Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: Malware Befall?

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.

Antwort
Alt 20.09.2015, 15:41   #1
dieFackel
 
Malware Befall? - Standard

Malware Befall?



Hallo liebes Trojaner-Board Team,

mein Pc ist seit einiger Zeit langsamer geworden, vor allem Firefox macht Probleme. Videos werden teilweise unglaublich langsam geladen und wenn ich von einem Tab zum anderen wechseln will kommt es teilweise zu Lags, dass ist früher nie passiert.
Ich hab mir mal meine TCP Verbindungen angeschaut und bin der Meinung, dass nicht alle gewollt sind. Ich kenne mich leider nicht gut aus und wollte mal eure Meinung einholen.
Ich hoffe die angehängten Logs sind ausreichend.

MfG
dieFackel

Malwarebytes
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 20.09.2015
Suchlaufzeit: 13:57
Protokolldatei: Maöwarebytes.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.09.20.01
Rootkit-Datenbank: v2015.09.18.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: dieFackel

Suchlauftyp: Benutzerdefinierter Suchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 822824
Abgelaufene Zeit: 1 Std., 26 Min., 34 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\ASP, , [938ee84a484323137ebf8ba559aac43c], 

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
Extras
Code:
ATTFilter
OTL Extras logfile created on: 20.09.2015 14:12:03 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\dieFackel\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 4,10 Gb Available Physical Memory | 51,24% Memory free
16,00 Gb Paging File | 11,46 Gb Available in Paging File | 71,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 24,30 Gb Free Space | 20,40% Space Free | Partition Type: NTFS
Drive D: | 931,41 Gb Total Space | 117,87 Gb Free Space | 12,65% Space Free | Partition Type: NTFS
Drive E: | 2,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: SOL-PC | User Name: dieFackel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = B8 53 BB 86 69 D0 D0 01  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A7AC2B9-D334-4A5F-BAD8-BBBA43FAEF85}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 
"{3FEAF7FE-3E22-4EC7-A31F-206284E9E1CA}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe | 
"{44B570B6-8F9C-49AC-8F60-141064742DDE}" = lport=47995 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{45D8D20D-013A-4430-8691-DF5DB7BB3C5B}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{592D499E-5BC0-476C-A7C2-512F75587FD3}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | 
"{6BDCEACE-97D2-4073-9739-91AA434DA97A}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{A093B23A-34C2-4679-B293-D93929427E28}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{A7CDDBE0-F603-4ED4-BD35-F587C8055EBB}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{B63F0017-2F7E-41CE-B2BB-357A5923027F}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe | 
"{BB5826E7-2A22-4527-A02E-B9188881C9CC}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe | 
"{C346D2EC-0F46-4B35-BF88-45A910E8F65D}" = lport=5357 | protocol=6 | dir=in | name=ws-eventing tcp port 5357 | 
"{F2545E51-0152-4CD8-9DDD-4070AF02854B}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{F7500448-256C-4CF4-921E-F82C761ED2EB}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{005CA57C-0C3A-47D0-8BF8-250011EEADDB}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{01A59A15-B150-4261-A832-C13E2333934A}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{02077CB4-DEE6-45F8-9434-2E73F92525A4}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{02753EB8-721E-4F3C-A12C-34C33645F4AA}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\devicesetup.exe | 
"{042A055D-138C-4D24-943A-D29B3400242B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{0512736B-D209-4A68-9032-8F1E5EBC5663}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{05890CEC-27A6-4394-90E0-BB59AF447910}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{05B42524-C3C8-41AE-898B-8F2B08533BBD}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{05C433B1-045D-4649-9FE8-AA33A16A6681}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{05E2912F-1FB3-4D2D-B26F-731F9C4972A1}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\mark_of_the_ninja\bin\game.exe | 
"{0849E683-30DF-4FBA-ACF9-191670245FC2}" = dir=out | name=@{microsoft.people_1.10241.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 
"{0898D30C-4DDF-4852-9CEF-CD79E0FB0347}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid64.exe | 
"{08FE3F0B-E290-4A32-8D1A-5E0431B92CD9}" = protocol=6 | dir=in | app=d:\spiele\dragon age\bin_ship\daupdatersvc.service.exe | 
"{0A2AEE49-FE23-49FB-9805-852F5AD4D90B}" = dir=in | name=xbox one smartglass | 
"{0B4EBB85-0C1D-4E89-8CE1-83B826995FED}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{0BAE9171-52B3-4EC5-9A19-A016C1E03D02}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3147\agent.exe | 
"{0BB03995-1E3A-4C68-839F-2683138514C7}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{0C0652B7-FCB4-46F4-B493-383EA1E10206}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\evolvebeta\bin64_steamretail\staticlauncher64.exe | 
"{0C591109-FBC6-4F73-BBBB-61092B9BB943}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme.exe | 
"{0D67BF69-771F-4CC6-B60E-FE209BC5D2AA}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{0E12E7A7-B93C-4E19-B9B7-6095AF6767F1}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2680\agent.exe | 
"{0E181344-9146-427F-B8C5-F7CEC8AE589F}" = protocol=17 | dir=in | app=d:\ubisoft\future soldier dx9.exe | 
"{0EF27D38-E34C-49C9-8FFF-A8DEE122C744}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{1007BD7E-888D-41BC-9DF6-6016D0A2C516}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\convoy\convoy.exe | 
"{10F2AA7E-B647-4859-A997-8DCA038F947F}" = protocol=17 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"{1162E8DD-48DD-4181-812E-659536393FF0}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_dx11.exe | 
"{11C01E43-C6A3-487F-98FC-F8720A67124B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{121C2BBA-ADCF-4A00-A003-8E4DC7C19F42}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{12F913B6-00F8-4DEB-B3E4-8D97D2850BED}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3507\agent.exe | 
"{131CBD8F-19F4-4077-AA23-2E3A9B932972}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme.exe | 
"{15789D71-645E-40BA-A62F-658AE5200343}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2737\agent.exe | 
"{161B3A9B-F20F-432A-A4F8-529C74EDA64C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3334\agent.exe | 
"{17802179-CA10-493D-89B9-93EDC204577E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{18B2ED39-6F83-4A48-8D68-DC86F3330C75}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{18E3DFF2-8E7F-4F8D-B17D-9CEFEF9410D2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{1AC1DBEE-839F-431D-8D8E-029BC8B31A0B}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\resident evil 4\bin32\bio4.exe | 
"{1BFB075B-45D6-4E2A-85A9-291CD184C82D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{1DC62405-5788-4878-AEEF-73C0E95C6951}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3427\agent.exe | 
"{1FDDD19F-D61F-4E96-9476-9EE53E29A059}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3332\agent.exe | 
"{200F8714-305F-4403-A7E8-177A79F7581D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{20947C9C-C050-4E24-ACE3-A9192112A63A}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\hitman absolution\hma.exe | 
"{218D2D66-4D94-49D5-AF31-43C404A7EDB5}" = dir=in | name=@{microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{227B3C14-5356-4F52-9290-1A29338AAD29}" = dir=out | name=xbox | 
"{228C2D57-EE48-40B9-9993-179DAFE23EB3}" = dir=in | name=xbox | 
"{229F2905-9307-4961-B2F4-EEB6BE81AAE4}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\banished\application-steam-x64.exe | 
"{22EF0059-D71E-46A6-A646-B5E9903D7EB7}" = protocol=17 | dir=in | app=d:\spiele\dragon age\bin_ship\daupdatersvc.service.exe | 
"{23E7F851-E1FF-4B6E-AD30-947EA07554B2}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{24AD6035-4531-4D19-88F4-22279AFC5DAA}" = protocol=17 | dir=in | app=d:\spiele\steam\bin\steamwebhelper.exe | 
"{260998F8-92AC-4377-B056-ABB93BE243F7}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{271C88E9-96B2-4725-ADE1-49DBFA58099D}" = protocol=17 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{27B6BBB1-7DD7-44E0-9F5F-821FCBFA2D98}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2880\agent.exe | 
"{27CF53A7-4C2D-447E-B96F-CA6BFAACB147}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\launcher\launcher.exe | 
"{27D80C77-5768-47B2-BC71-ECEF146C8A2D}" = protocol=6 | dir=in | app=d:\spiele\dragon age\bin_ship\daorigins.exe | 
"{28B9B0CA-69CF-49C4-886D-1F7E6D0E63E0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{2B1DAD53-06C0-466F-9E22-55FA34F4F7C1}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{2E04DF7B-58DC-40FD-9861-C65DEEF3472B}" = protocol=6 | dir=in | app=d:\spiele\steam\bin\steamwebhelper.exe | 
"{2E372AA7-F0B1-41BF-9BCF-3AFE1A50E663}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{2E42D9FC-277E-4017-8613-13BCC3649FF1}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.6208.42001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} | 
"{30BD7EC9-61EF-43AD-BFCA-932704125836}" = protocol=6 | dir=in | app=d:\spiele\dragon age\daoriginslauncher.exe | 
"{3130F182-68CD-449D-A804-A997F2261D73}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{3241B533-BF6C-464C-8635-3BBC2ABA07D4}" = dir=out | name=@{microsoft.windowsdvdplayer_3.6.11761.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsdvdplayer/resources/ids_dvdplayer_app_name} | 
"{3303FDE8-CEFC-452C-B250-A1DB46463A31}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"{33EC2108-E97A-4AA1-BD77-5008A89FC222}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{347A10AF-F98B-4779-B70B-3F025D418E11}" = protocol=17 | dir=in | app=d:\dateien\utorrent\utorrent.exe | 
"{35241231-34FA-42D4-921F-BAC90A61C91A}" = protocol=17 | dir=in | app=d:\spiele\dragon age\bin_ship\daorigins.exe | 
"{3555AFC8-175C-4A2E-B148-CC93257FCED2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\hitman absolution\hma.exe | 
"{3675F0AF-25B1-45AE-BDED-BEECEADB7462}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{37DBD5E1-76BC-46E5-8F23-179DADB6C408}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme2.exe | 
"{3827FB5E-BF15-4667-9A6F-FF5A3112D939}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\faxapplications.exe | 
"{396624B1-C30D-48C7-A088-13E424FC2A24}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\faxapplications.exe | 
"{3A2FD336-EDBD-40E1-B06A-24C24C50670E}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{3A7BC421-EDBF-409F-AE22-B79A7C6D1E11}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\hpnetworkcommunicatorcom.exe | 
"{3AE9DECA-3481-43DA-B89E-BF20F112D819}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{3BC6CFE2-7EA2-4011-84BA-7FEED091D83A}" = dir=in | app=d:\dateien\echobit\evolve\evolveclient.exe | 
"{3C37B9E7-A1B0-41FF-BB5C-41BB7071420B}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{3D77A983-461C-4A06-BDE7-A19AD55B4DD8}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\magic 2014\dotp_d14.exe | 
"{3D9D9D7A-E99F-481F-96B6-69EA8ECDB91F}" = dir=out | name=@{microsoft.windows.photos_15.915.17170.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{3E09C03A-4152-4866-8740-9436C209C174}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\banished\application-steam-x64.exe | 
"{3F95326E-BB54-49B1-85DD-73659FAF8C62}" = dir=in | name=@{microsoft.bingnews_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{4110D224-9A94-479B-BDD6-927B5E0CD22F}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe | 
"{42E8ED7D-6813-475E-9526-E86E74431098}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3109\agent.exe | 
"{4373D304-EC2F-4DC7-A098-1034ED7EC19D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe | 
"{44789199-E0E1-4D74-9AA9-927C61BEBF41}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{454808A4-0F57-4997-A163-A11BEB797424}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2816\agent.exe | 
"{454B6152-3A20-4BB5-852C-649F4293A1FA}" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{466FED5B-6575-4E15-87A2-545F7300F3DA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3454\agent.exe | 
"{4701180F-828D-4A7D-BEE2-0525E357EEDF}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{47331124-787A-4A26-A875-7E33D2E60C2E}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{473F3C8B-E48E-49EC-B8ED-971DDEED3907}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3323\agent.exe | 
"{47531F08-A748-403F-94CD-31A8E33F9E2F}" = dir=out | name=twitter | 
"{47AA9760-2E5B-46F0-8A4D-EEA417002F31}" = dir=in | name=@{windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{47C063DB-E35A-4680-ACF9-074E46A11E7F}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\bin\taloslauncher.exe | 
"{487C9432-BD35-49B9-99F5-3BAFE1A664EE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{4897919E-4C88-40A9-8114-D18BF2C3107E}" = dir=out | name=@{microsoft.3dbuilder_10.9.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.3dbuilder/resources/appstorename} | 
"{4963AD04-0B6C-4175-BDC5-D89A44D8BBE8}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{49FBEF79-5265-4DBB-80C5-04929B850A06}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\starmade\starmade-starter.exe | 
"{4A5DB823-6EE7-455F-A4B4-66B5A92E1DAC}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | 
"{4AE9B7C5-F214-42B4-BD04-4D111B6C6902}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3346\agent.exe | 
"{4C509833-4E81-4B7D-9786-A86864E79778}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{4CEB2609-F630-445B-ADE0-E7A4F484BD37}" = protocol=6 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{4D31A50F-DD2C-44A1-8106-12450F1BD174}" = protocol=6 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{4D7695AC-2CFD-4339-BA01-09D6A50F6916}" = dir=out | name=@{microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{4DCD9165-0CDD-43E8-89E4-C09A2AFEC4F6}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{4E00D23C-FC6C-460D-B09D-C74E9829E1E6}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{4E466B35-E368-40A2-AC9C-0A464848E71E}" = dir=out | name=@{microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxidentityprovider/resources/pkgdisplayname} | 
"{4E55DE75-0541-4FFF-A27A-B8E7A0708C41}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\the banner saga factions\win32\the banner saga factions.exe | 
"{4FEC670E-A4A5-4FCA-AD3C-C8CEBC9F80E4}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\metal gear rising revengeance\metal gear rising revengeance.exe | 
"{50A0F398-48A6-498F-9B67-4D5C9A071F1B}" = protocol=17 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{50A4018A-E9AB-4375-85D1-DB1EA03F464C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3507\agent.exe | 
"{50CA82F3-6FD3-4198-BC73-5E7FB0BEC229}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid32.exe | 
"{5185CE5F-6F3A-4005-9FFA-99A07BFC30AF}" = dir=out | app=d:\spiele\the escapists\theescapists.exe | 
"{522D8F47-7A69-4C86-8D0A-3B96A5BA7490}" = protocol=17 | dir=in | app=d:\spiele\steam\steam.exe | 
"{52E231DB-F5D6-4028-BEC4-8E8ED67F12AD}" = protocol=17 | dir=in | app=d:\spiele\starcraft ii\starcraft ii.exe | 
"{546EE88C-D4CD-4AD5-A785-76611448A8B8}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{5712810A-D8E8-47F1-867C-8A567865F1FA}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{5933A99D-DE56-4D42-A127-7361BCDDBA2B}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{59C36A26-852E-4745-BEF7-698FF9D6C85E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid64.exe | 
"{5A5B2FD4-4695-44C9-8C9B-9D28D6012468}" = dir=in | name=@{microsoft.bingfinance_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | 
"{5A635D4F-1529-4FD1-87C0-0B9C1FAAA69A}" = protocol=6 | dir=in | app=d:\spiele\steam\steam.exe | 
"{5B828859-7EB5-48C0-B521-DAF312FC3B92}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{5BEEE90D-0BBE-4967-8B44-654F73F5E717}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\the banner saga factions\win32\the banner saga factions.exe | 
"{5C97D2AD-62A5-4F8E-A76D-8CBD095C76AB}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{5CE8D20C-85C6-4DE3-A472-B7817AC6AAEA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3323\agent.exe | 
"{5E7713F5-7BBD-4363-9B96-0C255F7D2E3D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{5E9EC2DE-8C92-4258-AC76-9FA200A6CFCA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3023\agent.exe | 
"{5FD0AFAB-647B-413F-8806-D83B6639A7D5}" = protocol=6 | dir=in | app=d:\spiele\starcraft ii\starcraft ii.exe | 
"{6083F112-8C04-4F34-8B81-E280FF1B4F08}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3023\agent.exe | 
"{612F91F9-9A30-412D-B951-56F8B50574E5}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_mantle.exe | 
"{61375D69-A18E-4803-8779-D8BF39D6268A}" = dir=in | app=d:\dateien\echobit\evolve\evosvc.exe | 
"{62EE0961-BA3D-4D95-9334-21F2BADA5749}" = protocol=6 | dir=in | app=d:\spiele\riot games\league of legends\lol.launcher.exe | 
"{63E93650-FC6E-470D-B081-ED7D3885B788}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3478\agent.exe | 
"{65BCD715-1B96-40FB-93BC-46BB53473CA1}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3235\agent.exe | 
"{65CA368D-AA79-49E2-99A8-3734AD9636F2}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{65ED1D28-06B3-4520-B7A1-C1B0B3C19453}" = dir=out | app=d:\spiele\dying light - season pass edition\dying light - season pass edition\dyinglightgame.exe | 
"{660FBB0B-FF00-4456-9BEA-7DFBF4895F7E}" = dir=out | name=@{microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{6680ACBA-36E3-4AAD-B9B0-01E7654230F0}" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"{66A06236-BF4D-4C8A-91D8-1036C1CED3C5}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\rogue legacy\roguelegacy.exe | 
"{66BD3D56-1118-4FC3-9E54-80150813DA09}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3715\agent.exe | 
"{67A514D2-A5D3-4279-AB1E-636784D1EE38}" = dir=in | name=@{microsoft.bingsports_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | 
"{6824D999-E278-4D96-A8EB-3C4D6761872C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\this war of mine\this war of mine.exe | 
"{6865C0BD-E5FB-4EE7-A14C-6BC7ADC5AF5E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{688477AC-2BC2-432D-BB5F-610B8EE78714}" = protocol=17 | dir=in | app=c:\program files (x86)\tunngle\tunngle.exe | 
"{69741C2E-A68A-4CFB-9806-5ACAF93A5507}" = dir=out | name=@{microsoft.windowsstore_2015.9.9.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{6A1E11C6-2FD4-4442-B793-54CAD8E63F82}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\metal gear rising revengeance\metal gear rising revengeance.exe | 
"{6ACFD153-8905-467B-970D-055343BD393E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{6BF50E30-7EB9-4353-BC55-1167AFD223F4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3688\agent.exe | 
"{6C2CB2BE-9CBB-42C8-B541-075309D8621E}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{6DB10C88-5451-485A-B1DB-C7936DD88213}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid32.exe | 
"{6F6FECE9-E7BE-46A8-B2EB-88BBB95D2A24}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{6FCEA93C-55AE-4EB2-98EB-B68ED3541B24}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{6FD1367F-BE5F-445D-9450-6288750D57E0}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\hpnetworkcommunicator.exe | 
"{71EDB1FE-7946-4123-80C9-0B72647F813D}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{725EA809-0C27-44BB-A6D1-42DFFB83A5B6}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_dx11.exe | 
"{72C456E5-DAA4-431D-9980-04CFD84D8BE1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{732BA3E2-1182-4397-8D28-A9A2C88849AA}" = dir=out | app=d:\spiele\gog games\hotline miami 2 - wrong number\hotlinemiami2.exe | 
"{74B20526-C704-4197-B388-4CC6E61A0C1C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{75FC0C17-CEE6-4683-A000-68DC461CDDCF}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{761C66B0-8B01-4D1B-AFB3-2054C4A21ECB}" = dir=in | name=@{microsoft.bingweather_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{77F7FC88-7D10-47A1-A934-A458A2FD7952}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\evolvebeta\bin64_steamretail\staticlauncher64.exe | 
"{78C4D7BF-73DB-4DAF-8326-B43326C6E00B}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{78C7F32C-24C4-45B6-8186-FD812927A836}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{791AE8AB-8F4F-4403-997C-7D6431C71758}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"{793C15B0-6D90-460B-AC34-F7920EA0457B}" = dir=out | name=windows_ie_ac_001 | 
"{7946B31A-3D86-4532-8C59-B2608D2F5089}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{7ABD6415-AAE2-4A3F-AD8C-0056BCBE5447}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{7BB0851D-6A74-42EB-A886-3DD13A42722B}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"{7BE77165-226E-4090-ACA4-A8C96846A894}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{7C6AAB1A-6FDA-42F6-9029-383B567FD67C}" = dir=out | name=@{microsoft.microsoftofficehub_17.6209.23751.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{7DB26FD5-0ED8-4977-B3AE-74BC78F74905}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe | 
"{7E08556E-1E48-491D-9432-D0CD72FB0C37}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{7E35D448-A58D-4FC2-BA21-430360FADCD6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3147\agent.exe | 
"{7E712ACE-081E-4A1D-A7DB-1DA6AA724707}" = protocol=6 | dir=in | app=c:\program files (x86)\tunngle\tunngle.exe | 
"{7F4738E0-D875-4AAA-8603-B22CCD24074A}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{804D6F11-A546-48E8-8806-D776353B49F5}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe | 
"{80C91602-0A9B-403A-8488-F952FA86D28F}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{8382654B-F75C-46C3-89A5-96365F686589}" = dir=out | name=@{windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.purchasedialog/resources/displayname} | 
"{8478B8DE-38F7-4608-B84F-15A89CCCF4D7}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\sendafax.exe | 
"{84E05554-EBD4-4F2C-935A-8476C0213A1B}" = protocol=17 | dir=in | app=d:\dateien\winamp\winamp.exe | 
"{850377DC-94A3-4B2A-AA1F-2D4A61142648}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_mantle.exe | 
"{85C5C8CE-4D27-4531-A568-5EFDE17198F5}" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{86B7401E-8AB8-447F-BEA3-F5DD0CDF19CA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2638\agent.exe | 
"{874CB0D8-1A02-4AC9-A166-9F8293E19B86}" = protocol=17 | dir=in | app=c:\steam\total war attila\launcher\launcher.exe | 
"{8759A254-2AFE-4E31-912C-C534E6F5F517}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{88F4AE15-7AAB-4B72-BEC4-9C72D67F7A88}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\deus ex - human revolution\dxhr.exe | 
"{8A07CC39-D9D6-4986-A7E7-FC3984AC7127}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3334\agent.exe | 
"{8B769242-BA38-42BD-B61E-C869E9D4AFD6}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{8B88620A-E50A-426E-949A-8CC410A9D244}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\convoy\convoy.exe | 
"{8B8C6FF2-E4E2-492B-BD96-275EEA4254D9}" = dir=out | name=@{microsoft.zunevideo_3.6.12711.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{8BE9C610-6900-4DC0-ABAD-CB4AC37F2188}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\launcher\launcher.exe | 
"{8BEDEFB4-D4DD-49DB-AF32-02BC67C7F08E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{8D209263-84F7-4FE6-B69E-868302C09FD2}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\digitalwizards.exe | 
"{8E689C35-4729-49A6-BAD2-957DC852D36D}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3332\agent.exe | 
"{8F403FA8-32ED-4220-B599-037F2278A985}" = protocol=17 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | 
"{908F4F56-D8E9-4767-9F40-75C1634CF255}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.6208.42001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} | 
"{90C2CADE-0B84-499A-B2F0-315635D1D7C9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3668\agent.exe | 
"{91F29332-8300-4A77-8646-391A0E36647B}" = protocol=6 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{9285C295-959E-446A-A96B-12113128E64F}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{930A184D-3AC6-40FF-A3BD-97983CF14E97}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3182\agent.exe | 
"{95590C03-1640-4DFA-88D5-77BEC88C5CAB}" = protocol=17 | dir=in | app=d:\spiele\riot games\league of legends\lol.launcher.exe | 
"{967DF2D9-1094-404F-95FB-747EDD01CEFB}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\ftl faster than light\ftlgame.exe | 
"{96EBA60C-D22C-4AE4-B9FF-48344DCD1A8B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\starmade\starmade-starter.exe | 
"{98F95051-3DCF-440C-9AE9-E94D278E79EB}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\ftl faster than light\ftlgame.exe | 
"{9A344900-C141-44D8-A5DD-68DA9610A391}" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"{9A669733-4F0E-4354-A9F2-783A3E91ABC0}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\bin\talos_unrestricted.exe | 
"{9A7C1B98-4563-4D9C-BAB1-247FB5423C24}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2680\agent.exe | 
"{9AFD8555-084C-4CAB-9EFB-79460318035D}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\baldur's gate ii enhanced edition\baldur.exe | 
"{9B47F7B1-0285-4904-8D57-52FDC09473D8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | 
"{9CD7F87D-11D1-4720-82A5-EDBDB709064F}" = dir=in | name=@{microsoft.microsoftofficehub_17.6209.23751.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{9D0EB4A1-0242-4620-8E01-2CCDF0A2AD7C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{9E96DFA9-52C0-465E-ABC3-2E5E6D034881}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\original\talos_unrestricted.exe | 
"{9F1CCF75-75D5-46FC-B93F-A8C688C0CD17}" = protocol=17 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{9F8489F4-D6C3-45C7-A2F1-E8D675DAD137}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{A0EFB1FA-5906-4CDD-B7CD-CF975BD867FD}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\launcher\launcher.exe | 
"{A0FFBA22-BA61-4766-8CA9-F76115D3ABC2}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{A20C7EC1-D7F0-4699-A999-C11A6AF98445}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\devicesetup.exe | 
"{A254CE1C-6E77-4ECB-B6C7-EEDA27CB951E}" = dir=out | name=@{microsoft.bingnews_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{A27DCD31-FB3D-4FFE-A0A1-8EB8491B9F49}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3372\agent.exe | 
"{A2BBD7E9-1467-4104-9099-CD811030CD9C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{A2F231C9-4CD8-4395-81DF-C34C6DE0F706}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{A2F61F36-90A6-400C-8F5B-32D7A043FC06}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{A4AE1FED-1B2E-4400-B66B-44EF7AB1085C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{A4BFD460-B46F-437E-A601-F7B60A598667}" = dir=in | name=onenote | 
"{A58FCE97-E1C6-441E-BCA5-4F1A94A75D35}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\this war of mine\this war of mine.exe | 
"{A6441CE9-9B08-426E-BD68-524B7CA68ACA}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\original\talos.exe | 
"{A69E166B-B8ED-48C9-8F37-7BC3560B9061}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\launcher\launcher.exe | 
"{A7964258-CEEC-492B-89D8-9130CD0587CC}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2737\agent.exe | 
"{A7ED935A-F3EC-42F6-BFD7-2BECCA4668BD}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\spelunky\spelunky.exe | 
"{A87A837B-957D-406A-897C-7BE312454618}" = dir=out | name=onenote | 
"{A9CBEE33-4680-41F4-B98A-79F7E51310D2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\spelunky\spelunky.exe | 
"{AAE2CD6D-47F5-408E-A3CA-675F1053E35C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\rogue legacy\roguelegacy.exe | 
"{AC01552A-81A1-49B2-B053-6E2EE963F693}" = dir=out | name=@{microsoft.bingweather_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{AD04575E-BD2A-49DC-8256-0902D8205E44}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{AEF39903-164B-4F43-97CB-0EC845062CCC}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} | 
"{AF973B7E-92F7-4563-88EC-4D14DF7F570A}" = protocol=6 | dir=in | app=d:\dateien\winamp\winamp.exe | 
"{B030A168-6281-48CA-9621-76A8AEA3AF09}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3688\agent.exe | 
"{B243255C-A7CC-4062-88F3-5A68A9818BF0}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{B2F30D36-41BD-46C2-BFAC-77710BEA7E86}" = protocol=17 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{B378F8B3-FCA1-4072-BDAD-05EBBF7495F3}" = dir=out | name=microsoft solitaire collection | 
"{B3B18623-32C2-4E9A-953A-C7A9D41C08DD}" = protocol=6 | dir=in | app=d:\ubisoft\future soldier dx11.exe | 
"{B407A014-5DA2-44E3-B87F-65197BCC60D6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3346\agent.exe | 
"{B40EDC8D-1BA5-48DD-A6DE-1871DD1C1852}" = dir=out | name=@{microsoft.bingfinance_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | 
"{B4495F83-B379-4899-85D3-E45164AF6B0E}" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{B5CC3189-6AFD-4B0A-BF7B-606DB90611A2}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe | 
"{B5EFA66B-C35B-4B36-9EA3-A93F1555753E}" = dir=out | name=@{microsoft.getstarted_2.3.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 
