 03:48:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 12:56:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x1768
Startzeit der fehlerhaften Anwendung: 0xn4ldsfo8.exe0
Pfad der fehlerhaften Anwendung: n4ldsfo8.exe1
Pfad des fehlerhaften Moduls: n4ldsfo8.exe2
Berichtskennung: n4ldsfo8.exe3

Error: (08/08/2015 11:50:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: n4ldsfo8.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x1be0
Startzeit der fehlerhaften Anwendung: 0xn4ldsfo8.exe0
Pfad der fehlerhaften Anwendung: n4ldsfo8.exe1
Pfad des fehlerhaften Moduls: n4ldsfo8.exe2
Berichtskennung: n4ldsfo8.exe3

Error: (08/08/2015 11:47:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: fo8kzmij.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Name des fehlerhaften Moduls: fo8kzmij.exe, Version: 2.1.19357.0, Zeitstempel: 0x52e7ea83
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000011aa
ID des fehlerhaften Prozesses: 0x1a9c
Startzeit der fehlerhaften Anwendung: 0xfo8kzmij.exe0
Pfad der fehlerhaften Anwendung: fo8kzmij.exe1
Pfad des fehlerhaften Moduls: fo8kzmij.exe2
Berichtskennung: fo8kzmij.exe3

Error: (08/08/2015 11:18:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 10:28:18 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 01:01:39 AM) (Source: ESENT) (EventID: 454) (User: )
Description: taskhost (1812) WebCacheLocal: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -1014 auf.

Error: (08/08/2015 12:59:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dell Data Vault" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dell Data Vault Wizard" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/08/2015 05:37:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Alienware Fusion Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/08/2015 05:37:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Application Virtualization Client" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/08/2015 05:37:58 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "iPod-Dienst" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/08/2015 05:37:57 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Client Virtualization Handler" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (08/08/2015 05:37:57 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Windows Live ID Sign-in Assistant" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (08/08/2015 05:37:56 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Dell SupportAssist Agent" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.


Microsoft Office:
=========================
Error: (08/08/2015 04:38:45 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 03:59:15 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 03:48:46 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 12:56:21 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: n4ldsfo8.exe2.1.19357.052e7ea83n4ldsfo8.exe2.1.19357.052e7ea83c0000005000011aa176801d0d1c8d6bde70eC:\Users\*****\Desktop\n4ldsfo8.exeC:\Users\*****\Desktop\n4ldsfo8.exe1a3c4e97-3dbc-11e5-a3db-f04da2de4d5f

Error: (08/08/2015 11:50:16 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: n4ldsfo8.exe2.1.19357.052e7ea83n4ldsfo8.exe2.1.19357.052e7ea83c0000005000011aa1be001d0d1bf9b1b7239C:\Users\*****\Downloads\n4ldsfo8.exeC:\Users\*****\Downloads\n4ldsfo8.exedee9336c-3db2-11e5-a3db-f04da2de4d5f

Error: (08/08/2015 11:47:57 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: fo8kzmij.exe2.1.19357.052e7ea83fo8kzmij.exe2.1.19357.052e7ea83c0000005000011aa1a9c01d0d1bf47533a7cC:\Users\*****\Downloads\fo8kzmij.exeC:\Users\*****\Downloads\fo8kzmij.exe8c06a41c-3db2-11e5-a3db-f04da2de4d5f

Error: (08/08/2015 11:18:10 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 10:28:18 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (08/08/2015 01:01:39 AM) (Source: ESENT) (EventID: 454) (User: )
Description: taskhost1812WebCacheLocal: -1014

Error: (08/08/2015 12:59:45 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


CodeIntegrity:
===================================
  Date: 2015-08-04 23:40:33.548
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-08-04 23:40:33.427
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-08-04 23:40:32.760
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-08-04 23:40:32.474
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Percentage of memory in use: 29%
Total physical RAM: 8086.79 MB
Available physical RAM: 5712.14 MB
Total Virtual: 16171.78 MB
Available Virtual: 13762.27 MB

==================== Drives ================================

Drive c: (OS) (Fixed) (Total:930.74 GB) (Free:185.25 GB) NTFS
Drive d: (ROMETWGOLD) (CDROM) (Total:3.58 GB) (Free:0 GB) UDF

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 606F7C4F)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=752 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS)

==================== Ende von log ============================
         

Alt 08.08.2015, 21:59   #5
M-K-D-B
/// TB-Ausbilder
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Wir entfernen die letzten Reste und kontrollieren nochmal alles. ESET kann länger (> 2 h) dauern.
Im Anschluss entfernen wir alle verwendeten Tools und ich gebe dir noch ein paar Tipps mit auf den Weg.




Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument


Code:
ATTFilter
start
CloseProcesses:
AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden
AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden
C:\ProgramData\SecurityUtility
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden
Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden
Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & '
Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & '
Task: {169D9857-DBC1-4668-805B-E07AE111DF57} - System32\Tasks\RNKCKUYTBN1 => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG
Task: C:\Windows\Tasks\RNKCKUYTBN1.job => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.









Schritt 2

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset






Schritt 3
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.






Schritt 4
  • Starte die FRST.exe erneut. Setze einen Haken vor Addition.txt und drücke auf Untersuchen.
  • FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
  • Poste mir beide Logdateien mit deiner nächsten Antwort.






Bitte poste mit deiner nächsten Antwort
  • die Logdatei des FRST-Fix,
  • die Logdatei von ESET,
  • die Logdatei von SecurityCheck,
  • die beiden neuen Logdateien von FRST.


Alt 09.08.2015, 21:59   #6
Christoph B.
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



FRST-fix:

Code:
ATTFilter
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:08-08-2015
durchgeführt von ***** (2015-08-09 16:26:21) Run:2
Gestartet von C:\Users\*****\Desktop
Geladene Profile: ***** (Verfügbare Profile: *****)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
start
CloseProcesses:
AppInit_DLLs: C:\ProgramData\SecurityUtility\SecurityUtility64.dll => C:\ProgramData\SecurityUtility\SecurityUtility64.dll Datei nicht gefunden
AppInit_DLLs-x32: C:\ProgramData\SecurityUtility\SecurityUtility32.dll => "C:\ProgramData\SecurityUtility\SecurityUtility32.dll" Datei nicht gefunden
C:\ProgramData\SecurityUtility
GroupPolicy: Gruppenrichtline auf Chrome erkannt <======= ACHTUNG
Toolbar: HKLM - avast! Online Security - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
Toolbar: HKLM - Kein Name - {CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} -  Keine Datei
Winsock: Catalog5 05 C:\Windows\system32\DnsBlockA.dll Datei nicht gefunden
Winsock: Catalog5 11 C:\Windows\system32\DnsBlockB.dll Datei nicht gefunden
Winsock: Catalog5-x64 05 C:\Windows\system32\DnsBlockA.dll File Not ' & $found1 & '
Winsock: Catalog5-x64 11 C:\Windows\system32\DnsBlockB.dll File Not ' & $found1 & '
Task: {169D9857-DBC1-4668-805B-E07AE111DF57} - System32\Tasks\RNKCKUYTBN1 => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG
Task: C:\Windows\Tasks\RNKCKUYTBN1.job => C:\ProgramData\SecurityUtility\SecurityUtility.exe <==== ACHTUNG
RemoveProxy:
CMD: ipconfig /flushdns
CMD: netsh winsock reset
EmptyTemp:
end
*****************

Prozess erfolgreich geschlossen.
"C:\ProgramData\SecurityUtility\SecurityUtility64.dll" => Wert Daten nicht gefunden.
"C:\ProgramData\SecurityUtility\SecurityUtility32.dll" => Wert Daten nicht gefunden.
"C:\ProgramData\SecurityUtility" => Datei/Ordner nicht gefunden.
"C:\Windows\system32\GroupPolicy\Machine" => Datei/Ordner nicht gefunden.
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Wert nicht gefunden.
HKCR\CLSID\{318A227B-5E9F-45bd-8999-7F8F10CA4CF5} => Schlüssel nicht gefunden. 
HKLM\SOFTWARE\Microsoft\Internet Explorer\Toolbar\\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Wert nicht gefunden.
HKCR\CLSID\{CC1A175A-E45B-41ED-A30C-C9B1D7A0C02F} => Schlüssel nicht gefunden. 
Winsock: Catalog5 entry 000000000005\\LibraryPath  was set successfully to %SystemRoot%\System32\mswsock.dll
Winsock: Catalog entry 000000000011 => nicht gefunden.
Winsock: Catalog5-x64 entry 000000000005\\LibraryPath  was set successfully to %SystemRoot%\System32\mswsock.dll
Winsock: Catalog entry 000000000011 => nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tasks\{169D9857-DBC1-4668-805B-E07AE111DF57} => Schlüssel nicht gefunden. 
C:\Windows\System32\Tasks\RNKCKUYTBN1 nicht gefunden.
HKLM\SOFTWARE\Microsoft\Windows NT\CurrentVersion\Schedule\TaskCache\Tree\RNKCKUYTBN1 => Schlüssel nicht gefunden. 
C:\Windows\Tasks\RNKCKUYTBN1.job nicht gefunden.

========= RemoveProxy: =========

HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings => Wert erfolgreich entfernt
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings => Wert erfolgreich entfernt


========= Ende von RemoveProxy: =========


=========  ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl�sungscache wurde geleert.

========= Ende von CMD: =========


=========  netsh winsock reset =========


Der Winsock-Katalog wurde zur�ckgesetzt.
Sie m�ssen den Computer neu starten, um den Vorgang abzuschlie�en.


========= Ende von CMD: =========

EmptyTemp: => 20.4 GB temporäre Dateien entfernt.


Das System musste neu gestartet werden.. 

==== Ende von Fixlog 16:27:38 ====
         
Eset:

Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2dbae0df863471419304198f02b3d5a4
# end=init
# utc_time=2015-08-09 02:39:54
# local_time=2015-08-09 04:39:54 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 25196
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2dbae0df863471419304198f02b3d5a4
# end=updated
# utc_time=2015-08-09 03:04:10
# local_time=2015-08-09 05:04:10 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=2dbae0df863471419304198f02b3d5a4
# engine=25196
# end=stopped
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-08-09 03:50:35
# local_time=2015-08-09 05:50:35 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Internet Security'
# compatibility_mode=779 16777213 85 74 4426135 203555925 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 86663 190765285 0 0
# scanned=155017
# found=0
# cleaned=0
# scan_time=2785
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2dbae0df863471419304198f02b3d5a4
# end=init
# utc_time=2015-08-09 03:51:37
# local_time=2015-08-09 05:51:37 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 25196
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=2dbae0df863471419304198f02b3d5a4
# end=updated
# utc_time=2015-08-09 03:53:33
# local_time=2015-08-09 05:53:33 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=2dbae0df863471419304198f02b3d5a4
# engine=25196
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-08-09 07:31:04
# local_time=2015-08-09 09:31:04 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1='avast! Internet Security'
# compatibility_mode=779 16777213 85 74 4439364 203569154 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 99892 190778514 0 0
# scanned=717051
# found=0
# cleaned=0
# scan_time=13050
         
Security-Check:
Code:
ATTFilter
 Results of screen317's Security Check version 1.006  
 Windows 7 Service Pack 1 x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
avast! Antivirus   
 Antivirus up to date!  (On Access scanning disabled!) 
`````````Anti-malware/Other Utilities Check:````````` 
 Java 8 Update 45  
 Java version 32-bit out of Date! 
 Adobe Flash Player 18.0.0.209  
 Adobe Reader 10.1.15 Adobe Reader out of Date!  
 Mozilla Firefox 30.0 Firefox out of Date!  
 Google Chrome (44.0.2403.125) 
 Google Chrome (44.0.2403.130) 
 Google Chrome (wtsapi32.dll..) 
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast ng vbox\AvastVBoxSVC.exe 
 AVAST Software Avast ng ngservice.exe 
 AVAST Software Avast avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  
````````````````````End of Log``````````````````````
         
Die beiden weiteren logfiles werde ich in einem zweiten Beitrag nachreichen.

Hier das FRST logfile:

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-08-2015
durchgeführt von ***** (Administrator) auf CHRISTOPHBULDT (09-08-2015 22:52:27)
Gestartet von C:\Users\*****\Desktop
Geladene Profile: ***** (Verfügbare Profile: *****)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Andrea Electronics Corporation) C:\Program Files\Realtek\Audio\HDA\AERTSr64.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftvsa.exe
(Dell Inc.) C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corporation) C:\Program Files (x86)\Microsoft Application Virtualization Client\sftlist.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Microsoft Corporation) C:\Program Files (x86)\Common Files\microsoft shared\Virtualization Handler\CVHSVC.EXE
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe
(AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe
(Microsoft Corporation) C:\Windows\System32\alg.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Intel Corporation) C:\Windows\System32\igfxpers.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(Spotify Ltd) C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Computec Media AG) C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe
(Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe
() C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe
(Akamai Technologies, Inc.) C:\Users\*****\AppData\Local\Akamai\netsession_win.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCServiceController.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Sony Corporation) C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe
(Curse) C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\CurseClient.exe
(Dropbox, Inc.) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienwareAlienFXController.exe
(NCSOFT Corporation) C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher32.exe
(Alienware) C:\Program Files\Alienware\Command Center\AWCCApplicationWatcher64.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Microsoft Corporation) C:\Windows\SysWOW64\wbem\WmiPrvSE.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionService.exe
(Alienware) C:\Program Files\Alienware\Command Center\AlienFusionController.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Dell Inc.) C:\Program Files\Dell\DellDataVault\DellDataVault.exe
(PC-Doctor, Inc.) C:\Program Files\Alienware\SupportAssist\imstrayicon.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe


