Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: TR/Agent Virus Minecraft.exe ist befallen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML

Antwort
Alt 19.09.2015, 19:17   #1
samurai_worf
 
TR/Agent Virus Minecraft.exe ist befallen - Standard

TR/Agent Virus Minecraft.exe ist befallen



Guten Aben ich habe das gleiche Problem wie AdmiralE und brauche unbedingt Hilfe bei dem TR/Agent Virus der Mincraft.exe befällt kann mir wer helfen?

P.S. Ich habe bereits den 1. Scan mit FRST durchgeführt ^^

Alt 19.09.2015, 19:26   #2
schrauber
/// the machine
/// TB-Ausbilder
 

TR/Agent Virus Minecraft.exe ist befallen - Standard

TR/Agent Virus Minecraft.exe ist befallen



hi,

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________

__________________

Alt 19.09.2015, 19:30   #3
samurai_worf
 
TR/Agent Virus Minecraft.exe ist befallen - Standard

FRST-Code:




FRST Logfile:
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
durchgeführt von SimonsZocken (Administrator) auf SIMONSZOCKEN-PC (19-09-2015 20:08:03)
Gestartet von C:\Users\SimonsZocken\Desktop
Geladene Profile: SimonsZocken (Verfügbare Profile: SimonsZocken)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\vVX1000.exe
(Spotify Ltd) C:\Users\SimonsZocken\AppData\Roaming\Spotify\SpotifyWebHelper.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe
(TeamSpeak Systems GmbH) C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
() C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7540440 2014-02-11] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-04] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762224 2009-06-30] (Microsoft Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [mbot_de_325] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-13] (Avira Operations GmbH & Co. KG)
Winlogon\Notify\GoToAssist Express Customer: C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\715\g2ax_winlogonx64.dll (Citrix Online, a division of Citrix Systems, Inc.)
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Spotify Web Helper] => C:\Users\SimonsZocken\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-13] (Spotify Ltd)
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Spotify] => C:\Users\SimonsZocken\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-13] (Spotify Ltd)
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{18F74978-CA94-49AE-B84D-E54D4E64E95F}: [NameServer] 8.8.4.4,8.8.8.8
Tcpip\..\Interfaces\{18F74978-CA94-49AE-B84D-E54D4E64E95F}: [DhcpNameServer] 192.168.0.1

Internet Explorer:
==================
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hppp
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkMUjxjieFQHKIp2m4CNQ,,&q={searchTerms}
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://youtube.com/
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkMUjxjieFQHKIp2m4CNQ,,&q={searchTerms}
HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp
SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkL5cdg9xO6SWRLdE_HOw,,&q={searchTerms}
SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=dspp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=dspp&q={searchTerms}
SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}
BHO: MediaPlayersvideos  1.1 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-bho64.dll Keine Datei
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29] (Oracle Corporation)
BHO-x32: MediaPlayersvideos  1.1 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-bho.dll Keine Datei
BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  Keine Datei
Toolbar: HKLM-x32 - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  Keine Datei
Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei
Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei
Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei
StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP

FireFox:
========
FF ProfilePath: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141
FF NewTab: chrome://quick_start/content/index.html
FF DefaultSearchEngine: istartsurf
FF SelectedSearchEngine: istartsurf
FF Homepage: hxxp://www.istartsurf.com/?type=hppp
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-12] ()
FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-29] (Oracle Corporation)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()
FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-29] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)
FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2014-11-15] ()
FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @citrixonline.com/appdetectorplugin -> C:\Users\SimonsZocken\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-08-14] (Citrix Online)
FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @nsroblox.roblox.com/launcher -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)
FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\SimonsZocken\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-16] (Unity Technologies ApS)
FF user.js: detected! => C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\user.js [2015-08-13]
FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\google-images.xml [2014-10-01]
FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\google-maps.xml [2014-10-01]
FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\istartsurf.xml [2015-09-19]
FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml [2014-11-28]
FF Extension: Default SearchProtected  - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\Extensions\defsearchp@gmail.com.xpi [2015-08-01]
FF Extension: Adblock Plus - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-03]
FF HKLM-x32\...\Firefox\Extensions: [{d9a96531-b093-4d07-9e4c-9704a365c441}] - C:\Program Files (x86)\Mozilla Firefox\extensions\{d9a96531-b093-4d07-9e4c-9704a365c441}
FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\extensions\faststartff@gmail.com

Chrome: 
=======
CHR dev: Chrome dev build erkannt! <======= ACHTUNG
CHR Profile: C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avira Browserschutz) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-09-20]
CHR Extension: (Deezify) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbhaapafmlmgodhicgpngihalhepll [2014-11-28]
CHR Extension: (mihcahmgecmbnbcchbopgniflfhgnkff) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-12-02]
CHR Extension: (ofiahdodpoomdjoegkmibpmgejobfpcn) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofiahdodpoomdjoegkmibpmgejobfpcn [2014-12-02]
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.delta-homes.com/?type=sc&ts=1429789534&from=ient04230&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-24] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-27] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [228104 2015-08-13] (Avira Operations GmbH & Co. KG)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-07-04] (EasyAntiCheat Ltd)
S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373824 2015-05-17] (WildTangent)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-04] (NVIDIA Corporation)
S2 GoToAssist Remote Support Customer; C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\715\g2ax_service.exe [610888 2014-08-14] (Citrix Online, a division of Citrix Systems, Inc.)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-01-07] (Hi-Rez Studios) [Datei ist nicht signiert]
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-04] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-04] (NVIDIA Corporation)
R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]
S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [X]
S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X]
S2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [X]
R3 WinHttpAutoProxySvc; winhttp.dll [X]