"{B715B48F-AF68-463A-94F5-8E0D35B547A9}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3478\agent.exe | 
"{B7600AF9-C7D4-4B5D-81ED-C091D5432314}" = protocol=6 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{B7A18863-2979-473F-980B-236D675FB059}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | 
"{B7E7F9E2-F9E0-48FB-B8E3-DA6E1D073282}" = dir=in | name=@{microsoft.windowsstore_2015.9.9.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{B8262556-3A71-44D0-844E-C47F3BF5FE9C}" = dir=out | app=d:\spiele\dying light - season pass edition\dyinglightgame.exe | 
"{B83D49E3-C9EE-49E5-93EC-0C2A0ECB1797}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3669\agent.exe | 
"{B8E9E7A8-22E9-46D2-B15A-2616ACBE94FF}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2787\agent.exe | 
"{B9477112-FE2B-483F-B808-8B716C4CFF80}" = dir=out | name=@{microsoft.windowsmaps_4.1509.50911.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 
"{B9C5D61E-29CD-43E9-9445-093116FC9FC8}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe | 
"{B9E397A5-6684-438B-A818-1DF8C61E9B38}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | 
"{B9EA31C3-7A77-4730-9AA5-8E0C39EEF0C4}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | 
"{BA916752-F322-46BA-8A89-0CBFD0F6EFDE}" = dir=in | name=@{microsoft.windows.cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | 
"{BAEB663C-7F5E-4F29-A51D-1235BF4C7897}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3669\agent.exe | 
"{BB349080-4EF5-4A0F-AFCF-58D1A5BE541D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3235\agent.exe | 
"{BD02DD28-83A4-40BE-BCB0-A01DEB78070A}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"{BD7E8AC0-D371-47DC-A1E0-8F627C3E1039}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2816\agent.exe | 
"{BE6201F6-47F2-4F6D-A260-1DE904ACCA50}" = protocol=6 | dir=in | app=d:\ubisoft\future soldier dx9.exe | 
"{BF657D00-BF2C-4E0D-B45C-68D76EB62355}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe | 
"{BFA46502-EAF1-45ED-903C-835E538F931F}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2638\agent.exe | 
"{C0B82E17-81E4-4A83-987F-A1F80330B9A0}" = dir=out | name=xbox one smartglass | 
"{C1F02300-6FE1-413E-97D5-9D2E1BCC7BE5}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{C27628C6-628C-4445-946F-CECA67BB71E8}" = dir=out | name=@{windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{C3F3315C-1356-4F3B-9F77-FE5B9DE9966A}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{C536F582-753F-4E9C-976A-1D730B05E962}" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{C7F5C892-26AC-492E-AF4B-B91D56F57A5C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{C8111857-2C72-45AC-91FB-4FEDD31A8BBC}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{C82C6185-880F-4E6E-8746-2B6BB818BD6B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\resident evil 4\bin32\bio4.exe | 
"{C86BE727-FC4B-4D2D-B906-89F2208D63EB}" = dir=in | name=microsoft solitaire collection | 
"{C8F2300C-DFA2-4270-8E8F-A07F00192E4C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{C8F9D5F7-0F0E-4656-B32A-EC826FEB347F}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{C921C817-C4BD-46C0-B066-1FE300EA2322}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{C94F57A0-0A4A-470F-B710-2DAAB728AFB3}" = protocol=6 | dir=in | app=c:\steam\total war attila\launcher\launcher.exe | 
"{C970D1FA-1BB1-45FB-8E2F-1EDEC790AEBC}" = protocol=17 | dir=in | app=d:\ubisoft\future soldier dx11.exe | 
"{C976ADF5-7175-4272-B4BE-CCD10EAC1E1C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3182\agent.exe | 
"{CB741E7C-88F0-498F-B836-DAFF3E9C50A4}" = dir=out | name=@{microsoft.zunemusic_3.6.12711.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{CBC7F8AB-00EB-4892-9F01-78F6C467AA2D}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{CDE2447B-D5E2-4DBE-8C94-F911A02C6F62}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{CE2D4911-05FA-4045-9164-11AAD79CC908}" = dir=out | name=@{microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{CF1307F5-73F8-47A0-8567-8409FD73B1D9}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{CF3A864B-8FB3-4AA1-A68D-7373BD05BB5D}" = protocol=6 | dir=in | app=d:\dateien\utorrent\utorrent.exe | 
"{D0AB18AF-7B1B-40D8-A1DD-648716E7511F}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\hpnetworkcommunicatorcom.exe | 
"{D0D54C33-B40E-4A4D-BBA6-C10B67E8D7D7}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\deus ex - human revolution\dxhr.exe | 
"{D2FFE9DA-6BEA-4700-A64E-D9652A604C6C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{D37AC809-3DCF-48D3-A935-663B1B235D36}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2880\agent.exe | 
"{D623BF2F-54FC-4366-84B2-1CAC8D46AACA}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{D6C0EDC8-5443-432D-B927-A42C0252C284}" = protocol=6 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | 
"{D8C55077-E30F-4B93-B5F6-02699B7E744F}" = protocol=17 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{D8D7A9A1-B3A6-4931-9103-5F103D19E2C7}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{D9020509-1915-46C3-8F77-73656050A0ED}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{D9575063-E67C-4168-A0F9-EC0C4BA3A36D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{DA0A9DB6-75C2-4D33-AF3E-957E96B0EF8D}" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{DB1D0129-9430-4B7A-A461-18021DEE16BD}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{DBE9FC53-0D77-45A8-A769-EA82DA04343E}" = dir=in | name=@{microsoft.windows.photos_15.915.17170.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{DC2D9DB8-5B41-4D64-9AB6-C65C58B1EC1F}" = protocol=6 | dir=in | app=c:\program files (x86)\tunngle\tnglctrl.exe | 
"{DD12F043-F476-4AA6-A873-452764EB3AB4}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{E1FA138B-3E50-44DE-AFE2-901A23E91FD9}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\magic 2014\dotp_d14.exe | 
"{E20C141F-B4E3-40B8-9EE2-4E3D0395E972}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{E30A1B3E-FE21-4810-B6DC-2DF67F566FAC}" = protocol=6 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"{E3458C9D-9AD5-42D0-8D36-940F11B65F9D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2787\agent.exe | 
"{E46B9AE6-F4BC-4DDC-A396-475B489DD224}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{E48798BA-3563-4A5A-8E28-5C4E48D9DA76}" = dir=out | name=@{microsoft.windows.cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | 
"{E51C2980-FA5D-4DD3-9111-65127B787228}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\bin\talos_unrestricted.exe | 
"{E52FDDF5-AC5F-464C-A17A-6D47A3EB837E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe | 
"{E5325EEB-3F01-445B-B94D-A233B1AEBA19}" = protocol=17 | dir=in | app=d:\spiele\dragon age\daoriginslauncher.exe | 
"{E5A67602-3EB0-42DE-B3AD-4031D2D252F9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3109\agent.exe | 
"{E5AD670E-B9DC-4C91-A919-746F255CF8A1}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{E6612FF6-20D1-486B-BE99-B2EE40A8EE64}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{E737A0A8-401F-4D1D-BDDD-A74D8366577F}" = dir=in | app=c:\program files (x86)\samsung\samsung universal print driver 2\printerselector\supdapp.exe | 
"{E8A7450A-558B-4DE7-8139-51D6846C2E80}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{E8E042D8-E451-44F8-82FA-536CB3D94352}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | 
"{E9182879-663A-4583-AC43-287F507628A2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\mark_of_the_ninja\bin\game.exe | 
"{E93BF174-DA47-4A48-9243-942B83AF5711}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{EA07A9B6-AE7B-426E-90FB-069CCDCFB202}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3427\agent.exe | 
"{EE93AA36-B737-4CE9-A350-E7329041BB81}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3715\agent.exe | 
"{EF868012-A3C8-4B3F-979D-4580606B6089}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{F19E59A1-2DF8-4F3D-9B53-F93106C90DF2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{F1DBD15E-DA8E-47A6-9329-BFD53767D7C6}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme2.exe | 
"{F1F436EB-F01E-4B64-89F0-D9D9CC3237A5}" = protocol=6 | dir=in | app=d:\spiele\diablo iii\diablo iii.exe | 
"{F23413BE-72FF-48FF-935F-B4423B56EB70}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{F32D8B5C-0A39-4213-B311-4264F61EDD29}" = protocol=17 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{F3B481F2-78BB-4809-B174-E6BF94AD446C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3372\agent.exe | 
"{F4001CEF-B676-4F8F-9CBE-5F88C6865C09}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3454\agent.exe | 
"{F4512911-456B-4408-9148-46ED2516F2E2}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{F4E28960-8EA3-4167-B305-A5D09CF4CB1B}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\digitalwizards.exe | 
"{F4ED5D7F-A38F-4D71-BF80-C1EEA149F559}" = protocol=17 | dir=in | app=c:\program files (x86)\tunngle\tnglctrl.exe | 
"{F6A0F5F8-3587-467B-9152-066807ADBFC3}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\baldur's gate ii enhanced edition\baldur.exe | 
"{F7B00440-33F6-4F71-976D-3587989F807C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{F7EC3CDC-284C-442A-BB04-2AC14E401D19}" = protocol=6 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{F86FD95D-A215-450E-A149-264AC71A11BA}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10240.16393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} | 
"{F8966F84-0191-401B-B9D7-BDE8ECAE8DB2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{F8E5572C-8AC6-41CD-A742-FE679E110F20}" = dir=out | name=@{microsoft.windowsphone_10.1508.17010.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphone/resources/appstorename} | 
"{F9AC4827-BB5D-4839-AA25-366ECF0B46D9}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{FA10D693-1CA9-4710-A397-22E92281F546}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\sendafax.exe | 
"{FB27EE1E-1789-4ECE-B224-B3F27B5E82FE}" = protocol=6 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{FE1FC3C7-EBB7-4A4B-945E-BEF9C927A416}" = dir=out | name=@{microsoft.bingsports_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | 
"{FE67CB5F-9D76-4332-8418-D9684CBAAF40}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{FF29EDB2-18BB-4CCD-896A-52444C37CE8C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3668\agent.exe | 
"{FF515000-9D08-408E-9921-26D9E623A3EB}" = protocol=17 | dir=in | app=d:\spiele\diablo iii\diablo iii.exe | 
"TCP Query User{0E4CC603-C65B-4D8A-9395-77790EFC0784}C:\steam\dayz\dayz.exe" = protocol=6 | dir=in | app=c:\steam\dayz\dayz.exe | 
"TCP Query User{0FFDD242-BB2F-49BF-905C-5B05E6D833B6}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe | 
"TCP Query User{153FC93A-87EC-47B0-9686-645FBEB20530}C:\steam\total war rome ii\rome2.exe" = protocol=6 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"TCP Query User{1E242760-BA70-462B-8804-2B2DD000B617}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe" = protocol=6 | dir=in | app=d:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe | 
"TCP Query User{1E2E57F1-9282-4817-BF17-86AF3119982D}C:\steam\dayz\dayz.exe" = protocol=6 | dir=in | app=c:\steam\dayz\dayz.exe | 
"TCP Query User{2087E360-86C8-4F44-9479-A342A8F24C4C}D:\spiele\far cry 4\bin\farcry4.exe" = protocol=6 | dir=in | app=d:\spiele\far cry 4\bin\farcry4.exe | 
"TCP Query User{26D928E9-F98F-40D1-A2AE-23E28514F798}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2753\agent.exe | 
"TCP Query User{2E3D86B6-3222-4719-A1C3-6465A9825C7E}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe | 
"TCP Query User{44A642B9-0B12-4F97-84BE-93251718E92E}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"TCP Query User{53CA6491-A5DE-489E-9250-55D4291DBB2E}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\rome2.exe | 
"TCP Query User{5A3687F6-AA2F-41D8-BC1F-6D0028F43762}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=6 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"TCP Query User{5C786FE9-C1E2-4B8A-B90E-6B8D503599A0}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"TCP Query User{66FE9211-BCCF-4D46-BFE7-8A2DF6DCC740}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 
"TCP Query User{679176C4-B17C-48AC-9438-D72A64AADF45}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe | 
"TCP Query User{6CFE4AB8-AACC-4D53-BDE9-4B7B1DC85A49}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe | 
"TCP Query User{75A8E893-2DB3-4F96-A700-1BDD93AEC419}D:\spiele\turbine\lotro\lotroclient.exe" = protocol=6 | dir=in | app=d:\spiele\turbine\lotro\lotroclient.exe | 
"TCP Query User{7B5AAE01-E32C-41F9-85E7-F96EAD837CB8}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"TCP Query User{7E0D2860-2926-4758-9E61-C3D62A6EE882}D:\spiele\der herr der ringe online\lotroclient.exe" = protocol=6 | dir=in | app=d:\spiele\der herr der ringe online\lotroclient.exe | 
"TCP Query User{811D149A-8102-4474-B680-7B0E1F1DB80D}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=6 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"TCP Query User{89EFC158-2255-4AD5-AD13-C0E7D8C6DDF0}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe" = protocol=6 | dir=in | app=c:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe | 
"TCP Query User{8C2A0CB4-B109-46D4-AABB-C160E0B4BC2A}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{8F8759CE-CB68-4E5B-8674-F698BF887F6D}C:\steam\total war rome ii\rome2.exe" = protocol=6 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"TCP Query User{99791AC9-E644-49DE-86C4-F301DA9B706F}C:\program files\java\jre1.8.0_51\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\javaw.exe | 
"TCP Query User{A35D10AF-D92A-4ABA-ACBF-C15CE5BC4854}C:\programdata\battle.net\agent\agent.3286\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3286\agent.exe | 
"TCP Query User{AA80F67F-5B29-4F21-AF43-610BD2557134}C:\program files\java\jre1.8.0_51\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\java.exe | 
"TCP Query User{AB7ED2C4-B673-4C55-83A0-5E725CB106E4}D:\spiele\steam\steamapps\common\total war attila\attila.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\attila.exe | 
"TCP Query User{C7489638-ABE6-4C6E-9EF0-20E06C24DBF4}C:\steam\dayz\dayz_experimental.exe" = protocol=6 | dir=in | app=c:\steam\dayz\dayz_experimental.exe | 
"TCP Query User{D499F6AB-D5DA-4AE8-B1FE-0C5672BDAAEC}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe | 
"TCP Query User{DF81AFF9-6AB8-429F-9D37-56BCA58078BB}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{E16FC49E-8D94-4B67-A2C9-9950910F8D4F}C:\steam\total war attila\attila.exe" = protocol=6 | dir=in | app=c:\steam\total war attila\attila.exe | 
"TCP Query User{E264AEE9-98D1-4F0C-A8D8-EF320B419BA4}D:\spiele\rockstar games\grand theft auto v\gta5.exe" = protocol=6 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"TCP Query User{E4D7CB05-04C0-4D43-AF88-AD7F4CADA6A7}C:\program files (x86)\hearthstone\hearthstone.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"TCP Query User{E6809934-F0AB-44EA-92A3-4F06E02800A4}D:\spiele\starcraft ii\versions\base32283\sc2.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii\versions\base32283\sc2.exe | 
"TCP Query User{E9B168F0-3A0F-4CB0-8F7B-1762918B2F50}D:\spiele\alien isolation\ai.exe" = protocol=6 | dir=in | app=d:\spiele\alien isolation\ai.exe | 
"TCP Query User{F0114F43-EF09-4068-9E8B-99DE01B36196}D:\spiele\steam\steam.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steam.exe | 
"TCP Query User{FDAB8299-263A-4540-98EB-B9BF2FFF7833}C:\users\diefackel\desktop\candisoft load!\load.exe" = protocol=6 | dir=in | app=c:\users\diefackel\desktop\candisoft load!\load.exe | 
"UDP Query User{01F3AAB2-F100-486D-9ECE-B0CE0B6D9092}D:\spiele\der herr der ringe online\lotroclient.exe" = protocol=17 | dir=in | app=d:\spiele\der herr der ringe online\lotroclient.exe | 
"UDP Query User{09D3B12E-1D64-4720-9738-808B2BB03418}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe" = protocol=17 | dir=in | app=d:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe | 
"UDP Query User{0D90916A-B2DB-4CD4-9340-B147B03340B9}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe | 
"UDP Query User{10132D8F-7597-4747-9782-0BFFDD89409C}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"UDP Query User{10CE2B65-E5F4-42BC-8163-71E573619FB5}C:\programdata\battle.net\agent\agent.3286\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3286\agent.exe | 
"UDP Query User{14B7CD50-9E78-45C7-B322-B12F8E02D065}C:\steam\total war rome ii\rome2.exe" = protocol=17 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"UDP Query User{2B0BD43A-F410-4B4D-B059-B6240AFC9884}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{34AB8C0E-5E53-439E-945C-0A955A44B729}D:\spiele\steam\steam.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steam.exe | 
"UDP Query User{34BCA22E-99A9-4037-899C-174952D355DE}D:\spiele\turbine\lotro\lotroclient.exe" = protocol=17 | dir=in | app=d:\spiele\turbine\lotro\lotroclient.exe | 
"UDP Query User{3BD0FB36-6A35-474D-B8D4-54428A7073F7}C:\steam\dayz\dayz.exe" = protocol=17 | dir=in | app=c:\steam\dayz\dayz.exe | 
"UDP Query User{3F166EB9-307C-4A2B-9432-B9F44FD2DAB3}D:\spiele\steam\steamapps\common\total war attila\attila.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\attila.exe | 
"UDP Query User{3FF88DA6-90AD-4569-A544-9BD32D95B4DE}C:\users\diefackel\desktop\candisoft load!\load.exe" = protocol=17 | dir=in | app=c:\users\diefackel\desktop\candisoft load!\load.exe | 
"UDP Query User{46682FD8-186D-49C6-A2F6-8726E2F384C5}D:\spiele\far cry 4\bin\farcry4.exe" = protocol=17 | dir=in | app=d:\spiele\far cry 4\bin\farcry4.exe | 
"UDP Query User{52E2A39D-CDF8-4BD2-A960-F3FB7AC8F64D}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe | 
"UDP Query User{6BD38B9B-C5B3-444B-9445-275EE4EF4F01}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe | 
"UDP Query User{70BA62A2-5F2E-4255-A782-5AC9112EBBCF}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe | 
"UDP Query User{71783481-456F-4E47-B816-DE0237716065}D:\spiele\rockstar games\grand theft auto v\gta5.exe" = protocol=17 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"UDP Query User{721024D8-CA0B-4E5A-8BD3-1DD886EF554B}C:\steam\dayz\dayz_experimental.exe" = protocol=17 | dir=in | app=c:\steam\dayz\dayz_experimental.exe | 
"UDP Query User{768ADEDF-7348-4888-A306-9D2D9BCFAB3C}C:\program files (x86)\hearthstone\hearthstone.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"UDP Query User{8B6CB9A1-CCD9-4ED2-8550-672343D27E06}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=17 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"UDP Query User{91E2485E-E838-477D-A73E-4A2676154231}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{94A160E1-66C3-4B87-9603-39556EFD9D49}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe" = protocol=17 | dir=in | app=c:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe | 
"UDP Query User{994ABB63-697E-4845-8262-7188C1B3840C}C:\steam\total war attila\attila.exe" = protocol=17 | dir=in | app=c:\steam\total war attila\attila.exe | 
"UDP Query User{9ECD126D-32EB-4A1F-9489-25F4A7842E71}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 
"UDP Query User{9F485F74-1D47-45B3-8AFD-61787933B854}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\rome2.exe | 
"UDP Query User{A1C93A3A-B967-4C58-A16D-F1E7DE6A8FA3}D:\spiele\alien isolation\ai.exe" = protocol=17 | dir=in | app=d:\spiele\alien isolation\ai.exe | 
"UDP Query User{A9C1AB2D-4EB1-4FFF-BF4F-6A34049E98AA}C:\steam\total war rome ii\rome2.exe" = protocol=17 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"UDP Query User{AC4641F8-12FC-420F-823F-EFFC3F28FDBE}C:\program files\java\jre1.8.0_51\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\java.exe | 
"UDP Query User{B0847E20-BD2F-4CE3-81BD-B269F8AE2DCE}C:\program files\java\jre1.8.0_51\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\javaw.exe | 
"UDP Query User{B520E170-4F76-4BC5-A52D-FB024EEF4451}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"UDP Query User{C27FDE17-733B-4E36-8FB2-179CA232B7F5}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"UDP Query User{C7336522-0718-4032-B21C-44DAB4327448}C:\steam\dayz\dayz.exe" = protocol=17 | dir=in | app=c:\steam\dayz\dayz.exe | 
"UDP Query User{D156C6E4-CF56-47E4-8877-C9FA020097D1}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe | 
"UDP Query User{EF209801-AE72-41D9-9F77-608AD8263367}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=17 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"UDP Query User{EF620606-1FAD-4D0F-A60A-B3D46FA847CD}D:\spiele\starcraft ii\versions\base32283\sc2.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii\versions\base32283\sc2.exe | 
"UDP Query User{F5D0F458-A64A-4AAC-88D7-6DB7D0B66659}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2753\agent.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC6
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86418060F0}" = Java 8 Update 60 (64-bit)
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{670B1B49-9FD3-4827-9B41-471EFF580AA8}" = Evolve
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{9086D601-50B7-491D-A143-28193DADE36B}" = HP Officejet 6700 - Grundlegende Software für das Gerät
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{986E003C-E56D-5A47-110E-D3C81F0E8535}" = Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.11761.0_neutral_~_8wekyb3d8bbwe (x64)
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 352.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 353.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 352.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.4.3.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 352.65
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.15.0428
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 2.4.3.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService" = NVIDIA GeForce Experience Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.34.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 2.4.3.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.27
"{C513739C-5F16-37B5-9ACF-99925FF1C1F3}" = Microsoft .NET Framework 4.5.1 (DEU)
"{CCF92FFE-5341-4263-9048-472D9E3C5703}" = HP Officejet 4630 series - Grundlegende Software für das Gerät
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}" = Microsoft Xbox One Controller for Windows
"6af12c54-643b-4752-87d0-8335503010de_is1" = Nexus Mod Manager
"AutoHotkey" = AutoHotkey 1.1.15.03
"CCleaner" = CCleaner
"GIMP-2_is1" = GIMP 2.8.14
"HardlinkShellExt" = Link Shell Extension
"jdownloader2" = JDownloader 2
"Recuva" = Recuva
"TAP-Windows" = TAP-Windows 9.9.2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VLC media player" = VLC media player
"WinRAR archiver" = WinRAR 4.20 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.1214.1 
"{0F659036-14C7-4622-9505-35A0DC93526A}" = System Requirements Lab
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83218060F0}" = Java 8 Update 60
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B10.0427.1
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{456A5815-604D-4D72-94DF-346D2B978A59}_is1" = GOG.com Downloader version 3.6.0
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0516.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}" = ROCCAT Isku Keyboard Driver
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{517E7DBD-7A5B-4B7F-B137-82AB4DAD68FC}" = LogMeIn Hamachi
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{6A0549A9-1B96-498C-ACBC-3943001FEB19}" = Skype™ 7.8
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7133137D-DF48-4522-AD88-13C82B7D0A63}" = ROCCAT Kone XTD Mouse Driver
"{7258BA11-600C-430E-A759-27E2C691A335}_is1" = GOG Galaxy
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7BBAEC47-1CC0-4CB8-ADB4-531B78DBD1DD}" = Adobe AIR
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}" = Sitecom Europe BV Wireless LAN
"{912D30CF-F39E-4B31-AD9A-123C6B794EE2}" = HP Update
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A2F991E7-DDCD-42B7-AFEC-47789A099FDC}" = Browser Configuration Utility
"{A80CEA4E-74C1-4F9F-806B-E1D9AFC01768}" = inSSIDer 3
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-0804-1033-1959-001824147215}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1031-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Deutsch
"{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}" = OpenOffice 4.1.1
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0517.1
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"{DC4C36DC-4E5B-4262-B0C7-157DF534B969}" = Dragon Age™: Inquisition
"{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}" = Grand Theft Auto V
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.275
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"1207664643_is1" = The Witcher 3 - Wild Hunt
"1424773427_is1" = Hotline Miami 2 - Wrong Number
"Adobe AIR" = Adobe AIR
"Adobe Flash Player NPAPI" = Adobe Flash Player 18 NPAPI
"Alternative Look for Triss_is1" = The Witcher 3: Wild Hunt - Alternative Look for Triss
"Alternative Look for Yennefer_is1" = The Witcher 3: Wild Hunt - Alternative Look for Yennefer
"avast" = Avast Free Antivirus
"Ballad Heroes - Neutral Gwent Card Set_is1" = The Witcher 3: Wild Hunt - Ballad Heroes - Neutral Gwent Card Set
"Battle.net" = Battle.net
"Beard and Hairstyle Set_is1" = The Witcher 3: Wild Hunt - Beard and Hairstyle Set
"BitRaider Streaming Client" = BitRaider Streaming Client
"Capsule" = Capsule
"Cheat Engine 6.4_is1" = Cheat Engine 6.4
"CrystalDiskInfo_is1" = CrystalDiskInfo 6.5.2
"Elite Crossbow Set_is1" = The Witcher 3: Wild Hunt - Elite Crossbow Set
"FormatFactory" = FormatFactory 3.1.1
"Fraps" = Fraps
"Free Audio Converter_is1" = Free Audio Converter version 5.0.57.301
"GOGPACKPAPERSPLEASE_is1" = Papers, Please
"Google Chrome" = Google Chrome
"Hearthstone" = Hearthstone
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0516.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0517.1
"InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"LogMeIn Hamachi" = LogMeIn Hamachi
"LOOT" = LOOT
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware Version 2.1.8.1057
"Mozilla Firefox 40.0.3 (x86 de)" = Mozilla Firefox 40.0.3 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"New Quest - Contract Missing Miners_is1" = The Witcher 3: Wild Hunt - New Quest - Contract Missing Miners
"New Quest - Contract: Skellige's Most Wanted_is1" = The Witcher 3: Wild Hunt - New Quest - Contract - Skellige's Most Wanted
"New Quest - Fool's Gold_is1" = The Witcher 3: Wild Hunt - New Quest - Fool's Gold
"New Quest - Scavenger Hunt: Wolf School Gear_is1" = The Witcher 3: Wild Hunt - New Quest - Scavenger Hunt - Wolf School Gear
"New Quest - Where the Cat and Wolf Play..._is1" = The Witcher 3: Wild Hunt - New Quest - Where the Cat and Wolf Play...
"Nilfgaardian Armor Set_is1" = The Witcher 3: Wild Hunt - Nilfgaardian Armor Set
"Notepad++" = Notepad++
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Origin" = Origin
"ParkControl" = ParkControl
"Reassembly_is1" = Reassembly version 10.12.14
"Rockstar Games Social Club" = Rockstar Games Social Club
"Samsung Universal Print Driver 2" = Samsung Universal Print Driver 2
"Secunia PSI" = Secunia PSI (3.0.0.7011)
"Skellige Armor Set_is1" = The Witcher 3: Wild Hunt - Skellige Armor Set
"StarCraft II" = StarCraft II
"StarCraft II - Legacy of the Void Beta" = StarCraft II - Legacy of the Void Beta
"Steam App 108600" = Project Zomboid
"Steam App 200260" = Batman: Arkham City GOTY
"Steam App 212680" = FTL: Faster Than Light
"Steam App 221100" = DayZ
"Steam App 230230" = Divinity: Original Sin
"Steam App 235460" = METAL GEAR RISING: REVENGEANCE
"Steam App 236430" = DARK SOULS™ II
"Steam App 237990" = The Banner Saga
"Steam App 239350" = Spelunky
"Steam App 242920" = Banished
"Steam App 257350" = Baldur's Gate II: Enhanced Edition
"Steam App 262060" = Darkest Dungeon
"Steam App 273350" = Evolve
"Steam App 282070" = This War of Mine
"Steam App 318230" = Convoy
"Steam App 32470" = Star Wars: Empire at War Gold
"Steam App 325610" = Total War: ATTILA
"Steam App 335180" = StarMade Demo
"Steam App 34330" = Total War: SHOGUN 2
"Steam App 550" = Left 4 Dead 2
"Steam App 65980" = Sid Meier's Civilization: Beyond Earth
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 8930" = Sid Meier's Civilization V
"Temerian Armor Set_is1" = The Witcher 3: Wild Hunt - Temerian Armor Set
"Tunngle beta_is1" = Tunngle beta
"uTorrent" = µTorrent
"VirtualCloneDrive" = VirtualCloneDrive
"Wasteland 2 Ranger Edition MULTi7 Update 1 1.0" = Wasteland 2 Ranger Edition MULTi7 Update 1 1.0
"Winamp" = Winamp
"Yahoo! SearchSet" = Yahoo Search Set
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 20.09.2015 07:14:58 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:14:58 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:08 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:08 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:18 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:18 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:29 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:29 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:39 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:39 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
[ System Events ]
Error - 18.09.2015 22:20:20 | Computer Name = Sol-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 18.09.2015 22:20:49 | Computer Name = Sol-PC | Source = Microsoft-Windows-Kernel-Power | ID = 137
Description = 
 