==================== Registry (Nicht auf der Ausnahmeliste) ==================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6412904 2011-11-03] (Realtek Semiconductor)
HKLM\...\Run: [RtHDVBg] => C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe [1157224 2011-10-20] (Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [Command Center Controllers] => C:\Program Files\Alienware\Command Center\AWCCStartupOrchestrator.exe [12616 2011-12-15] (Alienware)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-16] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [170280 2015-07-11] (Apple Inc.)
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 10.0\Reader\Reader_sl.exe [40336 2015-06-27] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [APSDaemon] => C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe [60712 2015-05-15] (Apple Inc.)
HKLM-x32\...\Run: [ContentTransferWMDetector.exe] => C:\Program Files (x86)\Sony\Content Transfer\ContentTransferWMDetector.exe [583016 2009-11-19] (Sony Corporation)
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-11] (Avast Software s.r.o.)
HKLM-x32\...\Run: [NCUpdateHelper] => C:\Program Files (x86)\NCWest\NCLauncher\NCUpdateHelper.exe [528360 2014-03-08] (NCSOFT Corporation)
HKLM-x32\...\Run: [QuickTime Task] => C:\Program Files (x86)\QuickTime\QTTask.exe [421888 2015-06-17] (Apple Inc.)
Winlogon\Notify\igfxcui: C:\Windows\system32\igfxdev.dll (Intel Corporation)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Pando Media Booster] => C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe [3093624 2013-01-31] ()
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify Web Helper] => C:\Users\*****\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-06] (Spotify Ltd)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [43816 2015-04-26] (Apple Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Blasc3] => C:\Users\*****\AppData\Local\Blasc3\Program.Blasc3.exe [485888 2014-08-28] (Computec Media AG)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Akamai NetSession Interface] => C:\Users\*****\AppData\Local\Akamai\netsession_win.exe [4673432 2014-10-30] (Akamai Technologies, Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Amazon Music] => C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe [6277952 2014-11-19] ()
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Skype] => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Spotify] => C:\Users\*****\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-06] (Spotify Ltd)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [Dropbox Update] => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-18] (Dropbox, Inc.)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Run: [msnmsgr] => C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe [4272840 2014-03-31] (Microsoft Corporation)
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112\amd64"
HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\RunOnce: [Uninstall C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112] => C:\Windows\system32\cmd.exe /q /c rmdir /s /q "C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.2003.1112"
HKU\S-1-5-18\...\RunOnce: [iCloud] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloud.exe [43816 2015-04-26] (Apple Inc.)
AppInit_DLLs: C:\Windows\system32\nvinitx.dll => C:\Windows\system32\nvinitx.dll [174856 2014-10-16] (NVIDIA Corporation)
AppInit_DLLs-x32: C:\Windows\SysWOW64\nvinit.dll => C:\Windows\SysWOW64\nvinit.dll [156840 2014-10-16] (NVIDIA Corporation)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2013-01-23] ()
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-05-08]
ShortcutTarget: Dropbox.lnk -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GameRanger.lnk [2013-12-22]
ShortcutTarget: GameRanger.lnk -> C:\Users\*****\AppData\Roaming\GameRanger\GameRanger\GameRanger.exe (GameRanger Technologies)
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-04-22] (Avast Software s.r.o.)
ShellIconOverlayIdentifiers: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [DropboxExt4] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt1] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt2] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [DropboxExt3] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt.27.dll [2015-07-24] (Dropbox, Inc.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt..)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-06-09] (Microsoft Corporation)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-04-22] (Avast Software s.r.o.)
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.)
BHO: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-06-16] (Microsoft Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\ssv.dll [2015-04-21] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-04-22] (Avast Software s.r.o.)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Google Toolbar Helper -> {AA58ED58-01DD-4d91-8333-CF10577473F7} -> C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.)
BHO-x32: Office Document Cache Handler -> {B4F3A835-0E21-4959-BA22-42B3008E02FF} -> C:\Program Files\Microsoft Office 15\root\Office15\URLREDIR.DLL [2015-06-09] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\jp2ssv.dll [2015-04-21] (Oracle Corporation)
Toolbar: HKLM - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_64.dll [2015-07-17] (Google Inc.)
Toolbar: HKLM-x32 - Google Toolbar - {2318C2B1-4965-11d4-9B18-009027A5CD4F} - C:\Program Files (x86)\Google\Google Toolbar\GoogleToolbar_32.dll [2015-07-17] (Google Inc.)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)
Handler: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} -  Keine Datei
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{3A84EB8B-D610-4EB8-B42A-FAED5407B372}: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_209.dll [2015-07-15] ()
FF Plugin: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_209.dll [2015-07-15] ()
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2015-01-06] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\dtplugin\npDeployJava1.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.45.2 -> C:\Program Files (x86)\Java\jre1.8.0_45\bin\plugin2\npjp2.dll [2015-04-21] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2013-11-12] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2014-10-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2014-10-16] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.1\npGoogleUpdate3.dll [2015-07-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 10.0\Reader\AIR\nppdf32.dll [2015-06-27] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\*****\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2014-04-01] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [2013-01-31] (Pando Networks)
FF Plugin HKU\S-1-5-21-2025296424-690445150-2269518065-1001: thehappycloud.com/HappyCloudPlugin -> C:\ProgramData\HappyCloud\Application\npHappyCloudPlugin.dll [2013-05-05] (The Happy Cloud)
FF Extension: Kein Name - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\0xip5oi5.default\Extensions\1438986229_xpi [2015-08-08]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-01-23]