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-08-13] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-08-13] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-08-13] (Avira Operations GmbH & Co. KG)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-28] (Intel Corporation)
R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-02] ()
R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-04] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)
S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]
S1 wpnfd_1_10_0_2; system32\drivers\wpnfd_1_10_0_2.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-19 20:08 - 2015-09-19 20:08 - 00023723 _____ C:\Users\SimonsZocken\Desktop\FRST.txt
2015-09-19 20:07 - 2015-09-19 20:08 - 00000000 ____D C:\FRST
2015-09-19 20:07 - 2015-09-19 20:07 - 02191360 _____ (Farbar) C:\Users\SimonsZocken\Desktop\FRST64.exe
2015-09-19 19:51 - 2015-09-19 19:57 - 00000961 _____ C:\Users\Public\Desktop\Minecraft.lnk
2015-09-19 19:50 - 2015-09-19 19:50 - 02314240 _____ C:\Users\SimonsZocken\Desktop\MinecraftInstaller.msi
2015-09-17 19:30 - 2015-09-17 19:52 - 00097994 ____R C:\Users\SimonsZocken\Desktop\isaac-ng.CT
2015-09-16 15:12 - 2015-09-16 15:12 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\SKIDROW
2015-09-14 00:32 - 2015-09-14 00:33 - 00000000 ____D C:\Users\SimonsZocken\Documents\Ein neuer Anfang
2015-09-11 11:40 - 2015-09-11 11:40 - 00000222 _____ C:\Users\SimonsZocken\Desktop\Toribash.url
2015-09-11 02:05 - 2015-09-11 02:05 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Construct2
2015-09-11 02:04 - 2015-09-11 02:04 - 00000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Construct 2.lnk
2015-09-11 02:04 - 2015-09-11 02:04 - 00000843 _____ C:\Users\Public\Desktop\Construct 2.lnk
2015-09-11 02:04 - 2015-09-11 02:04 - 00000000 ____D C:\Program Files\Construct 2
2015-09-10 17:57 - 2015-09-10 17:57 - 00209029 _____ C:\Users\SimonsZocken\Downloads\MyCommand.jar
2015-09-09 12:17 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll
2015-09-09 12:17 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll
2015-09-09 12:17 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll
2015-09-09 12:16 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll
2015-09-09 12:16 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll
2015-09-09 12:16 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll
2015-09-09 12:16 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll
2015-09-09 12:16 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll
2015-09-09 12:16 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll
2015-09-09 12:16 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll
2015-09-09 12:16 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll
2015-09-09 12:16 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-09-09 12:16 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll
2015-09-09 12:16 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll
2015-09-09 12:16 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll
2015-09-09 12:16 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe
2015-09-09 12:16 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll
2015-09-09 12:16 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe
2015-09-09 12:16 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll
2015-09-09 12:16 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll
2015-09-09 12:16 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll
2015-09-09 12:16 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll
2015-09-09 12:16 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll
2015-09-09 12:16 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe
2015-09-09 12:16 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-09-09 12:16 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-09-09 12:16 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-09-09 12:16 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb
2015-09-09 12:16 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll
2015-09-09 12:16 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll
2015-09-09 12:16 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll
2015-09-09 12:16 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-09-09 12:16 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-09-09 12:16 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-09-09 12:16 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll
2015-09-09 12:16 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll
2015-09-09 12:16 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll
2015-09-09 12:16 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-09-09 12:16 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-09-09 12:16 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-09-09 12:16 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll
2015-09-09 12:16 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe
2015-09-09 12:16 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe
2015-09-09 12:16 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-09-09 12:16 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe
2015-09-09 12:16 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb
2015-09-09 12:16 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll
2015-09-09 12:16 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll
2015-09-09 12:16 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll
2015-09-09 12:16 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-09-09 12:16 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-09-09 12:16 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll
2015-09-09 12:16 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-09-09 12:16 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-09-09 12:16 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll
2015-09-09 12:16 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll
2015-09-09 12:16 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-09-09 12:16 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll
2015-09-09 12:16 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll
2015-09-09 12:16 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll
2015-09-09 12:16 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-09-09 12:16 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll
2015-09-09 12:16 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe
2015-09-09 12:16 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-09-09 12:16 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-09-09 12:16 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-09-09 12:16 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll
2015-09-09 12:16 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll
2015-09-09 12:16 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-09-09 12:16 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll
2015-09-09 12:16 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll
2015-09-09 12:16 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-09-09 12:16 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-09-09 12:16 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-09-09 12:16 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-09-09 12:16 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-09-09 12:16 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-09-09 12:16 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-09-09 12:16 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll
2015-09-09 12:16 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-09-09 12:16 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-09-09 12:16 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-09-09 12:16 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-09-09 12:16 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-09-09 12:16 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll
2015-09-09 12:16 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi
2015-09-09 12:16 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi
2015-09-09 12:16 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll
2015-09-09 12:16 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll
2015-09-09 12:16 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll
2015-09-09 12:16 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe
2015-09-09 12:16 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe
2015-09-09 12:16 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll
2015-09-09 12:16 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys
2015-09-09 12:16 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll
2015-09-09 12:16 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll
2015-09-05 20:40 - 2015-09-06 10:23 - 00000000 ____D C:\Users\SimonsZocken\Desktop\items
2015-09-05 20:39 - 2015-09-05 20:39 - 00000000 ____D C:\Users\SimonsZocken\Desktop\assets
2015-09-05 20:36 - 2015-09-05 20:36 - 00001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk
2015-09-05 20:36 - 2015-09-05 20:36 - 00001288 _____ C:\Users\Public\Desktop\paint.net.lnk
2015-09-05 20:36 - 2015-09-05 20:36 - 00000000 ____D C:\Program Files\paint.net
2015-09-05 20:35 - 2015-09-05 20:40 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\paint.net
2015-09-02 23:38 - 2015-09-02 23:38 - 06520208 _____ (Tim Kosse) C:\Users\SimonsZocken\Downloads\FileZilla_3.13.1_win64-setup.exe
2015-09-02 23:33 - 2015-09-04 14:57 - 00000000 ____D C:\Users\SimonsZocken\Desktop\mc-2
2015-09-02 23:10 - 2015-09-05 00:03 - 00004776 _____ C:\Users\SimonsZocken\Desktop\Boss-MobCommands.txt
2015-09-02 15:57 - 2015-09-02 15:58 - 19538382 _____ C:\Users\SimonsZocken\Downloads\craftbukkit-1.8-R0.1-SNAPSHOT.jar
2015-09-02 15:57 - 2015-09-02 15:57 - 07641600 _____ (Bertware) C:\Users\SimonsZocken\Downloads\BukkitGUI.exe
2015-08-31 14:13 - 2015-08-31 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-08-30 14:31 - 2015-08-30 14:31 - 00001176 _____ C:\Users\SimonsZocken\Downloads\pssfa2_n.schematic
2015-08-30 14:31 - 2015-08-30 14:31 - 00000929 _____ C:\Users\SimonsZocken\Downloads\public_lupf.schematic
2015-08-30 14:31 - 2015-08-30 14:31 - 00000742 _____ C:\Users\SimonsZocken\Downloads\public_arti.schematic
2015-08-30 14:31 - 2015-08-30 14:31 - 00000644 _____ C:\Users\SimonsZocken\Downloads\public_stich_s.schematic
2015-08-30 00:55 - 2015-09-05 19:32 - 00000000 ____D C:\Users\SimonsZocken\Desktop\SC2 Maps