Error - 19.09.2015 07:15:37 | Computer Name = Sol-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 19.09.2015 14:26:00 | Computer Name = Sol-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070490 fehlgeschlagen: HP - Enterprise WSD Multi-Function Printer, Other
 hardware - Null Fax - HP Officejet 4630 series
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Kontaktdaten_Session2" wurde unerwartet beendet. Dies 
ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Benutzerdatenspeicher _Session2" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Benutzerdatenzugriff_Session2" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:57 | Computer Name = Sol-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 19.09.2015 18:34:21 | Computer Name = Sol-PC | Source = Microsoft-Windows-Kernel-Power | ID = 137
Description = 
 
 
< End of report >
         
TCP Verbindungen
hxxp://imgur.com/CwTmnJY

Alt 20.09.2015, 15:42   #2
dieFackel
 
Malware Befall? - Standard

Malware Befall?



OTL
Code:
ATTFilter
OTL Extras logfile created on: 20.09.2015 14:12:03 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\dieFackel\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 4,10 Gb Available Physical Memory | 51,24% Memory free
16,00 Gb Paging File | 11,46 Gb Available in Paging File | 71,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 24,30 Gb Free Space | 20,40% Space Free | Partition Type: NTFS
Drive D: | 931,41 Gb Total Space | 117,87 Gb Free Space | 12,65% Space Free | Partition Type: NTFS
Drive E: | 2,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: SOL-PC | User Name: dieFackel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
 
========== Extra Registry (SafeList) ==========
 
 
========== File Associations ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]
.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)
.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)
 
[HKEY_CURRENT_USER\SOFTWARE\Classes\<extension>]
.html [@ = FirefoxHTML] -- C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
 
========== Shell Spawning ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
InternetShortcut [open] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\ieframe.dll",OpenURL %l (Microsoft Corporation)
InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]
batfile [open] -- "%1" %*
cmdfile [open] -- "%1" %*
comfile [open] -- "%1" %*
cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)
exefile [open] -- "%1" %*
helpfile [open] -- Reg Error: Key error.
htmlfile [edit] -- Reg Error: Key error.
htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
htmlfile [opennew] -- Reg Error: Key error.
http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
inffile [install] -- %SystemRoot%\System32\InfDefaultInstall.exe "%1" (Microsoft Corporation)
piffile [open] -- "%1" %*
regfile [merge] -- Reg Error: Key error.
scrfile [config] -- "%1"
scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l
scrfile [open] -- "%1" /S
txtfile [edit] -- Reg Error: Key error.
Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)
Directory [AddToPlaylistVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)
Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)
Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Directory [PlayWithVLC] -- "C:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)
Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Folder [explore] -- Reg Error: Value error.
Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)
Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)
CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.
 
========== Security Center Settings ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
"cval" = 1
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
"VistaSp1" = B8 53 BB 86 69 D0 D0 01  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" =  [binary data]
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]
"UpgradeTime" = Reg Error: Unknown registry data type -- File not found
 
========== Firewall Settings ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]
"DisableNotifications" = 0
"EnableFirewall" = 1
 
========== Authorized Applications List ==========
 
 
========== Vista Active Open Ports Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{0A7AC2B9-D334-4A5F-BAD8-BBBA43FAEF85}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 
"{3FEAF7FE-3E22-4EC7-A31F-206284E9E1CA}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe | 
"{44B570B6-8F9C-49AC-8F60-141064742DDE}" = lport=47995 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{45D8D20D-013A-4430-8691-DF5DB7BB3C5B}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{592D499E-5BC0-476C-A7C2-512F75587FD3}" = lport=443 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | 
"{6BDCEACE-97D2-4073-9739-91AA434DA97A}" = lport=47991 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{A093B23A-34C2-4679-B293-D93929427E28}" = lport=47987 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{A7CDDBE0-F603-4ED4-BD35-F587C8055EBB}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamsvc.exe | 
"{B63F0017-2F7E-41CE-B2BB-357A5923027F}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamnetworkservice.exe | 
"{BB5826E7-2A22-4527-A02E-B9188881C9CC}" = lport=4000 | protocol=6 | dir=out | app=c:\program files (x86)\dll-files.com fixer\dllfixer.exe | 
"{C346D2EC-0F46-4B35-BF88-45A910E8F65D}" = lport=5357 | protocol=6 | dir=in | name=ws-eventing tcp port 5357 | 
"{F2545E51-0152-4CD8-9DDD-4070AF02854B}" = lport=48000 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 
"{F7500448-256C-4CF4-921E-F82C761ED2EB}" = lport=80 | protocol=6 | dir=in | app=c:\program files (x86)\nvidia corporation\netservice\nvnetworkservice.exe | 
 