Chrome: 
=======
CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast SafePrice) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2015-08-06]
CHR Extension: (Avast Online Security) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2013-05-30]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-14]
CHR Extension: (Chrome Web Store Payments) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-08-23]
CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswwebrepchrome-sp.crx [2014-08-04]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-04-22]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [77128 2015-05-29] (Apple Inc.)
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-04-22] (Avast Software s.r.o.)
R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-04-22] (Avast Software)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2753720 2015-07-01] (Microsoft Corporation)
R2 DellDataVault; C:\Program Files\Dell\DellDataVault\DellDataVault.exe [2573520 2015-05-22] (Dell Inc.)
R2 DellDataVaultWiz; C:\Program Files\Dell\DellDataVault\DellDataVaultWiz.exe [201936 2015-05-22] (Dell Inc.)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-16] (NVIDIA Corporation)
S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-06-18] (Malwarebytes Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
S4 MSI_ODD_Service; c:\Program Files (x86)\msi\ODD Monitor\ODD_Monitor.exe [76800 2011-10-05] (Micro-Star Int'l Co., Ltd.) [Datei ist nicht signiert]
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-16] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-16] (NVIDIA Corporation)
R2 SupportAssistAgent; C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssistAgent.exe [20648 2015-06-11] (Dell Inc.)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-04-22] ()
R1 aswKbd; C:\Windows\System32\Drivers\aswKbd.sys [21136 2012-10-31] (AVAST Software)
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-04-22] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-04-22] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-04-22] ()
R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-04-22] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-06-26] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-04-22] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-04-22] ()
R3 DDDriver; C:\Windows\System32\drivers\DDDriver64Dcsa.sys [23760 2015-01-31] (Dell Computer Corporation)
R3 DellProf; C:\Windows\System32\drivers\DellProf.sys [24240 2015-05-22] (Dell Computer Corporation)
S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-06-18] (Malwarebytes Corporation)
S3 NTIOLib_X64; C:\Program Files (x86)\msi\ODD Monitor\NTIOLib_X64.sys [14136 2010-01-18] (MSI)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-16] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-10-16] (NVIDIA Corporation)
R3 rusb3hub; C:\Windows\System32\DRIVERS\rusb3hub.sys [100352 2011-09-15] (Renesas Electronics Corporation)
R3 rusb3xhc; C:\Windows\System32\DRIVERS\rusb3xhc.sys [216064 2011-09-15] (Renesas Electronics Corporation)
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2014-07-28] (Apple, Inc.) [Datei ist nicht signiert]
R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-04-22] (Avast Software)
R3 XSplit_Dummy; C:\Windows\System32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-09 22:51 - 2015-08-09 22:51 - 00001133 _____ C:\Users\*****\Desktop\checkup.txt
2015-08-09 22:45 - 2015-08-09 22:45 - 00852684 _____ C:\Users\*****\Desktop\SecurityCheck.exe
2015-08-09 16:45 - 2015-08-09 16:45 - 00003504 _____ C:\Windows\System32\Tasks\PCDEventLauncherTask
2015-08-09 16:36 - 2015-08-09 16:36 - 02870984 _____ (ESET) C:\Users\*****\Desktop\esetsmartinstaller_deu.exe
2015-08-09 16:30 - 2015-08-09 16:30 - 00000008 __RSH C:\ProgramData\ntuser.pol
2015-08-08 17:41 - 2015-08-08 17:48 - 00002552 _____ C:\Users\*****\Desktop\JRT.txt
2015-08-08 17:36 - 2015-08-08 17:36 - 01797896 _____ (Malwarebytes Corporation) C:\Users\*****\Desktop\JRT.exe
2015-08-08 17:31 - 2015-08-08 17:31 - 00001813 _____ C:\Users\*****\Desktop\MWAB.txt
2015-08-08 16:34 - 2015-08-08 16:34 - 00001225 _____ C:\Users\*****\Desktop\Zweiter Suchlauf MwB.txt
2015-08-08 15:56 - 2015-08-08 16:35 - 00226304 _____ C:\Users\*****\Desktop\DownloadProtectCleaner-reboot.exe
2015-08-08 15:54 - 2015-08-08 15:54 - 00326656 _____ C:\Users\*****\Desktop\DownloadProtectCleaner.exe
2015-08-08 13:04 - 2015-08-08 13:04 - 00023526 _____ C:\Users\*****\Desktop\Addition.zip
2015-08-08 12:44 - 2015-08-09 22:52 - 00000000 ____D C:\Users\*****\Desktop\FRST-OlderVersion
2015-08-08 11:52 - 2015-08-08 11:59 - 00001010 _____ C:\Users\*****\Desktop\AdwCleaner[R1].txt
2015-08-08 11:49 - 2015-08-08 11:49 - 00380416 _____ C:\Users\*****\Desktop\n4ldsfo8.exe
2015-08-08 11:47 - 2015-08-08 11:47 - 00380416 _____ C:\Users\*****\Desktop\fo8kzmij.exe
2015-08-08 11:42 - 2015-08-09 22:52 - 00026869 _____ C:\Users\*****\Desktop\FRST.txt
2015-08-08 11:42 - 2015-08-09 22:52 - 00000000 ____D C:\FRST
2015-08-08 11:42 - 2015-08-08 17:44 - 00093701 _____ C:\Users\*****\Desktop\Addition.txt
2015-08-08 11:41 - 2015-08-09 22:52 - 02171392 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe
2015-08-08 11:39 - 2015-08-08 12:44 - 00000492 _____ C:\Users\*****\Desktop\defogger_disable.log
2015-08-08 11:39 - 2015-08-08 11:39 - 00000000 _____ C:\Users\*****\defogger_reenable
2015-08-08 11:38 - 2015-08-08 11:38 - 00050477 _____ C:\Users\*****\Desktop\Defogger.exe
2015-08-08 11:37 - 2015-08-08 12:03 - 00002648 _____ C:\Users\*****\Desktop\Anti-Maleware Suchlauf.txt
2015-08-08 11:35 - 2015-08-08 11:35 - 00002658 _____ C:\Anti-Maleware Suchlauf.txt
2015-08-08 11:26 - 2015-08-08 11:58 - 00000958 _____ C:\Users\*****\Desktop\AdwCleaner[R0].txt
2015-08-08 11:24 - 2015-08-08 11:25 - 02248704 _____ C:\Users\*****\Desktop\adwcleaner_4.208.exe
2015-08-08 01:09 - 2015-08-09 16:30 - 00113880 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2015-08-08 01:09 - 2015-08-08 01:09 - 00001104 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-08-08 01:09 - 2015-08-08 01:09 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-08-08 01:09 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbamchameleon.sys
2015-08-08 01:09 - 2015-06-18 08:41 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2015-08-08 01:09 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mbam.sys
2015-08-08 00:26 - 2015-08-08 00:26 - 00000000 ____D C:\Users\*****\Downloads\Neuer Ordner
2015-08-06 19:44 - 2015-08-08 11:56 - 00000000 ____D C:\AdwCleaner
2015-08-06 12:35 - 2015-08-06 12:35 - 01865516 _____ C:\Users\Apps\musixmatch-lyrics-cp.spa
2015-08-06 12:35 - 2015-08-06 12:35 - 00449780 _____ C:\Users\snapshot_blob.bin
2015-08-06 12:35 - 2015-08-06 12:35 - 00410937 _____ C:\Users\natives_blob.bin
2015-08-05 03:30 - 2015-08-05 03:38 - 00008989 _____ C:\Users\*****\Downloads\All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz
2015-08-05 03:30 - 2015-08-05 03:30 - 00010361 _____ C:\Users\*****\Downloads\.All_About_The_Bass_-_Meghan_Trainor_Treble_Clef_Brass_Quartet.mscz,
2015-08-05 02:12 - 2015-08-06 01:21 - 00007152 _____ C:\Users\*****\Downloads\Forrest_Gump_-_4_trombones.mscz
2015-08-05 02:12 - 2015-08-05 03:51 - 00007074 _____ C:\Users\*****\Downloads\.Forrest_Gump_-_4_trombones.mscz,
2015-08-04 23:41 - 2015-08-04 23:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\dlg
2015-08-04 23:40 - 2015-08-04 23:48 - 00000000 ____D C:\Users\*****\Documents\Apowersoft Free Audio Recorder
2015-08-04 23:39 - 2015-08-04 23:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\Apowersoft
2015-08-04 23:39 - 2015-08-04 23:39 - 00000000 ____D C:\Program Files (x86)\Apowersoft
2015-08-04 23:38 - 2015-08-04 23:38 - 07976008 _____ (APOWERSOFT LIMITED ) C:\Windows\SysWOW64\free-audio-recorder-computerbild.exe
2015-08-04 23:37 - 2015-08-04 23:37 - 00000000 ____D C:\Users\*****\AppData\Roaming\AVG
2015-08-04 23:36 - 2015-08-04 23:36 - 00000000 ____D C:\Users\*****\AppData\Local\Avg
2015-08-04 23:34 - 2015-08-09 16:31 - 00000000 ____D C:\Users\*****\Tracing
2015-08-04 23:30 - 2015-08-04 23:38 - 00000000 ____D C:\ProgramData\AVG
2015-08-04 23:30 - 2015-08-04 23:30 - 00000000 ____D C:\Windows\de
2015-08-04 23:29 - 2015-08-04 23:29 - 00002488 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001460 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001376 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00001307 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-08-04 23:29 - 2015-08-04 23:29 - 00000020 _____ C:\Windows\pôL
2015-08-04 23:29 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-08-04 23:28 - 2015-08-04 23:28 - 00516720 _____ ( ) C:\Users\*****\Downloads\free-audio-recorder-computerbild_CB-DL-Manager.exe
2015-08-04 23:27 - 2015-08-04 23:29 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-08-04 23:27 - 2015-08-04 23:27 - 00000000 ____D C:\Program Files\Windows Live
2015-08-04 23:27 - 2014-03-31 21:06 - 00058056 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fssfltr.sys
2015-08-04 23:26 - 2015-08-04 23:29 - 00000000 ____D C:\Program Files (x86)\Windows Live
2015-08-04 23:26 - 2015-08-04 23:26 - 00081303 _____ C:\Users\*****\Documents\Unbenannt (2).wma
2015-08-04 23:25 - 2015-08-04 23:25 - 00054363 _____ C:\Users\*****\Documents\Unbenannt.wma
2015-08-04 23:21 - 2015-08-04 23:21 - 00002234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Microsoft OneDrive.lnk
2015-08-04 23:19 - 2015-08-07 16:02 - 00000000 ____D C:\Users\*****\AppData\Local\Windows Live
2015-08-04 23:19 - 2015-08-04 23:19 - 02746203 _____ C:\Users\*****\Downloads\Vorbemerkung.mp4
2015-08-04 23:18 - 2015-08-04 23:18 - 01245384 _____ (Microsoft Corporation) C:\Users\*****\Downloads\wlsetup-web.exe
2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Syntrillium
2015-08-04 23:00 - 2015-08-04 23:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Syntrillium
2015-08-04 22:59 - 2015-08-05 00:44 - 00000000 ____D C:\cool
2015-08-04 22:59 - 2015-08-04 23:28 - 00003967 _____ C:\Windows\cool.ini
2015-08-04 22:59 - 1997-05-01 15:01 - 00127023 _____ C:\Windows\c96unins.exe
2015-08-04 22:59 - 1997-04-29 08:06 - 00272896 _____ (Progressive Networks) C:\Windows\SysWOW64\pncrt.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00140288 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3214_4.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00090624 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\pnc32301.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00085504 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\encdnet.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00072704 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra3228_8.dll
2015-08-04 22:59 - 1997-04-29 08:06 - 00013824 _____ (Progressive Networks, Inc.) C:\Windows\SysWOW64\ra32dnet.dll
2015-08-04 22:58 - 2015-08-04 22:58 - 02178955 _____ C:\Users\*****\Downloads\31939_c96setup.exe
2015-08-02 08:41 - 2015-08-07 16:44 - 00000000 ____D C:\Users\*****\AppData\Roaming\OBS
2015-08-02 08:41 - 2015-08-02 20:16 - 00000000 ____D C:\Program Files\OBS
2015-08-02 08:41 - 2015-08-02 08:41 - 07413584 _____ C:\Users\*****\Downloads\OBS_0_653b_Installer.exe
2015-08-02 08:41 - 2015-08-02 08:41 - 00000937 _____ C:\Users\*****\Desktop\Open Broadcaster Software.lnk
2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-08-02 08:41 - 2015-08-02 08:41 - 00000000 ____D C:\Program Files (x86)\OBS
2015-08-01 06:22 - 2015-08-07 04:20 - 00000000 ____D C:\Users\*****\Documents\Dateien bis 01.August 2015
2015-07-31 16:52 - 2015-07-31 16:52 - 00000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-07-28 10:05 - 2015-07-25 20:07 - 00017856 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe
2015-07-28 10:05 - 2015-07-25 20:04 - 00765440 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll
2015-07-28 10:05 - 2015-07-25 20:04 - 00726528 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 01085440 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00433664 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00227328 _____ (Microsoft Corporation) C:\Windows\system32\aepdu.dll
2015-07-28 10:05 - 2015-07-25 20:03 - 00067584 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll
2015-07-28 10:05 - 2015-07-25 19:55 - 01145856 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll
2015-07-26 13:49 - 2015-07-26 13:49 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2015-07-22 17:51 - 2015-07-22 17:51 - 00001715 _____ C:\Users\Public\Desktop\iTunes.lnk
2015-07-22 17:51 - 2015-07-22 17:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2015-07-22 17:45 - 2015-07-22 17:45 - 00001847 _____ C:\Users\Public\Desktop\QuickTime Player.lnk
2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\QuickTime
2015-07-22 17:45 - 2015-07-22 17:45 - 00000000 ____D C:\Program Files (x86)\QuickTime
2015-07-22 17:43 - 2015-07-22 17:44 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iCloud
2015-07-22 04:59 - 2015-07-22 05:01 - 00000000 ____D C:\Users\*****\Documents\StarCraft II Beta
2015-07-22 04:33 - 2015-07-22 04:59 - 00000000 ____D C:\Program Files (x86)\StarCraft II - Legacy of the Void Beta
2015-07-22 02:54 - 2015-07-22 02:54 - 00000000 ____D C:\Users\*****\AppData\Local\CEF
2015-07-21 19:51 - 2015-07-21 19:51 - 00002043 _____ C:\Users\Public\Desktop\Star Wars - Galactic Battlegrounds.lnk
2015-07-21 19:51 - 2015-07-21 19:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-07-21 19:51 - 2000-06-23 22:05 - 00136704 _____ (Ligos Corporation) C:\Windows\SysWOW64\iacenc.dll
2015-07-21 19:51 - 2000-06-22 21:09 - 00056320 _____ C:\Windows\SysWOW64\iyvu9_32.dll
2015-07-21 19:50 - 2015-07-21 19:50 - 00000000 ____D C:\GOG Games
2015-07-21 19:44 - 2015-07-21 19:48 - 569047376 _____ (GOG.com ) C:\Users\*****\Downloads\setup_sw_galactic_battlegrounds_saga_german_2.0.0.2.exe
2015-07-21 15:35 - 2015-07-15 05:19 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-07-21 15:35 - 2015-07-15 05:19 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-07-21 15:35 - 2015-07-15 04:55 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-07-21 15:35 - 2015-07-15 04:54 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-07-21 15:35 - 2015-07-15 03:59 - 00372224 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-07-21 15:35 - 2015-07-15 03:52 - 00299008 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-07-17 18:17 - 2015-07-17 18:22 - 26401485 _____ (diclovit ) C:\Users\*****\Downloads\dmp_9.9.0_setup.exe
2015-07-16 19:35 - 2015-07-16 19:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XSplit
2015-07-15 15:39 - 2015-07-15 15:39 - 18524336 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerInstaller.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 03154944 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 02603008 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-07-15 14:52 - 2015-07-09 19:58 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-07-15 14:52 - 2015-07-09 19:58 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-07-15 14:52 - 2015-07-09 19:43 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-07-15 14:52 - 2015-07-09 19:42 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-07-15 14:52 - 2015-06-27 04:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-07-15 14:52 - 2015-06-27 04:43 - 05923840 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-07-15 14:52 - 2015-06-27 03:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-07-15 14:52 - 2015-06-27 03:39 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-07-15 14:52 - 2015-06-25 10:57 - 03207168 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-07-15 14:52 - 2015-06-17 19:47 - 00404992 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll
2015-07-15 14:52 - 2015-06-17 19:37 - 00312320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll
2015-07-15 14:52 - 2015-06-02 02:07 - 00254976 _____ (Microsoft Corporation) C:\Windows\system32\cewmdm.dll
2015-07-15 14:52 - 2015-06-02 01:47 - 00210432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cewmdm.dll
2015-07-15 14:51 - 2015-07-02 23:21 - 19877376 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-07-15 14:51 - 2015-07-02 23:08 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-07-15 14:51 - 2015-07-02 22:50 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-07-15 14:51 - 2015-07-02 22:49 - 25193984 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-07-15 14:51 - 2015-07-02 22:46 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-07-15 14:51 - 2015-07-02 22:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-07-15 14:51 - 2015-07-02 22:23 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-07-15 14:51 - 2015-07-02 22:19 - 12855296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-07-15 14:51 - 2015-07-02 22:12 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-07-15 14:51 - 2015-07-02 21:55 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-07-15 14:51 - 2015-07-02 21:20 - 14453248 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-07-15 14:51 - 2015-07-02 20:59 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-07-15 14:49 - 2015-06-25 20:09 - 00389832 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-07-15 14:49 - 2015-06-25 19:43 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-07-15 14:49 - 2015-06-20 22:06 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-07-15 14:49 - 2015-06-20 21:50 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-07-15 14:49 - 2015-06-20 21:49 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-07-15 14:49 - 2015-06-20 21:49 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-07-15 14:49 - 2015-06-20 21:49 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-07-15 14:49 - 2015-06-20 21:48 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-07-15 14:49 - 2015-06-20 21:40 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-07-15 14:49 - 2015-06-20 21:39 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-07-15 14:49 - 2015-06-20 21:34 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-07-15 14:49 - 2015-06-20 21:34 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-07-15 14:49 - 2015-06-20 21:34 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-07-15 14:49 - 2015-06-20 21:25 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-07-15 14:49 - 2015-06-20 21:21 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-07-15 14:49 - 2015-06-20 21:13 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-07-15 14:49 - 2015-06-20 21:08 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-07-15 14:49 - 2015-06-20 21:07 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-07-15 14:49 - 2015-06-20 21:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-07-15 14:49 - 2015-06-20 20:48 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-07-15 14:49 - 2015-06-20 20:48 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-07-15 14:49 - 2015-06-20 20:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-07-15 14:49 - 2015-06-20 20:46 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-07-15 14:49 - 2015-06-20 20:26 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-07-15 14:49 - 2015-06-20 20:02 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-07-15 14:49 - 2015-06-19 20:25 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-07-15 14:49 - 2015-06-19 20:25 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-07-15 14:49 - 2015-06-19 20:24 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-07-15 14:49 - 2015-06-19 20:24 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-07-15 14:49 - 2015-06-19 20:23 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-07-15 14:49 - 2015-06-19 20:17 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-07-15 14:49 - 2015-06-19 20:16 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-07-15 14:49 - 2015-06-19 20:13 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-07-15 14:49 - 2015-06-19 20:13 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-07-15 14:49 - 2015-06-19 20:03 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-07-15 14:49 - 2015-06-19 19:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-07-15 14:49 - 2015-06-19 19:53 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-07-15 14:49 - 2015-06-19 19:52 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-07-15 14:49 - 2015-06-19 19:51 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-07-15 14:49 - 2015-06-19 19:40 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-07-15 14:49 - 2015-06-19 19:40 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-07-15 14:49 - 2015-06-19 19:39 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-07-15 14:49 - 2015-06-19 19:15 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-07-15 14:49 - 2015-06-19 19:11 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-07-15 14:46 - 2015-07-04 20:07 - 02087424 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll
2015-07-15 14:46 - 2015-07-04 19:48 - 01414656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll
2015-07-15 14:46 - 2015-07-01 22:56 - 00155584 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys
2015-07-15 14:46 - 2015-07-01 22:56 - 00095680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys
2015-07-15 14:46 - 2015-07-01 22:49 - 01461760 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 01216512 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00729088 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00342016 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00309760 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00210944 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00136192 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00029184 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll
2015-07-15 14:46 - 2015-07-01 22:49 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll
2015-07-15 14:46 - 2015-07-01 22:48 - 00044032 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll
2015-07-15 14:46 - 2015-07-01 22:48 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll
2015-07-15 14:46 - 2015-07-01 22:47 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe
2015-07-15 14:46 - 2015-07-01 22:47 - 00031232 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe
2015-07-15 14:46 - 2015-07-01 22:43 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll
2015-07-15 14:46 - 2015-07-01 22:43 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll
2015-07-15 14:46 - 2015-07-01 22:39 - 00686080 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00552960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00259584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00248832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00221184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00172032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00036864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll
2015-07-15 14:46 - 2015-07-01 22:30 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00665088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll
2015-07-15 14:46 - 2015-07-01 22:29 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe
2015-07-15 14:46 - 2015-07-01 22:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll
2015-07-15 14:46 - 2015-07-01 22:26 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll
2015-07-15 14:46 - 2015-07-01 22:24 - 00686080 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll
2015-07-15 14:46 - 2015-07-01 21:27 - 00159232 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys
2015-07-15 14:46 - 2015-07-01 21:26 - 00290816 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys
2015-07-15 14:46 - 2015-07-01 21:26 - 00129024 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys
2015-07-15 14:46 - 2015-04-27 21:23 - 01480192 _____ (Microsoft Corporation) C:\Windows\system32\crypt32.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00229376 _____ (Microsoft Corporation) C:\Windows\system32\wintrust.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00188416 _____ (Microsoft Corporation) C:\Windows\system32\cryptsvc.dll
2015-07-15 14:46 - 2015-04-27 21:23 - 00140288 _____ (Microsoft Corporation) C:\Windows\system32\cryptnet.dll
2015-07-15 14:46 - 2015-04-27 21:05 - 00179200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wintrust.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 01174528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\crypt32.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 00143872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptsvc.dll
2015-07-15 14:46 - 2015-04-27 21:04 - 00103936 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptnet.dll
2015-07-15 14:45 - 2015-06-15 23:50 - 00112064 _____ (Microsoft Corporation) C:\Windows\system32\consent.exe
2015-07-15 14:45 - 2015-06-15 23:45 - 03242496 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 01941504 _____ (Microsoft Corporation) C:\Windows\system32\authui.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 00504320 _____ (Microsoft Corporation) C:\Windows\system32\msihnd.dll
2015-07-15 14:45 - 2015-06-15 23:45 - 00070656 _____ (Microsoft Corporation) C:\Windows\system32\appinfo.dll
2015-07-15 14:45 - 2015-06-15 23:44 - 00128000 _____ (Microsoft Corporation) C:\Windows\system32\msiexec.exe
2015-07-15 14:45 - 2015-06-15 23:43 - 02364416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2015-07-15 14:45 - 2015-06-15 23:43 - 01805824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\authui.dll
2015-07-15 14:45 - 2015-06-15 23:43 - 00337408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msihnd.dll
2015-07-15 14:45 - 2015-06-15 23:42 - 00073216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msiexec.exe
2015-07-15 14:45 - 2015-06-15 23:42 - 00025088 _____ (Microsoft Corporation) C:\Windows\system32\msimsg.dll
2015-07-15 14:45 - 2015-06-15 23:37 - 00025088 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msimsg.dll
2015-07-10 19:28 - 2015-07-28 11:36 - 00000000 ___HD C:\$Windows.~BT