2015-08-29 13:24 - 2015-09-19 08:52 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\.minecraft
2015-08-28 10:15 - 2015-08-29 10:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-19 20:04 - 2014-09-13 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-09-19 20:02 - 2014-09-20 14:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-19 20:02 - 2014-09-20 14:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-19 19:57 - 2015-06-20 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2015-09-19 19:57 - 2015-06-20 13:10 - 00000000 ____D C:\Program Files (x86)\Minecraft
2015-09-19 19:45 - 2014-12-11 17:48 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\LogMeIn Hamachi
2015-09-19 19:44 - 2014-08-14 16:38 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Skype
2015-09-19 18:47 - 2014-08-14 16:02 - 01776470 _____ C:\Windows\WindowsUpdate.log
2015-09-19 17:46 - 2014-11-28 18:46 - 00003488 _____ C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1.job
2015-09-19 17:46 - 2014-11-28 18:46 - 00002128 _____ C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2.job
2015-09-19 17:45 - 2014-08-14 21:29 - 00000000 ____D C:\Program Files (x86)\Steam
2015-09-19 16:43 - 2015-08-13 18:36 - 00000000 ____D C:\Users\SimonsZocken\Desktop\Steam
2015-09-19 08:59 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2015-09-19 08:59 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2015-09-19 08:46 - 2014-09-26 20:45 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Spotify
2015-09-19 08:46 - 2014-09-26 20:45 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\Spotify
2015-09-19 08:44 - 2014-08-14 16:34 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-19 08:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2015-09-19 08:44 - 2009-07-14 06:51 - 00112356 _____ C:\Windows\setupact.log
2015-09-18 22:18 - 2014-10-12 15:26 - 00000000 ____D C:\Program Files (x86)\Diablo III
2015-09-18 21:20 - 2014-09-24 18:54 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox
2015-09-18 21:18 - 2014-10-12 15:25 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\Battle.net
2015-09-18 21:18 - 2014-10-12 15:25 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-09-18 21:16 - 2015-04-10 22:36 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-09-17 20:46 - 2015-06-16 18:19 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\YGOPro DevPro
2015-09-16 20:29 - 2014-08-17 14:01 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Audacity
2015-09-16 15:12 - 2014-08-14 22:38 - 00000000 ____D C:\Users\SimonsZocken\Documents\My Games
2015-09-12 15:43 - 2014-11-02 14:58 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\FileZilla
2015-09-12 12:12 - 2014-10-19 13:59 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\CrashDumps
2015-09-11 11:43 - 2014-08-15 14:18 - 00000000 ____D C:\ProgramData\Package Cache
2015-09-10 14:09 - 2014-08-14 22:33 - 00144049 _____ C:\Windows\DirectX.log
2015-09-10 13:30 - 2015-08-15 20:28 - 00000000 ____D C:\Users\SimonsZocken\Desktop\mcrcon-0.0.5-bin-windows
2015-09-10 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache
2015-09-10 10:55 - 2009-07-14 06:45 - 00338640 _____ C:\Windows\system32\FNTCACHE.DAT
2015-09-10 10:53 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-10 10:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions
2015-09-10 02:12 - 2014-08-14 18:53 - 00000000 ____D C:\Windows\system32\MRT
2015-09-08 10:07 - 2014-08-15 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-09-08 09:55 - 2010-11-21 05:47 - 00503800 _____ C:\Windows\PFRO.log
2015-09-04 21:15 - 2015-06-16 18:19 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YGOPro DevPro
2015-08-31 14:13 - 2014-08-14 16:38 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-08-31 14:13 - 2014-08-14 16:38 - 00000000 ____D C:\ProgramData\Skype
2015-08-29 19:10 - 2015-04-10 21:20 - 00000000 ____D C:\Users\SimonsZocken\Documents\StarCraft II
2015-08-29 13:11 - 2014-11-09 19:35 - 00000000 ____D C:\Program Files (x86)\Hearthstone
2015-08-29 10:53 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT
2015-08-29 10:52 - 2014-09-08 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-08-28 00:26 - 2014-08-20 11:27 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client
2015-08-26 18:37 - 2014-08-14 18:53 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-10-22 20:24 - 2014-11-22 22:08 - 0000097 _____ () C:\Users\SimonsZocken\AppData\Roaming\LauncherSettings_live.cfg
2014-11-22 10:45 - 2015-05-08 14:48 - 0000441 _____ () C:\Users\SimonsZocken\AppData\Roaming\MinecraftClickerSave.txt
2014-11-28 18:44 - 2014-11-28 18:44 - 1857496 _____ (HQ VideoV28.11) C:\Users\SimonsZocken\AppData\Roaming\MMUJI.exe
2014-11-28 18:45 - 2014-11-28 18:45 - 1857496 _____ (Enter) C:\Users\SimonsZocken\AppData\Roaming\OGLG.exe
2014-10-23 17:04 - 2014-10-23 17:04 - 0008144 _____ () C:\Users\SimonsZocken\AppData\Roaming\TheHunterSettings_live.bin
2015-03-09 17:48 - 2015-03-09 17:48 - 0040960 ___SH () C:\Users\SimonsZocken\AppData\Roaming\Thumbs.db
2014-11-28 18:46 - 2014-11-28 18:46 - 1535448 _____ (HQ VideoV28.11) C:\Users\SimonsZocken\AppData\Roaming\TM.exe
2014-11-28 18:46 - 2014-11-28 18:46 - 1535448 _____ (Enter) C:\Users\SimonsZocken\AppData\Roaming\WDFYUBZ.exe
2014-11-28 19:54 - 2014-11-28 19:54 - 0628496 _____ (CMI Limited) C:\Users\SimonsZocken\AppData\Local\nsa74AD.tmp
2015-07-31 10:57 - 2015-08-15 20:21 - 0000600 _____ () C:\Users\SimonsZocken\AppData\Local\PUTTY.RND
2015-08-16 05:09 - 2015-08-16 05:09 - 0002104 _____ () C:\Users\SimonsZocken\AppData\Local\recently-used.xbel
2014-08-14 17:48 - 2014-08-14 17:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\SimonsZocken\AppData\Local\Temp\avgnt.exe
C:\Users\SimonsZocken\AppData\Local\Temp\BullseyeCoverage-2-x86.dll
C:\Users\SimonsZocken\AppData\Local\Temp\devcon64.exe
C:\Users\SimonsZocken\AppData\Local\Temp\drm_dialogs.dll
C:\Users\SimonsZocken\AppData\Local\Temp\drm_dyndata_7400008.dll
C:\Users\SimonsZocken\AppData\Local\Temp\fp_pl_pfs_installer.exe
C:\Users\SimonsZocken\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
C:\Users\SimonsZocken\AppData\Local\Temp\HiRezLauncherControls.dll
C:\Users\SimonsZocken\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll
C:\Users\SimonsZocken\AppData\Local\Temp\Installer.exe
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-1343543407322120933.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-238329836124738100.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-3365330378586126933.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-5193640500515359623.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-8171894015821889474.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.3-56-g3779cff-b3072jnks.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.3-b3020jnks.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.1-10-g8688bd4-b3092jnks.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.2-11-g3fd9db2-b3098jnks.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-1512374936573016778.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-1744232142253645131.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3261719090937640218.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3470107198358187167.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-397091771528305221.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3982136512997162608.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-4511803116025988274.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5047948624743418102.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5385809942258672043.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5806029061823537793.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5903323399846814354.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5991621273645016773.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6056074404322815342.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6412964357349152929.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6472183450542454474.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-649047008773354403.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6549758609594149016.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6565206762538792243.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6647646490544346695.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6713297519027044306.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6955666785049800781.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6973134385895982404.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7072675254096131220.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7264940990901904890.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7495142713063067959.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7644747225610167787.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-768229924774051002.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Spigot-1649.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-4073286446991539302.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-458874702202751746.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-5536207071792889188.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-5544614261553966182.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-6757111243856382035.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-7837874448066176117.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-jenkins-CraftBukkit-173.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-MCPC-Plus-jenkins-MCPC-Plus-Legacy-617.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Spigot-1649.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-7-g22f18a2-b1425jnks.dll
C:\Users\SimonsZocken\AppData\Local\Temp\jre-8u25-windows-au.exe
C:\Users\SimonsZocken\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\SimonsZocken\AppData\Local\Temp\nvStInst.exe
C:\Users\SimonsZocken\AppData\Local\Temp\OptimizerPro.exe
C:\Users\SimonsZocken\AppData\Local\Temp\setup.exe
C:\Users\SimonsZocken\AppData\Local\Temp\SkypeSetup.exe
C:\Users\SimonsZocken\AppData\Local\Temp\smt_istartsurf.exe
C:\Users\SimonsZocken\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll
C:\Users\SimonsZocken\AppData\Local\Temp\swt-win32-3349.dll
C:\Users\SimonsZocken\AppData\Local\Temp\xmlUpdater.exe
C:\Users\SimonsZocken\AppData\Local\Temp\YgoUpdater.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. 