========== Vista Active Application Exception List ==========
 
[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]
"{005CA57C-0C3A-47D0-8BF8-250011EEADDB}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{01A59A15-B150-4261-A832-C13E2333934A}" = protocol=17 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{02077CB4-DEE6-45F8-9434-2E73F92525A4}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{02753EB8-721E-4F3C-A12C-34C33645F4AA}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\devicesetup.exe | 
"{042A055D-138C-4D24-943A-D29B3400242B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{0512736B-D209-4A68-9032-8F1E5EBC5663}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{05890CEC-27A6-4394-90E0-BB59AF447910}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{05B42524-C3C8-41AE-898B-8F2B08533BBD}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{05C433B1-045D-4649-9FE8-AA33A16A6681}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{05E2912F-1FB3-4D2D-B26F-731F9C4972A1}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\mark_of_the_ninja\bin\game.exe | 
"{0849E683-30DF-4FBA-ACF9-191670245FC2}" = dir=out | name=@{microsoft.people_1.10241.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 
"{0898D30C-4DDF-4852-9CEF-CD79E0FB0347}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid64.exe | 
"{08FE3F0B-E290-4A32-8D1A-5E0431B92CD9}" = protocol=6 | dir=in | app=d:\spiele\dragon age\bin_ship\daupdatersvc.service.exe | 
"{0A2AEE49-FE23-49FB-9805-852F5AD4D90B}" = dir=in | name=xbox one smartglass | 
"{0B4EBB85-0C1D-4E89-8CE1-83B826995FED}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{0BAE9171-52B3-4EC5-9A19-A016C1E03D02}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3147\agent.exe | 
"{0BB03995-1E3A-4C68-839F-2683138514C7}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{0C0652B7-FCB4-46F4-B493-383EA1E10206}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\evolvebeta\bin64_steamretail\staticlauncher64.exe | 
"{0C591109-FBC6-4F73-BBBB-61092B9BB943}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme.exe | 
"{0D67BF69-771F-4CC6-B60E-FE209BC5D2AA}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{0E12E7A7-B93C-4E19-B9B7-6095AF6767F1}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2680\agent.exe | 
"{0E181344-9146-427F-B8C5-F7CEC8AE589F}" = protocol=17 | dir=in | app=d:\ubisoft\future soldier dx9.exe | 
"{0EF27D38-E34C-49C9-8FFF-A8DEE122C744}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{1007BD7E-888D-41BC-9DF6-6016D0A2C516}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\convoy\convoy.exe | 
"{10F2AA7E-B647-4859-A997-8DCA038F947F}" = protocol=17 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"{1162E8DD-48DD-4181-812E-659536393FF0}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_dx11.exe | 
"{11C01E43-C6A3-487F-98FC-F8720A67124B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{121C2BBA-ADCF-4A00-A003-8E4DC7C19F42}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{12F913B6-00F8-4DEB-B3E4-8D97D2850BED}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3507\agent.exe | 
"{131CBD8F-19F4-4077-AA23-2E3A9B932972}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme.exe | 
"{15789D71-645E-40BA-A62F-658AE5200343}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2737\agent.exe | 
"{161B3A9B-F20F-432A-A4F8-529C74EDA64C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3334\agent.exe | 
"{17802179-CA10-493D-89B9-93EDC204577E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{18B2ED39-6F83-4A48-8D68-DC86F3330C75}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{18E3DFF2-8E7F-4F8D-B17D-9CEFEF9410D2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{1AC1DBEE-839F-431D-8D8E-029BC8B31A0B}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\resident evil 4\bin32\bio4.exe | 
"{1BFB075B-45D6-4E2A-85A9-291CD184C82D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{1DC62405-5788-4878-AEEF-73C0E95C6951}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3427\agent.exe | 
"{1FDDD19F-D61F-4E96-9476-9EE53E29A059}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3332\agent.exe | 
"{200F8714-305F-4403-A7E8-177A79F7581D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{20947C9C-C050-4E24-ACE3-A9192112A63A}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\hitman absolution\hma.exe | 
"{218D2D66-4D94-49D5-AF31-43C404A7EDB5}" = dir=in | name=@{microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{227B3C14-5356-4F52-9290-1A29338AAD29}" = dir=out | name=xbox | 
"{228C2D57-EE48-40B9-9993-179DAFE23EB3}" = dir=in | name=xbox | 
"{229F2905-9307-4961-B2F4-EEB6BE81AAE4}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\banished\application-steam-x64.exe | 
"{22EF0059-D71E-46A6-A646-B5E9903D7EB7}" = protocol=17 | dir=in | app=d:\spiele\dragon age\bin_ship\daupdatersvc.service.exe | 
"{23E7F851-E1FF-4B6E-AD30-947EA07554B2}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 
"{24AD6035-4531-4D19-88F4-22279AFC5DAA}" = protocol=17 | dir=in | app=d:\spiele\steam\bin\steamwebhelper.exe | 
"{260998F8-92AC-4377-B056-ABB93BE243F7}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{271C88E9-96B2-4725-ADE1-49DBFA58099D}" = protocol=17 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{27B6BBB1-7DD7-44E0-9F5F-821FCBFA2D98}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2880\agent.exe | 
"{27CF53A7-4C2D-447E-B96F-CA6BFAACB147}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\launcher\launcher.exe | 
"{27D80C77-5768-47B2-BC71-ECEF146C8A2D}" = protocol=6 | dir=in | app=d:\spiele\dragon age\bin_ship\daorigins.exe | 
"{28B9B0CA-69CF-49C4-886D-1F7E6D0E63E0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{2B1DAD53-06C0-466F-9E22-55FA34F4F7C1}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{2E04DF7B-58DC-40FD-9861-C65DEEF3472B}" = protocol=6 | dir=in | app=d:\spiele\steam\bin\steamwebhelper.exe | 
"{2E372AA7-F0B1-41BF-9BCF-3AFE1A50E663}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{2E42D9FC-277E-4017-8613-13BCC3649FF1}" = dir=out | name=@{microsoft.windowscommunicationsapps_17.6208.42001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} | 
"{30BD7EC9-61EF-43AD-BFCA-932704125836}" = protocol=6 | dir=in | app=d:\spiele\dragon age\daoriginslauncher.exe | 
"{3130F182-68CD-449D-A804-A997F2261D73}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{3241B533-BF6C-464C-8635-3BBC2ABA07D4}" = dir=out | name=@{microsoft.windowsdvdplayer_3.6.11761.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsdvdplayer/resources/ids_dvdplayer_app_name} | 
"{3303FDE8-CEFC-452C-B250-A1DB46463A31}" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"{33EC2108-E97A-4AA1-BD77-5008A89FC222}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{347A10AF-F98B-4779-B70B-3F025D418E11}" = protocol=17 | dir=in | app=d:\dateien\utorrent\utorrent.exe | 
"{35241231-34FA-42D4-921F-BAC90A61C91A}" = protocol=17 | dir=in | app=d:\spiele\dragon age\bin_ship\daorigins.exe | 
"{3555AFC8-175C-4A2E-B148-CC93257FCED2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\hitman absolution\hma.exe | 
"{3675F0AF-25B1-45AE-BDED-BEECEADB7462}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{37DBD5E1-76BC-46E5-8F23-179DADB6C408}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme2.exe | 
"{3827FB5E-BF15-4667-9A6F-FF5A3112D939}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\faxapplications.exe | 
"{396624B1-C30D-48C7-A088-13E424FC2A24}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\faxapplications.exe | 
"{3A2FD336-EDBD-40E1-B06A-24C24C50670E}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{3A7BC421-EDBF-409F-AE22-B79A7C6D1E11}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\hpnetworkcommunicatorcom.exe | 
"{3AE9DECA-3481-43DA-B89E-BF20F112D819}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{3BC6CFE2-7EA2-4011-84BA-7FEED091D83A}" = dir=in | app=d:\dateien\echobit\evolve\evolveclient.exe | 
"{3C37B9E7-A1B0-41FF-BB5C-41BB7071420B}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{3D77A983-461C-4A06-BDE7-A19AD55B4DD8}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\magic 2014\dotp_d14.exe | 
"{3D9D9D7A-E99F-481F-96B6-69EA8ECDB91F}" = dir=out | name=@{microsoft.windows.photos_15.915.17170.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{3E09C03A-4152-4866-8740-9436C209C174}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\banished\application-steam-x64.exe | 
"{3F95326E-BB54-49B1-85DD-73659FAF8C62}" = dir=in | name=@{microsoft.bingnews_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{4110D224-9A94-479B-BDD6-927B5E0CD22F}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe | 
"{42E8ED7D-6813-475E-9526-E86E74431098}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3109\agent.exe | 
"{4373D304-EC2F-4DC7-A098-1034ED7EC19D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe | 
"{44789199-E0E1-4D74-9AA9-927C61BEBF41}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{454808A4-0F57-4997-A163-A11BEB797424}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2816\agent.exe | 
"{454B6152-3A20-4BB5-852C-649F4293A1FA}" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{466FED5B-6575-4E15-87A2-545F7300F3DA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3454\agent.exe | 
"{4701180F-828D-4A7D-BEE2-0525E357EEDF}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\launcher\launcher.exe | 
"{47331124-787A-4A26-A875-7E33D2E60C2E}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{473F3C8B-E48E-49EC-B8ED-971DDEED3907}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3323\agent.exe | 
"{47531F08-A748-403F-94CD-31A8E33F9E2F}" = dir=out | name=twitter | 
"{47AA9760-2E5B-46F0-8A4D-EEA417002F31}" = dir=in | name=@{windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{47C063DB-E35A-4680-ACF9-074E46A11E7F}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\bin\taloslauncher.exe | 
"{487C9432-BD35-49B9-99F5-3BAFE1A664EE}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{4897919E-4C88-40A9-8114-D18BF2C3107E}" = dir=out | name=@{microsoft.3dbuilder_10.9.6.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.3dbuilder/resources/appstorename} | 
"{4963AD04-0B6C-4175-BDC5-D89A44D8BBE8}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{49FBEF79-5265-4DBB-80C5-04929B850A06}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\starmade\starmade-starter.exe | 
"{4A5DB823-6EE7-455F-A4B4-66B5A92E1DAC}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | 
"{4AE9B7C5-F214-42B4-BD04-4D111B6C6902}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3346\agent.exe | 
"{4C509833-4E81-4B7D-9786-A86864E79778}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{4CEB2609-F630-445B-ADE0-E7A4F484BD37}" = protocol=6 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{4D31A50F-DD2C-44A1-8106-12450F1BD174}" = protocol=6 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{4D7695AC-2CFD-4339-BA01-09D6A50F6916}" = dir=out | name=@{microsoft.microsoftedge_20.10240.16384.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 
"{4DCD9165-0CDD-43E8-89E4-C09A2AFEC4F6}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{4E00D23C-FC6C-460D-B09D-C74E9829E1E6}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{4E466B35-E368-40A2-AC9C-0A464848E71E}" = dir=out | name=@{microsoft.xboxidentityprovider_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxidentityprovider/resources/pkgdisplayname} | 
"{4E55DE75-0541-4FFF-A27A-B8E7A0708C41}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\the banner saga factions\win32\the banner saga factions.exe | 
"{4FEC670E-A4A5-4FCA-AD3C-C8CEBC9F80E4}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\metal gear rising revengeance\metal gear rising revengeance.exe | 
"{50A0F398-48A6-498F-9B67-4D5C9A071F1B}" = protocol=17 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{50A4018A-E9AB-4375-85D1-DB1EA03F464C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3507\agent.exe | 
"{50CA82F3-6FD3-4198-BC73-5E7FB0BEC229}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid32.exe | 
"{5185CE5F-6F3A-4005-9FFA-99A07BFC30AF}" = dir=out | app=d:\spiele\the escapists\theescapists.exe | 
"{522D8F47-7A69-4C86-8D0A-3B96A5BA7490}" = protocol=17 | dir=in | app=d:\spiele\steam\steam.exe | 
"{52E231DB-F5D6-4028-BEC4-8E8ED67F12AD}" = protocol=17 | dir=in | app=d:\spiele\starcraft ii\starcraft ii.exe | 
"{546EE88C-D4CD-4AD5-A785-76611448A8B8}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{5712810A-D8E8-47F1-867C-8A567865F1FA}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{5933A99D-DE56-4D42-A127-7361BCDDBA2B}" = protocol=6 | dir=in | app=c:\program files (x86)\ubisoft\ubisoft game launcher\ubisoftgamelauncher.exe | 
"{59C36A26-852E-4745-BEF7-698FF9D6C85E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid64.exe | 
"{5A5B2FD4-4695-44C9-8C9B-9D28D6012468}" = dir=in | name=@{microsoft.bingfinance_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | 
"{5A635D4F-1529-4FD1-87C0-0B9C1FAAA69A}" = protocol=6 | dir=in | app=d:\spiele\steam\steam.exe | 
"{5B828859-7EB5-48C0-B521-DAF312FC3B92}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{5BEEE90D-0BBE-4967-8B44-654F73F5E717}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\the banner saga factions\win32\the banner saga factions.exe | 
"{5C97D2AD-62A5-4F8E-A76D-8CBD095C76AB}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{5CE8D20C-85C6-4DE3-A472-B7817AC6AAEA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3323\agent.exe | 
"{5E7713F5-7BBD-4363-9B96-0C255F7D2E3D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{5E9EC2DE-8C92-4258-AC76-9FA200A6CFCA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3023\agent.exe | 
"{5FD0AFAB-647B-413F-8806-D83B6639A7D5}" = protocol=6 | dir=in | app=d:\spiele\starcraft ii\starcraft ii.exe | 
"{6083F112-8C04-4F34-8B81-E280FF1B4F08}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3023\agent.exe | 
"{612F91F9-9A30-412D-B951-56F8B50574E5}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_mantle.exe | 
"{61375D69-A18E-4803-8779-D8BF39D6268A}" = dir=in | app=d:\dateien\echobit\evolve\evosvc.exe | 
"{62EE0961-BA3D-4D95-9334-21F2BADA5749}" = protocol=6 | dir=in | app=d:\spiele\riot games\league of legends\lol.launcher.exe | 
"{63E93650-FC6E-470D-B081-ED7D3885B788}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3478\agent.exe | 
"{65BCD715-1B96-40FB-93BC-46BB53473CA1}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3235\agent.exe | 
"{65CA368D-AA79-49E2-99A8-3734AD9636F2}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{65ED1D28-06B3-4520-B7A1-C1B0B3C19453}" = dir=out | app=d:\spiele\dying light - season pass edition\dying light - season pass edition\dyinglightgame.exe | 
"{660FBB0B-FF00-4456-9BEA-7DFBF4895F7E}" = dir=out | name=@{microsoft.lockapp_10.0.10240.16384_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 
"{6680ACBA-36E3-4AAD-B9B0-01E7654230F0}" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"{66A06236-BF4D-4C8A-91D8-1036C1CED3C5}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\rogue legacy\roguelegacy.exe | 
"{66BD3D56-1118-4FC3-9E54-80150813DA09}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3715\agent.exe | 
"{67A514D2-A5D3-4279-AB1E-636784D1EE38}" = dir=in | name=@{microsoft.bingsports_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | 
"{6824D999-E278-4D96-A8EB-3C4D6761872C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\this war of mine\this war of mine.exe | 
"{6865C0BD-E5FB-4EE7-A14C-6BC7ADC5AF5E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{688477AC-2BC2-432D-BB5F-610B8EE78714}" = protocol=17 | dir=in | app=c:\program files (x86)\tunngle\tunngle.exe | 
"{69741C2E-A68A-4CFB-9806-5ACAF93A5507}" = dir=out | name=@{microsoft.windowsstore_2015.9.9.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{6A1E11C6-2FD4-4442-B793-54CAD8E63F82}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\metal gear rising revengeance\metal gear rising revengeance.exe | 
"{6ACFD153-8905-467B-970D-055343BD393E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\divinity - original sin\shipping\eocapp.exe | 
"{6BF50E30-7EB9-4353-BC55-1167AFD223F4}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3688\agent.exe | 
"{6C2CB2BE-9CBB-42C8-B541-075309D8621E}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{6DB10C88-5451-485A-B1DB-C7936DD88213}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\projectzomboid\projectzomboid32.exe | 
"{6F6FECE9-E7BE-46A8-B2EB-88BBB95D2A24}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 
"{6FCEA93C-55AE-4EB2-98EB-B68ED3541B24}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{6FD1367F-BE5F-445D-9450-6288750D57E0}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\hpnetworkcommunicator.exe | 
"{71EDB1FE-7946-4123-80C9-0B72647F813D}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{725EA809-0C27-44BB-A6D1-42DFFB83A5B6}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_dx11.exe | 
"{72C456E5-DAA4-431D-9980-04CFD84D8BE1}" = dir=in | app=c:\program files (x86)\skype\phone\skype.exe | 
"{732BA3E2-1182-4397-8D28-A9A2C88849AA}" = dir=out | app=d:\spiele\gog games\hotline miami 2 - wrong number\hotlinemiami2.exe | 
"{74B20526-C704-4197-B388-4CC6E61A0C1C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{75FC0C17-CEE6-4683-A000-68DC461CDDCF}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{761C66B0-8B01-4D1B-AFB3-2054C4A21ECB}" = dir=in | name=@{microsoft.bingweather_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{77F7FC88-7D10-47A1-A934-A458A2FD7952}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\evolvebeta\bin64_steamretail\staticlauncher64.exe | 
"{78C4D7BF-73DB-4DAF-8326-B43326C6E00B}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 
"{78C7F32C-24C4-45B6-8186-FD812927A836}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{791AE8AB-8F4F-4403-997C-7D6431C71758}" = protocol=6 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"{793C15B0-6D90-460B-AC34-F7920EA0457B}" = dir=out | name=windows_ie_ac_001 | 
"{7946B31A-3D86-4532-8C59-B2608D2F5089}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{7ABD6415-AAE2-4A3F-AD8C-0056BCBE5447}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{7BB0851D-6A74-42EB-A886-3DD13A42722B}" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"{7BE77165-226E-4090-ACA4-A8C96846A894}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization v\launcher.exe | 
"{7C6AAB1A-6FDA-42F6-9029-383B567FD67C}" = dir=out | name=@{microsoft.microsoftofficehub_17.6209.23751.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{7DB26FD5-0ED8-4977-B3AE-74BC78F74905}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe | 
"{7E08556E-1E48-491D-9432-D0CD72FB0C37}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{7E35D448-A58D-4FC2-BA21-430360FADCD6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3147\agent.exe | 
"{7E712ACE-081E-4A1D-A7DB-1DA6AA724707}" = protocol=6 | dir=in | app=c:\program files (x86)\tunngle\tunngle.exe | 
"{7F4738E0-D875-4AAA-8603-B22CCD24074A}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{804D6F11-A546-48E8-8806-D776353B49F5}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\batman arkham city goty\binaries\win32\batmanac.exe | 
"{80C91602-0A9B-403A-8488-F952FA86D28F}" = protocol=6 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{8382654B-F75C-46C3-89A5-96365F686589}" = dir=out | name=@{windows.purchasedialog_6.2.0.0_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.purchasedialog/resources/displayname} | 
"{8478B8DE-38F7-4608-B84F-15A89CCCF4D7}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\sendafax.exe | 
"{84E05554-EBD4-4F2C-935A-8476C0213A1B}" = protocol=17 | dir=in | app=d:\dateien\winamp\winamp.exe | 
"{850377DC-94A3-4B2A-AA1F-2D4A61142648}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\sid meier's civilization beyond earth\civilizationbe_mantle.exe | 
"{85C5C8CE-4D27-4531-A568-5EFDE17198F5}" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{86B7401E-8AB8-447F-BEA3-F5DD0CDF19CA}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2638\agent.exe | 
"{874CB0D8-1A02-4AC9-A166-9F8293E19B86}" = protocol=17 | dir=in | app=c:\steam\total war attila\launcher\launcher.exe | 
"{8759A254-2AFE-4E31-912C-C534E6F5F517}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{88F4AE15-7AAB-4B72-BEC4-9C72D67F7A88}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\deus ex - human revolution\dxhr.exe | 
"{8A07CC39-D9D6-4986-A7E7-FC3984AC7127}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3334\agent.exe | 
"{8B769242-BA38-42BD-B61E-C869E9D4AFD6}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{8B88620A-E50A-426E-949A-8CC410A9D244}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\convoy\convoy.exe | 
"{8B8C6FF2-E4E2-492B-BD96-275EEA4254D9}" = dir=out | name=@{microsoft.zunevideo_3.6.12711.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 
"{8BE9C610-6900-4DC0-ABAD-CB4AC37F2188}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\launcher\launcher.exe | 
"{8BEDEFB4-D4DD-49DB-AF32-02BC67C7F08E}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{8D209263-84F7-4FE6-B69E-868302C09FD2}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\digitalwizards.exe | 
"{8E689C35-4729-49A6-BAD2-957DC852D36D}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3332\agent.exe | 
"{8F403FA8-32ED-4220-B599-037F2278A985}" = protocol=17 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | 
"{908F4F56-D8E9-4767-9F40-75C1634CF255}" = dir=in | name=@{microsoft.windowscommunicationsapps_17.6208.42001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxcommintl/appmanifest_outlookdesktop_displayname} | 
"{90C2CADE-0B84-499A-B2F0-315635D1D7C9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3668\agent.exe | 
"{91F29332-8300-4A77-8646-391A0E36647B}" = protocol=6 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{9285C295-959E-446A-A96B-12113128E64F}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{930A184D-3AC6-40FF-A3BD-97983CF14E97}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3182\agent.exe | 
"{95590C03-1640-4DFA-88D5-77BEC88C5CAB}" = protocol=17 | dir=in | app=d:\spiele\riot games\league of legends\lol.launcher.exe | 
"{967DF2D9-1094-404F-95FB-747EDD01CEFB}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\ftl faster than light\ftlgame.exe | 
"{96EBA60C-D22C-4AE4-B9FF-48344DCD1A8B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\starmade\starmade-starter.exe | 
"{98F95051-3DCF-440C-9AE9-E94D278E79EB}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\ftl faster than light\ftlgame.exe | 
"{9A344900-C141-44D8-A5DD-68DA9610A391}" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"{9A669733-4F0E-4354-A9F2-783A3E91ABC0}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\bin\talos_unrestricted.exe | 
"{9A7C1B98-4563-4D9C-BAB1-247FB5423C24}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2680\agent.exe | 
"{9AFD8555-084C-4CAB-9EFB-79460318035D}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\baldur's gate ii enhanced edition\baldur.exe | 
"{9B47F7B1-0285-4904-8D57-52FDC09473D8}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | 
"{9CD7F87D-11D1-4720-82A5-EDBDB709064F}" = dir=in | name=@{microsoft.microsoftofficehub_17.6209.23751.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftofficehub/officehubintl/appmanifest_getoffice_displayname} | 
"{9D0EB4A1-0242-4620-8E01-2CCDF0A2AD7C}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{9E96DFA9-52C0-465E-ABC3-2E5E6D034881}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\original\talos_unrestricted.exe | 
"{9F1CCF75-75D5-46FC-B93F-A8C688C0CD17}" = protocol=17 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{9F8489F4-D6C3-45C7-A2F1-E8D675DAD137}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{A0EFB1FA-5906-4CDD-B7CD-CF975BD867FD}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\launcher\launcher.exe | 
"{A0FFBA22-BA61-4766-8CA9-F76115D3ABC2}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{A20C7EC1-D7F0-4699-A999-C11A6AF98445}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\devicesetup.exe | 
"{A254CE1C-6E77-4ECB-B6C7-EEDA27CB951E}" = dir=out | name=@{microsoft.bingnews_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingnews/resources/applicationtitlewithbranding} | 
"{A27DCD31-FB3D-4FFE-A0A1-8EB8491B9F49}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3372\agent.exe | 
"{A2BBD7E9-1467-4104-9099-CD811030CD9C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{A2F231C9-4CD8-4395-81DF-C34C6DE0F706}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{A2F61F36-90A6-400C-8F5B-32D7A043FC06}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls ii\game\darksoulsii.exe | 
"{A4AE1FED-1B2E-4400-B66B-44EF7AB1085C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{A4BFD460-B46F-437E-A601-F7B60A598667}" = dir=in | name=onenote | 
"{A58FCE97-E1C6-441E-BCA5-4F1A94A75D35}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\this war of mine\this war of mine.exe | 
"{A6441CE9-9B08-426E-BD68-524B7CA68ACA}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\original\talos.exe | 
"{A69E166B-B8ED-48C9-8F37-7BC3560B9061}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\launcher\launcher.exe | 
"{A7964258-CEEC-492B-89D8-9130CD0587CC}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2737\agent.exe | 
"{A7ED935A-F3EC-42F6-BFD7-2BECCA4668BD}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\spelunky\spelunky.exe | 
"{A87A837B-957D-406A-897C-7BE312454618}" = dir=out | name=onenote | 
"{A9CBEE33-4680-41F4-B98A-79F7E51310D2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\spelunky\spelunky.exe | 
"{AAE2CD6D-47F5-408E-A3CA-675F1053E35C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\rogue legacy\roguelegacy.exe | 
"{AC01552A-81A1-49B2-B053-6E2EE963F693}" = dir=out | name=@{microsoft.bingweather_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 
"{AD04575E-BD2A-49DC-8256-0902D8205E44}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{AEF39903-164B-4F43-97CB-0EC845062CCC}" = dir=out | name=@{microsoft.appconnector_1.3.3.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.appconnector/resources/connectorstubtitle} | 
"{AF973B7E-92F7-4563-88EC-4D14DF7F570A}" = protocol=6 | dir=in | app=d:\dateien\winamp\winamp.exe | 
"{B030A168-6281-48CA-9621-76A8AEA3AF09}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3688\agent.exe | 
"{B243255C-A7CC-4062-88F3-5A68A9818BF0}" = protocol=17 | dir=in | app=d:\program files (x86)\origin games\dragon age inquisition\dragonageinquisition.exe | 
"{B2F30D36-41BD-46C2-BFAC-77710BEA7E86}" = protocol=17 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{B378F8B3-FCA1-4072-BDAD-05EBBF7495F3}" = dir=out | name=microsoft solitaire collection | 
"{B3B18623-32C2-4E9A-953A-C7A9D41C08DD}" = protocol=6 | dir=in | app=d:\ubisoft\future soldier dx11.exe | 
"{B407A014-5DA2-44E3-B87F-65197BCC60D6}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3346\agent.exe | 
"{B40EDC8D-1BA5-48DD-A6DE-1871DD1C1852}" = dir=out | name=@{microsoft.bingfinance_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingfinance/resources/applicationtitlewithbranding} | 
"{B4495F83-B379-4899-85D3-E45164AF6B0E}" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{B5CC3189-6AFD-4B0A-BF7B-606DB90611A2}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3634\agent.exe | 
"{B5EFA66B-C35B-4B36-9EA3-A93F1555753E}" = dir=out | name=@{microsoft.getstarted_2.3.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 
"{B715B48F-AF68-463A-94F5-8E0D35B547A9}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3478\agent.exe | 
"{B7600AF9-C7D4-4B5D-81ED-C091D5432314}" = protocol=6 | dir=in | app=c:\steam\total war rome ii\launcher\launcher.exe | 
"{B7A18863-2979-473F-980B-236D675FB059}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | 
"{B7E7F9E2-F9E0-48FB-B8E3-DA6E1D073282}" = dir=in | name=@{microsoft.windowsstore_2015.9.9.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 
"{B8262556-3A71-44D0-844E-C47F3BF5FE9C}" = dir=out | app=d:\spiele\dying light - season pass edition\dyinglightgame.exe | 
"{B83D49E3-C9EE-49E5-93EC-0C2A0ECB1797}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3669\agent.exe | 
"{B8E9E7A8-22E9-46D2-B15A-2616ACBE94FF}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2787\agent.exe | 
"{B9477112-FE2B-483F-B808-8B716C4CFF80}" = dir=out | name=@{microsoft.windowsmaps_4.1509.50911.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 
"{B9C5D61E-29CD-43E9-9445-093116FC9FC8}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\far cry 3\bin\fc3updatersteam.exe | 
"{B9E397A5-6684-438B-A818-1DF8C61E9B38}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2380\agent.exe | 
"{B9EA31C3-7A77-4730-9AA5-8E0C39EEF0C4}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2581\agent.exe | 
"{BA916752-F322-46BA-8A89-0CBFD0F6EFDE}" = dir=in | name=@{microsoft.windows.cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | 
"{BAEB663C-7F5E-4F29-A51D-1235BF4C7897}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3669\agent.exe | 
"{BB349080-4EF5-4A0F-AFCF-58D1A5BE541D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3235\agent.exe | 
"{BD02DD28-83A4-40BE-BCB0-A01DEB78070A}" = protocol=17 | dir=in | app=c:\program files (x86)\mozilla firefox\firefox.exe | 
"{BD7E8AC0-D371-47DC-A1E0-8F627C3E1039}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2816\agent.exe | 
"{BE6201F6-47F2-4F6D-A260-1DE904ACCA50}" = protocol=6 | dir=in | app=d:\ubisoft\future soldier dx9.exe | 
"{BF657D00-BF2C-4E0D-B45C-68D76EB62355}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe | 
"{BFA46502-EAF1-45ED-903C-835E538F931F}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2638\agent.exe | 
"{C0B82E17-81E4-4A83-987F-A1F80330B9A0}" = dir=out | name=xbox one smartglass | 
"{C1F02300-6FE1-413E-97D5-9D2E1BCC7BE5}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\left 4 dead 2\left4dead2.exe | 
"{C27628C6-628C-4445-946F-CECA67BB71E8}" = dir=out | name=@{windows.contactsupport_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.contactsupport/resources/appdisplayname} | 
"{C3F3315C-1356-4F3B-9F77-FE5B9DE9966A}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{C536F582-753F-4E9C-976A-1D730B05E962}" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{C7F5C892-26AC-492E-AF4B-B91D56F57A5C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{C8111857-2C72-45AC-91FB-4FEDD31A8BBC}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\skyrim\skyrimlauncher.exe | 
"{C82C6185-880F-4E6E-8746-2B6BB818BD6B}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\resident evil 4\bin32\bio4.exe | 
"{C86BE727-FC4B-4D2D-B906-89F2208D63EB}" = dir=in | name=microsoft solitaire collection | 
"{C8F2300C-DFA2-4270-8E8F-A07F00192E4C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{C8F9D5F7-0F0E-4656-B32A-EC826FEB347F}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\evolvegame\bin64_steamretail\evolve.exe | 
"{C921C817-C4BD-46C0-B066-1FE300EA2322}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{C94F57A0-0A4A-470F-B710-2DAAB728AFB3}" = protocol=6 | dir=in | app=c:\steam\total war attila\launcher\launcher.exe | 
"{C970D1FA-1BB1-45FB-8E2F-1EDEC790AEBC}" = protocol=17 | dir=in | app=d:\ubisoft\future soldier dx11.exe | 
"{C976ADF5-7175-4272-B4BE-CCD10EAC1E1C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3182\agent.exe | 
"{CB741E7C-88F0-498F-B836-DAFF3E9C50A4}" = dir=out | name=@{microsoft.zunemusic_3.6.12711.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 
"{CBC7F8AB-00EB-4892-9F01-78F6C467AA2D}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\tbs\win32\the banner saga.exe | 
"{CDE2447B-D5E2-4DBE-8C94-F911A02C6F62}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{CE2D4911-05FA-4045-9164-11AAD79CC908}" = dir=out | name=@{microsoft.accountscontrol_10.0.10240.16384_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 
"{CF1307F5-73F8-47A0-8567-8409FD73B1D9}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{CF3A864B-8FB3-4AA1-A68D-7373BD05BB5D}" = protocol=6 | dir=in | app=d:\dateien\utorrent\utorrent.exe | 
"{D0AB18AF-7B1B-40D8-A1DD-648716E7511F}" = dir=in | app=c:\program files\hp\hp officejet 6700\bin\hpnetworkcommunicatorcom.exe | 
"{D0D54C33-B40E-4A4D-BBA6-C10B67E8D7D7}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\deus ex - human revolution\dxhr.exe | 
"{D2FFE9DA-6BEA-4700-A64E-D9652A604C6C}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dayz\dayz.exe | 
"{D37AC809-3DCF-48D3-A935-663B1B235D36}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2880\agent.exe | 
"{D623BF2F-54FC-4366-84B2-1CAC8D46AACA}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\hotline_miami\hotlinemiami.exe | 
"{D6C0EDC8-5443-432D-B927-A42C0252C284}" = protocol=6 | dir=in | app=c:\program files (x86)\battle.net\battle.net.exe | 
"{D8C55077-E30F-4B93-B5F6-02699B7E744F}" = protocol=17 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{D8D7A9A1-B3A6-4931-9103-5F103D19E2C7}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{D9020509-1915-46C3-8F77-73656050A0ED}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{D9575063-E67C-4168-A0F9-EC0C4BA3A36D}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\darkestdungeon\_windows\darkest.exe | 
"{DA0A9DB6-75C2-4D33-AF3E-957E96B0EF8D}" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\temp\insa09a\setup.exe | 
"{DB1D0129-9430-4B7A-A461-18021DEE16BD}" = protocol=6 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{DBE9FC53-0D77-45A8-A769-EA82DA04343E}" = dir=in | name=@{microsoft.windows.photos_15.915.17170.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 
"{DC2D9DB8-5B41-4D64-9AB6-C65C58B1EC1F}" = protocol=6 | dir=in | app=c:\program files (x86)\tunngle\tnglctrl.exe | 
"{DD12F043-F476-4AA6-A873-452764EB3AB4}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.10240.16384_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 
"{E1FA138B-3E50-44DE-AFE2-901A23E91FD9}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\magic 2014\dotp_d14.exe | 
"{E20C141F-B4E3-40B8-9EE2-4E3D0395E972}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\darksouls.exe | 
"{E30A1B3E-FE21-4810-B6DC-2DF67F566FAC}" = protocol=6 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"{E3458C9D-9AD5-42D0-8D36-940F11B65F9D}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.2787\agent.exe | 
"{E46B9AE6-F4BC-4DDC-A396-475B489DD224}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_current_settings.bat | 
"{E48798BA-3563-4A5A-8E28-5C4E48D9DA76}" = dir=out | name=@{microsoft.windows.cortana_1.4.8.176_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cortana/resources/displayname} | 
"{E51C2980-FA5D-4DD3-9111-65127B787228}" = dir=out | app=d:\spiele\steam\steamapps\common\the talos principle\bin\talos_unrestricted.exe | 
"{E52FDDF5-AC5F-464C-A17A-6D47A3EB837E}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2689\agent.exe | 
"{E5325EEB-3F01-445B-B94D-A233B1AEBA19}" = protocol=17 | dir=in | app=d:\spiele\dragon age\daoriginslauncher.exe | 
"{E5A67602-3EB0-42DE-B3AD-4031D2D252F9}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3109\agent.exe | 
"{E5AD670E-B9DC-4C91-A919-746F255CF8A1}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{E6612FF6-20D1-486B-BE99-B2EE40A8EE64}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3526\agent.exe | 
"{E737A0A8-401F-4D1D-BDDD-A74D8366577F}" = dir=in | app=c:\program files (x86)\samsung\samsung universal print driver 2\printerselector\supdapp.exe | 
"{E8A7450A-558B-4DE7-8139-51D6846C2E80}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.10240.16384.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 
"{E8E042D8-E451-44F8-82FA-536CB3D94352}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.2717\agent.exe | 
"{E9182879-663A-4583-AC43-287F507628A2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\mark_of_the_ninja\bin\game.exe | 
"{E93BF174-DA47-4A48-9243-942B83AF5711}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{EA07A9B6-AE7B-426E-90FB-069CCDCFB202}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3427\agent.exe | 
"{EE93AA36-B737-4CE9-A350-E7329041BB81}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3715\agent.exe | 
"{EF868012-A3C8-4B3F-979D-4580606B6089}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{F19E59A1-2DF8-4F3D-9B53-F93106C90DF2}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\data\encyclopedia\how_to_play.html | 
"{F1DBD15E-DA8E-47A6-9329-BFD53767D7C6}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\runme2.exe | 
"{F1F436EB-F01E-4B64-89F0-D9D9CC3237A5}" = protocol=6 | dir=in | app=d:\spiele\diablo iii\diablo iii.exe | 
"{F23413BE-72FF-48FF-935F-B4423B56EB70}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 
"{F32D8B5C-0A39-4213-B311-4264F61EDD29}" = protocol=17 | dir=in | app=d:\spiele\bioware\star wars-the old republic\launcher.exe | 
"{F3B481F2-78BB-4809-B174-E6BF94AD446C}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3372\agent.exe | 
"{F4001CEF-B676-4F8F-9CBE-5F88C6865C09}" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3454\agent.exe | 
"{F4512911-456B-4408-9148-46ED2516F2E2}" = protocol=17 | dir=in | app=c:\program files (x86)\battlelog web plugins\sonar\0.70.4\sonarhost.exe | 
"{F4E28960-8EA3-4167-B305-A5D09CF4CB1B}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\digitalwizards.exe | 
"{F4ED5D7F-A38F-4D71-BF80-C1EEA149F559}" = protocol=17 | dir=in | app=c:\program files (x86)\tunngle\tnglctrl.exe | 
"{F6A0F5F8-3587-467B-9152-066807ADBFC3}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\baldur's gate ii enhanced edition\baldur.exe | 
"{F7B00440-33F6-4F71-976D-3587989F807C}" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\shogun2.exe | 
"{F7EC3CDC-284C-442A-BB04-2AC14E401D19}" = protocol=6 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{F86FD95D-A215-450E-A149-264AC71A11BA}" = dir=out | name=@{microsoft.windowsfeedback_10.0.10240.16393_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windowsfeedback/feedbackapp.resources/appname/text} | 
"{F8966F84-0191-401B-B9D7-BDE8ECAE8DB2}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 
"{F8E5572C-8AC6-41CD-A742-FE679E110F20}" = dir=out | name=@{microsoft.windowsphone_10.1508.17010.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsphone/resources/appstorename} | 
"{F9AC4827-BB5D-4839-AA25-366ECF0B46D9}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{FA10D693-1CA9-4710-A397-22E92281F546}" = dir=in | app=c:\program files\hp\hp officejet 4630 series\bin\sendafax.exe | 
"{FB27EE1E-1789-4ECE-B224-B3F27B5E82FE}" = protocol=6 | dir=in | app=c:\steam\dayz\dayz_be.exe | 
"{FE1FC3C7-EBB7-4A4B-945E-BEF9C927A416}" = dir=out | name=@{microsoft.bingsports_4.5.168.0_x86__8wekyb3d8bbwe?ms-resource://microsoft.bingsports/resources/applicationtitlewithbranding} | 
"{FE67CB5F-9D76-4332-8418-D9684CBAAF40}" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war shogun 2\benchmarks\benchmark_specify_properties.bat | 
"{FF29EDB2-18BB-4CCD-896A-52444C37CE8C}" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3668\agent.exe | 
"{FF515000-9D08-408E-9921-26D9E623A3EB}" = protocol=17 | dir=in | app=d:\spiele\diablo iii\diablo iii.exe | 
"TCP Query User{0E4CC603-C65B-4D8A-9395-77790EFC0784}C:\steam\dayz\dayz.exe" = protocol=6 | dir=in | app=c:\steam\dayz\dayz.exe | 
"TCP Query User{0FFDD242-BB2F-49BF-905C-5B05E6D833B6}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe | 
"TCP Query User{153FC93A-87EC-47B0-9686-645FBEB20530}C:\steam\total war rome ii\rome2.exe" = protocol=6 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"TCP Query User{1E242760-BA70-462B-8804-2B2DD000B617}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe" = protocol=6 | dir=in | app=d:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe | 
"TCP Query User{1E2E57F1-9282-4817-BF17-86AF3119982D}C:\steam\dayz\dayz.exe" = protocol=6 | dir=in | app=c:\steam\dayz\dayz.exe | 
"TCP Query User{2087E360-86C8-4F44-9479-A342A8F24C4C}D:\spiele\far cry 4\bin\farcry4.exe" = protocol=6 | dir=in | app=d:\spiele\far cry 4\bin\farcry4.exe | 
"TCP Query User{26D928E9-F98F-40D1-A2AE-23E28514F798}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2753\agent.exe | 
"TCP Query User{2E3D86B6-3222-4719-A1C3-6465A9825C7E}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe | 
"TCP Query User{44A642B9-0B12-4F97-84BE-93251718E92E}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"TCP Query User{53CA6491-A5DE-489E-9250-55D4291DBB2E}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\rome2.exe | 
"TCP Query User{5A3687F6-AA2F-41D8-BC1F-6D0028F43762}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=6 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"TCP Query User{5C786FE9-C1E2-4B8A-B90E-6B8D503599A0}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"TCP Query User{66FE9211-BCCF-4D46-BFE7-8A2DF6DCC740}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 
"TCP Query User{679176C4-B17C-48AC-9438-D72A64AADF45}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe | 
"TCP Query User{6CFE4AB8-AACC-4D53-BDE9-4B7B1DC85A49}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe | 
"TCP Query User{75A8E893-2DB3-4F96-A700-1BDD93AEC419}D:\spiele\turbine\lotro\lotroclient.exe" = protocol=6 | dir=in | app=d:\spiele\turbine\lotro\lotroclient.exe | 
"TCP Query User{7B5AAE01-E32C-41F9-85E7-F96EAD837CB8}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"TCP Query User{7E0D2860-2926-4758-9E61-C3D62A6EE882}D:\spiele\der herr der ringe online\lotroclient.exe" = protocol=6 | dir=in | app=d:\spiele\der herr der ringe online\lotroclient.exe | 
"TCP Query User{811D149A-8102-4474-B680-7B0E1F1DB80D}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=6 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"TCP Query User{89EFC158-2255-4AD5-AD13-C0E7D8C6DDF0}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe" = protocol=6 | dir=in | app=c:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe | 
"TCP Query User{8C2A0CB4-B109-46D4-AABB-C160E0B4BC2A}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{8F8759CE-CB68-4E5B-8674-F698BF887F6D}C:\steam\total war rome ii\rome2.exe" = protocol=6 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"TCP Query User{99791AC9-E644-49DE-86C4-F301DA9B706F}C:\program files\java\jre1.8.0_51\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\javaw.exe | 
"TCP Query User{A35D10AF-D92A-4ABA-ACBF-C15CE5BC4854}C:\programdata\battle.net\agent\agent.3286\agent.exe" = protocol=6 | dir=in | app=c:\programdata\battle.net\agent\agent.3286\agent.exe | 
"TCP Query User{AA80F67F-5B29-4F21-AF43-610BD2557134}C:\program files\java\jre1.8.0_51\bin\java.exe" = protocol=6 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\java.exe | 
"TCP Query User{AB7ED2C4-B673-4C55-83A0-5E725CB106E4}D:\spiele\steam\steamapps\common\total war attila\attila.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\attila.exe | 
"TCP Query User{C7489638-ABE6-4C6E-9EF0-20E06C24DBF4}C:\steam\dayz\dayz_experimental.exe" = protocol=6 | dir=in | app=c:\steam\dayz\dayz_experimental.exe | 
"TCP Query User{D499F6AB-D5DA-4AE8-B1FE-0C5672BDAAEC}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe" = protocol=6 | dir=in | app=c:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe | 
"TCP Query User{DF81AFF9-6AB8-429F-9D37-56BCA58078BB}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=6 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"TCP Query User{E16FC49E-8D94-4B67-A2C9-9950910F8D4F}C:\steam\total war attila\attila.exe" = protocol=6 | dir=in | app=c:\steam\total war attila\attila.exe | 
"TCP Query User{E264AEE9-98D1-4F0C-A8D8-EF320B419BA4}D:\spiele\rockstar games\grand theft auto v\gta5.exe" = protocol=6 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"TCP Query User{E4D7CB05-04C0-4D43-AF88-AD7F4CADA6A7}C:\program files (x86)\hearthstone\hearthstone.exe" = protocol=6 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"TCP Query User{E6809934-F0AB-44EA-92A3-4F06E02800A4}D:\spiele\starcraft ii\versions\base32283\sc2.exe" = protocol=6 | dir=in | app=d:\spiele\starcraft ii\versions\base32283\sc2.exe | 
"TCP Query User{E9B168F0-3A0F-4CB0-8F7B-1762918B2F50}D:\spiele\alien isolation\ai.exe" = protocol=6 | dir=in | app=d:\spiele\alien isolation\ai.exe | 
"TCP Query User{F0114F43-EF09-4068-9E8B-99DE01B36196}D:\spiele\steam\steam.exe" = protocol=6 | dir=in | app=d:\spiele\steam\steam.exe | 
"TCP Query User{FDAB8299-263A-4540-98EB-B9BF2FFF7833}C:\users\diefackel\desktop\candisoft load!\load.exe" = protocol=6 | dir=in | app=c:\users\diefackel\desktop\candisoft load!\load.exe | 
"UDP Query User{01F3AAB2-F100-486D-9ECE-B0CE0B6D9092}D:\spiele\der herr der ringe online\lotroclient.exe" = protocol=17 | dir=in | app=d:\spiele\der herr der ringe online\lotroclient.exe | 
"UDP Query User{09D3B12E-1D64-4720-9738-808B2BB03418}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe" = protocol=17 | dir=in | app=d:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe | 
"UDP Query User{0D90916A-B2DB-4CD4-9340-B147B03340B9}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe | 
"UDP Query User{10132D8F-7597-4747-9782-0BFFDD89409C}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"UDP Query User{10CE2B65-E5F4-42BC-8163-71E573619FB5}C:\programdata\battle.net\agent\agent.3286\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.3286\agent.exe | 
"UDP Query User{14B7CD50-9E78-45C7-B322-B12F8E02D065}C:\steam\total war rome ii\rome2.exe" = protocol=17 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"UDP Query User{2B0BD43A-F410-4B4D-B059-B6240AFC9884}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{34AB8C0E-5E53-439E-945C-0A955A44B729}D:\spiele\steam\steam.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steam.exe | 
"UDP Query User{34BCA22E-99A9-4037-899C-174952D355DE}D:\spiele\turbine\lotro\lotroclient.exe" = protocol=17 | dir=in | app=d:\spiele\turbine\lotro\lotroclient.exe | 
"UDP Query User{3BD0FB36-6A35-474D-B8D4-54428A7073F7}C:\steam\dayz\dayz.exe" = protocol=17 | dir=in | app=c:\steam\dayz\dayz.exe | 
"UDP Query User{3F166EB9-307C-4A2B-9432-B9F44FD2DAB3}D:\spiele\steam\steamapps\common\total war attila\attila.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war attila\attila.exe | 
"UDP Query User{3FF88DA6-90AD-4569-A544-9BD32D95B4DE}C:\users\diefackel\desktop\candisoft load!\load.exe" = protocol=17 | dir=in | app=c:\users\diefackel\desktop\candisoft load!\load.exe | 
"UDP Query User{46682FD8-186D-49C6-A2F6-8726E2F384C5}D:\spiele\far cry 4\bin\farcry4.exe" = protocol=17 | dir=in | app=d:\spiele\far cry 4\bin\farcry4.exe | 
"UDP Query User{52E2A39D-CDF8-4BD2-A960-F3FB7AC8F64D}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe | 
"UDP Query User{6BD38B9B-C5B3-444B-9445-275EE4EF4F01}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe | 
"UDP Query User{70BA62A2-5F2E-4255-A782-5AC9112EBBCF}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe | 
"UDP Query User{71783481-456F-4E47-B816-DE0237716065}D:\spiele\rockstar games\grand theft auto v\gta5.exe" = protocol=17 | dir=in | app=d:\spiele\rockstar games\grand theft auto v\gta5.exe | 
"UDP Query User{721024D8-CA0B-4E5A-8BD3-1DD886EF554B}C:\steam\dayz\dayz_experimental.exe" = protocol=17 | dir=in | app=c:\steam\dayz\dayz_experimental.exe | 
"UDP Query User{768ADEDF-7348-4888-A306-9D2D9BCFAB3C}C:\program files (x86)\hearthstone\hearthstone.exe" = protocol=17 | dir=in | app=c:\program files (x86)\hearthstone\hearthstone.exe | 
"UDP Query User{8B6CB9A1-CCD9-4ED2-8550-672343D27E06}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=17 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"UDP Query User{91E2485E-E838-477D-A73E-4A2676154231}C:\users\diefackel\appdata\local\akamai\netsession_win.exe" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\akamai\netsession_win.exe | 
"UDP Query User{94A160E1-66C3-4B87-9603-39556EFD9D49}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe" = protocol=17 | dir=in | app=c:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe | 
"UDP Query User{994ABB63-697E-4845-8262-7188C1B3840C}C:\steam\total war attila\attila.exe" = protocol=17 | dir=in | app=c:\steam\total war attila\attila.exe | 
"UDP Query User{9ECD126D-32EB-4A1F-9489-25F4A7842E71}C:\program files (x86)\java\jre7\bin\java.exe" = protocol=17 | dir=in | app=c:\program files (x86)\java\jre7\bin\java.exe | 
"UDP Query User{9F485F74-1D47-45B3-8AFD-61787933B854}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\total war rome ii\rome2.exe | 
"UDP Query User{A1C93A3A-B967-4C58-A16D-F1E7DE6A8FA3}D:\spiele\alien isolation\ai.exe" = protocol=17 | dir=in | app=d:\spiele\alien isolation\ai.exe | 
"UDP Query User{A9C1AB2D-4EB1-4FFF-BF4F-6A34049E98AA}C:\steam\total war rome ii\rome2.exe" = protocol=17 | dir=in | app=c:\steam\total war rome ii\rome2.exe | 
"UDP Query User{AC4641F8-12FC-420F-823F-EFFC3F28FDBE}C:\program files\java\jre1.8.0_51\bin\java.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\java.exe | 
"UDP Query User{B0847E20-BD2F-4CE3-81BD-B269F8AE2DCE}C:\program files\java\jre1.8.0_51\bin\javaw.exe" = protocol=17 | dir=in | app=c:\program files\java\jre1.8.0_51\bin\javaw.exe | 
"UDP Query User{B520E170-4F76-4BC5-A52D-FB024EEF4451}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe" = protocol=17 | dir=in | app=d:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe | 
"UDP Query User{C27FDE17-733B-4E36-8FB2-179CA232B7F5}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe | 
"UDP Query User{C7336522-0718-4032-B21C-44DAB4327448}C:\steam\dayz\dayz.exe" = protocol=17 | dir=in | app=c:\steam\dayz\dayz.exe | 
"UDP Query User{D156C6E4-CF56-47E4-8877-C9FA020097D1}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe" = protocol=17 | dir=in | app=c:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe | 
"UDP Query User{EF209801-AE72-41D9-9F77-608AD8263367}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe" = protocol=17 | dir=in | app=d:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe | 
"UDP Query User{EF620606-1FAD-4D0F-A60A-B3D46FA847CD}D:\spiele\starcraft ii\versions\base32283\sc2.exe" = protocol=17 | dir=in | app=d:\spiele\starcraft ii\versions\base32283\sc2.exe | 
"UDP Query User{F5D0F458-A64A-4AAC-88D7-6DB7D0B66659}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe" = protocol=17 | dir=in | app=c:\programdata\battle.net\agent\agent.beta.2753\agent.exe | 
 