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-08-09 22:39 - 2013-03-02 18:16 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-08-09 22:36 - 2013-01-23 00:16 - 00000000 ____D C:\Users\*****\AppData\Local\Deployment
2015-08-09 22:22 - 2015-06-18 00:11 - 00001264 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job
2015-08-09 22:12 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-08-09 22:12 - 2009-07-14 06:45 - 00028128 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-08-09 22:05 - 2013-01-23 11:01 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-08-09 17:02 - 2013-01-31 03:57 - 00000000 ____D C:\Users\*****\AppData\Local\PMB Files
2015-08-09 16:49 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Local\Spotify
2015-08-09 16:49 - 2012-01-20 14:08 - 01272210 _____ C:\Windows\WindowsUpdate.log
2015-08-09 16:47 - 2013-01-23 00:09 - 00000000 ____D C:\Users\*****\AppData\Roaming\Spotify
2015-08-09 16:32 - 2013-01-30 11:43 - 00000000 ___RD C:\Users\*****\Dropbox
2015-08-09 16:32 - 2013-01-30 11:41 - 00000000 ____D C:\Users\*****\AppData\Roaming\Dropbox
2015-08-09 16:31 - 2013-01-22 23:13 - 00000374 _____ C:\Windows\system32\Drivers\etc\hosts.ics
2015-08-09 16:30 - 2013-01-22 23:42 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-08-09 16:29 - 2012-01-20 14:06 - 00000000 ____D C:\ProgramData\NVIDIA
2015-08-09 16:29 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-08-09 16:29 - 2009-07-14 06:51 - 00178146 _____ C:\Windows\setupact.log
2015-08-09 16:28 - 2010-11-21 05:47 - 00447182 _____ C:\Windows\PFRO.log
2015-08-09 16:14 - 2009-07-14 05:20 - 00000000 ___HD C:\Windows\system32\GroupPolicy
2015-08-09 16:08 - 2014-07-23 14:18 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update
2015-08-08 11:39 - 2013-01-22 22:43 - 00000000 ____D C:\Users\*****
2015-08-08 11:16 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\tracing
2015-08-08 00:29 - 2013-10-06 00:59 - 00000000 ____D C:\Users\*****\AppData\Local\Battle.net
2015-08-08 00:14 - 2014-11-28 17:31 - 00001043 _____ C:\Users\Public\Desktop\Warcraft III - The Frozen Throne.lnk
2015-08-08 00:10 - 2014-01-19 02:16 - 00000958 _____ C:\Users\Public\Desktop\Warcraft III.lnk
2015-08-06 12:35 - 2015-06-01 08:16 - 00602180 _____ C:\Users\Apps\local-files-desktop.spa
2015-08-06 12:35 - 2015-05-23 23:37 - 00158566 _____ C:\Users\Apps\hub.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 45066808 _____ C:\Users\libcef.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 10207504 _____ C:\Users\icudtl.dat
2015-08-06 12:35 - 2015-04-27 22:25 - 07675448 _____ (Spotify Ltd) C:\Users\Spotify.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 04487782 _____ C:\Users\devtools_resources.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 03457592 _____ (Microsoft Corporation) C:\Users\d3dcompiler_47.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 02332541 _____ C:\Users\Apps\musixmatch-lyrics.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 02184260 _____ C:\Users\cef.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 02157552 _____ C:\Users\Apps\glue-resources.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 02106424 _____ (Microsoft Corporation) C:\Users\d3dcompiler_43.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 02018360 _____ (Spotify Ltd) C:\Users\SpotifyWebHelper.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 01649208 _____ C:\Users\libGLESv2.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00967736 _____ (The Chromium Authors) C:\Users\ffmpegsumo.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00900089 _____ C:\Users\Apps\zlink.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00838712 _____ (Spotify Ltd) C:\Users\SpotifyCrashService.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00721136 _____ C:\Users\Apps\browse.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00622967 _____ C:\Users\cef_200_percent.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00606828 _____ C:\Users\Apps\playlist-desktop.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00542847 _____ C:\Users\Apps\notification-center.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00530001 _____ C:\Users\Apps\settings.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00528578 _____ C:\Users\Apps\collection.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00512594 _____ C:\Users\Apps\genre.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00508698 _____ C:\Users\Apps\collection-artist.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00504671 _____ C:\Users\Apps\discover.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00471783 _____ C:\Users\Apps\messages.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00468951 _____ C:\Users\cef_100_percent.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00466223 _____ C:\Users\Apps\collection-album.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00451113 _____ C:\Users\Apps\social-feed.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00444041 _____ C:\Users\Apps\article.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00416475 _____ C:\Users\Apps\album.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00395528 _____ C:\Users\Apps\collection-songs.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00392161 _____ C:\Users\Apps\zlogin.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00383262 _____ C:\Users\Apps\social-chart.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00368227 _____ C:\Users\Apps\charts.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00366817 _____ C:\Users\Apps\buddy-list.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00363479 _____ C:\Users\Apps\artist.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00304572 _____ C:\Users\Apps\radio.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00278727 _____ C:\Users\Apps\folder.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00274437 _____ C:\Users\Apps\share.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00257997 _____ C:\Users\Apps\zlink-queue.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00244918 _____ C:\Users\Apps\profile.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00236396 _____ C:\Users\Apps\chart.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00216723 _____ C:\Users\Apps\search.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00216045 _____ C:\Users\Apps\findfriends.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00196416 _____ C:\Users\Apps\suggest.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00158229 _____ C:\Users\Apps\follow.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00098360 _____ (Spotify Ltd) C:\Users\SpotifyLauncher.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00080952 _____ C:\Users\libEGL.dll
2015-08-06 12:35 - 2015-04-27 22:25 - 00080587 _____ C:\Users\Apps\about.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00073272 _____ C:\Users\wow_helper.exe
2015-08-06 12:35 - 2015-04-27 22:25 - 00072701 _____ C:\Users\Apps\error.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00053462 _____ C:\Users\Apps\ad.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00050934 _____ C:\Users\Apps\licenses.spa
2015-08-06 12:35 - 2015-04-27 22:25 - 00014086 _____ C:\Users\locales\en-US.pak
2015-08-06 12:35 - 2015-04-27 22:25 - 00008009 _____ C:\Users\locales\el.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00007791 _____ C:\Users\locales\ru.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00007076 _____ C:\Users\locales\ja.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006969 _____ C:\Users\locales\hu.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006950 _____ C:\Users\locales\fr-CA.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006899 _____ C:\Users\locales\fr.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006876 _____ C:\Users\locales\fi.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006875 _____ C:\Users\locales\pl.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006808 _____ C:\Users\locales\es-419.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006793 _____ C:\Users\locales\nl.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006756 _____ C:\Users\locales\de.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006740 _____ C:\Users\locales\zsm.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006739 _____ C:\Users\locales\it.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006731 _____ C:\Users\locales\es.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006726 _____ C:\Users\locales\tr.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006719 _____ C:\Users\locales\zh-Hant.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006717 _____ C:\Users\locales\pt-BR.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006672 _____ C:\Users\locales\sv.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006540 _____ C:\Users\locales\arb.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00006469 _____ C:\Users\locales\en.mo
2015-08-06 12:35 - 2015-04-27 22:25 - 00000020 _____ C:\Users\inst_ver.dat
2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 ____D C:\Users\locales
2015-08-06 12:35 - 2015-04-27 22:25 - 00000000 _____ C:\Users\Christoph.redir
2015-08-05 15:29 - 2015-06-18 00:11 - 00001212 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job
2015-08-05 03:08 - 2013-01-23 11:02 - 00002177 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-08-04 23:27 - 2009-07-14 05:20 - 00000000 ____D C:\Program Files\Common Files\Microsoft Shared
2015-08-04 23:22 - 2013-01-23 11:16 - 00389020 _____ C:\Windows\DirectX.log
2015-08-04 19:02 - 2010-11-21 08:50 - 00710954 _____ C:\Windows\system32\perfh007.dat
2015-08-04 19:02 - 2010-11-21 08:50 - 00155026 _____ C:\Windows\system32\perfc007.dat
2015-08-04 19:02 - 2009-07-14 07:13 - 01653366 _____ C:\Windows\system32\PerfStringBackup.INI
2015-08-04 16:17 - 2013-10-06 00:59 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-08-02 22:10 - 2013-01-23 00:10 - 00000000 ____D C:\Users\*****\AppData\Roaming\TS3Client
2015-08-02 03:38 - 2014-02-13 13:02 - 00000000 ____D C:\Program Files (x86)\Steam
2015-07-29 19:26 - 2014-01-15 18:34 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-07-29 15:16 - 2013-01-23 11:20 - 00000000 ____D C:\Program Files (x86)\World of Warcraft
2015-07-29 00:47 - 2014-04-30 14:58 - 00000000 ___SD C:\Windows\system32\CompatTel
2015-07-28 11:41 - 2011-02-11 19:13 - 00000000 ____D C:\Windows\panther
2015-07-26 13:55 - 2013-01-24 11:45 - 00002021 _____ C:\Users\Public\Desktop\Adobe Reader X.lnk
2015-07-26 13:55 - 2012-01-20 15:40 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Reader X.lnk
2015-07-25 13:04 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\system32\GWX
2015-07-23 00:25 - 2014-06-27 13:39 - 00000000 ____D C:\Program Files (x86)\World of Warcraft Beta
2015-07-22 17:51 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iTunes
2015-07-22 17:50 - 2015-04-08 17:29 - 00000000 ____D C:\ProgramData\E1864A66-75E3-486a-BD95-D1B7D99A84A7
2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files\iPod
2015-07-22 17:50 - 2014-07-23 14:18 - 00000000 ____D C:\Program Files (x86)\iTunes
2015-07-22 17:50 - 2013-05-19 20:53 - 00000000 ____D C:\Program Files\Common Files\Apple
2015-07-22 16:36 - 2014-11-14 03:45 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieBrowserModeList
2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieUserList
2015-07-22 16:36 - 2014-07-25 17:20 - 00000000 __SHD C:\Users\*****\AppData\Local\EmieSiteList
2015-07-22 05:05 - 2014-10-29 06:31 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-07-22 05:00 - 2013-01-22 23:56 - 00000000 ____D C:\ProgramData\Blizzard Entertainment
2015-07-22 03:27 - 2013-11-12 15:59 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-07-22 03:09 - 2009-07-14 06:45 - 00493600 _____ C:\Windows\system32\FNTCACHE.DAT
2015-07-21 19:51 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-07-19 21:50 - 2013-01-23 00:37 - 00000000 ____D C:\Spiele
2015-07-19 21:49 - 2013-01-23 11:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Total War
2015-07-18 16:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-07-18 15:17 - 2015-06-18 00:11 - 00004254 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA
2015-07-18 15:17 - 2015-06-18 00:11 - 00003858 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core
2015-07-18 00:06 - 2013-05-30 17:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Drive
2015-07-17 18:25 - 2014-06-12 23:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\diclovit's mod pack
2015-07-17 02:02 - 2014-11-03 05:58 - 00000000 ____D C:\NVIDIA
2015-07-16 20:03 - 2014-06-28 17:28 - 00000000 ____D C:\ProgramData\SplitMediaLabs
2015-07-16 19:35 - 2014-09-29 12:12 - 00001220 _____ C:\Users\Public\Desktop\XSplit Gamecaster.lnk
2015-07-16 00:00 - 2013-01-23 11:01 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-07-16 00:00 - 2013-01-22 23:42 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-07-15 23:08 - 2014-12-10 04:10 - 00000000 ____D C:\Windows\system32\appraiser
2015-07-15 23:08 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-07-15 17:30 - 2013-08-13 22:49 - 00000000 ____D C:\Windows\system32\MRT
2015-07-15 15:39 - 2013-03-02 18:16 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-07-15 15:39 - 2013-03-02 18:16 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-07-15 15:39 - 2012-01-20 15:16 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-07-15 05:58 - 2015-04-05 03:00 - 00000000 ___SD C:\Windows\SysWOW64\GWX

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2012-10-29 12:08 - 2012-10-29 12:08 - 0134954 _____ () C:\Program Files\changelog.txt
2012-10-29 12:08 - 2012-10-29 12:08 - 0024252 _____ () C:\Program Files\license.txt
2013-04-29 11:41 - 2013-04-29 11:56 - 0000040 _____ () C:\Users\*****\AppData\Roaming\gnuplot_history
2015-01-04 03:45 - 2015-01-04 03:45 - 0000103 _____ () C:\Users\*****\AppData\Local\fusioncache.dat
2013-07-27 16:10 - 2013-07-27 16:10 - 0000040 _____ () C:\ProgramData\ra3.ini

Einige Dateien in TEMP:
====================
C:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgf3wd2.dll


==================== Bamital & volsnap Check =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-08-02 08:13

==================== Ende von log ============================
         

Alt 09.08.2015, 22:01   #7
Christoph B.
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Und hier das addition-logfile:

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-08-2015
durchgeführt von ***** (2015-08-09 22:52:57)
Gestartet von C:\Users\*****\Desktop
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2025296424-690445150-2269518065-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2025296424-690445150-2269518065-1334 - Limited - Enabled)
***** (S-1-5-21-2025296424-690445150-2269518065-1001 - Administrator - Enabled) => C:\Users\*****
Gast (S-1-5-21-2025296424-690445150-2269518065-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2025296424-690445150-2269518065-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: avast! Antivirus (Disabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Disabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.209 - Adobe Systems Incorporated)
Adobe Reader X (10.1.15) MUI (HKLM-x32\...\{AC76BA86-7AD7-FFFF-7B44-AA0000000001}) (Version: 10.1.15 - Adobe Systems Incorporated)
Age of Empires II: HD Edition (HKLM-x32\...\Steam App 221380) (Version:  - Hidden Path Entertainment, Ensemble Studios)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Age of Mythology: Extended Edition (HKLM-x32\...\Steam App 266840) (Version:  - SkyBox Labs)
Age of Wonders 2 (HKLM-x32\...\Steam App 61510) (Version:  - Triumph Studios)
Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version:  - Triumph Studios)
Aion (HKLM-x32\...\{B9291CA2-6FA5-44EA-8EE0-923EB32ADAAB}) (Version: 4.0.0.3 - NC Interactive, LLC)
Akamai NetSession Interface (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Akamai) (Version:  - Akamai Technologies, Inc)
Alienware Command Center (HKLM-x32\...\InstallShield_{131A7AD3-1078-4B08-95E6-B457D18C40DF}) (Version: 2.7.24.0 - Alienware Corp.)
Alienware Command Center (Version: 2.7.24.0 - Alienware Corp.) Hidden
Amazon Music (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Amazon Amazon Music) (Version: 3.7.0.693 - Amazon Services LLC)
Apple Application Support (32-Bit) (HKLM-x32\...\{7FE25256-B7C1-480D-B736-10A67A833AEA}) (Version: 3.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{B255D495-4734-4E9B-B4F5-96702FD4A7B9}) (Version: 3.2 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5D61F006-168C-4B8B-B7FD-F113C10AE0E4}) (Version: 8.2.1.3 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Blasc3 (HKLM-x32\...\{59FD1BDF-FEC7-403E-97FC-FBE437154BD2}) (Version: 1.0.0 - Computec Media AG)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Content Transfer (HKLM-x32\...\{CFADE4AF-C0CF-4A04-A776-741318F1658F}) (Version: 1.3.0.23190 - Sony Corporation)
Cool Edit 96 (HKLM-x32\...\Cool Edit 96) (Version:  - )
Cossacks II: Battle for Europe (HKLM-x32\...\Steam App 4890) (Version:  - GSC Game World)
Cossacks: Art of War (HKLM-x32\...\Steam App 4870) (Version:  - GSC Game World)
Cossacks: Back to War (HKLM-x32\...\Steam App 4850) (Version:  - GSC Game World)
Cossacks: European Wars (HKLM-x32\...\Steam App 4880) (Version:  - GSC Game World)
Curse Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Dawn of Fantasy: Kingdom Wars (HKLM-x32\...\Steam App 227180) (Version:  - Reverie World Studios)
Dell Data Vault (Version: 4.3.4.0 - Dell Inc.) Hidden
Dell SupportAssist (HKLM\...\PC-Doctor for Windows) (Version: 1.1.6664.10 - Dell)
Dell SupportAssistAgent (HKLM-x32\...\{287348C8-8B47-4C36-AF28-441A3B7D8722}) (Version: 1.1.0.47 - Dell)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
diclovit's mod pack 9.9.0 (HKLM-x32\...\{28B1238E-1C18-4637-A2B7-95315E94EB29}_is1) (Version: 9.9.0 - diclovit)
Disciples III: Renaissance (HKLM-x32\...\Steam App 33670) (Version:  - Akella)
Dropbox (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Dropbox) (Version: 3.8.5 - Dropbox, Inc.)
DUNGEONS - Steam Special Edition (HKLM-x32\...\Steam App 57650) (Version:  - Realmforge Studios)
Empire: Total War (HKLM-x32\...\Steam App 10500) (Version:  - The Creative Assembly)
FINAL FANTASY XIV - A Realm Reborn (HKLM-x32\...\{2B41E132-07DF-4925-A3D3-F2D1765CCDFE}) (Version: 1.0.0000 - SQUARE ENIX CO., LTD.)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
GameRanger (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\GameRanger) (Version:  - GameRanger Technologies)
GameSpy Comrade (HKLM-x32\...\{176B3593-72F1-459C-829C-5E9671E2CB35}) (Version: 1.4.3.154 - GameSpy)
gnuplot 4.6.3 (HKLM-x32\...\{AB419AC3-9BC1-4EC5-A75B-4D8870DD651F}_is1) (Version: 4.6.3 - gnuplot development team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 44.0.2403.130 - Google Inc.)
Google Drive (HKLM-x32\...\{6EA8B94E-D869-4D96-88DF-5E1ECE1D6876}) (Version: 1.23.9648.8824 - Google, Inc.)
Google Toolbar for Internet Explorer (HKLM-x32\...\{2318C2B1-4965-11d4-9B18-009027A5CD4F}) (Version: 7.5.6710.2136 - Google Inc.)
Google Toolbar for Internet Explorer (x32 Version: 1.0.0 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.1 - Google Inc.) Hidden
GPL Ghostscript (HKLM\...\GPL Ghostscript 9.07) (Version: 9.07 - Artifex Software Inc.)
Grand Ages: Rome (HKLM-x32\...\Steam App 23450) (Version:  - Haemimont Games)
GSview 5.0 (HKLM\...\GSview 5.0) (Version: 5.0 - Ghostgum Software Pty Ltd)
Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)
Happy Cloud Client (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\HappyCloud) (Version: 4.28 - Happy Cloud, Inc.)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
iCloud (HKLM\...\{709A2D23-C25E-47B5-9268-CB6FEE648504}) (Version: 4.1.1.53 - Apple Inc.)
Imperium Romanum: Gold Edition (HKLM-x32\...\Steam App 23400) (Version:  - Haemimont Games)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 8.15.10.2462 - Intel Corporation)
iTunes (HKLM\...\{6CF1A7E2-8001-4870-9F18-3C6CDD6FE9E3}) (Version: 12.2.1.16 - Apple Inc.)
Java 8 Update 45 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418045F0}) (Version: 8.0.450 - Oracle Corporation)
Java 8 Update 45 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218045F0}) (Version: 8.0.450 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
League of Legends (HKLM-x32\...\{92606477-9366-4D3B-8AE3-6BE4B29727AB}) (Version: 1.3 - Riot Games)
LibreOffice 4.0.1.2 (HKLM-x32\...\{604B2A5C-B1CE-45B2-ADCC-6B7C721AC3AC}) (Version: 4.0.1.2 - The Document Foundation)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Medieval II Total War (HKLM-x32\...\{C0698BDA-0D29-40EE-8570-A31106DF9AB1}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Americas (HKLM-x32\...\{75983B66-804C-40D1-BA13-64DAF652A6F1}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Britannia (HKLM-x32\...\{CEDDEE73-3D36-41C2-AA40-29355D9FBD63}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Crusades (HKLM-x32\...\{02A10468-2F1C-447C-AD8E-4DEDDEA25AE2}) (Version: 1.03.000 - SEGA)
Medieval II Total War : Kingdoms : Teutonic (HKLM-x32\...\{7AEE1963-7001-4C37-BC20-2FAEB74AA41C}) (Version: 1.03.000 - SEGA)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 15.0.4737.1003 - Microsoft Corporation)
Microsoft Office Klick-und-Los 2010 (HKLM-x32\...\Office14.Click2Run) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft Office Starter 2010 - Deutsch (HKLM-x32\...\{90140011-0066-0407-0000-0000000FF1CE}) (Version: 14.0.4763.1000 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
MiKTeX 2.9 (HKLM-x32\...\MiKTeX 2.9) (Version: 2.9 - MiKTeX.org)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 30.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 30.0 (x86 de)) (Version: 30.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 30.0 - Mozilla)
MSI ODD Monitor (HKLM-x32\...\InstallShield_{B7D9BAAA-F068-4BF8-B929-462C3A8AB677}) (Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.)
MSI ODD Monitor (x32 Version: 1.0.0.5 - Micro-Star Int'l Co., Ltd.) Hidden
Mumble 1.2.4 (HKLM-x32\...\{AF348C2E-7596-481B-92E0-B211836AB949}) (Version: 1.2.4 - Thorvald Natvig)
MuseScore 1.3 (HKLM-x32\...\MuseScore) (Version: 1.3.0 - Werner Schweer and Others)
NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 344.48 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 344.48 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 344.48 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.32.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.32.1 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.14.0702 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.14.0702 - NVIDIA Corporation)
NWZ-E450 WALKMAN Guide (HKLM-x32\...\{0A6C2811-AD29-473F-8086-F0B401276DEC}) (Version: 2.1.0.17210 - Sony Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4737.1003 - Microsoft Corporation) Hidden
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Pando Media Booster (HKLM-x32\...\{980A182F-E0A2-4A40-94C1-AE0C1235902E}) (Version: 2.6.0.8 - Pando Networks Inc.)
QuickTime 7 (HKLM-x32\...\{627FFC10-CE0A-497F-BA2B-208CAC638010}) (Version: 7.77.80.95 - Apple Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6494 - Realtek Semiconductor Corp.)
Rome: Total War - Alexander (HKLM-x32\...\Steam App 4770) (Version:  - The Creative Assembly)
Rome: Total War (HKLM-x32\...\Steam App 4760) (Version:  - The Creative Assembly)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
Shogun - Total War - Gold Edition (HKLM-x32\...\{8A03FE64-0C8B-4E8F-B488-F36BA40A8640}) (Version: 1.00.0000 - The Creative Assembly)
Sid Meier's Civilization 4 Complete (HKLM-x32\...\{30D1F3D2-54CF-481D-A005-F94B0E98FEEC}) (Version: 1.74 - Firaxis Games)
Spotify (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB)
Star Trek Online (HKLM-x32\...\Star Trek Online) (Version:  - Cryptic Studios)
Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version:  - Petroglyph)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
STAR WARS® - Galactic Battlegrounds Saga (HKLM-x32\...\1421404646_is1) (Version: 2.0.0.2 - GOG.com)
StarCraft (HKLM-x32\...\StarCraft) (Version:  - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
StarCraft II Beta (HKLM-x32\...\StarCraft II Beta) (Version: 2.0.0.23077 - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Stronghold Crusader HD (HKLM-x32\...\Steam App 40970) (Version:  - FireFly Studios)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.6 - TeamSpeak Systems GmbH)
TeXnicCenter Version 2.0 Beta 1 (HKLM\...\TeXnicCenter_is1) (Version: 2.0 Beta 1 - The TeXnicCenter Team)
The Lord of the Rings Online™ (HKLM-x32\...\Steam App 212500) (Version:  - Turbine, Inc.)
Total War: ROME II (HKLM-x32\...\Steam App 214950) (Version:  - Creative Assembly)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)
Tropico (HKLM-x32\...\Steam App 33520) (Version:  - PopTop Software)
Unity Web Player (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\UnityWebPlayer) (Version:  - Unity Technologies ApS)
Warcraft III (HKLM-x32\...\Warcraft III) (Version:  - Blizzard Entertainment)
Warhammer Online: Age of Reckoning (HKLM-x32\...\Warhammer Online: Age of Reckoning) (Version:  - Electronic Arts)
Warhammer® 40,000™: Dawn of War® II – Retribution™ (HKLM-x32\...\Steam App 56400) (Version:  - Relic Entertainment)
WildStar (HKLM-x32\...\WildStar) (Version:  - NCSOFT)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
World of Tanks (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warplanes (HKLM-x32\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C813EU}_is1) (Version:  - Wargaming.net)
World of Warships (HKU\S-1-5-21-2025296424-690445150-2269518065-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
XSplit Gamecaster (HKLM-x32\...\{D7BEC6E9-5E86-44FF-AA21-23DA71ED676B}) (Version: 2.4.1506.1243 - SplitmediaLabs)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{cbd31018-8e26-442c-b791-0d5a2dc52d3f}\InprocServer32 -> C:\Windows\system32\dfshim.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2025296424-690445150-2269518065-1001_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\*****\AppData\Roaming\Dropbox\bin\DropboxExt64.27.dll (Dropbox, Inc.)

==================== Wiederherstellungspunkte =========================

19-06-2015 19:37:03 Windows Update
23-06-2015 12:36:31 Windows Update
26-06-2015 16:59:35 Windows Update
30-06-2015 11:08:50 Windows Update
07-07-2015 14:45:41 Windows Update
08-07-2015 02:13:35 DirectX 9.0 wurde installiert
10-07-2015 16:15:57 Windows Update
14-07-2015 14:14:07 Windows Update
15-07-2015 05:57:23 Windows Update
15-07-2015 17:24:02 Windows Update
16-07-2015 19:32:26 Installed XSplit Gamecaster
19-07-2015 21:48:26 Entfernt Rome - Total War - Gold Edition
21-07-2015 15:31:51 Windows Update
22-07-2015 03:00:16 Windows Update
28-07-2015 10:05:34 Windows Update
29-07-2015 00:45:23 Windows Update
01-08-2015 17:37:44 Windows Update
04-08-2015 23:19:46 Windows Live Essentials
04-08-2015 23:22:07 DirectX wurde installiert
04-08-2015 23:23:13 DirectX wurde installiert
04-08-2015 23:24:28 DirectX wurde installiert
04-08-2015 23:26:47 WLSetup
04-08-2015 23:41:48 AVG PC TuneUp 2015 wird entfernt
04-08-2015 23:42:44 AVG PC TuneUp 2015 wird entfernt
04-08-2015 23:43:37 AVG PC TuneUp 2015 (de-DE) wird entfernt
04-08-2015 23:51:33 Windows Update
08-08-2015 00:50:40 AVG PC TuneUp 2015 wird entfernt
08-08-2015 00:53:07 AVG PC TuneUp 2015 (de-DE) wird entfernt
08-08-2015 00:53:55 Windows Update
08-08-2015 17:37:13 JRT Pre-Junkware Removal