LastRegBack: 2015-09-03 17:41

==================== Ende von FRST.txt ============================
         
--- --- ---
__________________

Alt 19.09.2015, 19:31   #4
samurai_worf
 
TR/Agent Virus Minecraft.exe ist befallen - Standard

Addition-Code:



FRST Additions Logfile:
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von SimonsZocken (2015-09-19 20:09:13)
Gestartet von C:\Users\SimonsZocken\Desktop
Windows 7 Home Premium Service Pack 1 (X64) (2014-08-14 14:02:58)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1749110370-1768304781-627677907-500 - Administrator - Disabled)
Gast (S-1-5-21-1749110370-1768304781-627677907-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-1749110370-1768304781-627677907-1004 - Limited - Enabled)
SimonsZocken (S-1-5-21-1749110370-1768304781-627677907-1000 - Administrator - Enabled) => C:\Users\SimonsZocken

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)
AirMech (HKLM-x32\...\Steam App 206500) (Version:  - Carbon Games)
Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{315dd168-0794-4cf1-8355-f195cde642fc}) (Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG) Hidden
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{4FCF716C-CEB4-499D-AFB8-A5375105EC2A}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)
Böse Nachbarn 2 (HKLM-x32\...\{706EC84C-6966-45EB-AEB9-EE6DCEA8CA3A}) (Version: 1.0 - JoWooD Studio Vienna)
Bridge Constructor Medieval (HKLM-x32\...\Steam App 319850) (Version:  - ClockStone)
Build and Shoot Launcher 1.2 (HKLM-x32\...\Build and Shoot Launcher) (Version: 1.2 - Buld Then Snip, LLC)
Camtasia Studio 8 (HKLM-x32\...\{6BED66AA-1DC6-474B-AC70-205CC3A68A39}) (Version: 8.4.4.1859 - TechSmith Corporation)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Construct 2 r212.2 (HKLM\...\Construct 2_is1) (Version: 1.0.212.2 - Scirra)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Craften Terminal 4.0.2 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 4.0.2 - Craften.de)
Cubetractor (HKLM-x32\...\Steam App 235720) (Version:  - Ludochip)
DeepBurner 1.9.0.228 (HKLM-x32\...\{F0A8E94F-1AD1-4428-873E-36CEEABA5FED}_is1) (Version: 1.9.0.228 - Astonsoft Ltd.)
Depth Hunter 2: Deep Dive (HKLM-x32\...\Steam App 248530) (Version:  - Biart Company LLC)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)
EE-ZDE (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version:  - )
Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version:  - )
FileZilla Client 3.11.0.2 (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse)
FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version:  - Image-Line)
FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version:  - )
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Frozen Hearth (HKLM-x32\...\Steam App 257890) (Version:  - Epiphany Games)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.)
GoToAssist Customer 2.1.0.715 (HKLM-x32\...\GoToAssist Express Customer) (Version: 2.1.0.715 - Citrix Online)
Hacker Evolution Duality (HKLM-x32\...\Steam App 70120) (Version:  - exosyphen studios)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)
Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)
Java SE Development Kit 8 Update 20 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180200}) (Version: 8.0.200.26 - Oracle Corporation)
Java SE Development Kit 8 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180510}) (Version: 8.0.510.16 - Oracle Corporation)
K-Lite Codec Pack 6.0.4 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.0.4 - )
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )
League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden
LEGO® Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)
LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden
LibreOffice 4.3.5.1 (HKLM-x32\...\{DB19C830-14B7-4301-B4F2-A69FBDEE9A70}) (Version: 4.3.5.1 - The Document Foundation)
Lock On: Modern Air Combat (HKLM-x32\...\{E90DCEE9-DC27-401B-A7AC-B0AFF5B34E4D}) (Version: 1.00.000 - )
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden
Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version:  - Paradox North)
Melissa K. and the Heart of Gold Collector's Edition (HKLM-x32\...\Steam App 321150) (Version:  - SDP Games)
Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)
Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)
Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )
Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Monkey Island™ Special Edition Collection (HKLM-x32\...\MISEC) (Version: 1.0.0.0 - LucasArts)
Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)
My Lands (HKLM-x32\...\Steam App 290730) (Version:  - Gravvit Ltd)
No Man's Land (HKLM-x32\...\No Man's Land) (Version:  - )
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)
NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
Pahelika: Revelations HD (HKLM-x32\...\Steam App 333650) (Version:  - Ironcode Gaming)
paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC)
Pivot Stickfigure Animator version 2.2.7 (HKLM-x32\...\Pivot Stickfigure Animator_is1) (Version: 2.2.7 - )
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version:  - Sony Online Entertainment)
PlanetSide 2 (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\SOE-PlanetSide 2) (Version:  - Sony Online Entertainment)
Plants vs. Zombies 1.0.4.7924 (by Scar) (HKLM-x32\...\{0DE8527A-FE3E-4FCA-A023-D57EF0B796C9}_is1) (Version:  - PopCap Games)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7173 - Realtek Semiconductor Corp.)
RGSS-RTP Standard (HKLM-x32\...\RGSS-RTP Standard_is1) (Version: 1.04 - Enterbrain)
ROBLOX Player for SimonsZocken (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - ROBLOX Corporation)
Robocraft (HKLM-x32\...\Steam App 301520) (Version:  - Freejam)
RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version:  - Atari)
RPG Maker VX Ace Lite (HKLM-x32\...\Steam App 224280) (Version:  - Enterbrain)
RPG Maker XP (HKLM-x32\...\Steam App 235900) (Version:  - Degica)
Rush for Glory (HKLM-x32\...\Steam App 303470) (Version:  - Parseh Game Studio)
SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden
ShootMania Storm Demo (HKLM-x32\...\Steam App 233050) (Version:  - Nadeo)
Sigils of Elohim (HKLM-x32\...\Steam App 321480) (Version:  - Croteam)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2477.0 - Hi-Rez Studios)
SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)
Spotify (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB)
Star Conflict (HKLM-x32\...\Steam App 212070) (Version:  - Star Gem Inc.)
Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)
Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
Stranded II 1.0.0.1 (HKLM-x32\...\{CE0900ED-C76A-40C0-8DB4-0F68D825B283}_is1) (Version:  - Unreal Software)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43174 - TeamViewer)
The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)
The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)
The Culling Of The Cows (HKLM-x32\...\Steam App 297020) (Version:  - Decaying Logic)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
theHunter (HKLM-x32\...\Steam App 253710) (Version:  - Expansive Worlds)
TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version:  - Nadeo)
Toribash (HKLM-x32\...\Steam App 248570) (Version:  - Nabi Studios)
Trove (HKLM-x32\...\Steam App 304050) (Version:  - Trion Worlds)
Unity (HKLM-x32\...\Unity) (Version: 5.0.0f4 - Unity Technologies ApS)
Unity Web Player (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden
Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden
Waldmeister Sause XXL - Winteredition (HKLM-x32\...\Waldmeister Sause XXL - Winteredition_is1) (Version:  - media Verlagsgesellschaft mbH)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden
WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
World of Tanks (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)
World of Warships (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
YGOPro DevPro (HKLM-x32\...\{A115F80F-2B26-464E-97A3-8B13EC533C3D}) (Version: 2.1.2 - DevPro, LLC)
YouTube Song Downloader (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C11EF142}_is1) (Version: 10.3 - Abelssoft)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1749110370-1768304781-627677907-1000_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\RobloxProxy64.dll (ROBLOX Corporation)