========== HKEY_LOCAL_MACHINE Uninstall List ==========
 
64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1" = Core Temp 1.0 RC6
"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219
"{26A24AE4-039D-4CA4-87B4-2F86418060F0}" = Java 8 Update 60 (64-bit)
"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030
"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161
"{670B1B49-9FD3-4827-9B41-471EFF580AA8}" = Evolve
"{7DEBE4EB-6B40-3766-BB35-5CBBC385DA37}" = Microsoft .NET Framework 4.5.1
"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17
"{9086D601-50B7-491D-A143-28193DADE36B}" = HP Officejet 6700 - Grundlegende Software für das Gerät
"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005
"{986E003C-E56D-5A47-110E-D3C81F0E8535}" = Microsoft DVD App Installation for Microsoft.WindowsDVDPlayer_2019.6.11761.0_neutral_~_8wekyb3d8bbwe (x64)
"{9B48B0AC-C813-4174-9042-476A887592C7}" = Windows Live ID Sign-in Assistant
"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005
"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision" = NVIDIA 3D Vision Treiber 352.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.ControlPanel" = NVIDIA Systemsteuerung 353.62
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 352.86
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 2.4.3.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB" = NVIDIA 3D Vision Controller-Treiber 352.65
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.15.0428
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 2.4.3.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.LEDVisualizer" = NVIDIA LED Visualizer 1.0
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = SHIELD Streaming
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GfExperienceService" = NVIDIA GeForce Experience Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.34.3
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Network.Service" = NVIDIA Network Service
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 2.4.3.22
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = SHIELD Wireless Controller Driver
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core
"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 1.2.27
"{C513739C-5F16-37B5-9ACF-99925FF1C1F3}" = Microsoft .NET Framework 4.5.1 (DEU)
"{CCF92FFE-5341-4263-9048-472D9E3C5703}" = HP Officejet 4630 series - Grundlegende Software für das Gerät
"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030
"{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}" = Microsoft Xbox One Controller for Windows
"6af12c54-643b-4752-87d0-8335503010de_is1" = Nexus Mod Manager
"AutoHotkey" = AutoHotkey 1.1.15.03
"CCleaner" = CCleaner
"GIMP-2_is1" = GIMP 2.8.14
"HardlinkShellExt" = Link Shell Extension
"jdownloader2" = JDownloader 2
"Recuva" = Recuva
"TAP-Windows" = TAP-Windows 9.9.2
"TeamSpeak 3 Client" = TeamSpeak 3 Client
"VLC media player" = VLC media player
"WinRAR archiver" = WinRAR 4.20 (64-Bit)
 
[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]
"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501
"{07300F01-89CA-4CF8-92BD-2A605EB83C95}" = EasySaver B9.1214.1 
"{0F659036-14C7-4622-9505-35A0DC93526A}" = System Requirements Lab
"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005
"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148
"{26A24AE4-039D-4CA4-87B4-2F83218060F0}" = Java 8 Update 60
"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030
"{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}" = Gigabyte Raid Configurer
"{3B11D799-48E0-48ED-BFD7-EA655676D8BB}" = Star Wars: The Old Republic
"{3DECD372-76A1-4483-BF10-B547790A3261}" = ON_OFF Charge B10.0427.1
"{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}" = Microsoft ASP.NET MVC 4 Runtime
"{456A5815-604D-4D72-94DF-346D2B978A59}_is1" = GOG.com Downloader version 3.6.0
"{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0516.1
"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater
"{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}" = Google Earth Plug-in
"{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}" = ROCCAT Isku Keyboard Driver
"{4CB0307C-565E-4441-86BE-0DF2E4FB828C}" = Microsoft Games for Windows Marketplace
"{517E7DBD-7A5B-4B7F-B137-82AB4DAD68FC}" = LogMeIn Hamachi
"{51C7AD07-C3F6-4635-8E8A-231306D810FE}" = Cisco LEAP Module
"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper
"{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}" = Cisco EAP-FAST Module
"{6A0549A9-1B96-498C-ACBC-3943001FEB19}" = Skype™ 7.8
"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable
"{7133137D-DF48-4522-AD88-13C82B7D0A63}" = ROCCAT Kone XTD Mouse Driver
"{7258BA11-600C-430E-A759-27E2C691A335}_is1" = GOG Galaxy
"{7299052b-02a4-4627-81f2-1818da5d550d}" = Microsoft Visual C++ 2005 Redistributable
"{7BBAEC47-1CC0-4CB8-ADB4-531B78DBD1DD}" = Adobe AIR
"{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}" = Microsoft Games for Windows - LIVE Redistributable
"{837b34e3-7c30-493c-8f6a-2b0f04e2912c}" = Microsoft Visual C++ 2005 Redistributable
"{8833FFB6-5B0C-4764-81AA-06DFEED9A476}" = Realtek Ethernet Controller Driver For Windows 7
"{888F1505-C2B3-4FDE-835D-36353EBD4754}" = Ubisoft Game Launcher
"{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}" = Sitecom Europe BV Wireless LAN
"{912D30CF-F39E-4B31-AD9A-123C6B794EE2}" = HP Update
"{987B04C4-B5AC-4AD6-A7E9-8D681085B850}" = AMD USB Filter Driver
"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17
"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161
"{9FD6F1A8-5550-46AF-8509-271DF0E768B5}" = Dual-Core Optimizer
"{A2F991E7-DDCD-42B7-AFEC-47789A099FDC}" = Browser Configuration Utility
"{A80CEA4E-74C1-4F9F-806B-E1D9AFC01768}" = inSSIDer 3
"{A92DAB39-4E2C-4304-9AB6-BC44E68B55E2}" = Google Update Helper
"{AC76BA86-0804-1033-1959-001824147215}" = Adobe Refresh Manager
"{AC76BA86-7AD7-1031-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Deutsch
"{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}" = OpenOffice 4.1.1
"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030
"{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}" = @BIOS
"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030
"{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0517.1
"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030
"{CA6BCA2F-EDEB-408F-850B-31404BE16A61}" = I.R.I.S. OCR
"{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}" = Microsoft XNA Framework Redistributable 4.0 Refresh
"{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"{DC4C36DC-4E5B-4262-B0C7-157DF534B969}" = Dragon Age™: Inquisition
"{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}" = Grand Theft Auto V
"{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}" = Cisco PEAP Module
"{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}" = Sony PC Companion 2.10.275
"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219
"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek High Definition Audio Driver
"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501
"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005
"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022
"1207664643_is1" = The Witcher 3 - Wild Hunt
"1424773427_is1" = Hotline Miami 2 - Wrong Number
"Adobe AIR" = Adobe AIR
"Adobe Flash Player NPAPI" = Adobe Flash Player 18 NPAPI
"Alternative Look for Triss_is1" = The Witcher 3: Wild Hunt - Alternative Look for Triss
"Alternative Look for Yennefer_is1" = The Witcher 3: Wild Hunt - Alternative Look for Yennefer
"avast" = Avast Free Antivirus
"Ballad Heroes - Neutral Gwent Card Set_is1" = The Witcher 3: Wild Hunt - Ballad Heroes - Neutral Gwent Card Set
"Battle.net" = Battle.net
"Beard and Hairstyle Set_is1" = The Witcher 3: Wild Hunt - Beard and Hairstyle Set
"BitRaider Streaming Client" = BitRaider Streaming Client
"Capsule" = Capsule
"Cheat Engine 6.4_is1" = Cheat Engine 6.4
"CrystalDiskInfo_is1" = CrystalDiskInfo 6.5.2
"Elite Crossbow Set_is1" = The Witcher 3: Wild Hunt - Elite Crossbow Set
"FormatFactory" = FormatFactory 3.1.1
"Fraps" = Fraps
"Free Audio Converter_is1" = Free Audio Converter version 5.0.57.301
"GOGPACKPAPERSPLEASE_is1" = Papers, Please
"Google Chrome" = Google Chrome
"Hearthstone" = Hearthstone
"InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}" = Easy Tune 6 B10.0516.1
"InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}" = AutoGreen B10.0517.1
"InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}" = NEC Electronics USB 3.0 Host Controller Driver
"LogMeIn Hamachi" = LogMeIn Hamachi
"LOOT" = LOOT
"Malwarebytes Anti-Malware_is1" = Malwarebytes Anti-Malware Version 2.1.8.1057
"Mozilla Firefox 40.0.3 (x86 de)" = Mozilla Firefox 40.0.3 (x86 de)
"MozillaMaintenanceService" = Mozilla Maintenance Service
"New Quest - Contract Missing Miners_is1" = The Witcher 3: Wild Hunt - New Quest - Contract Missing Miners
"New Quest - Contract: Skellige's Most Wanted_is1" = The Witcher 3: Wild Hunt - New Quest - Contract - Skellige's Most Wanted
"New Quest - Fool's Gold_is1" = The Witcher 3: Wild Hunt - New Quest - Fool's Gold
"New Quest - Scavenger Hunt: Wolf School Gear_is1" = The Witcher 3: Wild Hunt - New Quest - Scavenger Hunt - Wolf School Gear
"New Quest - Where the Cat and Wolf Play..._is1" = The Witcher 3: Wild Hunt - New Quest - Where the Cat and Wolf Play...
"Nilfgaardian Armor Set_is1" = The Witcher 3: Wild Hunt - Nilfgaardian Armor Set
"Notepad++" = Notepad++
"NVIDIAStereo" = NVIDIA Stereoscopic 3D Driver
"OpenAL" = OpenAL
"Origin" = Origin
"ParkControl" = ParkControl
"Reassembly_is1" = Reassembly version 10.12.14
"Rockstar Games Social Club" = Rockstar Games Social Club
"Samsung Universal Print Driver 2" = Samsung Universal Print Driver 2
"Secunia PSI" = Secunia PSI (3.0.0.7011)
"Skellige Armor Set_is1" = The Witcher 3: Wild Hunt - Skellige Armor Set
"StarCraft II" = StarCraft II
"StarCraft II - Legacy of the Void Beta" = StarCraft II - Legacy of the Void Beta
"Steam App 108600" = Project Zomboid
"Steam App 200260" = Batman: Arkham City GOTY
"Steam App 212680" = FTL: Faster Than Light
"Steam App 221100" = DayZ
"Steam App 230230" = Divinity: Original Sin
"Steam App 235460" = METAL GEAR RISING: REVENGEANCE
"Steam App 236430" = DARK SOULS™ II
"Steam App 237990" = The Banner Saga
"Steam App 239350" = Spelunky
"Steam App 242920" = Banished
"Steam App 257350" = Baldur's Gate II: Enhanced Edition
"Steam App 262060" = Darkest Dungeon
"Steam App 273350" = Evolve
"Steam App 282070" = This War of Mine
"Steam App 318230" = Convoy
"Steam App 32470" = Star Wars: Empire at War Gold
"Steam App 325610" = Total War: ATTILA
"Steam App 335180" = StarMade Demo
"Steam App 34330" = Total War: SHOGUN 2
"Steam App 550" = Left 4 Dead 2
"Steam App 65980" = Sid Meier's Civilization: Beyond Earth
"Steam App 72850" = The Elder Scrolls V: Skyrim
"Steam App 8930" = Sid Meier's Civilization V
"Temerian Armor Set_is1" = The Witcher 3: Wild Hunt - Temerian Armor Set
"Tunngle beta_is1" = Tunngle beta
"uTorrent" = µTorrent
"VirtualCloneDrive" = VirtualCloneDrive
"Wasteland 2 Ranger Edition MULTi7 Update 1 1.0" = Wasteland 2 Ranger Edition MULTi7 Update 1 1.0
"Winamp" = Winamp
"Yahoo! SearchSet" = Yahoo Search Set
 
========== Last 20 Event Log Errors ==========
 
[ Application Events ]
Error - 20.09.2015 07:14:58 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:14:58 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:08 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:08 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:18 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:18 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:29 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:29 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
Error - 20.09.2015 07:15:39 | Computer Name = Sol-PC | Source = ESENT | ID = 488
Description = SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log"
 zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen.
 Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.
 
Error - 20.09.2015 07:15:39 | Computer Name = Sol-PC | Source = ESENT | ID = 413
Description = SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt
 werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das 
Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder
 hat zu wenig freien Speicherplatz. Fehler -1032.
 