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {03C20EC4-40F1-4736-B58B-841D9238FE78} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {0E897781-5457-4E56-AC1D-4958A8151EE7} - System32\Tasks\{FEFF5C65-B1CE-4B65-B02C-D0B2955F5EDB} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-90.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist"
Task: {30DC20C1-9AD5-46DC-914C-05F55D57FCEB} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {36A75BD1-C1FC-43E5-B5D9-278175107813} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-06-09] (Microsoft Corporation)
Task: {4069B3FC-2DA2-447A-9744-EFEA6A95E0F3} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {4465B507-AD8A-4E9A-B9B0-417D14EE6E6E} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {65D30786-D67E-476F-A07B-31AE1240421E} - System32\Tasks\Apple Diagnostics => C:\Program Files (x86)\Common Files\Apple\Internet Services\EReporter.exe [2015-04-26] (Apple Inc.)
Task: {727C874E-08D9-48F5-AD14-2CF779759EF6} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.)
Task: {87A603EB-E64F-4596-B57E-20E465F8C720} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {B3BCD2E7-F24D-4AC6-8AFC-17322662FBB2} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-18] (Dropbox, Inc.)
Task: {B8318A20-6BA9-4F3F-A8B8-E5FE073B0513} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-07-15] (Adobe Systems Incorporated)
Task: {C181E0D5-A935-4D88-B2C7-7D097C317E46} - System32\Tasks\PCDEventLauncherTask => C:\Program Files\Alienware\SupportAssist\sessionchecker.exe [2015-05-25] (PC-Doctor, Inc.)
Task: {C4EC3CD5-60E7-422C-8F52-5B2924ACD6A4} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-10-21] (Google Inc.)
Task: {D00721E5-2540-483F-8323-4AE71B53791C} - System32\Tasks\SystemToolsDailyTest => uaclauncher.exe
Task: {D0CA070E-7436-46EF-9128-D0DDBD4451B5} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-07-01] (Microsoft Corporation)
Task: {D5D16122-8D52-49BA-A53F-060CF711B465} - System32\Tasks\Dell SupportAssistAgent AutoUpdate => C:\Program Files (x86)\Dell\SupportAssistAgent\bin\SupportAssist.exe [2015-06-11] (Dell Inc.)
Task: {F4BF3CD9-278D-4500-9875-1A825B8A5A9B} - System32\Tasks\{13FFD5A0-546B-4A2E-A0F2-8AC4715EF0B9} => pcalua.exe -a "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist\vcredist_x86-100-sp1.exe" -d "C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\redist"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001Core.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2025296424-690445150-2269518065-1001UA.job => C:\Users\*****\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-11-03 05:59 - 2014-10-16 18:54 - 00012104 _____ () C:\Program Files\NVIDIA Corporation\CoProcManager\detoured.dll
2012-01-20 14:06 - 2014-10-16 16:11 - 00116880 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-01-20 23:35 - 2015-01-20 23:35 - 00085832 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2015-05-15 16:26 - 2015-05-15 16:26 - 01346344 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2014-03-21 17:20 - 2014-05-20 09:19 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2012-01-20 22:53 - 2011-07-26 20:37 - 00094208 _____ () C:\Windows\System32\IccLibDll_x64.dll
2014-11-23 04:29 - 2014-11-19 02:55 - 06277952 _____ () C:\Users\*****\AppData\Local\Amazon Music\Amazon Music Helper.exe
2015-06-16 15:29 - 2015-06-16 15:29 - 00016384 ____N () C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.WowDb.dll
2015-06-16 15:29 - 2015-06-16 15:29 - 00035840 ____N () C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.Advertising.dll
2015-06-16 15:29 - 2015-06-16 15:29 - 00099840 ____N () C:\Users\*****\AppData\Local\Apps\2.0\7NC9HZKJ.11C\3ZKW4BG8.487\curs..tion_9e9e83ddf3ed3ead_0005.0001_fb8944c2684f5b6c\Curse.CurseClient.CMOD2.dll
2015-03-31 14:09 - 2015-05-20 03:28 - 00107256 _____ () C:\Program Files\Alienware\SupportAssist\libCSharpCommonCS.dll
2015-03-31 14:09 - 2015-05-20 03:28 - 00553720 _____ () C:\Program Files\Alienware\SupportAssist\libAsapiCSharp.dll
2015-04-22 22:32 - 2015-04-22 22:32 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-04-22 22:32 - 2015-04-22 22:32 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-08-09 16:09 - 2015-08-09 16:09 - 02960384 _____ () C:\Program Files\AVAST Software\Avast\defs\15080900\algo.dll
2012-01-20 22:54 - 2014-10-16 18:54 - 00013120 _____ () C:\Program Files (x86)\NVIDIA Corporation\CoProcManager\detoured.dll
2015-05-15 16:27 - 2015-05-15 16:27 - 01044776 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2015-08-09 16:32 - 2015-08-09 16:32 - 00071168 _____ () c:\Users\*****\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpgf3wd2.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00012800 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00779776 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-31 16:51 - 2015-07-17 02:31 - 00056320 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 23:45 - 2015-07-17 02:31 - 00012288 _____ () C:\Users\*****\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-04-22 22:32 - 2015-04-22 22:32 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2015-08-08 00:26 - 2015-08-08 00:26 - 00012288 _____ () C:\Program Files (x86)\Google\Chrome\Application\WTSAPI32.dll
2015-08-05 03:08 - 2015-07-31 08:19 - 01405768 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libglesv2.dll
2015-08-05 03:08 - 2015-07-31 08:19 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\44.0.2403.130\libegl.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2025296424-690445150-2269518065-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\*****\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [TCP Query User{0251ACFB-8F10-4242-82D5-75D58E223008}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe
FirewallRules: [UDP Query User{ADC9FDE2-F4EB-4C85-9582-A86AF231B1DB}C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe] => (Allow) C:\users\*****\appdata\local\temp\fritz!wlanrepeater310\fsetup.exe
FirewallRules: [{EE519961-DFE1-47CB-ABC2-400DC1206F93}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{0EBA76C8-A25F-4899-A025-7AB08C5BDB40}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{50935E8B-8DD1-455D-A9BB-A8D648BBF707}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{F638167A-5DC7-4D25-8AA7-2F1CC486DBB2}] => (Allow) E:\AVM_FRITZ!WLAN_Repeater_310_Assistent.exe
FirewallRules: [{914446D5-53EB-4EDB-94D7-F23CAFAADA5B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe
FirewallRules: [{C7EA0C2E-5216-4808-8AEA-1E0749EA260E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1040\Agent.exe
FirewallRules: [{CB4993E2-1739-4AF0-B269-A182883F794E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [{F64284A3-396B-4F0D-9295-73FAF85A9549}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1544\Agent.exe
FirewallRules: [TCP Query User{015752AF-CC12-4844-9107-5B23BB3FE8AB}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{7C437135-EF71-4065-9981-FD87E5C8DEBA}C:\users\*****\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\*****\appdata\roaming\spotify\spotify.exe
FirewallRules: [{349F76F6-0E43-4A72-AAFC-247A6842E9E4}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{CC92EC73-9332-4A30-B762-4780B8AC809D}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{BA0DC8FF-F484-48E1-B463-D91F2F1BA6CA}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{C79CA4D9-C1A4-4ED6-A73F-BB2339CD0261}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{943A8B51-7349-45DC-9254-E0EFB47EB7DA}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [UDP Query User{E3577156-3EA3-4A26-946B-870F42C076A5}C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [{8F64E7C7-F2B4-43AF-B4BE-FDDF2C613262}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [{4B9DA593-42B8-4232-BD37-70284244BBFC}] => (Allow) C:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{EFCD4C90-EA06-40FD-AD9A-2E50601401DD}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [UDP Query User{A7122FFD-F591-4013-9ECA-0FF851E65155}C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe] => (Allow) C:\spiele\starcraft ii\sc2-x.x.x.x-1.5.0.22342-enus-downloader.exe
FirewallRules: [{309A7FC0-7F0D-4344-8484-814CEA4213A0}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [{12F0F1B9-46B7-4DF1-8DCD-448D9EADA4EA}] => (Allow) C:\Spiele\StarCraft II\StarCraft II Public Test.exe
FirewallRules: [TCP Query User{8FFD5267-9A2B-48C2-8F06-BFC2AF806F29}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [UDP Query User{03F5CCBC-11D8-4E50-9810-1EC1CF981A39}C:\spiele\starcraft ii\versions\base23260\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base23260\sc2.exe
FirewallRules: [{B9401DBC-3331-46B0-9CA3-77038CCD2C6E}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{DF284FCB-ED45-452B-BAC1-BEEC4A455B14}] => (Allow) C:\Users\*****\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{11D3468E-4DCB-4BD5-B3E8-7F1E27A948F5}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{A41BA3B0-96D6-40AB-9FCA-BCD1B2791EEF}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{42A3892E-23BE-439B-9507-F7619A426826}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{4E23E1FB-C0D6-49E9-AAB1-27D72C79F843}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{C741D5EB-A2E2-4675-9E05-866F8BB21349}] => (Allow) C:\Program Files (x86)\Pando Networks\Media Booster\PMB.exe
FirewallRules: [{FBECEDCA-5409-45AC-B941-9424882B389B}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [{43AED376-03F3-4844-8621-F24C53765706}] => (Allow) C:\Program Files (x86)\StarCraft II 2012 Beta\StarCraft II Beta.exe
FirewallRules: [{F8F95744-2953-4E94-BB46-3F5616602006}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe
FirewallRules: [{4AE95902-BE71-4EC9-AB5D-98260BC2CFFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1637\Agent.exe
FirewallRules: [TCP Query User{5FF02B8C-680A-4FE8-AC98-B3E0218FFB4C}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [UDP Query User{6C752DA4-F222-4E54-A846-4E10047EB128}C:\spiele\starcraft ii\versions\base24944\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base24944\sc2.exe
FirewallRules: [{5D2B5538-9D14-41FE-A7D6-6152D5B14D31}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{B71B1F03-5326-4897-A528-8ED39B1A1C49}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1675\Agent.exe
FirewallRules: [{3CEF8494-3EF5-4D6F-95FE-2C2108688812}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{E02C4A51-8790-44F2-BFFB-32DC03E24486}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{24BF9231-06B3-4962-84DF-419C8030F114}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{A76F92AA-6071-4133-9D03-E692D3459DDA}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{E4C884D4-7FC4-4C78-8E06-DCD37188AF90}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{B4C1BA76-4008-4E6F-B4C5-E63C5A9A4962}] => (Allow) C:\Program Files (x86)\Electronic Arts\BioWare\Star Wars - The Old Republic\launcher.exe
FirewallRules: [{7D7E9C8C-DEBD-4B86-A24F-00E54BDDA613}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{C635E2E8-0684-4EAF-B6A3-712055BF595D}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{BA861A84-22A8-4F0B-A836-07BC1BC84599}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt
FirewallRules: [{24030535-9C04-4370-B3B8-2FFDD5419CC0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\Readme.txt
FirewallRules: [{EEB28177-078B-47A4-A1E9-32CB98A1B998}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf
FirewallRules: [{C757B3B0-8F6F-4803-9A30-086BC588C713}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders\QuickStart.pdf
FirewallRules: [{EC7636C5-27E0-44E4-AE2B-C951ABCBE837}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html
FirewallRules: [{9C1BDABF-2443-4B1D-8D40-09EAC3498DC3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Readme.html
FirewallRules: [{3DC71454-4E25-4044-9C2F-2A36067BF271}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf
FirewallRules: [{7ECB4059-9323-422C-A4E8-47AD5BEA7A63}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\QuickStart.pdf
FirewallRules: [{45FF3A56-0CF5-4337-A78F-49E65B1DE721}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [{D79A69F9-026C-4197-AB97-16CA202E638C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.1737\Agent.exe
FirewallRules: [TCP Query User{80DA892B-37F0-4281-AD10-BB3F5E7E8381}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [UDP Query User{42E5E64D-7ED8-44E4-9DB1-085EF7B8B41E}C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe] => (Allow) C:\users\public\games\cryptic studios\star trek online\live\gameclient.exe
FirewallRules: [{C13CEAD8-59FF-497D-9A4F-5E0370FFD512}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{4D1FC9AB-F8D1-4F7D-9673-0B2544313F51}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{54575BE3-5FC3-4F08-95E5-33AB82BC1E54}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{578D9506-D945-43B6-B9B2-203B50311BBA}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B2ADAAD8-60DE-4BD9-8D4E-D797C5D00140}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{55F46406-342A-44B8-8C59-FCE17E82013D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{BF4E595F-8E17-4043-9FB7-C3A94C12D244}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{EE9D656A-5709-41A1-A241-9B83DD5C36CF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{7AEAD203-01C2-4850-AE70-6B08C5ABC495}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{95AE7B89-390A-496F-B196-F0EBED984870}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{084B75D9-AF72-4409-8C88-6DBBD3665E0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{DDD30F9A-3050-4B07-B288-2CFC3D1FF1D0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2000\Agent.exe
FirewallRules: [{895C1FD9-A7C3-490D-BBFA-5840A6E956A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [{D155A490-7844-42C7-A178-1C09AA7FC231}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2006\Agent.exe
FirewallRules: [{A6196099-492C-466F-ADCB-44469AF7B84F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{6B24D139-7AC0-46FB-BBB7-62B4B444D691}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2045\Agent.exe
FirewallRules: [{68A02C29-E545-4F3F-B1B1-ECE94A0FC97A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [{4D8CCB77-F9AE-46F2-8A78-BF9B6850DF62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Command and Conquer Red Alert 3\Support\EA Help\Electronic_Arts_Technical_Support.htm
FirewallRules: [TCP Query User{CB28A092-7F4B-4D49-AA5C-3981737BA3E4}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [UDP Query User{F0193006-DDBF-4469-98E5-165044C5D09A}C:\spiele\starcraft ii\versions\base26490\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base26490\sc2.exe
FirewallRules: [TCP Query User{E9FDD513-4F3E-4852-BBEB-EB08DAD7F562}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe
FirewallRules: [UDP Query User{EFDD6A7A-C4F8-44F5-A2B5-39A5B70A77F6}C:\users\*****\appdata\local\temp\gw2.exe] => (Allow) C:\users\*****\appdata\local\temp\gw2.exe
FirewallRules: [TCP Query User{DF5D6BD4-01C5-4576-841E-907E29BF701E}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe
FirewallRules: [UDP Query User{70EBBC55-7CC3-49C5-BA00-A38A0EAB5E78}C:\spiele\guild wars 2\gw2.exe] => (Allow) C:\spiele\guild wars 2\gw2.exe
FirewallRules: [{DD4A98A4-3190-41EE-AB6B-AA87AA3FB2FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe
FirewallRules: [{80704D14-32F9-4725-915D-5855A73903FC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2163\Agent.exe
FirewallRules: [{C4C50AF8-FDBD-4E7D-BF98-38B934C58F8A}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{8202CD3A-B7B2-4026-9017-87F7CDA99928}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [TCP Query User{C9BC03BB-898B-43EB-A357-2A7690041E96}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe
FirewallRules: [UDP Query User{1662C0B1-6221-4F19-B7C5-571C2321F5E2}C:\programdata\battle.net\agent\agent.beta.2293\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2293\agent.exe
FirewallRules: [{2DDEC01C-6A21-42B8-A287-8F182BAEDF6D}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{F829CDDC-B1FC-4955-B765-889D62F4D8AE}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivboot.exe
FirewallRules: [{AF1A7839-A8BB-4F69-B9E2-1540096716F6}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{16F7A5B3-4B1C-4085-8971-BDA6A5C0EE44}] => (Allow) C:\Spiele\SquareEnix\FINAL FANTASY XIV - A Realm Reborn\boot\ffxivlauncher.exe
FirewallRules: [{A87862CF-AD30-4A2B-A516-465016EFA16B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{D0B48795-5047-463A-9371-5F33DCEE8E63}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2328\Agent.exe
FirewallRules: [{BD4D1AC5-D483-4E5D-A14A-4DC840DAA775}] => (Allow) C:\Users\*****\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{624E29F4-9DA6-4F81-8DE4-95CE91C4A6A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe
FirewallRules: [{26476F6A-D8DE-4A93-ADEF-B7F0FFFFA7DC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2359\Agent.exe
FirewallRules: [{0D3AF0A8-8801-4B78-842E-90B7BAD4D95C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{96576DF3-5A5D-4783-BA82-A978082F390F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{AB234224-89F6-49AC-984F-3E790888E7B0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [{88E49BE1-6DD3-4682-93B0-401DAFA5EF22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2391\Agent.exe
FirewallRules: [{E7F1B4BD-BCA4-453C-9EC4-2374538A57AD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{6C1189A1-95D1-4122-8DE2-350D79E8DF6B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2417\Agent.exe
FirewallRules: [{2A11819A-4F18-4FA1-BBD7-D56CB04D8360}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{0A0BD680-BBDD-4964-A896-111EBD886B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2426\Agent.exe
FirewallRules: [{5B22CC13-BFFC-4D5F-BD71-F5063CCE892F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [{939CF113-423A-4321-9F36-3D3172E9AB13}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2514\Agent.exe
FirewallRules: [TCP Query User{D8A05BD9-4C60-4C76-A77A-872D3EC843E3}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{FAA01B96-B795-44BD-BDE0-BF6D45F95B77}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{F704AC56-3787-48A1-B60E-D4AAD4A4E386}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{83ACC9A2-0CB6-4157-9CC9-FBBEF6040CBF}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{CA31BFEE-0F8B-4024-8E23-47AF5C3D03C8}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{DC684C0E-C6CF-46FE-B2F1-3E611685C5FD}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{46055201-620C-4BCD-94CC-4099AB13B541}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{E0B1E5DB-731E-4E07-AE2D-6A3EA6476A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [TCP Query User{0D9ED852-5DD9-4654-9D9E-9C1DD6DB4A69}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [UDP Query User{C68D42DD-55F8-4558-BEFF-08352016E6AB}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_engb.exe
FirewallRules: [TCP Query User{28DE63A4-CA9C-4313-81A7-7E30D89C41E8}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe
FirewallRules: [UDP Query User{0929412C-38BA-45B1-9BA5-A6B072C1B3F5}C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_reign_of_chaos_dede.exe
FirewallRules: [TCP Query User{5F3DC4B3-E3B9-4EC5-98F1-655FD5587AF3}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [UDP Query User{55E61591-BF26-4593-8E9E-153D7AFFD62D}C:\spiele\starcraft ii\versions\base28667\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base28667\sc2.exe
FirewallRules: [{66A92318-33CF-47FC-8A56-901C809EDAB9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{0B455E08-7215-4A7B-8F6E-76D4E9BBECF6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{5D4EAA31-BAA6-4C40-B9D7-3A3A57B61A72}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{DC23C8A2-4C71-49D7-9D8B-A3C39A438E6E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{32DD98BC-2B6C-4BD0-9F95-38A526213637}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{0DF7E29E-4627-4010-8E4E-795C62170D46}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{95A75987-BF1E-4D2B-8F25-F18FF281A6D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{F29C65E1-A615-404B-A72A-AFE401666C18}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [TCP Query User{284CE0CC-41B4-4A9A-80BA-0AB19AB1C27F}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe
FirewallRules: [UDP Query User{28CF3ACF-A0AE-433C-B758-0F5416684912}C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe] => (Allow) C:\program files (x86)\ncwest\nclauncher\ncupdatehelper.exe
FirewallRules: [{3F8D1AA0-FDF1-463B-A672-FFC4A5F27A01}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{F2EF8C94-6BB8-4B99-9A95-AEA7E27EA59F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{7A66ABAB-C574-41A4-AFE3-95F43948DFBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe
FirewallRules: [{763F94C6-4057-459E-958C-B8F38FCBAFA8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Disciples 3\DisciplesIII.exe
FirewallRules: [{72C41947-E771-4F58-9B66-3159CA4309C6}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE
FirewallRules: [{5E709D9D-4769-4849-80E1-70D56CAFBB5D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Tropico\Tropico.EXE
FirewallRules: [{E5836997-BD8A-444C-A42F-146734D12D0B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe
FirewallRules: [{B03C5E02-C80C-45A8-8DD8-EAD69CD12468}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dungeons\DungeonsStarter.exe
FirewallRules: [{5C05E1DC-FB5C-40C1-9250-F55E4D38F666}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe
FirewallRules: [{672FC1B7-C190-4EDD-81DD-9F31DD5CA392}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Imperium Romanum\Imperium Romanum.exe
FirewallRules: [{EDC9526A-FCD4-4A27-BDB0-02040DFE634A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe
FirewallRules: [{A8002DC8-B4C3-4E67-BCF3-09B36DA4DF87}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Lord of the Rings Online\TurbineInvoker.exe
FirewallRules: [TCP Query User{4C1BCE32-CCB2-476C-AA49-5CE419A2B51F}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe
FirewallRules: [UDP Query User{84A74773-E34A-4B2A-BA58-85E60E551BF2}C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\lord of the rings online\lotroclient.exe
FirewallRules: [{764C0B6E-EF20-444A-98C9-0475EED188E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe
FirewallRules: [{E7183E39-39AD-49F2-88A2-AC6F33FB0836}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Ages Rome\Rome.exe
FirewallRules: [{72FFA2F5-7067-4C40-8CC9-00F352A790C9}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [TCP Query User{092F9E08-81F4-4C78-813D-256F61EBC7D4}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [UDP Query User{DE830FD1-5A12-4461-84C7-83ACAAA7AF17}C:\windows\system32\javaw.exe] => (Allow) C:\windows\system32\javaw.exe
FirewallRules: [{7D08CB81-5A97-49D4-8786-0536F3468AF1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{DC025869-8125-442D-8C68-FA82F9CCDC4F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2753\Agent.exe
FirewallRules: [{81213F41-FDF4-4CD6-B16B-DF5BAC2C96BB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{05F72280-7DF9-4CCB-AC89-193F5F821AFA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{69CBA4F3-6075-4156-BEE1-3D90ECC59DC4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{160AADED-5837-49B2-9A80-1C9E41EB64BA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{CDEED061-B078-45CD-B523-59104B55E39E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{07120651-2E37-49A8-8E73-72124163EFF0}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{C27D5DF9-ECBA-4F0C-99A4-F963D67283EF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{44601D48-28E3-4A21-BDE3-24F1E2E41655}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{2EEF1A05-42E4-4F0A-9E91-C26F2987FDE1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{8A3F3961-8340-41AC-9276-CC735803FBC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{E0CE7F32-573B-4383-89E8-ADDA887EC05D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{11B0EEBB-FEF8-44DD-91F2-1B76046921E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Empire Total War\Empire.exe
FirewallRules: [{485B1DA4-3473-4337-8D14-904AE2349099}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{F85F7861-3927-4786-A50E-8019C9BD45B1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{4141D8F6-B1ED-4D33-968C-65E6728F044B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{37DA2E0A-0C1B-4E91-82C5-731DB056BEC3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{FE194A7A-3F19-4A59-A46A-C04C6341FBE8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{CBE25DEE-B29C-4747-91DE-7419F2E7E42E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{A2465D6C-8849-43A2-9F59-2DC913C3D8EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{FE25420B-B1F5-4592-A17E-09033A636F85}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{45D1BA0B-0E2D-4A19-A9DE-A380EC6A9AEB}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{0067A891-CBED-4815-B2D9-F549AB73E8FC}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{EE12FAB7-66C9-459B-A67A-C2C320D9BFB9}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{F6A37288-865D-4031-B856-66EAAD29F8DA}C:\users\*****\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\*****\appdata\local\akamai\netsession_win.exe
FirewallRules: [{33528BD2-21DE-4B47-84AD-E30DBC14FA0A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{18B81AF8-8A09-4719-B0B8-01BBCBD2093B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3286\Agent.exe
FirewallRules: [{1E5BC73E-05CA-47B9-AB6D-A58FB7E8681D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{D6A4DCEF-3BF1-4A05-A0A8-2B7E97E02497}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3322\Agent.exe
FirewallRules: [{DB163982-259D-4F73-8F0B-59D23C4ADA22}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{2D62B4C2-6E7E-434C-8565-9057ED30F8D5}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{D0722FB1-E41D-47DE-8F3B-513DD58D60E9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{2FA375AE-FAE3-4CA4-81A2-E27DD18DE170}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{284FF3D0-9031-4127-9107-1AF1B0A59002}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{64ED5AED-D8AB-4295-945C-AFEA943DAC2F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{66349D78-172B-4492-A79E-498E53642382}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{D01CCD26-5B59-419B-A26A-4403BCC035D2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{24AAF877-3C25-4916-B251-CDE779C0A033}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{91BCFF5B-FCEE-487A-B60A-5702EEC831C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{4AB85794-AA74-4EA4-A95F-B74716639EB1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{E35AB98E-72F3-4BE8-A92B-8ED6F73D7AF7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Stronghold Crusader Extreme\Stronghold Crusader.exe
FirewallRules: [{6734A585-A9ED-4413-BEA3-29F303C7A35D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{FEF460D3-6D89-4629-8CA0-E2542A595F40}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{76C85B40-77D6-40F1-8515-44424B0E7C8A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{B51ED9FB-02E5-421E-8C73-3B2E4E2E4ECA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of War II - Retribution\DOW2.exe
FirewallRules: [{DB6E781E-7A9D-4010-90F3-CBEDD5F2B05D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{6D4E4E4E-4D4A-4EF1-A6FA-2031EE12AF28}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{B2F74E8D-6356-490A-870C-514D2E7A6A06}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe
FirewallRules: [{14ECF0D5-8C32-4367-98F7-4C817402BDE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Dof.exe
FirewallRules: [{CEF4C40A-C4DE-4C7E-956D-1D26419CB58A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe
FirewallRules: [{A2708FCA-432B-412E-B206-C0DFB1A27107}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\dof_options.exe
FirewallRules: [{296F9BE3-B10E-4989-8763-24026D4765C9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe
FirewallRules: [{48AAB6BE-6774-4B6C-A48B-9C433BB1150C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dawn of Fantasy\Editor.exe
FirewallRules: [{182B9192-EEF2-4988-9614-83F3C9127A20}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe
FirewallRules: [{4EE6A53C-9516-405B-BCF9-7F3482853648}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Mythology\Launcher.exe
FirewallRules: [{7CCDE8F5-6BC8-4E63-A073-691929B28326}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{EFA7A645-1C6F-4F99-8A87-9C9093875683}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [TCP Query User{973449FF-EEB6-4194-9041-97FCBBEEA4D3}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{FB80D76E-234F-418B-AD57-6895A8FFC3B1}C:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{17BD02AF-CB8C-4850-BC3B-C17988F08D0C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{0E96E7B9-500F-4BD6-BEA0-CD74B4AF6A74}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [TCP Query User{222AF928-B487-4ABF-8DE2-39D9251C8BB9}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [UDP Query User{247B8F40-4C7E-4242-9107-08CEEBB2AC34}C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base32524\heroesofthestorm.exe
FirewallRules: [{12649B92-3DD0-471D-B876-E582037200D1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8A444CB3-9B24-4528-AE42-8E24E45A829A}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F0660EA7-1406-4995-9627-AF62F3516145}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{03FC81DF-28DC-44C7-A740-05F4F1A7E1C1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{4E8965C4-48E0-4A14-8B91-3EFBA57CCBE8}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{17911242-E19B-4BAE-B170-AC187A34D1B1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [TCP Query User{56D1A343-2EF6-4D75-8D54-F1E05B6E29DD}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{49EB5140-8CA1-4036-80E3-D00A247AFC56}C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [{69846FFB-ABF1-4324-B680-E3DC1ED53D5C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe
FirewallRules: [{9E428734-13B5-441E-91CE-E314FAD80674}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Alexander\testappa.exe
FirewallRules: [{FEA5A4C6-C218-427B-8D13-0512D5B02606}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B48C8E32-FAD6-448F-B17F-5F2758B91A96}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{3C6AF60C-FF76-4F3E-A289-810DD59F72BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe
FirewallRules: [{AFE9E6DE-8C75-4F8D-A3C5-AA7ED41ACEFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\csbtw.exe
FirewallRules: [{DB4E9A26-FF74-4B87-ABA1-7327DB6C8409}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe
FirewallRules: [{3935C411-E419-49EF-929C-9B76FCF4F265}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\HView.exe
FirewallRules: [{DDF6892C-FFAA-4250-BEEE-CCCEC26428BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe
FirewallRules: [{28D732BF-87D0-438A-A609-5840825B1BBF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\ScenarioEditor.exe
FirewallRules: [{EA5946D6-C7D7-484A-8B48-1F983701D10A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe
FirewallRules: [{8D439FCC-7044-4AB8-9264-7894FFB8AC72}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\cshlp.exe
FirewallRules: [TCP Query User{58A81076-8275-43E3-B870-B020E086A82F}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe
FirewallRules: [UDP Query User{6FF15508-5BF8-4BD0-882D-CF3A2F9EFFD4}C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe] => (Allow) C:\users\*****\downloads\downloader_warcraft3_the_frozen_throne_dede.exe
FirewallRules: [TCP Query User{87FFE026-5E60-47AE-A3BE-22EA19FFAF54}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [UDP Query User{91C55B66-6018-4EE8-B57D-62D1894BA95C}C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33182\heroesofthestorm.exe
FirewallRules: [{969152DF-1CCF-411E-9BB8-DB5BD1738C35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe
FirewallRules: [{5C4EAEF4-6A83-4408-9A0B-B304231DF5B8}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3.exe
FirewallRules: [{26A666C8-AEC7-47BB-9ECC-6A029C76962E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe
FirewallRules: [{73DEC31D-F4D4-4E0F-B05F-F6CA80BF3D27}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3_Debug.exe
FirewallRules: [{B664A03F-1900-4311-8C91-A7BECC601B70}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{580E11C3-A79B-42C7-AA06-272AC1FD3FD3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3632\Agent.exe
FirewallRules: [{1CE37571-84AF-4ABB-A8C0-0F49D43E7B06}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{A65F6C16-20BE-4EF6-A47F-1BDC1CB877A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [TCP Query User{418D07BE-F299-45FD-A943-B229AC5CDFF7}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{B596FDD7-D7DF-4C4E-B4C0-FEF78AA31B56}C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base33353\heroesofthestorm_x64.exe
FirewallRules: [{7FE1BCA9-6A41-464F-AB3F-3890D2BE994E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe
FirewallRules: [{74FB7430-B31F-4491-81F2-AEDE20A30555}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks II Battle for Europe\engine.exe
FirewallRules: [TCP Query User{2CF3AF33-F6DD-4B4E-A781-9E8AECA4B2DB}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe
FirewallRules: [UDP Query User{F955A202-37F3-48F3-9963-3F577936D3D8}C:\spiele\warcraft iii\war3.exe] => (Allow) C:\spiele\warcraft iii\war3.exe
FirewallRules: [TCP Query User{C4E26481-2674-4E8D-888C-F4B97390FEC8}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe
FirewallRules: [UDP Query User{0B8D3671-F421-4CDC-8F93-696568A6BF3A}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe
FirewallRules: [{4A804C86-3D0E-41DE-A04B-2059EACF56AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe
FirewallRules: [{9FDE1B25-0444-4B25-B783-01466B019093}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Art of War\dmcr.exe
FirewallRules: [{86FA98A5-C32A-4C18-B172-6FA5F7A3E6FD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe
FirewallRules: [{0F614910-EB72-40D7-8D1A-DB05AE45268B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks European Wars\dmcr.exe
FirewallRules: [{2D909357-E1CC-4059-9BE2-F378B8FD27ED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{AF215EA1-D65E-4EEC-B881-54BB260931F3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{A314D191-236D-40ED-A97C-84B1382CD9D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{FB41B73B-9FB7-40C0-A815-91B5844F0A86}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{86E95A74-3C2D-4477-AA16-63B960533EBE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{C62F2282-A632-4D45-A993-C605397278FA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{4970D921-573D-41C4-A499-D902776D0A75}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{5DA59697-126A-43BC-A76C-0FE5808F4CCD}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{DD125661-074D-4809-9CF5-D27BC63247FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{C7B96FA9-D8B3-4918-9FC5-8F0A026D9ABF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [TCP Query User{B0C11404-E047-4560-8C3E-2101487BFD17}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{5B614511-D2B5-42B2-8EFF-12DC63099362}C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34053\heroesofthestorm_x64.exe
FirewallRules: [{6FA08711-FA02-40F8-805A-A5BD4A8AD497}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{E0735F4D-C016-4CEA-992A-5BFCA16FA16F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [TCP Query User{531CD087-1FD3-427F-AEEF-9BF33B602A34}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{DE727DD4-956D-4030-AD53-B120E8617707}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{015258E0-1C61-470D-ABD0-03EE61DCB927}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{4E8E48CF-080F-4BF7-829B-631C0722201C}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{3A8335AE-1D56-420A-9BDA-366BCA204C4D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe
FirewallRules: [{40A574E9-9006-452E-9FCE-C35C7E812858}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AoW3\AoW3Launcher.exe
FirewallRules: [TCP Query User{7BFB73E4-059E-4EED-BCEC-962029B4051E}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{6DB8B4CD-B390-4FFD-9DEB-9FB8AC5F2269}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [{17D45D55-4125-48F6-AF03-BF7B3AC59F85}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{63368E35-39D1-46FA-BFA9-A5D306C7A786}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe
FirewallRules: [{FDB0D517-2621-49BA-8597-775AB1E8A634}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{A3697632-BF0A-4456-A039-157A637BE1DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{231218A3-A868-490B-B030-86724B751BE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{30C2BA34-E739-474A-AC9B-93121BF7C8F4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [TCP Query User{53B8DBD5-45C0-43D1-B13B-CB81DFC1B16A}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{8C707E14-4627-48DC-8728-B5A339D9ABA6}C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35360\heroesofthestorm_x64.exe
FirewallRules: [{43BDEF27-F8F0-4345-9C7D-C2BF58CBB437}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe
FirewallRules: [{E38F3897-DD1B-4976-AE52-F8948D2BB03C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cossacks Back to War\bin\dmcr.exe
FirewallRules: [{D205C38A-492F-4E56-8801-15058FCFC727}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe
FirewallRules: [{EC3782A0-77B6-4B0A-84AA-E761E30432FE}] => (Allow) C:\Windows\SysWOW64\dplaysvr.exe
FirewallRules: [TCP Query User{28011C1A-4696-4E42-965F-ECE7815D1622}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{0EB3380C-9299-40AB-8DDA-DCF9B6087A14}C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35634\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{B7ECFE66-DF75-4475-B1DB-D567E76E0EA5}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{44719AD9-4ABF-4838-AA5F-77A657E4AAC1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [{E3E0B992-FD0D-44A1-9586-C4506C473FA2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{A6FD4105-28B5-444D-9386-5DFDE2C14A88}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age2HD\Launcher.exe
FirewallRules: [{8A2CF538-1720-4AC5-9F70-C86C962079F7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{97CFB8D5-F8A3-4846-89CA-B467D49799E1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{F33EE6CA-7BE1-46BE-81C8-F4BD07142991}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{A989471E-8638-431E-BEA7-5E54F3082EFE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{7C9D21DF-71D7-4C87-9C83-89933FB885C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{235D4BEF-91AB-4A6E-8544-862644AC41B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{FD7F8105-195E-4FA7-9D06-58BB46664F9A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{C1E509A6-9625-4C8F-ADB5-7C010B4FE60B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW.exe
FirewallRules: [{CBD45096-A07E-45AE-8636-E292FDAFABE5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{9AD02822-07CD-4D8E-A516-A8B8B0DC174C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rome Total War Gold\RomeTW-BI.exe
FirewallRules: [{CDB75FA1-71E4-43C1-8089-F1863611FE36}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe
FirewallRules: [{28DD4323-0A6F-4FB6-A483-DD98025EC013}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\Launcher.exe
FirewallRules: [{4D87DB15-E63B-48D5-BA12-B4BAAD0BFE9E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe
FirewallRules: [{B19ABA1C-9040-4FE8-876C-2D54E7429DFB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\aow2Setup.exe
FirewallRules: [{44341CF7-ED26-4B09-BE7B-8446914DD25E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe
FirewallRules: [{E823473E-E459-483A-9F1D-04771754E682}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Age of Wonders 2\AoW2Ed.exe
FirewallRules: [TCP Query User{41F66013-E76E-478D-B5AF-C717F6488426}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe
FirewallRules: [UDP Query User{044E35C7-522D-4C58-B75A-70DED3A3FD2F}C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe] => (Allow) C:\gog games\star wars - galactic battlegrounds\game\battlegrounds_x1.exe
FirewallRules: [TCP Query User{92DAD1C6-8E81-4C18-90D4-9BF3A3B224D4}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe
FirewallRules: [UDP Query User{8C200012-F04E-41F1-999E-28C84B1757B7}C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\age of wonders 2\aow2.exe
FirewallRules: [TCP Query User{89F2BBBC-3ADA-415C-8A60-75C998A85EA9}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{4D9A295B-93BF-464C-8E14-DB2E4ECE2CCB}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [TCP Query User{E585902E-45FB-459E-9833-D51B3A0B97FA}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [UDP Query User{65B80045-A974-4840-A504-1716D37F8292}C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) C:\program files (x86)\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [TCP Query User{283F0FDB-5D18-4F6C-A46B-A191A532FE1E}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{019383CE-32E6-4661-8CE8-6A6939D05215}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [{BD7D71B3-8412-4386-B4D7-4575D87D5493}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{814D5851-E61E-42F5-B6E5-D3C3A05F0D09}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4A6C6276-8A80-4477-BA8B-12FC552E90B9}] => (Allow) LPort=2869
FirewallRules: [{E1B4F73D-B362-4B08-9CB3-30C171E1C3CF}] => (Allow) LPort=1900
FirewallRules: [{71D1E2BF-B86A-4C9A-A9EC-7F3078EA4515}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{555FF4A6-13F9-4E46-8275-9BEA4F1B89FF}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe
FirewallRules: [{526A9CE3-1D4E-4FCA-9EAF-919C328E0DDE}] => (Allow) C:\Program Files (x86)\Apowersoft\Apowersoft Free Audio Recorder\Apowersoft Free Audio Recorder.exe
FirewallRules: [{6C3427F9-7B29-4CAA-B40D-43C2814D5E12}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: avast! Firewall NDIS Filter Miniport
Description: avast! Firewall NDIS Filter Miniport
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: ALWIL Software
Service: aswNdis
Problem: : Windows cannot start this hardware device because its configuration information (in the registry) is incomplete or damaged. (Code 19)
Resolution: A registry problem was detected.
 This can occur when more than one service is defined for a device, if there is a failure opening the service subkey, or if the driver name cannot be obtained from the service subkey. Try these options:
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.
Click "Uninstall", and then click "Scan for hardware changes" to load a usable driver.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (08/09/2015 10:41:07 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 10:07:32 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 05:50:53 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 04:39:46 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 04:36:34 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.