==================== Wiederherstellungspunkte =========================

10-09-2015 14:08:07 DirectX wurde installiert
11-09-2015 11:42:21 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
11-09-2015 11:42:56 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
15-09-2015 13:41:30 Windows Update
18-09-2015 13:54:39 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Keine Datei <==== ACHTUNG
Task: {315030D9-AB7C-49D7-ADD0-B90395FAE25B} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {374AF5F3-734D-4B6F-90D7-9712E084DF13} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {51C03CF9-8689-438E-9B36-40E7F0806453} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: {52A5826A-AA29-4A0E-9003-1B305B5D81BF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)
Task: {7A966CAF-639A-49D5-9A68-CEECE95C2212} - System32\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1 => C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-codedownloader.exe <==== ACHTUNG
Task: {80E38280-1FC7-4649-81D1-B6654E675CAA} - System32\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2 => C:\Program Files (x86)\MediaPlayersvideos  1.1\db0c2744-7b35-44bc-938a-10d890bcbc53-2.exe <==== ACHTUNG
Task: {A63EFB14-8DB6-4FB4-AC6E-B7DA7B7D149C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.)
Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Keine Datei <==== ACHTUNG
Task: {C3905DAC-465F-4F6C-9B1C-DD5F1C317C36} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.)
Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Keine Datei <==== ACHTUNG
Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe
Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG
Task: C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1.job => C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-codedownloader.exe <==== ACHTUNG
Task: C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2.job => C:\Program Files (x86)\MediaPlayersvideos  1.1\db0c2744-7b35-44bc-938a-10d890bcbc53-2.exe <==== ACHTUNG
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-08-14 16:34 - 2015-02-05 21:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-09-10 13:38 - 2015-09-10 13:38 - 00103424 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
2014-02-28 15:33 - 2015-08-28 00:26 - 00153576 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\quazip.dll
2014-08-04 15:43 - 2015-08-28 00:26 - 00090088 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win32.dll
2014-08-04 15:43 - 2015-08-28 00:26 - 00103400 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll
2014-08-04 15:45 - 2015-08-28 00:26 - 00260072 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 15:45 - 2015-08-28 00:26 - 00369640 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-06-05 15:35 - 2015-08-28 00:26 - 00271360 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\ssleay32.dll
2014-06-05 15:35 - 2015-08-28 00:26 - 01300992 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\LIBEAY32.dll
2014-08-14 21:30 - 2015-07-03 18:12 - 00778240 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-02-02 18:31 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-02-02 18:31 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-02-02 18:31 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-08-14 21:30 - 2015-08-19 22:39 - 02413248 _____ () C:\Program Files (x86)\Steam\video.dll
2014-08-29 10:12 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-08-29 10:12 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-08-29 10:12 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-08-29 10:12 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-08-29 10:12 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-08-14 21:30 - 2015-08-19 22:39 - 00704192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-07-25 10:09 - 2015-07-27 03:13 - 00171008 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll
2015-09-19 17:45 - 2015-09-19 17:45 - 00155232 ___HT () C:\Users\SimonsZocken\AppData\Local\Temp\~C2DB.tmp
2014-08-14 21:30 - 2015-07-03 18:12 - 39553928 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00198144 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00317440 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll
2015-09-10 13:38 - 2015-09-16 14:41 - 00203776 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00389120 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll
2015-09-10 13:37 - 2015-09-18 19:04 - 06686208 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\engine.dll
2015-09-10 13:38 - 2015-09-16 14:41 - 00156160 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 01174016 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 01240064 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00351744 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00607744 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00164864 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00708096 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll
2015-09-10 13:38 - 2015-09-16 14:41 - 00134656 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 01336320 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00394752 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 03192320 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll
2015-09-10 13:37 - 2015-09-17 15:15 - 01762816 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00143360 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\localize.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00230912 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00996864 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00582144 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll
2015-09-10 13:37 - 2015-09-19 10:39 - 12464640 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll
2015-09-10 13:37 - 2015-09-18 19:04 - 09998336 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll
2015-09-10 13:37 - 2015-09-16 14:41 - 00094208 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll
2015-09-10 13:38 - 2015-09-16 14:41 - 00084992 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll
2015-09-10 13:37 - 2015-09-10 13:37 - 00071680 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi
2015-09-10 13:37 - 2015-09-10 13:37 - 00012800 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt
2015-09-10 13:37 - 2015-09-10 13:37 - 00055808 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt
2015-09-10 13:37 - 2015-09-16 14:41 - 00972800 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll
2015-09-10 13:38 - 2015-09-16 14:41 - 00173568 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_celt.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist Remote Support Customer => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\sony.com -> sony.com