[ System Events ]
Error - 18.09.2015 22:20:20 | Computer Name = Sol-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 18.09.2015 22:20:49 | Computer Name = Sol-PC | Source = Microsoft-Windows-Kernel-Power | ID = 137
Description = 
 
Error - 19.09.2015 07:15:37 | Computer Name = Sol-PC | Source = DCOM | ID = 10016
Description = 
 
Error - 19.09.2015 14:26:00 | Computer Name = Sol-PC | Source = Microsoft-Windows-WindowsUpdateClient | ID = 20
Description = Installationsfehler: Die Installation des folgenden Updates ist mit
 Fehler 0x80070490 fehlgeschlagen: HP - Enterprise WSD Multi-Function Printer, Other
 hardware - Null Fax - HP Officejet 4630 series
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Kontaktdaten_Session2" wurde unerwartet beendet. Dies 
ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden
 durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Benutzerdatenspeicher _Session2" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:54 | Computer Name = Sol-PC | Source = Service Control Manager | ID = 7031
Description = Der Dienst "Benutzerdatenzugriff_Session2" wurde unerwartet beendet.
 Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000
 Millisekunden durchgeführt: Neustart des Diensts.
 
Error - 19.09.2015 18:33:57 | Computer Name = Sol-PC | Source = DCOM | ID = 10010
Description = 
 
Error - 19.09.2015 18:34:21 | Computer Name = Sol-PC | Source = Microsoft-Windows-Kernel-Power | ID = 137
Description = 
 
 
< End of report >
         
__________________


Alt 20.09.2015, 15:55   #3
burningice
/// Malwareteam
 
Malware Befall? - Standard

Malware Befall?





Ich habe dein Thema in Arbeit und melde mich so schnell als möglich mit weiteren Anweisungen.

Bitte beachte, dass alle meine Antworten zuerst von einem Ausbilder freigegeben werden müssen, bevor ich diese hier posten darf. Dies garantiert, dass Du Hilfe von einem ausgebildeten Helfer bekommst.

Ich bedanke mich für deine Geduld


================
Du hast mir zweimal die Extras.txt gepostet

Trotzdem würde ich dich mal um FRST bitten:

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)

__________________
__________________

Alt 20.09.2015, 17:46   #4
dieFackel
 
Malware Befall? - Standard

Malware Befall?



Ups, sorry wegen dem doppelten Extras Log. Hier sind jetzt hoffentlich alle korrekt.

FRST
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
durchgeführt von dieFackel (Administrator) auf SOL-PC (20-09-2015 17:39:40)
Gestartet von C:\Users\dieFackel\Desktop
Geladene Profile: dieFackel (Verfügbare Profile: dieFackel & DefaultAppPool)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe
() C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(LogMeIn Inc.) D:\Dateien\LogMeIn Hamachi\hamachi-2.exe
() C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
(LogMeIn, Inc.) D:\Dateien\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Bitsum LLC) D:\Dateien\ParkControl\ParkControl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(DeviceVM, Inc.) C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Valve Corporation) D:\Spiele\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Spiele\Steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(NVIDIA Corporation) C:\Users\dieFackel\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-01] (NVIDIA Corporation)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [558944 2012-11-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [BCU] => C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe [375000 2009-10-15] (DeviceVM, Inc.)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-11-20] (NEC Electronics Corporation)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-07-02] (Avast Software s.r.o.)
HKLM-x32\...\Run: [VirtualCloneDrive] => D:\Dateien\Programme\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\Dateien\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKLM-x32\...\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] => C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe [54072 2015-06-18] (Malwarebytes Corporation)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [456576 2015-06-10] (Sony)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [EADM] => D:\Spiele\Origin\Origin.exe [3632112 2015-07-25] (Electronic Arts)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [GalaxyClient] => D:\Spiele\GalaxyClient\GalaxyClient.exe [7247416 2015-07-20] (GOG.com)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [EvolveClient] => D:\Dateien\Echobit\Evolve\EvolveClient.exe [3334016 2015-08-05] (Echobit LLC)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-02] (Avast Software s.r.o.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2013-08-18]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sitecom Wireless Utility.lnk [2013-08-18]
ShortcutTarget: Sitecom Wireless Utility.lnk -> C:\Program Files (x86)\Sitecom\Common\WLANUtil.exe (Sitecom Europe BV.)
Startup: C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700.lnk [2013-09-01]
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700.lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{1e498d26-a69f-40b8-be95-ebbee9ff9f23}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
URLSearchHook: HKU\S-1-5-21-2542595381-3183390579-2223026719-1000 - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch64.dll (DeviceVM, Inc.)
URLSearchHook: HKU\S-1-5-21-2542595381-3183390579-2223026719-1000 - SearchHook Class - {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
SearchScopes: HKU\S-1-5-21-2542595381-3183390579-2223026719-1000 -> DefaultScope {888255F5-E5F4-4626-9D68-92C58086424C} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBD
SearchScopes: HKU\S-1-5-21-2542595381-3183390579-2223026719-1000 -> {62DB5B0D-4BDE-42ab-9009-2B3B3B097939} URL = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=1975384696&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
SearchScopes: HKU\S-1-5-21-2542595381-3183390579-2223026719-1000 -> {888255F5-E5F4-4626-9D68-92C58086424C} URL = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBD
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-29] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-02] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-29] (Oracle Corporation)
BHO: Kein Name -> {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} ->  Keine Datei
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-29] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-02] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-29] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210
FF Homepage: Twitter.com
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-11] ()
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-29] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-11] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-29] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-12] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-12] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2542595381-3183390579-2223026719-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-04] ()
FF user.js: detected! => C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\user.js [2014-10-01]
FF SearchPlugin: C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\searchplugins\divinity-wiki-en.xml [2015-05-14]
FF SearchPlugin: C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\searchplugins\youtube-videosuche.xml [2015-06-01]
FF Extension: FT DeepDark - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2015-08-25]
FF Extension: WOT - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-10]
FF Extension: Ghostery - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\firefox@ghostery.com.xpi [2013-11-14]
FF Extension: Reddit Enhancement Suite - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2015-04-01]
FF Extension: New Tab Wallpapers - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{a5312b79-bf0d-4825-a25f-b33d67d4a58a}.xpi [2013-11-14]
FF Extension: Adblock Plus - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-19]

Chrome: 
=======
CHR DefaultSearchURL: Default -> hxxps://de.search.yahoo.com/search?p={searchTerms}&fr=yset_chr_syc_oracle&type=orcl_default
CHR DefaultSearchKeyword: Default -> Yahoo
CHR DefaultSuggestURL: Default -> hxxps://de.search.yahoo.com/sugg/ie?output=fxjson&command={searchTerms}&nResults=10
CHR Profile: C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-06-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-02]
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-07-02] (Avast Software s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-28] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-11-01] (BitRaider, LLC)
R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 GalaxyClientService; D:\Spiele\GalaxyClient\GalaxyClientService.exe [1718840 2015-07-20] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6871608 2015-07-20] (GOG.com)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-01] (NVIDIA Corporation)
R2 Hamachi2Svc; D:\Dateien\LogMeIn Hamachi\hamachi-2.exe [2545512 2015-08-03] (LogMeIn Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] ()
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-01] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-01] (NVIDIA Corporation)
S3 Origin Client Service; D:\Spiele\Origin\OriginClientService.exe [2007048 2015-07-25] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe [185632 2009-12-15] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe [212256 2009-12-15] (Ralink Technology, Corp.)
R2 SamsungUPDUtilSvc; C:\Windows\SysWOW64\SecUPDUtilSvc.exe [118576 2014-11-26] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [757144 2013-08-16] (Tunngle.net GmbH) [Datei ist nicht signiert]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-06] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-06] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-07-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-07-02] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-07-02] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-07-02] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-07-02] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-07-02] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-07-02] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2015-02-09] ()
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2014-11-01] (BitRaider)
S3 dc1-controller; C:\Windows\System32\drivers\dc1-controller.sys [50688 2015-07-10] (Microsoft Corp.)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-08-19] ()
R3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-08-03] (LogMeIn Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2015-02-09] ()
S3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-06] (Microsoft Corporation)
S3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2554528 2015-06-12] (MediaTek Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-01] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
U0 owahm; C:\Windows\System32\drivers\ggpcixbf.sys [79064 2015-09-20] (Malwarebytes Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-20 17:39 - 2015-09-20 17:40 - 00027170 _____ C:\Users\dieFackel\Desktop\FRST.txt
2015-09-20 17:39 - 2015-09-20 17:39 - 00000000 ____D C:\FRST
2015-09-20 17:38 - 2015-09-20 17:39 - 02191360 _____ (Farbar) C:\Users\dieFackel\Desktop\FRST64.exe
2015-09-20 15:25 - 2015-09-20 15:25 - 00001336 _____ C:\Users\dieFackel\Desktop\Malwarebytes.txt
2015-09-20 14:20 - 2015-09-20 14:20 - 00347864 _____ C:\Users\dieFackel\Desktop\OTL.Txt
2015-09-20 14:20 - 2015-09-20 14:20 - 00181926 _____ C:\Users\dieFackel\Desktop\Extras.Txt
2015-09-20 13:55 - 2015-09-20 13:55 - 06667640 _____ (Piriform Ltd) C:\Users\dieFackel\Downloads\ccsetup509.exe
2015-09-20 13:55 - 2015-09-20 13:55 - 00602112 _____ (OldTimer Tools) C:\Users\dieFackel\Desktop\OTL.exe
2015-09-20 13:55 - 2015-09-20 13:55 - 00002860 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-09-20 13:55 - 2015-09-20 13:55 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-09-20 13:55 - 2015-09-20 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-09-20 13:55 - 2015-09-20 13:55 - 00000000 ____D C:\Program Files\CCleaner
2015-09-20 13:43 - 2015-09-20 13:43 - 00079064 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\ggpcixbf.sys
2015-09-20 13:35 - 2015-09-20 13:54 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-20 13:34 - 2015-09-20 13:34 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\dieFackel\Downloads\mbam-setup-2.1.8.1057.exe
2015-09-20 13:34 - 2015-09-20 13:34 - 00001175 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-09-20 13:34 - 2015-09-20 13:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-09-20 13:34 - 2015-09-20 13:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-20 13:34 - 2015-09-20 13:34 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-09-20 13:34 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-09-20 13:34 - 2015-06-18 08:41 - 00109272 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-09-20 13:34 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-09-20 13:10 - 2015-09-20 13:10 - 00016148 _____ C:\WINDOWS\system32\SOL-PC_dieFackel_HistoryPrediction.bin
2015-09-19 02:33 - 2015-09-19 02:33 - 00000838 _____ C:\Users\dieFackel\Desktop\CrystalDiskInfo.lnk
2015-09-19 02:33 - 2015-09-19 02:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-09-19 02:29 - 2015-09-19 02:29 - 03908184 _____ (Crystal Dew World ) C:\Users\dieFackel\Downloads\CrystalDiskInfo6_5_2-en.exe
2015-09-19 02:21 - 2015-09-19 02:21 - 02354034 _____ C:\Users\dieFackel\Downloads\cpu-z_1.73-en.zip
2015-09-18 19:13 - 2015-09-18 19:13 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-09-18 19:13 - 2015-09-18 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-09-18 19:13 - 2015-07-02 10:38 - 00442264 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw5478.tmp
2015-09-18 19:13 - 2015-07-02 00:46 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-09-18 19:13 - 2015-07-02 00:46 - 00272248 _____ C:\WINDOWS\system32\Drivers\asw5479.tmp
2015-09-18 19:13 - 2015-07-02 00:46 - 00137288 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw548A.tmp
2015-09-18 19:13 - 2015-07-02 00:46 - 00093528 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw5474.tmp
2015-09-18 19:13 - 2015-07-02 00:46 - 00089944 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw5476.tmp
2015-09-18 19:13 - 2015-07-02 00:46 - 00065736 _____ C:\WINDOWS\system32\Drivers\asw5477.tmp
2015-09-18 19:13 - 2015-07-02 00:46 - 00029168 _____ C:\WINDOWS\system32\Drivers\asw5475.tmp
2015-09-18 19:13 - 2015-07-02 00:45 - 01047320 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\Drivers\asw5464.tmp
2015-09-18 19:12 - 2015-09-18 19:12 - 00337536 _____ C:\WINDOWS\Minidump\091815-8671-01.dmp
2015-09-18 19:10 - 2015-09-18 19:12 - 00000000 ____D C:\WINDOWS\Minidump
2015-09-18 19:10 - 2015-09-18 19:10 - 00339336 _____ C:\WINDOWS\Minidump\091815-10203-01.dmp
2015-09-17 23:17 - 2015-09-17 23:17 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 ____D C:\Users\DefaultAppPool
2015-09-17 23:17 - 2015-08-20 13:18 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-17 23:17 - 2015-08-06 18:56 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-09-17 14:07 - 2014-07-24 13:01 - 00028672 _____ () C:\Users\dieFackel\Desktop\memtest.exe
2015-09-17 14:05 - 2015-09-17 14:05 - 00015201 _____ C:\Users\dieFackel\Downloads\MemTest41.zip
2015-09-17 14:04 - 2015-09-17 14:04 - 01457952 _____ C:\Users\dieFackel\Downloads\MemTest - CHIP-Installer.exe
2015-09-09 23:59 - 2015-09-09 23:59 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-09-09 23:49 - 2015-09-09 23:57 - 164858324 _____ C:\Users\dieFackel\Downloads\Apache_OpenOffice_4.1.1_Win_x86_install_de.exe
2015-09-09 14:54 - 2015-09-02 03:20 - 00077400 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-09-09 14:54 - 2015-09-02 02:25 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-09-09 14:54 - 2015-09-02 02:25 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-09-09 14:54 - 2015-08-27 08:36 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-09 14:54 - 2015-08-27 08:32 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 14:54 - 2015-08-27 08:04 - 21874688 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-09-09 14:54 - 2015-08-27 07:59 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-09 14:54 - 2015-08-27 07:55 - 24594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-09 14:54 - 2015-08-27 07:54 - 00541248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-09-09 14:54 - 2015-08-27 07:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-09 14:54 - 2015-08-27 07:51 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-09 14:54 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 14:54 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-09 14:54 - 2015-08-27 07:47 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-09 14:54 - 2015-08-27 07:43 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-09 14:54 - 2015-08-27 07:43 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-09 14:54 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-09 14:54 - 2015-08-27 07:42 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-09-09 14:54 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 14:54 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-09 14:54 - 2015-08-27 07:39 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-09 14:54 - 2015-08-27 07:23 - 19324416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-09 14:54 - 2015-08-27 07:23 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-09 14:54 - 2015-08-27 07:16 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-09-09 14:54 - 2015-08-27 07:16 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-09 14:54 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 14:54 - 2015-08-27 07:12 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-09 14:54 - 2015-08-27 07:12 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-09 14:54 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-09 14:54 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-09 14:54 - 2015-08-27 07:09 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-09 14:54 - 2015-08-27 07:08 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-09 11:25 - 2015-09-09 11:25 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-09 11:25 - 2015-09-09 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-07 22:09 - 2015-09-20 13:10 - 00003096 _____ C:\WINDOWS\System32\Tasks\ParkControl
2015-09-07 22:09 - 2015-09-07 22:09 - 00650928 _____ (Bitsum LLC) C:\Users\dieFackel\Downloads\parkcontrolsetup64.exe
2015-09-07 22:09 - 2015-09-07 22:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParkControl
2015-09-05 14:13 - 2015-09-05 14:13 - 00025163 _____ C:\Users\dieFackel\Downloads\LB160-15D_04(1).zip
2015-09-03 02:33 - 2015-09-03 02:33 - 00000000 ____D C:\Users\dieFackel\AppData\Local\MicrosoftEdge
2015-09-02 14:11 - 2015-09-02 14:11 - 00025163 _____ C:\Users\dieFackel\Downloads\LB160-15D_04.zip
2015-08-31 18:08 - 2015-08-20 08:07 - 08019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-31 18:08 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-31 18:08 - 2015-08-20 08:02 - 22324656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-31 18:08 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-31 18:08 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-31 18:08 - 2015-08-20 07:16 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-31 18:08 - 2015-08-20 07:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-31 18:08 - 2015-08-18 09:56 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-31 18:08 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-08-31 18:08 - 2015-08-18 09:54 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-31 18:08 - 2015-08-18 09:27 - 01771592 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-31 18:08 - 2015-08-18 09:24 - 00963920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-31 18:08 - 2015-08-18 09:13 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-31 18:08 - 2015-08-18 09:13 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2015-08-31 18:08 - 2015-08-18 09:12 - 02225664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-31 18:08 - 2015-08-18 09:07 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-08-31 18:08 - 2015-08-18 09:04 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2015-08-31 18:08 - 2015-08-18 09:04 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-31 18:08 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2015-08-31 18:08 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll
2015-08-31 18:08 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2015-08-31 18:08 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-31 18:08 - 2015-08-18 08:55 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-31 18:08 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2015-08-31 18:08 - 2015-08-18 08:54 - 00247296 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-31 18:08 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-31 18:08 - 2015-08-18 08:50 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-31 18:08 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-08-31 18:08 - 2015-08-18 08:49 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2015-08-31 18:08 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-31 18:08 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2015-08-31 18:08 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2015-08-31 18:08 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2015-08-31 18:08 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2015-08-31 18:08 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-31 18:08 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2015-08-31 18:08 - 2015-08-18 06:44 - 00008847 _____ C:\WINDOWS\system32\ResPriHMImageList
2015-08-29 15:43 - 2015-08-29 15:43 - 00000000 ____D C:\Users\dieFackel\AppData\Local\YSearchUtil
2015-08-29 15:43 - 2015-08-29 15:43 - 00000000 ____D C:\Program Files (x86)\Yahoo!
2015-08-29 15:40 - 2015-08-29 15:40 - 00000000 _____ C:\WINDOWS\SysWOW64\REN21DD.tmp
2015-08-29 15:39 - 2015-08-29 15:40 - 00000000 ____D C:\Users\dieFackel\.oracle_jre_usage
2015-08-29 15:39 - 2015-08-29 15:39 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\Sun
2015-08-28 00:16 - 2015-08-28 00:38 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2015-08-22 19:29 - 2015-08-22 19:29 - 00000208 _____ C:\Users\dieFackel\Desktop\Total War SHOGUN 2.url

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-20 17:36 - 2014-03-16 11:51 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-20 17:36 - 2014-01-24 20:35 - 00000000 ____D C:\Users\dieFackel\AppData\Local\Battle.net
2015-09-20 17:35 - 2013-08-18 23:34 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\Skype
2015-09-20 17:15 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-20 16:59 - 2013-08-28 19:37 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-20 16:40 - 2015-07-10 14:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-20 16:40 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-20 15:13 - 2014-01-24 20:35 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-09-20 14:56 - 2015-04-13 22:18 - 00000000 ____D C:\Users\dieFackel\Desktop\University
2015-09-20 14:26 - 2014-06-15 14:32 - 00000000 ____D C:\Users\dieFackel\Documents\WB Games
2015-09-20 14:26 - 2013-08-19 19:19 - 00000000 ____D C:\Users\dieFackel\Documents\my games
2015-09-20 14:23 - 2014-09-18 00:41 - 00000000 ____D C:\Users\dieFackel\AppData\Local\LOOT
2015-09-20 14:18 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-20 14:18 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-09-20 13:59 - 2013-08-28 19:37 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-20 13:43 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Branding
2015-09-20 13:43 - 2013-08-19 19:13 - 00000000 ____D C:\ProgramData\APN
2015-09-20 13:13 - 2015-08-19 23:43 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5C282664-0F36-4F05-B367-33191A713477}
2015-09-19 02:22 - 2015-04-13 22:33 - 00000000 ___RD C:\Users\dieFackel\Desktop\Programme
2015-09-18 23:03 - 2013-12-29 18:01 - 00000000 ____D C:\Users\dieFackel\AppData\Local\DayZ
2015-09-18 20:25 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-09-18 20:12 - 2015-08-06 19:47 - 00000000 __SHD C:\Recovery
2015-09-18 19:19 - 2015-08-06 18:51 - 02077126 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-18 19:19 - 2015-07-10 18:34 - 00883584 _____ C:\WINDOWS\system32\perfh007.dat
2015-09-18 19:19 - 2015-07-10 18:34 - 00195718 _____ C:\WINDOWS\system32\perfc007.dat
2015-09-18 19:13 - 2013-08-19 00:49 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys
2015-09-18 19:13 - 2013-08-19 00:44 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-09-18 19:13 - 2013-08-19 00:18 - 00000144 _____ C:\service.log
2015-09-18 19:12 - 2015-08-06 18:50 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-18 19:12 - 2015-07-21 21:57 - 589516284 _____ C:\WINDOWS\MEMORY.DMP
2015-09-18 19:12 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-17 00:00 - 2015-08-06 18:53 - 00000000 ____D C:\Users\dieFackel
2015-09-16 13:54 - 2013-08-28 19:37 - 00004190 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-16 13:54 - 2013-08-28 19:37 - 00003958 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-16 13:35 - 2015-08-06 19:02 - 00000000 ____D C:\Users\dieFackel\AppData\Local\Packages
2015-09-16 13:15 - 2015-08-06 19:05 - 00000000 ____D C:\Users\dieFackel\OneDrive
2015-09-16 13:14 - 2015-07-10 14:20 - 00219888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-16 13:12 - 2015-07-10 18:46 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-16 13:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-09-16 13:12 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-09-16 02:17 - 2013-10-01 22:23 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\TS3Client
2015-09-15 22:49 - 2015-04-14 11:46 - 00000080 _____ C:\Users\dieFackel\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-09-15 16:01 - 2015-08-06 19:05 - 00002406 _____ C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-09-11 18:01 - 2014-07-23 20:53 - 00000000 ____D C:\Users\dieFackel\Desktop\Hearthstone Screenshots
2015-09-10 14:20 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-10 14:19 - 2013-08-18 21:54 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-09 11:25 - 2013-08-18 23:34 - 00000000 ____D C:\ProgramData\Skype
2015-09-08 13:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2015-09-07 12:37 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-09-07 12:36 - 2015-08-06 18:48 - 00007704 _____ C:\WINDOWS\PFRO.log
2015-09-07 12:36 - 2013-08-18 23:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-06 13:08 - 2015-08-06 19:10 - 00000000 ____D C:\Users\dieFackel\AppData\Local\Comms
2015-08-29 16:07 - 2013-10-19 17:01 - 00000000 ____D C:\ProgramData\Oracle
2015-08-29 15:40 - 2015-07-28 13:44 - 00000000 ____D C:\Program Files\Java
2015-08-29 15:40 - 2014-10-21 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-29 15:40 - 2013-08-18 23:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-29 15:39 - 2015-07-28 13:44 - 00110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-08-27 11:26 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-26 18:37 - 2013-08-18 21:54 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-08-21 22:49 - 2015-04-13 21:04 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2015-08-21 22:48 - 2015-04-13 21:04 - 00000000 ____D C:\Program Files\Rockstar Games

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-10-01 20:17 - 2013-10-01 20:17 - 0000037 ___SH () C:\Users\dieFackel\AppData\Local\70149b02515b3bb20dd492.47983420
2015-02-02 04:09 - 2015-02-02 04:09 - 0000000 ___SH () C:\Users\dieFackel\AppData\Local\LumaEmu
2015-06-21 20:51 - 2015-06-21 20:51 - 0009494 _____ () C:\Users\dieFackel\AppData\Local\recently-used.xbel
2015-04-21 13:24 - 2015-04-21 13:24 - 0007603 _____ () C:\Users\dieFackel\AppData\Local\Resmon.ResmonCfg
2014-10-31 15:44 - 2014-10-31 15:44 - 0000000 _____ () C:\Users\dieFackel\AppData\Local\{A310A91F-EC09-4402-A3F7-8F8D2A6ACFCD}
2013-09-01 13:00 - 2013-09-01 13:00 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-08-06 18:50 - 2015-08-06 18:50 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\dieFackel\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\dieFackel\AppData\Local\Temp\Uninstall.exe
C:\Users\dieFackel\AppData\Local\Temp\ytb.exe
C:\Users\dieFackel\AppData\Local\Temp\__pythonRunner.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-11 13:22

==================== Ende von FRST.txt ============================
         

Alt 20.09.2015, 17:48   #5
dieFackel
 
Malware Befall? - Standard

Malware Befall?