Error: (08/09/2015 04:36:29 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest1". Fehler in
Manifest- oder Richtliniendatei "C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest2" in Zeile C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.


Systemfehler:
=============
Error: (08/09/2015 10:09:16 PM) (Source: ipnathlp) (EventID: 31004) (User: )
Description: 0

Error: (08/09/2015 05:53:30 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (08/09/2015 05:53:30 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/09/2015 05:53:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (08/09/2015 05:53:29 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/09/2015 05:53:29 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (08/09/2015 05:53:29 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/09/2015 05:53:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (08/09/2015 05:53:28 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\CHRIST~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (08/09/2015 05:53:28 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275


Microsoft Office:
=========================
Error: (08/09/2015 10:41:07 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe

Error: (08/09/2015 10:07:32 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestc:\users\*****\desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 05:50:53 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 05:50:50 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 04:39:46 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 04:39:43 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 04:36:34 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Desktop\esetsmartinstaller_deu.exe

Error: (08/09/2015 04:36:29 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifestC:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifestC:\Users\*****\Downloads\esetsmartinstaller_deu.exe


CodeIntegrity:
===================================
  Date: 2015-08-04 23:40:33.548
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-08-04 23:40:33.427
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpx.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-08-04 23:40:32.760
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2015-08-04 23:40:32.474
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume3\Program Files (x86)\AVG\AVG PC TuneUp\avgdumpa.exe" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen =========================== 

Processor: Intel(R) Core(TM) i5-2320 CPU @ 3.00GHz
Prozentuale Nutzung des RAM: 39%
Installierter physikalischer RAM: 8086.79 MB
Verfügbarer physikalischer RAM: 4877.97 MB
Summe virtueller Speicher: 16171.78 MB
Verfügbarer virtueller Speicher: 12635.61 MB

==================== Laufwerke ================================

Drive c: (OS) (Fixed) (Total:930.74 GB) (Free:205.39 GB) NTFS
Drive d: (ROMETWGOLD) (CDROM) (Total:3.58 GB) (Free:0 GB) UDF

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or Vista) (Size: 931.5 GB) (Disk ID: 606F7C4F)
Partition 1: (Not Active) - (Size=39 MB) - (Type=DE)
Partition 2: (Active) - (Size=752 MB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=930.7 GB) - (Type=07 NTFS)

==================== Ende von log ============================
         

So. Jetzt sollten alle logfiles da sein, die ich dir hochladen sollte.

Alt 09.08.2015, 22:02   #8
M-K-D-B
/// TB-Ausbilder
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Wenn du keine Probleme mehr mit Malware hast, dann sind wir hier fertig. Deine Logdateien sind sauber.
Zum Schluss müssen wir noch ein paar abschließende Schritte unternehmen, um deinen Pc aufzuräumen und abzusichern.


Cleanup:
(Die Reihenfolge ist hier entscheidend)

Falls Defogger verwendet wurde: Erneut starten und auf Re-enable klicken.

Falls Combofix verwendet wurde:
Combofix deinstallieren
  • Wichtig: Bitte Antivirus-Programm, evtl. vorhandenes Skript-Blocking und Anti-Malware Programme deaktivieren.
  • Drücke bitte die + R Taste und schreibe Combofix /Uninstall in das Ausführen-Fenster.
  • Klicke auf OK.
    Damit wird Combofix komplett entfernt und der Cache der Systemwiederherstellung geleert.
  • Nun die eben deaktivierten Programme wieder aktivieren.

Alle Logs gepostet? Dann lade Dir bitte DelFix herunter.
  • Schließe alle offenen Programme.
  • Starte die delfix.exe mit einem Doppelklick.
  • Setze vor jede Funktion ein Häkchen.
  • Klicke auf Start.

Hinweis: DelFix entfernt u.a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
Starte Deinen Rechner abschließend neu. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein, kannst Du diese bedenkenlos löschen.

Wenn Du möchtest, kannst Du hier sagen, ob Du mit mir und meiner Hilfe zufrieden warst...und/oder das Forum mit einer kleinen Spende unterstützen.


Absicherung:
Beim Betriebsystem Windows die automatischen Updates aktivieren. Auch die sicherheitsrelevante Software sollte immer nur in der aktuellsten Version vorliegen:

Browser
Java
Flash-Player
PDF-Reader

Sicherheitslücken in deren alten Versionen werden dazu ausgenutzt, um beim einfachen Besuch einer manipulierten Website per "Drive-by" Malware zu installieren.
Ich empfehle z.B. die Verwendung von Mozilla Firefox statt des Internet Explorers. Zudem lassen sich mit dem Firefox auch PDF-Dokumente öffnen.

Aktiviere eine Firewall. Die in Windows integrierte genügt im Normalfall völlig.

Verwende ein einziges der folgenden Antivirusprogramme mit Echtzeitscanner und stets aktueller Signaturendatenbank:

   
 
 


Zusätzlich kannst Du Deinen PC regelmäßig mit Malwarebytes Anti-Malware und ESET scannen.

Optional:
Adblock Plus Kann Banner, Pop-ups, Videowerbung, Tracking und Malware-Seiten blockieren.
NoScript Verhindert das Ausführen von aktiven Inhalten (Java, JavaScript, Flash,...) für sämtliche Websites. Man kann aber nach dem Prinzip einer Whitelist festlegen, auf welchen Seiten Scripts erlaubt werden sollen.
Ghostery Erkennt und blockiert Tracker, Web Bugs, Pixel und Beacons und weitere Scripte, die das Surfverhalten ausspähen/beobachten.
Malwarebytes Anti Exploit: Schützt die Anwendungen des Computers vor der Ausnutzung bekannter Schwachstellen.


Lade Software von einem sauberen Portal wie .
Wähle beim Installieren von Software immer die benutzerdefinierte Option und entferne den Haken bei allen optional angebotenen Toolbars oder sonstigen, fürs Programm, irrelevanten Ergänzungen.
Um Adware wieder los zu werden, empfiehlt sich zunächst die Deinstallation sowie die anschließende Resteentfernung mit Adwcleaner .


Abschließend noch ein paar grundsätzliche Bemerkungen:
Ändere regelmäßig Deine wichtigen Online-Passwörter und erstelle regelmäßig Backups Deiner wichtigen Dateien oder des Systems.
Der Nutzen von Registry-Cleanern, Optimizern usw. zur Performancesteigerung ist umstritten. Ich empfehle deshalb, die Finger von der Registry zu lassen und lieber die windowseigene Datenträgerbereinigung zu verwenden.

Hinweis: Bitte gib mir eine kurze Rückmeldung wenn alles erledigt ist und keine Fragen mehr vorhanden sind, so dass ich dieses Thema aus meinen Abos löschen kann.

Alt 09.08.2015, 22:48   #9
Christoph B.
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Hallo Matthias,

ich möchte mich für deine schnelle und professionelle Hilfe bedanken.

Die Software, die wir zum Bereinigen meines Rechners benutzt haben ist nach Anleitung entfernt worden und ansonsten fallen mir derzeit keine Probleme auf.


Falls ich wieder einmal Hilfe benötigen sollte, werde ich mich mit Freuden wieder an das Trojaner-Board.de wenden

Liebe Grüße
Christoph

Alt 09.08.2015, 22:48   #10
M-K-D-B
/// TB-Ausbilder
 
Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Standard

Win 7 Sp1 64Bit. Ein Trojaner plagt mich.



Ich bin froh, dass wir helfen konnten

In diesem Forum kannst du eine kurze Rückmeldung zur Bereinigung abgeben, sofern du das möchtest:
Lob, Kritik und Wünsche
Klicke dazu auf den Button "NEUES THEMA" und poste ein kleines Feedback. Vielen Dank!

Dieses Thema scheint erledigt und wird aus meinen Abos gelöscht. Solltest Du das Thema erneut brauchen, schicke mir bitte eine PM.

Jeder andere bitte hier klicken und einen eigenen Thread erstellen.

Antwort

Themen zu Win 7 Sp1 64Bit. Ein Trojaner plagt mich.
akamai, antivirus, avg, bonjour, browser, computer, defender, dnsapi.dll, firefox, flash player, google, home, internet, internet explorer, monitor, mozilla, prozesse, realtek, registry, rundll, scan, server, software, svchost.exe, trojaner, windows



Ähnliche Themen: Win 7 Sp1 64Bit. Ein Trojaner plagt mich.


  1. Qvo6 plagt mich in meinen Browsern! Was tun?
    Plagegeister aller Art und deren Bekämpfung - 09.11.2013 (25)
  2. Windows XP bzw. Betriebssystem unabhängig, Rootkit plagt selbst nach Formatierung
    Log-Analyse und Auswertung - 07.08.2013 (14)
  3. GVu Trojaner 2.07 auf Win 7 64bit
    Log-Analyse und Auswertung - 26.10.2012 (13)
  4. SUISA-Trojaner (Verschlüsselungs-Trojaner) befall auf HP-Pro-Laptop Win7 64Bit
    Plagegeister aller Art und deren Bekämpfung - 06.09.2012 (19)
  5. GVU Trojaner hat mich erwischt, W7 64bit
    Plagegeister aller Art und deren Bekämpfung - 28.08.2012 (4)
  6. GVu Trojaner 2.07 auf Win 7 64bit
    Log-Analyse und Auswertung - 20.08.2012 (11)
  7. GVU-Trojaner Win 7 64bit
    Log-Analyse und Auswertung - 19.08.2012 (6)
  8. GVU Trojaner Win 7 64Bit
    Plagegeister aller Art und deren Bekämpfung - 04.08.2012 (11)
  9. Desktop Security 2010 plagt meinen Laptop.Alles versuche vergeblich, kommt nach Neustart wieder.
    Plagegeister aller Art und deren Bekämpfung - 06.08.2010 (2)
  10. Problem mit dem ICQ Virus plagt mich auch
    Plagegeister aller Art und deren Bekämpfung - 15.04.2010 (4)
  11. TR/Patched.Gen [trojan] plagt mich seit gestern
    Plagegeister aller Art und deren Bekämpfung - 09.12.2009 (1)
  12. TR/Rootkit.Gen plagt mich
    Plagegeister aller Art und deren Bekämpfung - 10.02.2009 (10)
  13. Trojanische Pferd TR/Crypt.XPACK.Gen plagt mich auch!
    Plagegeister aller Art und deren Bekämpfung - 09.12.2008 (1)
  14. Virus plagt, kann jemand helfen ???
    Mülltonne - 14.05.2008 (0)
  15. Hilfe! Ominöser Trojaner plagt mich
    Log-Analyse und Auswertung - 01.04.2008 (6)
  16. Bitte um Hilfe small.GA.7 plagt mich
    Log-Analyse und Auswertung - 09.01.2006 (8)
  17. Trojaner TR/Dldr.Dyfuca.DB plagt mich
    Plagegeister aller Art und deren Bekämpfung - 24.04.2005 (6)

Zum Thema Win 7 Sp1 64Bit. Ein Trojaner plagt mich. - Hallo zusammen, Seit einigen Tagen plagt wohl ein Trojaner meinen Rechner. Habe, nachdem sich dann automatisch AVG 2015 installiert hatte meinen Virenscanner (Avast 2015, konstenlose Version) mal eine vollständige Überprüfung - Win 7 Sp1 64Bit. Ein Trojaner plagt mich....
Archiv
Du betrachtest: Win 7 Sp1 64Bit. Ein Trojaner plagt mich. auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.