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 8.8.4.4 - 8.8.8.8
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{2F726ED7-4A9D-4550-B90C-CE3B82C29E19}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{D784F753-56F0-41B0-B96D-BCF95200226B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{58DFA857-69F3-4655-9540-88813050921A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{7917AE98-62DD-4300-8EAB-9E90163D91E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{2D0C18B1-F5EE-418D-B10A-850CF58EEAAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe
FirewallRules: [{EE2C622F-A4BF-47E1-8955-EF0C36945F1D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{0956CB22-6272-4D6C-A129-C509FD55583D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [TCP Query User{123728DE-A5A9-4BF9-ADEB-299D07E9154E}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{39BF0AD8-7F4F-4C6A-A01B-7D7E92FEAFD4}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [TCP Query User{32A060E1-C363-4369-86DF-F608DE6D272B}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{3A1389C2-025B-431A-A110-1E3BE525E701}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{200C306E-ABF3-4C79-AD87-C98CCDE0FB1F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{BF254D3A-E5D7-4599-8ECB-F8158009E8BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{45DD3608-9CF2-4AC1-A225-DCE3E2786590}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe
FirewallRules: [UDP Query User{3DC89CA1-D5CD-4F7D-845F-EA94BBC0C24A}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe
FirewallRules: [TCP Query User{8C232603-0CE4-4D76-AA82-BDF20A849F8D}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [UDP Query User{915796F5-4394-4FC0-856E-F86D220D8DB0}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe
FirewallRules: [TCP Query User{58C79CAE-498C-49B0-AF37-A3BA11B9C8C5}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [UDP Query User{1516ED9E-27E0-4AAB-8FEC-BFDC7756348D}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe
FirewallRules: [{AFF25DEA-D331-4F4F-912A-86369A25A98F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{FAE4C5EA-33AE-4966-BC4D-FAD0F5DE53AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [TCP Query User{F551757D-E4D2-49E5-8043-A7B276A1F2F0}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{0F57F22D-543A-43F3-B558-4F219775056A}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{8F4676B1-882A-4EBE-9A57-D55DABCAFB0F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{32F88CD4-B0C6-46C9-BAA0-BFF3AE5D8ACF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe
FirewallRules: [{DFF93F8B-BE5A-4023-9B87-666F42A5EAEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleNations\bin\battlenations.exe
FirewallRules: [{8FE9286F-E77B-425D-9B0D-1DA226434228}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleNations\bin\battlenations.exe
FirewallRules: [{F764258B-A6F0-4A9C-8BA4-29049B3F2FB7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefall\system\bin\FirefallClient.exe
FirewallRules: [{963D743C-DB2E-443B-940B-EBB96248E38B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefall\system\bin\FirefallClient.exe
FirewallRules: [TCP Query User{55586366-8CA6-4337-8260-90142508C734}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{A5BEFF69-143D-4342-9406-B922505BEDAB}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{58EF501E-2D67-428C-A23F-5CAE82B1B2FE}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{2F395C6C-5441-44D1-B5AE-35F6226F747C}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe
FirewallRules: [{CA81FABF-AB24-4201-89B3-3991251F5C00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MyLands\ClientAir.exe
FirewallRules: [{DA6C07E1-01DB-4E73-B54B-7BC0CCDC363D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MyLands\ClientAir.exe
FirewallRules: [{6F726BEA-A1CD-4278-87B1-B6527C190450}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{0E907AA9-76AE-44B9-A498-AF17C4CED9DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{1D093274-E11E-4FC1-ABA5-40D65C10B182}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{80007B90-99F9-44EB-91E8-811CEC1D39FA}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{B1E4CA0F-99B4-499F-83A7-AD59C7B55101}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{B40CADC5-6219-4320-AC70-0F6B408F7A00}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{D30D30CC-4402-4DA9-9C22-5C69B2591949}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{9300198A-89C9-4FF8-A68B-B60A738434DF}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{795B04B2-7BAA-477A-AF1B-6437A109B5C7}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [{DC74349A-911C-424A-BBBC-19ED85D74041}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe
FirewallRules: [TCP Query User{ADDF3F93-7B12-4C05-9F76-42F1ABFE093C}C:\program files\bin\javaw.exe] => (Allow) C:\program files\bin\javaw.exe
FirewallRules: [UDP Query User{B6D8CD5C-4467-4746-9282-2FA7AF8D200E}C:\program files\bin\javaw.exe] => (Allow) C:\program files\bin\javaw.exe
FirewallRules: [TCP Query User{E258B353-9255-42AE-A597-8B9000C9355F}C:\pylo\mcreator149\jdk\bin\java.exe] => (Allow) C:\pylo\mcreator149\jdk\bin\java.exe
FirewallRules: [UDP Query User{328AA47C-FDD0-472E-9064-BDC4AFD6B68B}C:\pylo\mcreator149\jdk\bin\java.exe] => (Allow) C:\pylo\mcreator149\jdk\bin\java.exe
FirewallRules: [TCP Query User{A67C1F31-DBDA-43F6-B58A-AB0CB2594C9C}C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe] => (Allow) C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe
FirewallRules: [UDP Query User{FEC00150-F0D3-498D-8535-0F33EA35416F}C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe] => (Allow) C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe
FirewallRules: [{8386F9A9-3C5C-47B6-87BC-5A1B1C02D99E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sigils of Elohim\Sigils.exe
FirewallRules: [{D4703125-BB1B-4B2F-8CB6-D6A57EB145D3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sigils of Elohim\Sigils.exe
FirewallRules: [TCP Query User{3FDB0236-39E9-4C64-84B9-6F0D0F184C8D}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{3FFB7F58-EFDE-4B37-8DB9-AF2D30787593}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{3AB34498-5806-4BE1-B733-ED437C1E0266}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [UDP Query User{9C65700E-F032-41A9-97C0-F9E8B40B2DF3}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [{1EB9CC70-9A17-48A3-AABF-FC94D9F7F1EB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe
FirewallRules: [{98EBADA9-7E63-4F03-BE4F-1EA873A5E40B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe
FirewallRules: [{0A89F39C-8F39-4ABD-A1A0-CEDC0AD4FB01}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [{644B4B90-ACC1-458A-B8AD-627106A6156C}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe
FirewallRules: [TCP Query User{8237B478-7432-49A2-9ECF-CECC01AA3613}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [UDP Query User{A9C8B693-186C-49BF-899C-19E59A4845BF}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe
FirewallRules: [TCP Query User{5063DA2A-C62A-4A03-AAFA-93AB6B573D7E}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [UDP Query User{35C4217A-0E3E-4341-BB33-0D75512EF5DC}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe
FirewallRules: [{6D311860-A659-4105-AD6F-C74B44EEDC64}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3FB27387-5105-4AF6-8E13-18DC0CAB8095}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{EE2A542C-88F6-47B4-9364-6421FF86FD12}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{30661C10-19FB-4C7A-B118-E4A23E9DB5DC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{9CE9228F-3A9E-495D-B1A6-833F5133D1CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{97DDA423-D10F-4F01-AD70-D75A724E1C98}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{EC85A608-57FE-42DF-BB85-7EE6870044B3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{93DF7F64-7654-4720-BDCD-9D6CB359CABB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{0BE80142-15C2-4EF2-B94E-D412CC5B6121}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{7E338786-3CBB-4CFB-B00D-54904E573C29}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{BEDFAF1E-0961-4F0F-975D-A869C92EF88B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe
FirewallRules: [{7A99108B-DA19-4835-A1F8-C38959AB339C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe
FirewallRules: [{D685866B-E021-448D-BC88-E0DAB6708178}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{ADB0694A-67DB-4C68-8D35-5C9F7A3DCBDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\VillagersAndHeroes\AMysticalLandSAC\VillagersAndHeroes.exe
FirewallRules: [{C29A59CA-58B7-4F9D-B134-B0DD0995629B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\VillagersAndHeroes\AMysticalLandSAC\VillagersAndHeroes.exe
FirewallRules: [TCP Query User{14FF171B-7027-48E7-8771-7174224A1348}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{778F87D3-FDB5-4B60-B105-9BD24CE7CA49}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{28D5FAD7-386E-4E0E-A1BB-D33193CC611A}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{416C18DE-637A-44E6-84CA-BDAECD74AC15}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [TCP Query User{E5DBA3B3-48EA-49C4-A23F-A47339D5EEC1}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{3348B724-F2A6-4A7C-AE82-3B35C283C5BA}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe
FirewallRules: [{77C8B80A-C652-4C32-AA4D-0462363EEBC6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{B37B497B-9E9C-4B72-92CB-F761A2BAB530}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{268D2283-8AA2-4803-B576-B3DD1627122D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe
FirewallRules: [{54F67AC1-B752-4012-8409-FA1B86BF0B62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe
FirewallRules: [{B757227C-0E50-43D9-93E8-32E5D1AE894B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe
FirewallRules: [{168EFC4B-5393-4B80-85E2-4D51F7B3D0A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe
FirewallRules: [TCP Query User{5AF7541F-651E-43F6-BF08-9D02BABA1F82}C:\sierra\empire earth\empire earth.exe] => (Allow) C:\sierra\empire earth\empire earth.exe
FirewallRules: [UDP Query User{F53267DC-7E41-495B-B837-37ED19F6911F}C:\sierra\empire earth\empire earth.exe] => (Allow) C:\sierra\empire earth\empire earth.exe
FirewallRules: [TCP Query User{CFB5A3C9-BF2D-4924-A149-6B54C1203C3A}C:\sierra\ee-zde\ee-aoc.exe] => (Allow) C:\sierra\ee-zde\ee-aoc.exe
FirewallRules: [UDP Query User{A147E709-56BC-4770-ABCF-29EC58D122D4}C:\sierra\ee-zde\ee-aoc.exe] => (Allow) C:\sierra\ee-zde\ee-aoc.exe
FirewallRules: [{7F657E3C-4C7D-48BC-976E-8F464241A26A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{398C6842-ECFB-47F0-8C0E-D8E22C485E10}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6B055FEF-316F-49AB-A551-7884F674FFDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{59E897ED-2D08-4254-857C-063F2CFEA75F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{93DF153E-C89F-4961-BFB6-B89F89C3051E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [{9941B03D-B848-4BF0-8C95-E46F023891DF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe
FirewallRules: [TCP Query User{0EF787C7-83FF-437A-80F3-5DFBE61EEF5F}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe
FirewallRules: [UDP Query User{9E2ED2BC-EAAB-4674-BD01-E96376DF2441}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe
FirewallRules: [TCP Query User{264A36FA-C754-49F9-B191-CB901A9E9D27}C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe
FirewallRules: [UDP Query User{4FA3B020-3FE3-417E-BFAF-09986477B8AD}C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe
FirewallRules: [TCP Query User{98AE15A8-561F-412A-88CE-92954B2D60A3}C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin
FirewallRules: [UDP Query User{AD8113C0-7BD4-4E28-BA5E-6D84A7E56C1C}C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin
FirewallRules: [TCP Query User{DE669AAE-30E2-4C8F-AC45-DEF28AD9EE47}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{872DF301-F55A-4CAD-ADB8-9A1317A30680}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{27393D7F-5FE1-4E03-B885-32774193A0C9}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [UDP Query User{65ACA6E4-77AC-4946-8568-E367D0A26575}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe
FirewallRules: [{FA5086A2-70BC-4F5B-BC8C-2B6AA6D2FD05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{5DDBCC12-D323-4F19-ABFC-A0597066072B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{CC14C9A6-C852-476A-8B14-3E75EFE4670A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{A7637826-3E45-497C-BC63-4788B6C12A1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{043BC74E-5452-4BCB-9FFA-4FF0AE2AE9E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{E123B6F3-4C9B-4EE8-A618-EAD08B287083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{92EB6915-5964-4C4F-A6B5-2DC65F22BCBF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{3B2BF885-C443-4418-A39E-DDE483DDD331}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{337DF535-8595-4F33-B532-63505E30AAF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{80F0747D-BBC7-45AC-84FE-8C1198F3163C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{2B51188A-D59A-4E92-A7B4-82E8BF556EFD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{7684015A-B618-4D6B-A692-04130FEB346D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{AEAC2B55-5792-4848-813C-30606C546C57}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{7E08674A-AE2B-4947-852C-91AAF6B6E690}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [TCP Query User{5E77DCCF-9FEA-4D9B-901D-D63146EFACA1}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe
FirewallRules: [UDP Query User{8A243591-D39F-4696-AE1C-DB7C65823EA7}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe
FirewallRules: [{4466584F-7D7B-46DC-ADA6-752C9AD3AE8E}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [{29C37AD5-23BB-4775-A667-D4B58956B880}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe
FirewallRules: [TCP Query User{F842B238-7DC5-4DB2-BC7A-C15738AC3AFC}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{E0F113EA-49A3-4B2D-849A-D58495CFF8C5}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [TCP Query User{46F49C6F-DB73-4881-A6A8-0CA1B0E1DCC6}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{BE169B55-C441-4D3A-8082-31BD7F8CFBAA}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe
FirewallRules: [{63DB4D6B-276F-4649-BF21-C02D4FADAEB0}] => (Allow) LPort=8317
FirewallRules: [TCP Query User{8B707C4C-6416-4F7B-AE88-63725429F9BD}C:\program files\java\jdk1.8.0_20\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.8.0_20\bin\javaw.exe
FirewallRules: [UDP Query User{566C9349-E633-46FE-B9FC-531CD1697F1D}C:\program files\java\jdk1.8.0_20\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.8.0_20\bin\javaw.exe
FirewallRules: [{8774AE70-6619-4737-8405-F4001580A0BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPG Maker VX Ace Lite\RPGVXAceLite.exe
FirewallRules: [{CC19F6B5-623D-497A-86B4-2E0835AFDBBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPG Maker VX Ace Lite\RPGVXAceLite.exe
FirewallRules: [{66BC2096-EF75-4AD2-9261-2CF27DB94607}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPGXP\RPGXP.exe
FirewallRules: [{5BB2782F-38AC-4B1B-9F23-225C6BB923E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPGXP\RPGXP.exe
FirewallRules: [TCP Query User{996945A8-E5AE-4047-8788-AFDE9821FB71}C:\program files (x86)\starcraft ii\support\sc2editor.exe] => (Allow) C:\program files (x86)\starcraft ii\support\sc2editor.exe
FirewallRules: [UDP Query User{B9260334-AACA-46AC-AB81-A37320A4AD38}C:\program files (x86)\starcraft ii\support\sc2editor.exe] => (Allow) C:\program files (x86)\starcraft ii\support\sc2editor.exe
FirewallRules: [TCP Query User{58DBE857-49F7-4DDE-8DE1-7CA9F3E078AB}C:\program files (x86)\no man's land\run\no man's land.exe] => (Allow) C:\program files (x86)\no man's land\run\no man's land.exe
FirewallRules: [UDP Query User{2FFB8F78-CEAC-4608-B590-E302C0074AD5}C:\program files (x86)\no man's land\run\no man's land.exe] => (Allow) C:\program files (x86)\no man's land\run\no man's land.exe
FirewallRules: [TCP Query User{B882810C-3728-4C71-B71D-A7C55165B93A}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [UDP Query User{A04F4B5E-DF13-4933-91C7-C68D21360FD6}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe
FirewallRules: [{F1F9B650-7AF5-4A51-851A-92B39EE53BE0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{A2204E5F-0F64-436E-94B7-A8AB9A69F33A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [TCP Query User{7B75A489-FB05-45AA-A39B-D2BBEC7FB9C1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{57CB02DE-DD96-4EA0-9C57-E2866AD5E83D}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{4A223B7E-7D30-4B41-BC28-9A61FDFF53D8}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe
FirewallRules: [UDP Query User{FE2A0640-0392-4700-9107-A49C8FC4BA48}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe
FirewallRules: [TCP Query User{0555506F-FE6B-4D40-B4C7-E9E5FF53ACF2}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{CDF60FC9-95FB-4C13-B344-776F06AF3721}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{16E449D0-A8C3-4AF6-990A-32468841D94A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{F9F142AC-BC35-49F6-A411-5F7814457420}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{15C3D140-BD93-4781-AB38-67904DA670CE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{53CCA546-9903-4095-B8F4-8032EF71D3CF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [TCP Query User{72B96AD4-A215-4BE5-89B7-97F74E939106}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{4E959108-BDD6-4D15-9929-3E9A01620C28}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [{0832F117-CB42-4FC6-A6D9-DB60DEDA6F9F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe
FirewallRules: [{9C743BB5-4100-4411-9CF1-5BEF441C28B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe
FirewallRules: [TCP Query User{598E3D36-851A-4638-B28A-DB90C82CA8AB}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
FirewallRules: [UDP Query User{BD2297DD-DF53-4AA9-8831-473322ADC0A8}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe
FirewallRules: [TCP Query User{58233860-5523-4808-85B4-6B7BB3AFF168}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [UDP Query User{7195C04B-88EF-49A3-AC25-F50D64B87202}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe
FirewallRules: [TCP Query User{2D43B713-4EF2-49AC-A782-4DA4C219EBBF}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [UDP Query User{6391E82D-BEBB-49F1-AC83-1E2865CBB5EB}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe
FirewallRules: [{2EF8885F-FBA1-4F88-9FC7-C905C11FE1D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [{3F728ED7-288B-44DF-98DE-D61F9CE99060}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe
FirewallRules: [TCP Query User{254B8670-E11B-4B6F-A76C-25571C173004}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [UDP Query User{87A06178-1884-480A-B93B-E23A2593FE32}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{E5C786C2-506E-41A8-8EEF-A1A50875B061}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [UDP Query User{AFBB9732-4EFD-4F46-BBEB-CE9835B07079}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [{FF207E3B-7EAB-4FBA-BBB8-3185177EC3C1}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{0AA63053-179F-4918-8A94-677213B9D9FB}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{946931B3-E955-4E0C-8D5F-AAD57DBF0622}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{C663C848-3CC2-4AED-8DFE-B2F52767C863}] => (Allow) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe
FirewallRules: [{D25BF0AF-E525-481F-AA1C-964C4DD69302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [{713CDFD1-7853-4D3D-B9F6-8ECB30C0694B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe
FirewallRules: [TCP Query User{BBE327D4-33F2-4B51-A4B6-9F7088B2E87A}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [UDP Query User{940C14B9-48B5-4D15-955F-66DD894B16FF}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe
FirewallRules: [{8B892E02-320F-4B85-ADAC-10EA2F56D34D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DepthHunter2\dh2.exe
FirewallRules: [{6D952D6F-FA2A-47B5-85DF-BC8C1A954058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DepthHunter2\dh2.exe
FirewallRules: [{8C7D35B8-9FE2-481C-9D2D-3CE3E6CEC46B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution Duality\Hacker Evolution Duality.exe
FirewallRules: [{E4F5FE9B-D893-4AA8-80BB-DE56D3B70D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution Duality\Hacker Evolution Duality.exe
FirewallRules: [{4F49EF8A-7D57-43E9-9F40-D2D071FA2DBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cubetractor\Cubetractor.exe
FirewallRules: [{9754D73C-1DF2-4F3F-AF50-DFABE5D92A37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cubetractor\Cubetractor.exe
FirewallRules: [{9ACE691F-54B6-4050-8A09-41F25A7E9927}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Melissa K and the Heart of Gold\MelissaK_Steam.exe
FirewallRules: [{3D5015AE-039D-4C87-9F70-E103F3999163}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Melissa K and the Heart of Gold\MelissaK_Steam.exe
FirewallRules: [{F40773A1-9244-44C9-92AA-78B7D48AD03E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PahelikaRV\PahelikaRVJNIRelease.exe
FirewallRules: [{14DA3B7B-5454-43DD-9FE1-6FFD723F68BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PahelikaRV\PahelikaRVJNIRelease.exe
FirewallRules: [{B1AA9A96-F52A-4612-B61B-D0BDB9F56AFF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Culling Of The Cows\Culling Of The Cows.exe
FirewallRules: [{16174C44-7670-40CD-851C-BC728C689CEB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Culling Of The Cows\Culling Of The Cows.exe
FirewallRules: [{8E68E757-9B47-4768-B80B-F22B989D1875}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe
FirewallRules: [{09585341-4D49-4506-B012-03675C5E0242}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe
FirewallRules: [{1096E7AE-1F0C-4B94-89DA-3E880386CEDF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rush for Glory\RfG.exe
FirewallRules: [{0C02D692-A514-4849-9D43-BFCA2EFC77AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rush for Glory\RfG.exe
FirewallRules: [{502C23F8-2C95-4C09-A00A-45CA27CC1731}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Bridge Constructor Medieval\Bridge_Constructor_Medieval.exe
FirewallRules: [{6AD92839-8CC4-4640-B670-2AD1ED0A283D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Bridge Constructor Medieval\Bridge_Constructor_Medieval.exe
FirewallRules: [TCP Query User{E24D4284-001F-4B5F-9E60-9DA6F0AC006C}C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{B149A0D6-AA01-4239-AF43-CF6936463F94}C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe
FirewallRules: [{FA94524A-6DA7-4698-AB94-3A7341AE5685}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe
FirewallRules: [{5087BF38-43B7-4D3E-ABA9-BA3D06B8254F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe
FirewallRules: [TCP Query User{09FC800A-1DE0-4B22-857E-854F303B6D5B}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{BC59956C-5ED5-43DB-918E-81190AC56AB9}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe
FirewallRules: [{53445603-D5CF-436A-9749-13DE5E7559B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{73CED924-4294-40B2-82BF-A6B365386D00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{4E5D5C95-1AEC-4CB4-9C7B-C76826871E99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{14DAD71E-3FE9-4505-AEE6-5DA5ABF73D99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe
FirewallRules: [{E8EC73D2-4510-477A-9E45-7E37D53DC62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe
FirewallRules: [{ABB8DF44-6353-4B93-A65E-466B8B187DAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: wpnfd_1_10_0_2
Description: wpnfd_1_10_0_2
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: wpnfd_1_10_0_2
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: BlueStacks Hypervisor
Description: BlueStacks Hypervisor
Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}
Manufacturer: 
Service: BstHdDrv
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/19/2015 08:44:57 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD initialization failed [6]

Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]

Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: )
Description: NvStreamSvcNvVAD endpoint registration failed [0]

Error: (09/18/2015 06:44:54 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/18/2015 01:47:12 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/17/2015 01:34:20 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/16/2015 03:16:36 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm isaac-ng.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: ab0

Startzeit: 01d0f081d5700597

Endzeit: 14

Anwendungspfad: C:\Users\SimonsZocken\Desktop\The Binding Of Isaac Rebirth\isaac-ng.exe

Berichts-ID: 23cdf068-5c75-11e5-85d3-448a5b97a961

Error: (09/16/2015 01:35:58 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (09/15/2015 01:35:26 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003


Systemfehler:
=============
Error: (09/19/2015 12:14:50 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 20.

Error: (09/19/2015 12:08:43 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 20.

Error: (09/19/2015 09:54:14 AM) (Source: bowser) (EventID: 8003) (User: )
Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "ARI-PC",
der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EED73D88-452A-4C7B-8FAD-BEF5D841CEE7}-Transport zu sein scheint.
Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.

Error: (09/19/2015 08:56:35 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)
Description: Es wurde eine schwerwiegende Warnung empfangen: 20.

Error: (09/19/2015 08:45:37 AM) (Source: DCOM) (EventID: 10010) (User: )
Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}

Error: (09/19/2015 08:44:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_2

Error: (09/19/2015 08:44:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "IHProtect Service" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/19/2015 08:44:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BlueStacks Updater Service;gadgetDataDir=C:\ProgramData\BlueStacks\UserData\Gadget"" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%2

Error: (09/19/2015 08:44:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%3

Error: (09/18/2015 06:44:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 
wpnfd_1_10_0_2


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 54%
Installierter physikalischer RAM: 8120.02 MB
Verfügbarer physikalischer RAM: 3722.93 MB
Summe virtueller Speicher: 16238.23 MB
Verfügbarer virtueller Speicher: 10689.36 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:1374.73 GB) (Free:1000.51 GB) NTFS
Drive d: () (Fixed) (Total:488.18 GB) (Free:487.78 GB) NTFS
Drive e: (AOE) (CDROM) (Total:5.1 GB) (Free:0 GB) CDFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 361F625A)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=488.2 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=1374.7 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         
--- --- ---

Alt 20.09.2015, 12:14   #5
schrauber
/// the machine
/// TB-Ausbilder
 

TR/Agent Virus Minecraft.exe ist befallen - Standard

TR/Agent Virus Minecraft.exe ist befallen



hi,

Scan mit Combofix
WARNUNG an die MITLESER:
Combofix sollte ausschließlich ausgeführt werden, wenn dies von einem Teammitglied angewiesen wurde!

Downloade dir bitte Combofix vom folgenden Downloadspiegel: Link
  • WICHTIG: Speichere Combofix auf deinem Desktop.
  • Deaktiviere bitte alle deine Antivirensoftware sowie Malware/Spyware Scanner. Diese können Combofix bei der Arbeit stören. Combofix meckert auch manchmal trotzdem noch, das kannst du dann ignorieren, mir aber bitte mitteilen.
  • Starte die Combofix.exe und folge den Anweisungen auf dem Bildschirm.
  • Während Combofix läuft bitte nicht am Computer arbeiten, die Maus bewegen oder ins Combofixfenster klicken!
  • Wenn Combofix fertig ist, wird es ein Logfile erstellen.
  • Bitte poste die C:\Combofix.txt in deiner nächsten Antwort (möglichst in CODE-Tags).
Hinweis: Solltest du nach dem Neustart folgende Fehlermeldung erhalten
Es wurde versucht, einen Registrierungsschlüssel einem ungültigen Vorgang zu unterziehen, der zum Löschen markiert wurde.
starte den Rechner einfach neu. Dies sollte das Problem beheben.


__________________
gruß,
schrauber

Proud Member of UNITE and ASAP since 2009

Spenden
Anleitungen und Hilfestellungen
Trojaner-Board Facebook-Seite

Keine Hilfestellung via PM!

Antwort

Themen zu TR/Agent Virus Minecraft.exe ist befallen
.exe, bedingt, befallen, befällt, bereits, brauche, durchgeführt, guten, hilfe, problem, scan, tr/agent, unbedingt, virus




Ähnliche Themen: TR/Agent Virus Minecraft.exe ist befallen


  1. Avira - Minecraft.exe enthält TR/agent?
    Plagegeister aller Art und deren Bekämpfung - 25.09.2015 (18)
  2. Windows 7: Minecraft Dateien mit TR/Agent Viren befallen
    Plagegeister aller Art und deren Bekämpfung - 20.09.2015 (1)
  3. Minecraft java problem... glaub ich
    Alles rund um Mac OSX & Linux - 22.06.2015 (2)
  4. 1800 Minecraft-Accounts kompromittiert
    Nachrichten - 19.01.2015 (0)
  5. Minecraft error, crashed.
    Log-Analyse und Auswertung - 26.07.2014 (1)
  6. xp : Virus; abgesicherter Modus auch vom Virus befallen
    Log-Analyse und Auswertung - 28.10.2013 (7)
  7. Trojan Agent AZYH Outlook.PST Datei befallen G Data Antivirus Fund
    Plagegeister aller Art und deren Bekämpfung - 31.07.2013 (7)
  8. Minecraft mod optifinehdultra in ad.fly
    Plagegeister aller Art und deren Bekämpfung - 21.04.2013 (3)
  9. PC von Virus befallen
    Log-Analyse und Auswertung - 23.10.2012 (7)
  10. Babylon Search und Minecraft Backdoor
    Log-Analyse und Auswertung - 08.10.2012 (21)
  11. [Minecraft] Hs-Err-pid[NUMMER] ERROR
    Log-Analyse und Auswertung - 13.03.2012 (3)
  12. Vom BKA Virus befallen
    Log-Analyse und Auswertung - 16.08.2011 (1)
  13. Pc mit Virus befallen
    Plagegeister aller Art und deren Bekämpfung - 21.05.2011 (13)
  14. PC von div. Viren (Alureon.A, TR/Agent.PJW, TR/FraudPack.kva.66 etc.) befallen
    Plagegeister aller Art und deren Bekämpfung - 28.10.2010 (31)
  15. PC ist von Trojanern befallen, u.a. agent.fefk
    Plagegeister aller Art und deren Bekämpfung - 19.10.2010 (15)
  16. Laut avira run.exe befallen, TR/Agent.QL
    Log-Analyse und Auswertung - 02.02.2009 (1)
  17. Trojaner TR/Agent.EM hat mich befallen. Was jetzt?
    Plagegeister aller Art und deren Bekämpfung - 13.06.2005 (1)

Zum Thema TR/Agent Virus Minecraft.exe ist befallen - Guten Aben ich habe das gleiche Problem wie AdmiralE und brauche unbedingt Hilfe bei dem TR/Agent Virus der Mincraft.exe befällt kann mir wer helfen? P.S. Ich habe bereits den 1. - TR/Agent Virus Minecraft.exe ist befallen...
Archiv
Du betrachtest: TR/Agent Virus Minecraft.exe ist befallen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.