Addition
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von dieFackel (2015-09-20 17:40:16)
Gestartet von C:\Users\dieFackel\Desktop
Windows 10 Home (X64) (2015-08-06 17:02:52)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2542595381-3183390579-2223026719-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2542595381-3183390579-2223026719-503 - Limited - Disabled)
dieFackel (S-1-5-21-2542595381-3183390579-2223026719-1000 - Administrator - Enabled) => C:\Users\dieFackel
Gast (S-1-5-21-2542595381-3183390579-2223026719-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2542595381-3183390579-2223026719-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.08 - GIGABYTE)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29625 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.293 - Adobe Systems Incorporated)
Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)
AutoGreen B10.0517.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B10.0517.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AutoHotkey 1.1.15.03 (HKLM\...\AutoHotkey) (Version: 1.1.15.03 - Lexikos)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software)
Baldur's Gate II: Enhanced Edition (HKLM-x32\...\Steam App 257350) (Version:  - Beamdog)
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
Batman: Arkham City GOTY (HKLM-x32\...\Steam App 200260) (Version:  - Rocksteady Studios)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
Browser Configuration Utility (HKLM-x32\...\{A2F991E7-DDCD-42B7-AFEC-47789A099FDC}) (Version: 1.1.18.0 - DeviceVM Inc.) <==== ACHTUNG
Capsule (HKLM-x32\...\Capsule) (Version: 1.0.000 - Green Man Gaming Limited)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Convoy (HKLM-x32\...\Steam App 318230) (Version:  - Convoy Games)
Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version:  - FromSoftware, Inc)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Divinity: Original Sin (HKLM-x32\...\Steam App 230230) (Version:  - Larian Studios)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.3 - Electronic Arts)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Easy Tune 6 B10.0516.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B10.0516.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
EasySaver B9.1214.1  (HKLM-x32\...\{07300F01-89CA-4CF8-92BD-2A605EB83C95}) (Version: 1.00.0000 - Gigabyte)
Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.17 - Echobit, LLC)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free Audio Converter version 5.0.57.301 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.57.301 - DVDVideoSoft Ltd.)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
GOG.com Downloader version 3.6.0 (HKLM-x32\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotline Miami 2 - Wrong Number (HKLM-x32\...\1424773427_is1) (Version: 2.0.0.1 - GOG.com)
HP Officejet 4630 series - Grundlegende Software für das Gerät (HKLM\...\{CCF92FFE-5341-4263-9048-472D9E3C5703}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
HP Officejet 6700 - Grundlegende Software für das Gerät (HKLM\...\{9086D601-50B7-491D-A143-28193DADE36B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
inSSIDer 3 (HKLM-x32\...\{A80CEA4E-74C1-4F9F-806B-E1D9AFC01768}) (Version: 3.0.7.48 - MetaGeek, LLC)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.6.0 - Hermann Schinagl)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
METAL GEAR RISING: REVENGEANCE (HKLM-x32\...\Steam App 235460) (Version:  - PlatinumGames)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 352.86 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 352.86 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
ON_OFF Charge B10.0427.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.1.571 - Electronic Arts, Inc.)
Papers, Please (HKLM-x32\...\GOGPACKPAPERSPLEASE_is1) (Version: 2.4.0.10 - GOG.com)
ParkControl (HKLM-x32\...\ParkControl) (Version: 0.0.3.0 - Bitsum)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version:  - The Indie Stone)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.18.322.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.48 - Piriform)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)
Samsung Universal Print Driver 2 (HKLM-x32\...\Samsung Universal Print Driver 2) (Version: 2.50.06.00 - Samsung Electronics Co., Ltd.)
Secunia PSI (3.0.0.7011) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.7011 - Secunia)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
Sitecom Europe BV Wireless LAN (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Sitecom)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Sony PC Companion 2.10.275 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.275 - Sony)
Spelunky (HKLM-x32\...\Steam App 239350) (Version:  - )
Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version:  - Petroglyph)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
StarCraft II - Legacy of the Void Beta (HKLM-x32\...\StarCraft II - Legacy of the Void Beta) (Version:  - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
StarMade Demo (HKLM-x32\...\Steam App 335180) (Version:  - Schine, GmbH)
System Requirements Lab (HKLM-x32\...\{0F659036-14C7-4622-9505-35A0DC93526A}) (Version: 6.1.3.0 - Husdawg, LLC)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.7.0 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Triss (HKLM-x32\...\Alternative Look for Triss_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Yennefer (HKLM-x32\...\Alternative Look for Yennefer_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Ballad Heroes - Neutral Gwent Card Set (HKLM-x32\...\Ballad Heroes - Neutral Gwent Card Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Elite Crossbow Set (HKLM-x32\...\Elite Crossbow Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Contract - Skellige's Most Wanted (HKLM-x32\...\New Quest - Contract: Skellige's Most Wanted_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Contract Missing Miners (HKLM-x32\...\New Quest - Contract Missing Miners_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Fool's Gold (HKLM-x32\...\New Quest - Fool's Gold_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Scavenger Hunt - Wolf School Gear (HKLM-x32\...\New Quest - Scavenger Hunt: Wolf School Gear_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Where the Cat and Wolf Play... (HKLM-x32\...\New Quest - Where the Cat and Wolf Play..._is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Nilfgaardian Armor Set (HKLM-x32\...\Nilfgaardian Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Skellige Armor Set (HKLM-x32\...\Skellige Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)
Total War: ATTILA (HKLM-x32\...\Steam App 325610) (Version:  - Creative Assembly)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Wasteland 2 Ranger Edition MULTi7 Update 1 1.0 (HKLM-x32\...\Wasteland 2 Ranger Edition MULTi7 Update 1 1.0) (Version:  - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)
Yahoo Search Set (HKLM-x32\...\Yahoo! SearchSet) (Version:  - Yahoo Inc.)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

19-09-2015 00:28:20 Windows Update

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {007FD569-54C3-49A3-8253-0E0F395482D0} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {0383F50C-10FC-4040-A88B-255E40ED0718} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {084C4971-47A8-45F9-B3D4-6428B1DEE881} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {12D881B8-E734-416A-A028-6015E7EC6595} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {150F6739-4D66-4199-B9E0-4A6036F6D1E3} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {184FF6BF-AE08-4746-B1ED-58A09F572B43} - System32\Tasks\ParkControl => D:\Dateien\ParkControl\parkcontrol.exe [2015-09-06] (Bitsum LLC)
Task: {19157D73-6A5A-4235-A1FB-5426DEEA7A5E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {1E3858FF-E903-44C5-B3FD-123E185A4418} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {28815D36-92F8-47FB-8122-5993A2D7FAE0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {2956CF19-F792-4A9B-8BEE-AD0E8AC9BB44} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {2FB4C784-7B77-4FC1-AD9E-BDB7965DB6AA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-18] (Avast Software s.r.o.)
Task: {310AAB93-F31B-419C-AC9C-1341BFDD3539} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {33EF87E4-1891-4EEF-A7C9-E6E04D9214E0} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {377E7CDC-2A35-4D14-A9D8-49128516DB1A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {3FD4EB54-C2D6-4967-BB88-80BBF8C40A43} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {44FE11CF-3C38-40A3-9493-A4A49EA471C3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4DA4623F-2143-4DED-8840-199F2039EC86} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {537EDD82-D044-4E4B-A66C-5101874B229E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {59D77CEA-ED7B-4500-89C9-0232E7206C55} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-11] (Adobe Systems Incorporated)
Task: {5EF69986-67D5-4614-B028-C38706C7912F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {5F71DF05-892E-400C-BCFA-20C877FF8FFB} - \ASP -> Keine Datei <==== ACHTUNG
Task: {62161B17-BBE0-4CC8-84E3-8F778C923A0F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {66CA6249-C5C4-42EA-A114-32777C647074} - System32\Tasks\{CEED1077-07CF-4FE6-BA38-F89840399C6C} => pcalua.exe -a "D:\Spiele\Steam\SteamApps\common\The Talos Principle\Uninstall.exe"
Task: {6C6B408C-ABB7-4CDE-A2FC-598219EC69AF} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {739DA745-42F7-41D9-9FD8-F145E77A2852} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {759FD429-B6FA-4A99-9616-3B9517B3B377} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {75DD3EDE-5FD2-4C70-8102-FF1C5D38B12A} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {7E7CF516-AEF8-4C55-8ACC-86E52E53C5E7} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {8928D6C7-7F61-40AF-BCCC-7B0E5D089856} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {8FA47A0E-248D-4A4C-ABC7-739455135FE2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {99F43B2C-4B9B-458F-8253-C56307D66F25} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9B99641C-82AD-430E-99D3-95403253A9F4} - System32\Tasks\{1B1DFA78-A4FB-400D-8359-E064CBA855AC} => pcalua.exe -a C:\Users\dieFackel\Downloads\AdobeAIRInstaller.exe -d C:\Users\dieFackel\Downloads
Task: {9DF62012-097A-432A-A864-896C0D0A58C7} - System32\Tasks\{17B1D9FC-619A-4019-9106-9E42DBD0F377} => pcalua.exe -a "D:\Spiele\Endless Legend\Uninstall.exe"
Task: {A02D7968-4E72-40FF-BFD5-EE9EFB9F69B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {A0C3ED9C-6CCF-46DD-AFC1-B7A92242AEDB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {A3B958EF-6EA8-46FD-BC9C-7D831347D2F2} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {AAF7903A-042E-445F-BCF0-D2989889D7AF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {B0E4BE89-8ACC-45E6-AA66-80418E141D6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {B3BA9488-CC8E-4610-9991-318DF6AC4EA5} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {BA7FDBED-76CC-4426-9BB3-4E40EB345604} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {C209C164-6EB7-4B8F-9858-E6E9D867CC1A} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {C7C0D305-2AE3-428A-9A0F-0CE0850295B0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {DA5E6DF4-4A57-477B-9EED-99B2E8A73250} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {E2822C6F-6FA1-4C79-8CBA-E875A3523E86} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {EDBF36E0-04A5-40EE-B88E-32965CAB73DC} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {F1B6BD64-4062-4FEA-A3EE-F93D36875EFD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {F4ED529C-8F47-43CD-92D4-0FB6C947774B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-06 19:45 - 2015-08-06 19:45 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-04-23 19:40 - 2014-04-16 10:22 - 00029184 _____ () C:\WINDOWS\System32\usp02l.dll
2015-08-19 18:31 - 2015-08-11 11:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2013-08-19 00:18 - 2009-08-24 14:38 - 00068136 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
2013-08-19 00:21 - 2010-01-19 04:31 - 00072304 ____R () C:\Windows\SysWOW64\XSrvSetup.exe
2015-04-23 19:43 - 2014-11-26 13:07 - 00118576 _____ () C:\Windows\SysWOW64\SecUPDUtilSvc.exe
2015-08-06 18:50 - 2015-07-23 03:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-08-31 18:08 - 2015-08-18 09:56 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2012-06-18 17:24 - 2012-06-18 17:24 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_05.dll
2015-08-31 18:08 - 2015-08-18 09:56 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-08-11 21:51 - 2015-08-03 03:11 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-19 18:31 - 2015-08-11 10:58 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-11 21:51 - 2015-08-03 03:09 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-08-24 20:28 - 2015-08-24 20:28 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-07-02 00:45 - 2015-07-02 00:45 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-07-02 00:45 - 2015-07-02 00:45 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-18 19:02 - 2015-09-18 19:02 - 02965504 _____ () C:\Program Files\AVAST Software\Avast\defs\15091801\algo.dll
2015-09-20 13:58 - 2015-09-20 13:58 - 02965504 _____ () C:\Program Files\AVAST Software\Avast\defs\15092000\algo.dll
2013-08-19 00:18 - 2009-03-13 11:30 - 00109096 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\YCC.DLL
2015-05-22 16:45 - 2015-05-01 18:52 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2013-08-19 00:15 - 2012-06-17 11:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2009-06-27 10:11 - 2009-06-27 10:11 - 00503202 _____ () C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll
2014-06-09 04:02 - 2010-11-04 11:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2015-07-02 00:45 - 2015-07-02 00:46 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-03 17:42 - 2015-07-03 18:12 - 00778240 _____ () D:\Spiele\Steam\SDL2.dll
2015-01-20 19:25 - 2015-07-03 18:12 - 04962816 _____ () D:\Spiele\Steam\v8.dll
2014-08-03 17:42 - 2015-08-19 22:39 - 02413248 _____ () D:\Spiele\Steam\video.dll
2015-01-20 19:25 - 2015-07-03 18:12 - 01556992 _____ () D:\Spiele\Steam\icui18n.dll
2015-01-20 19:25 - 2015-07-03 18:12 - 01187840 _____ () D:\Spiele\Steam\icuuc.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 02396672 _____ () D:\Spiele\Steam\libavcodec-56.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00479744 _____ () D:\Spiele\Steam\libavformat-56.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00332800 _____ () D:\Spiele\Steam\libavresample-2.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00442880 _____ () D:\Spiele\Steam\libavutil-54.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00485888 _____ () D:\Spiele\Steam\libswscale-3.dll
2014-08-03 17:42 - 2015-08-19 22:39 - 00704192 _____ () D:\Spiele\Steam\bin\chromehtml.DLL
2015-07-22 19:33 - 2015-07-27 03:13 - 00171008 _____ () D:\Spiele\Steam\bin\openvr_api.dll
2014-08-03 17:42 - 2015-07-03 18:12 - 39553928 _____ () D:\Spiele\Steam\bin\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\Control Panel\Desktop\\Wallpaper -> D:\Dateien\Bilder\Wallpaper\song-of-ice-and-fire-a-song-of-ice-and-fire-game-of-thrones-game-of-thrones-serial-book.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "Sitecom Wireless Utility.lnk"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "EvolveClient"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "Sony PC Companion"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{3BC6CFE2-7EA2-4011-84BA-7FEED091D83A}] => (Allow) D:\Dateien\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{61375D69-A18E-4803-8779-D8BF39D6268A}] => (Allow) D:\Dateien\Echobit\Evolve\EvoSvc.exe
FirewallRules: [UDP Query User{6BD38B9B-C5B3-444B-9445-275EE4EF4F01}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe] => (Allow) D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe
FirewallRules: [TCP Query User{0FFDD242-BB2F-49BF-905C-5B05E6D833B6}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe] => (Allow) D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe
FirewallRules: [{37DBD5E1-76BC-46E5-8F23-179DADB6C408}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{F1DBD15E-DA8E-47A6-9329-BFD53767D7C6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{0C591109-FBC6-4F73-BBBB-61092B9BB943}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{131CBD8F-19F4-4077-AA23-2E3A9B932972}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [UDP Query User{AC4641F8-12FC-420F-823F-EFFC3F28FDBE}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [TCP Query User{AA80F67F-5B29-4F21-AF43-610BD2557134}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [UDP Query User{B0847E20-BD2F-4CE3-81BD-B269F8AE2DCE}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{99791AC9-E644-49DE-86C4-F301DA9B706F}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [UDP Query User{52E2A39D-CDF8-4BD2-A960-F3FB7AC8F64D}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{D499F6AB-D5DA-4AE8-B1FE-0C5672BDAAEC}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [{49FBEF79-5265-4DBB-80C5-04929B850A06}] => (Allow) D:\Spiele\Steam\SteamApps\common\StarMade\StarMade-starter.exe
FirewallRules: [{96EBA60C-D22C-4AE4-B9FF-48344DCD1A8B}] => (Allow) D:\Spiele\Steam\SteamApps\common\StarMade\StarMade-starter.exe
FirewallRules: [UDP Query User{0D90916A-B2DB-4CD4-9340-B147B03340B9}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [TCP Query User{679176C4-B17C-48AC-9438-D72A64AADF45}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [UDP Query User{94A160E1-66C3-4B87-9603-39556EFD9D49}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe
FirewallRules: [TCP Query User{89EFC158-2255-4AD5-AD13-C0E7D8C6DDF0}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe
FirewallRules: [{47331124-787A-4A26-A875-7E33D2E60C2E}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{0BB03995-1E3A-4C68-839F-2683138514C7}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{A4AE1FED-1B2E-4400-B66B-44EF7AB1085C}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{7F4738E0-D875-4AAA-8603-B22CCD24074A}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{C8F9D5F7-0F0E-4656-B32A-EC826FEB347F}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{4E00D23C-FC6C-460D-B09D-C74E9829E1E6}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{260998F8-92AC-4377-B056-ABB93BE243F7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{E20C141F-B4E3-40B8-9EE2-4E3D0395E972}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{6680ACBA-36E3-4AAD-B9B0-01E7654230F0}] => (Block) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [{9A344900-C141-44D8-A5DD-68DA9610A391}] => (Block) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [UDP Query User{C27FDE17-733B-4E36-8FB2-179CA232B7F5}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [TCP Query User{44A642B9-0B12-4F97-84BE-93251718E92E}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [{50A0F398-48A6-498F-9B67-4D5C9A071F1B}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{F7EC3CDC-284C-442A-BB04-2AC14E401D19}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{8B769242-BA38-42BD-B61E-C869E9D4AFD6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{7E08556E-1E48-491D-9432-D0CD72FB0C37}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{8B88620A-E50A-426E-949A-8CC410A9D244}] => (Allow) D:\Spiele\Steam\SteamApps\common\Convoy\Convoy.exe
FirewallRules: [{1007BD7E-888D-41BC-9DF6-6016D0A2C516}] => (Allow) D:\Spiele\Steam\SteamApps\common\Convoy\Convoy.exe
FirewallRules: [{E737A0A8-401F-4D1D-BDDD-A74D8366577F}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Print Driver 2\PrinterSelector\SUPDApp.exe
FirewallRules: [{DA0A9DB6-75C2-4D33-AF3E-957E96B0EF8D}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{85C5C8CE-4D27-4531-A568-5EFDE17198F5}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{B4495F83-B379-4899-85D3-E45164AF6B0E}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{454B6152-3A20-4BB5-852C-649F4293A1FA}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{C536F582-753F-4E9C-976A-1D730B05E962}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{E30A1B3E-FE21-4810-B6DC-2DF67F566FAC}] => (Block) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [{10F2AA7E-B647-4859-A997-8DCA038F947F}] => (Block) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{71783481-456F-4E47-B816-DE0237716065}D:\spiele\rockstar games\grand theft auto v\gta5.exe] => (Allow) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{E264AEE9-98D1-4F0C-A8D8-EF320B419BA4}D:\spiele\rockstar games\grand theft auto v\gta5.exe] => (Allow) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [{A2F61F36-90A6-400C-8F5B-32D7A043FC06}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{6FCEA93C-55AE-4EB2-98EB-B68ED3541B24}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{874CB0D8-1A02-4AC9-A166-9F8293E19B86}] => (Allow) C:\Steam\Total War Attila\launcher\launcher.exe
FirewallRules: [{C94F57A0-0A4A-470F-B710-2DAAB728AFB3}] => (Allow) C:\Steam\Total War Attila\launcher\launcher.exe
FirewallRules: [{732BA3E2-1182-4397-8D28-A9A2C88849AA}] => (Block) D:\Spiele\GOG Games\Hotline Miami 2 - Wrong Number\HotlineMiami2.exe
FirewallRules: [{5712810A-D8E8-47F1-867C-8A567865F1FA}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{121C2BBA-ADCF-4A00-A003-8E4DC7C19F42}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [UDP Query User{01F3AAB2-F100-486D-9ECE-B0CE0B6D9092}D:\spiele\der herr der ringe online\lotroclient.exe] => (Allow) D:\spiele\der herr der ringe online\lotroclient.exe
FirewallRules: [TCP Query User{7E0D2860-2926-4758-9E61-C3D62A6EE882}D:\spiele\der herr der ringe online\lotroclient.exe] => (Allow) D:\spiele\der herr der ringe online\lotroclient.exe
FirewallRules: [UDP Query User{EF620606-1FAD-4D0F-A60A-B3D46FA847CD}D:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) D:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [TCP Query User{E6809934-F0AB-44EA-92A3-4F06E02800A4}D:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) D:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{5185CE5F-6F3A-4005-9FFA-99A07BFC30AF}] => (Block) D:\Spiele\The Escapists\TheEscapists.exe
FirewallRules: [UDP Query User{994ABB63-697E-4845-8262-7188C1B3840C}C:\steam\total war attila\attila.exe] => (Allow) C:\steam\total war attila\attila.exe
FirewallRules: [TCP Query User{E16FC49E-8D94-4B67-A2C9-9950910F8D4F}C:\steam\total war attila\attila.exe] => (Allow) C:\steam\total war attila\attila.exe
FirewallRules: [UDP Query User{3F166EB9-307C-4A2B-9432-B9F44FD2DAB3}D:\spiele\steam\steamapps\common\total war attila\attila.exe] => (Allow) D:\spiele\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [TCP Query User{AB7ED2C4-B673-4C55-83A0-5E725CB106E4}D:\spiele\steam\steamapps\common\total war attila\attila.exe] => (Allow) D:\spiele\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [{A69E166B-B8ED-48C9-8F37-7BC3560B9061}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Attila\launcher\launcher.exe
FirewallRules: [{A0EFB1FA-5906-4CDD-B7CD-CF975BD867FD}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Attila\launcher\launcher.exe
FirewallRules: [{0EF27D38-E34C-49C9-8FFF-A8DEE122C744}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{D9020509-1915-46C3-8F77-73656050A0ED}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{4701180F-828D-4A7D-BEE2-0525E357EEDF}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{042A055D-138C-4D24-943A-D29B3400242B}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{84E05554-EBD4-4F2C-935A-8476C0213A1B}] => (Allow) D:\Dateien\Winamp\winamp.exe
FirewallRules: [{AF973B7E-92F7-4563-88EC-4D14DF7F570A}] => (Allow) D:\Dateien\Winamp\winamp.exe
FirewallRules: [{65ED1D28-06B3-4520-B7A1-C1B0B3C19453}] => (Block) D:\Spiele\Dying Light - Season Pass Edition\Dying Light - Season Pass Edition\DyingLightGame.exe
FirewallRules: [{B8262556-3A71-44D0-844E-C47F3BF5FE9C}] => (Block) D:\Spiele\Dying Light - Season Pass Edition\DyingLightGame.exe
FirewallRules: [{47C063DB-E35A-4680-ACF9-074E46A11E7F}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\Bin\TalosLauncher.exe
FirewallRules: [{9A669733-4F0E-4354-A9F2-783A3E91ABC0}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{E51C2980-FA5D-4DD3-9111-65127B787228}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{9E96DFA9-52C0-465E-ABC3-2E5E6D034881}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\original\Talos_Unrestricted.exe
FirewallRules: [{A6441CE9-9B08-426E-BD68-524B7CA68ACA}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\original\Talos.exe
FirewallRules: [{66BD3D56-1118-4FC3-9E54-80150813DA09}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{EE93AA36-B737-4CE9-A350-E7329041BB81}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{0C0652B7-FCB4-46F4-B493-383EA1E10206}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
FirewallRules: [{77F7FC88-7D10-47A1-A934-A458A2FD7952}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
FirewallRules: [{5BEEE90D-0BBE-4967-8B44-654F73F5E717}] => (Allow) D:\Spiele\Steam\SteamApps\common\the banner saga factions\win32\The Banner Saga Factions.exe
FirewallRules: [{4E55DE75-0541-4FFF-A27A-B8E7A0708C41}] => (Allow) D:\Spiele\Steam\SteamApps\common\the banner saga factions\win32\The Banner Saga Factions.exe
FirewallRules: [{BD02DD28-83A4-40BE-BCB0-A01DEB78070A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{791AE8AB-8F4F-4403-997C-7D6431C71758}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{200F8714-305F-4403-A7E8-177A79F7581D}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{CBC7F8AB-00EB-4892-9F01-78F6C467AA2D}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{6BF50E30-7EB9-4353-BC55-1167AFD223F4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{B030A168-6281-48CA-9621-76A8AEA3AF09}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{BAEB663C-7F5E-4F29-A51D-1235BF4C7897}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{B83D49E3-C9EE-49E5-93EC-0C2A0ECB1797}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{A58FCE97-E1C6-441E-BCA5-4F1A94A75D35}] => (Allow) D:\Spiele\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{6824D999-E278-4D96-A8EB-3C4D6761872C}] => (Allow) D:\Spiele\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{90C2CADE-0B84-499A-B2F0-315635D1D7C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{FF29EDB2-18BB-4CCD-896A-52444C37CE8C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{7ABD6415-AAE2-4A3F-AD8C-0056BCBE5447}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{80C91602-0A9B-403A-8488-F952FA86D28F}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{6DB10C88-5451-485A-B1DB-C7936DD88213}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{50CA82F3-6FD3-4198-BC73-5E7FB0BEC229}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{4110D224-9A94-479B-BDD6-927B5E0CD22F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{B5CC3189-6AFD-4B0A-BF7B-606DB90611A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [UDP Query User{721024D8-CA0B-4E5A-8BD3-1DD886EF554B}C:\steam\dayz\dayz_experimental.exe] => (Allow) C:\steam\dayz\dayz_experimental.exe
FirewallRules: [TCP Query User{C7489638-ABE6-4C6E-9EF0-20E06C24DBF4}C:\steam\dayz\dayz_experimental.exe] => (Allow) C:\steam\dayz\dayz_experimental.exe
FirewallRules: [{52E231DB-F5D6-4028-BEC4-8E8ED67F12AD}] => (Allow) D:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [{5FD0AFAB-647B-413F-8806-D83B6639A7D5}] => (Allow) D:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [{B243255C-A7CC-4062-88F3-5A68A9818BF0}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{71EDB1FE-7946-4123-80C9-0B72647F813D}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [UDP Query User{46682FD8-186D-49C6-A2F6-8726E2F384C5}D:\spiele\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\far cry 4\bin\farcry4.exe
FirewallRules: [TCP Query User{2087E360-86C8-4F44-9479-A342A8F24C4C}D:\spiele\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{3BD0FB36-6A35-474D-B8D4-54428A7073F7}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [TCP Query User{1E2E57F1-9282-4817-BF17-86AF3119982D}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [UDP Query User{768ADEDF-7348-4888-A306-9D2D9BCFAB3C}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{E4D7CB05-04C0-4D43-AF88-AD7F4CADA6A7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{3C37B9E7-A1B0-41FF-BB5C-41BB7071420B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{487C9432-BD35-49B9-99F5-3BAFE1A664EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [UDP Query User{2B0BD43A-F410-4B4D-B059-B6240AFC9884}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{8C2A0CB4-B109-46D4-AABB-C160E0B4BC2A}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{EF209801-AE72-41D9-9F77-608AD8263367}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{5A3687F6-AA2F-41D8-BC1F-6D0028F43762}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [{75FC0C17-CEE6-4683-A000-68DC461CDDCF}] => (Allow) D:\Spiele\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{C1F02300-6FE1-413E-97D5-9D2E1BCC7BE5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{A2F231C9-4CD8-4395-81DF-C34C6DE0F706}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{E6612FF6-20D1-486B-BE99-B2EE40A8EE64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B2F30D36-41BD-46C2-BFAC-77710BEA7E86}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{91F29332-8300-4A77-8646-391A0E36647B}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{F32D8B5C-0A39-4213-B311-4264F61EDD29}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{4CEB2609-F630-445B-ADE0-E7A4F484BD37}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [UDP Query User{34BCA22E-99A9-4037-899C-174952D355DE}D:\spiele\turbine\lotro\lotroclient.exe] => (Allow) D:\spiele\turbine\lotro\lotroclient.exe
FirewallRules: [TCP Query User{75A8E893-2DB3-4F96-A700-1BDD93AEC419}D:\spiele\turbine\lotro\lotroclient.exe] => (Allow) D:\spiele\turbine\lotro\lotroclient.exe
FirewallRules: [UDP Query User{91E2485E-E838-477D-A73E-4A2676154231}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{DF81AFF9-6AB8-429F-9D37-56BCA58078BB}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{3675F0AF-25B1-45AE-BDED-BEECEADB7462}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{05B42524-C3C8-41AE-898B-8F2B08533BBD}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{5B828859-7EB5-48C0-B521-DAF312FC3B92}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{6ACFD153-8905-467B-970D-055343BD393E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{50A4018A-E9AB-4375-85D1-DB1EA03F464C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{12F913B6-00F8-4DEB-B3E4-8D97D2850BED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{612F91F9-9A30-412D-B951-56F8B50574E5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{850377DC-94A3-4B2A-AA1F-2D4A61142648}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{725EA809-0C27-44BB-A6D1-42DFFB83A5B6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{1162E8DD-48DD-4181-812E-659536393FF0}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [UDP Query User{A1C93A3A-B967-4C58-A16D-F1E7DE6A8FA3}D:\spiele\alien isolation\ai.exe] => (Allow) D:\spiele\alien isolation\ai.exe
FirewallRules: [TCP Query User{E9B168F0-3A0F-4CB0-8F7B-1762918B2F50}D:\spiele\alien isolation\ai.exe] => (Allow) D:\spiele\alien isolation\ai.exe
FirewallRules: [{63E93650-FC6E-470D-B081-ED7D3885B788}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{B715B48F-AF68-463A-94F5-8E0D35B547A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{F4001CEF-B676-4F8F-9CBE-5F88C6865C09}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{466FED5B-6575-4E15-87A2-545F7300F3DA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [UDP Query User{D156C6E4-CF56-47E4-8877-C9FA020097D1}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [TCP Query User{2E3D86B6-3222-4719-A1C3-6465A9825C7E}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [{EA07A9B6-AE7B-426E-90FB-069CCDCFB202}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{1DC62405-5788-4878-AEEF-73C0E95C6951}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [UDP Query User{3FF88DA6-90AD-4569-A544-9BD32D95B4DE}C:\users\diefackel\desktop\candisoft load!\load.exe] => (Allow) C:\users\diefackel\desktop\candisoft load!\load.exe
FirewallRules: [TCP Query User{FDAB8299-263A-4540-98EB-B9BF2FFF7833}C:\users\diefackel\desktop\candisoft load!\load.exe] => (Allow) C:\users\diefackel\desktop\candisoft load!\load.exe
FirewallRules: [{F3B481F2-78BB-4809-B174-E6BF94AD446C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{A27DCD31-FB3D-4FFE-A0A1-8EB8491B9F49}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{C8111857-2C72-45AC-91FB-4FEDD31A8BBC}] => (Allow) D:\Spiele\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{5C97D2AD-62A5-4F8E-A76D-8CBD095C76AB}] => (Allow) D:\Spiele\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{B407A014-5DA2-44E3-B87F-65197BCC60D6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{4AE9B7C5-F214-42B4-BD04-4D111B6C6902}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{8A07CC39-D9D6-4986-A7E7-FC3984AC7127}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{161B3A9B-F20F-432A-A4F8-529C74EDA64C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{8E689C35-4729-49A6-BAD2-957DC852D36D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{1FDDD19F-D61F-4E96-9476-9EE53E29A059}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{473F3C8B-E48E-49EC-B8ED-971DDEED3907}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{5CE8D20C-85C6-4DE3-A472-B7817AC6AAEA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{2E372AA7-F0B1-41BF-9BCF-3AFE1A50E663}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{7BE77165-226E-4090-ACA4-A8C96846A894}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{1AC1DBEE-839F-431D-8D8E-029BC8B31A0B}] => (Allow) D:\Spiele\Steam\SteamApps\common\Resident Evil 4\Bin32\bio4.exe
FirewallRules: [{C82C6185-880F-4E6E-8746-2B6BB818BD6B}] => (Allow) D:\Spiele\Steam\SteamApps\common\Resident Evil 4\Bin32\bio4.exe
FirewallRules: [UDP Query User{10CE2B65-E5F4-42BC-8163-71E573619FB5}C:\programdata\battle.net\agent\agent.3286\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3286\agent.exe
FirewallRules: [TCP Query User{A35D10AF-D92A-4ABA-ACBF-C15CE5BC4854}C:\programdata\battle.net\agent\agent.3286\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3286\agent.exe
FirewallRules: [{24AD6035-4531-4D19-88F4-22279AFC5DAA}] => (Allow) D:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{2E04DF7B-58DC-40FD-9861-C65DEEF3472B}] => (Allow) D:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{65BCD715-1B96-40FB-93BC-46BB53473CA1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{BB349080-4EF5-4A0F-AFCF-58D1A5BE541D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{C976ADF5-7175-4272-B4BE-CCD10EAC1E1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{930A184D-3AC6-40FF-A3BD-97983CF14E97}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{3A7BC421-EDBF-409F-AE22-B79A7C6D1E11}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{C346D2EC-0F46-4B35-BF88-45A910E8F65D}] => (Allow) LPort=5357
FirewallRules: [{A20C7EC1-D7F0-4699-A999-C11A6AF98445}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\Bin\DeviceSetup.exe
FirewallRules: [{FA10D693-1CA9-4710-A397-22E92281F546}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\bin\SendAFax.exe
FirewallRules: [{F4E28960-8EA3-4167-B305-A5D09CF4CB1B}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\bin\DigitalWizards.exe
FirewallRules: [{396624B1-C30D-48C7-A088-13E424FC2A24}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\bin\FaxApplications.exe
FirewallRules: [{7E35D448-A58D-4FC2-BA21-430360FADCD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{0BAE9171-52B3-4EC5-9A19-A016C1E03D02}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{E5A67602-3EB0-42DE-B3AD-4031D2D252F9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{42E8ED7D-6813-475E-9526-E86E74431098}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{4FEC670E-A4A5-4FCA-AD3C-C8CEBC9F80E4}] => (Allow) D:\Spiele\Steam\SteamApps\common\METAL GEAR RISING REVENGEANCE\METAL GEAR RISING REVENGEANCE.exe
FirewallRules: [{6A1E11C6-2FD4-4442-B793-54CAD8E63F82}] => (Allow) D:\Spiele\Steam\SteamApps\common\METAL GEAR RISING REVENGEANCE\METAL GEAR RISING REVENGEANCE.exe
FirewallRules: [{6083F112-8C04-4F34-8B81-E280FF1B4F08}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{5E9EC2DE-8C92-4258-AC76-9FA200A6CFCA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{D37AC809-3DCF-48D3-A935-663B1B235D36}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{27B6BBB1-7DD7-44E0-9F5F-821FCBFA2D98}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{22EF0059-D71E-46A6-A646-B5E9903D7EB7}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{08FE3F0B-E290-4A32-8D1A-5E0431B92CD9}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{271C88E9-96B2-4725-ADE1-49DBFA58099D}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{4D31A50F-DD2C-44A1-8106-12450F1BD174}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{E5325EEB-3F01-445B-B94D-A233B1AEBA19}] => (Allow) D:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{30BD7EC9-61EF-43AD-BFCA-932704125836}] => (Allow) D:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{35241231-34FA-42D4-921F-BAC90A61C91A}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{27D80C77-5768-47B2-BC71-ECEF146C8A2D}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{4373D304-EC2F-4DC7-A098-1034ED7EC19D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{804D6F11-A546-48E8-8806-D776353B49F5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{28B9B0CA-69CF-49C4-886D-1F7E6D0E63E0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F23413BE-72FF-48FF-935F-B4423B56EB70}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{9D0EB4A1-0242-4620-8E01-2CCDF0A2AD7C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F8966F84-0191-401B-B9D7-BDE8ECAE8DB2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0E181344-9146-427F-B8C5-F7CEC8AE589F}] => (Allow) D:\Ubisoft\Future Soldier DX9.exe
FirewallRules: [{BE6201F6-47F2-4F6D-A260-1DE904ACCA50}] => (Allow) D:\Ubisoft\Future Soldier DX9.exe
FirewallRules: [{C970D1FA-1BB1-45FB-8E2F-1EDEC790AEBC}] => (Allow) D:\Ubisoft\Future Soldier DX11.exe
FirewallRules: [{B3B18623-32C2-4E9A-953A-C7A9D41C08DD}] => (Allow) D:\Ubisoft\Future Soldier DX11.exe
FirewallRules: [{01A59A15-B150-4261-A832-C13E2333934A}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{5933A99D-DE56-4D42-A127-7361BCDDBA2B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [UDP Query User{8B6CB9A1-CCD9-4ED2-8550-672343D27E06}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{811D149A-8102-4474-B680-7B0E1F1DB80D}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [{FF515000-9D08-408E-9921-26D9E623A3EB}] => (Allow) D:\Spiele\Diablo III\Diablo III.exe
FirewallRules: [{F1F436EB-F01E-4B64-89F0-D9D9CC3237A5}] => (Allow) D:\Spiele\Diablo III\Diablo III.exe
FirewallRules: [{0898D30C-4DDF-4852-9CEF-CD79E0FB0347}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{59C36A26-852E-4745-BEF7-698FF9D6C85E}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{454808A4-0F57-4997-A163-A11BEB797424}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{BD7E8AC0-D371-47DC-A1E0-8F627C3E1039}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{967DF2D9-1094-404F-95FB-747EDD01CEFB}] => (Allow) D:\Spiele\Steam\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{98F95051-3DCF-440C-9AE9-E94D278E79EB}] => (Allow) D:\Spiele\Steam\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{B8E9E7A8-22E9-46D2-B15A-2616ACBE94FF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{E3458C9D-9AD5-42D0-8D36-940F11B65F9D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [UDP Query User{F5D0F458-A64A-4AAC-88D7-6DB7D0B66659}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2753\agent.exe
FirewallRules: [TCP Query User{26D928E9-F98F-40D1-A2AE-23E28514F798}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2753\agent.exe
FirewallRules: [{15789D71-645E-40BA-A62F-658AE5200343}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{A7964258-CEEC-492B-89D8-9130CD0587CC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{E8E042D8-E451-44F8-82FA-536CB3D94352}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{4A5DB823-6EE7-455F-A4B4-66B5A92E1DAC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [UDP Query User{C7336522-0718-4032-B21C-44DAB4327448}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [TCP Query User{0E4CC603-C65B-4D8A-9395-77790EFC0784}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [{E52FDDF5-AC5F-464C-A17A-6D47A3EB837E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{BF657D00-BF2C-4E0D-B45C-68D76EB62355}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{3E09C03A-4152-4866-8740-9436C209C174}] => (Allow) D:\Spiele\Steam\SteamApps\common\Banished\Application-steam-x64.exe
FirewallRules: [{229F2905-9307-4961-B2F4-EEB6BE81AAE4}] => (Allow) D:\Spiele\Steam\SteamApps\common\Banished\Application-steam-x64.exe
FirewallRules: [{0E12E7A7-B93C-4E19-B9B7-6095AF6767F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{9A7C1B98-4563-4D9C-BAB1-247FB5423C24}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{02077CB4-DEE6-45F8-9434-2E73F92525A4}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{9F8489F4-D6C3-45C7-A2F1-E8D675DAD137}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{E5AD670E-B9DC-4C91-A919-746F255CF8A1}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{D8D7A9A1-B3A6-4931-9103-5F103D19E2C7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{FE67CB5F-9D76-4332-8418-D9684CBAAF40}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{17802179-CA10-493D-89B9-93EDC204577E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{E46B9AE6-F4BC-4DDC-A396-475B489DD224}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{7946B31A-3D86-4532-8C59-B2608D2F5089}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{1BFB075B-45D6-4E2A-85A9-291CD184C82D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{4963AD04-0B6C-4175-BDC5-D89A44D8BBE8}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{9285C295-959E-446A-A96B-12113128E64F}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{4C509833-4E81-4B7D-9786-A86864E79778}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{C921C817-C4BD-46C0-B066-1FE300EA2322}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{8759A254-2AFE-4E31-912C-C534E6F5F517}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{78C7F32C-24C4-45B6-8186-FD812927A836}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{4DCD9165-0CDD-43E8-89E4-C09A2AFEC4F6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{AD04575E-BD2A-49DC-8256-0902D8205E44}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{005CA57C-0C3A-47D0-8BF8-250011EEADDB}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{BFA46502-EAF1-45ED-903C-835E538F931F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{86B7401E-8AB8-447F-BEA3-F5DD0CDF19CA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{E1FA138B-3E50-44DE-AFE2-901A23E91FD9}] => (Allow) D:\Spiele\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{3D77A983-461C-4A06-BDE7-A19AD55B4DD8}] => (Allow) D:\Spiele\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{EF868012-A3C8-4B3F-979D-4580606B6089}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{05C433B1-045D-4649-9FE8-AA33A16A6681}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{E93BF174-DA47-4A48-9243-942B83AF5711}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{74B20526-C704-4197-B388-4CC6E61A0C1C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{65CA368D-AA79-49E2-99A8-3734AD9636F2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{C7F5C892-26AC-492E-AF4B-B91D56F57A5C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{A2BBD7E9-1467-4104-9099-CD811030CD9C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{8BEDEFB4-D4DD-49DB-AF32-02BC67C7F08E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{05890CEC-27A6-4394-90E0-BB59AF447910}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{2B1DAD53-06C0-466F-9E22-55FA34F4F7C1}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{A0FFBA22-BA61-4766-8CA9-F76115D3ABC2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{33EC2108-E97A-4AA1-BD77-5008A89FC222}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{18B2ED39-6F83-4A48-8D68-DC86F3330C75}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{F7B00440-33F6-4F71-976D-3587989F807C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{3303FDE8-CEFC-452C-B250-A1DB46463A31}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{7BB0851D-6A74-42EB-A886-3DD13A42722B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{8F403FA8-32ED-4220-B599-037F2278A985}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D6C0EDC8-5443-432D-B927-A42C0252C284}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45D8D20D-013A-4430-8691-DF5DB7BB3C5B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{44B570B6-8F9C-49AC-8F60-141064742DDE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B63F0017-2F7E-41CE-B2BB-357A5923027F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3FEAF7FE-3E22-4EC7-A31F-206284E9E1CA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{592D499E-5BC0-476C-A7C2-512F75587FD3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F7500448-256C-4CF4-921E-F82C761ED2EB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9B47F7B1-0285-4904-8D57-52FDC09473D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{B9EA31C3-7A77-4730-9AA5-8E0C39EEF0C4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{B7A18863-2979-473F-980B-236D675FB059}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{B9E397A5-6684-438B-A818-1DF8C61E9B38}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{D2FFE9DA-6BEA-4700-A64E-D9652A604C6C}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{11C01E43-C6A3-487F-98FC-F8720A67124B}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{CF1307F5-73F8-47A0-8567-8409FD73B1D9}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{44789199-E0E1-4D74-9AA9-927C61BEBF41}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{F2545E51-0152-4CD8-9DDD-4070AF02854B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6BDCEACE-97D2-4073-9739-91AA434DA97A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A7CDDBE0-F603-4ED4-BD35-F587C8055EBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A093B23A-34C2-4679-B293-D93929427E28}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [UDP Query User{09D3B12E-1D64-4720-9738-808B2BB03418}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe] => (Allow) D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe
FirewallRules: [TCP Query User{1E242760-BA70-462B-8804-2B2DD000B617}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe] => (Allow) D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe
FirewallRules: [{A7ED935A-F3EC-42F6-BFD7-2BECCA4668BD}] => (Allow) D:\Spiele\Steam\SteamApps\common\Spelunky\Spelunky.exe
FirewallRules: [{A9CBEE33-4680-41F4-B98A-79F7E51310D2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Spelunky\Spelunky.exe
FirewallRules: [{AAE2CD6D-47F5-408E-A3CA-675F1053E35C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{66A06236-BF4D-4C8A-91D8-1036C1CED3C5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{5E7713F5-7BBD-4363-9B96-0C255F7D2E3D}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{D623BF2F-54FC-4366-84B2-1CAC8D46AACA}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [UDP Query User{9ECD126D-32EB-4A1F-9489-25F4A7842E71}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{66FE9211-BCCF-4D46-BFE7-8A2DF6DCC740}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{34AB8C0E-5E53-439E-945C-0A955A44B729}D:\spiele\steam\steam.exe] => (Allow) D:\spiele\steam\steam.exe
FirewallRules: [TCP Query User{F0114F43-EF09-4068-9E8B-99DE01B36196}D:\spiele\steam\steam.exe] => (Allow) D:\spiele\steam\steam.exe
FirewallRules: [UDP Query User{B520E170-4F76-4BC5-A52D-FB024EEF4451}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [TCP Query User{5C786FE9-C1E2-4B8A-B90E-6B8D503599A0}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{A9C1AB2D-4EB1-4FFF-BF4F-6A34049E98AA}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{8F8759CE-CB68-4E5B-8674-F698BF887F6D}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [{9F1CCF75-75D5-46FC-B93F-A8C688C0CD17}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{B7600AF9-C7D4-4B5D-81ED-C091D5432314}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{F9AC4827-BB5D-4839-AA25-366ECF0B46D9}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{6865C0BD-E5FB-4EE7-A14C-6BC7ADC5AF5E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{CDE2447B-D5E2-4DBE-8C94-F911A02C6F62}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{0B4EBB85-0C1D-4E89-8CE1-83B826995FED}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{0512736B-D209-4A68-9032-8F1E5EBC5663}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{F19E59A1-2DF8-4F3D-9B53-F93106C90DF2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{3130F182-68CD-449D-A804-A997F2261D73}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{0D67BF69-771F-4CC6-B60E-FE209BC5D2AA}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{8BE9C610-6900-4DC0-ABAD-CB4AC37F2188}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\launcher\launcher.exe
FirewallRules: [{27CF53A7-4C2D-447E-B96F-CA6BFAACB147}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\launcher\launcher.exe
FirewallRules: [{3A2FD336-EDBD-40E1-B06A-24C24C50670E}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{18E3DFF2-8E7F-4F8D-B17D-9CEFEF9410D2}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [UDP Query User{14B7CD50-9E78-45C7-B322-B12F8E02D065}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{153FC93A-87EC-47B0-9686-645FBEB20530}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{9F485F74-1D47-45B3-8AFD-61787933B854}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{53CA6491-A5DE-489E-9250-55D4291DBB2E}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [{D0AB18AF-7B1B-40D8-A1DD-648716E7511F}] => (Allow) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{6FD1367F-BE5F-445D-9450-6288750D57E0}] => (Allow) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
FirewallRules: [{02753EB8-721E-4F3C-A12C-34C33645F4AA}] => (Allow) C:\Program Files\HP\HP Officejet 6700\Bin\DeviceSetup.exe
FirewallRules: [{8478B8DE-38F7-4608-B84F-15A89CCCF4D7}] => (Allow) C:\Program Files\HP\HP Officejet 6700\bin\SendAFax.exe
FirewallRules: [{8D209263-84F7-4FE6-B69E-868302C09FD2}] => (Allow) C:\Program Files\HP\HP Officejet 6700\bin\DigitalWizards.exe
FirewallRules: [{3827FB5E-BF15-4667-9A6F-FF5A3112D939}] => (Allow) C:\Program Files\HP\HP Officejet 6700\bin\FaxApplications.exe
FirewallRules: [{7DB26FD5-0ED8-4977-B3AE-74BC78F74905}] => (Allow) D:\Spiele\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{B9C5D61E-29CD-43E9-9445-093116FC9FC8}] => (Allow) D:\Spiele\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{20947C9C-C050-4E24-ACE3-A9192112A63A}] => (Allow) D:\Spiele\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{3555AFC8-175C-4A2E-B148-CC93257FCED2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{D0D54C33-B40E-4A4D-BBA6-C10B67E8D7D7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{88F4AE15-7AAB-4B72-BEC4-9C72D67F7A88}] => (Allow) D:\Spiele\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [UDP Query User{10132D8F-7597-4747-9782-0BFFDD89409C}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [TCP Query User{7B5AAE01-E32C-41F9-85E7-F96EAD837CB8}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{05E2912F-1FB3-4D2D-B26F-731F9C4972A1}] => (Allow) D:\Spiele\Steam\SteamApps\common\mark_of_the_ninja\bin\game.exe
FirewallRules: [{E9182879-663A-4583-AC43-287F507628A2}] => (Allow) D:\Spiele\Steam\SteamApps\common\mark_of_the_ninja\bin\game.exe
FirewallRules: [{F4512911-456B-4408-9148-46ED2516F2E2}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{DB1D0129-9430-4B7A-A461-18021DEE16BD}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{CB685B40-307C-4D72-82A9-2C5D9C1300FD}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{15548B49-43E5-471A-931A-2699DE5B0C2A}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{95590C03-1640-4DFA-88D5-77BEC88C5CAB}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{62EE0961-BA3D-4D95-9334-21F2BADA5749}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{BB5826E7-2A22-4527-A02E-B9188881C9CC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{522D8F47-7A69-4C86-8D0A-3B96A5BA7490}] => (Allow) D:\Spiele\Steam\Steam.exe
FirewallRules: [{5A635D4F-1529-4FD1-87C0-0B9C1FAAA69A}] => (Allow) D:\Spiele\Steam\Steam.exe
FirewallRules: [{347A10AF-F98B-4779-B70B-3F025D418E11}] => (Allow) D:\Dateien\uTorrent\uTorrent.exe
FirewallRules: [{CF3A864B-8FB3-4AA1-A68D-7373BD05BB5D}] => (Allow) D:\Dateien\uTorrent\uTorrent.exe
FirewallRules: [{CAE2BF93-7E85-46CB-9CEA-5A4A49612521}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C72CC072-C3AB-4D93-AE47-0CC79584F85E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{688477AC-2BC2-432D-BB5F-610B8EE78714}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{7E712ACE-081E-4A1D-A7DB-1DA6AA724707}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{F4ED5D7F-A38F-4D71-BF80-C1EEA149F559}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{DC2D9DB8-5B41-4D64-9AB6-C65C58B1EC1F}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{72C456E5-DAA4-431D-9980-04CFD84D8BE1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{9AFD8555-084C-4CAB-9EFB-79460318035D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Baldur's Gate II Enhanced Edition\Baldur.exe
FirewallRules: [{F6A0F5F8-3587-467B-9152-066807ADBFC3}] => (Allow) D:\Spiele\Steam\SteamApps\common\Baldur's Gate II Enhanced Edition\Baldur.exe
FirewallRules: [TCP Query User{6CFE4AB8-AACC-4D53-BDE9-4B7B1DC85A49}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe
FirewallRules: [UDP Query User{70BA62A2-5F2E-4255-A782-5AC9112EBBCF}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe
FirewallRules: [{C8F2300C-DFA2-4270-8E8F-A07F00192E4C}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{D9575063-E67C-4168-A0F9-EC0C4BA3A36D}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{C3F3315C-1356-4F3B-9F77-FE5B9DE9966A}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{6C2CB2BE-9CBB-42C8-B541-075309D8621E}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{FB27EE1E-1789-4ECE-B224-B3F27B5E82FE}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{D8C55077-E30F-4B93-B5F6-02699B7E744F}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{0A7AC2B9-D334-4A5F-BAD8-BBBA43FAEF85}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/20/2015 01:15:39 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (09/20/2015 01:15:39 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (09/20/2015 01:15:29 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (09/20/2015 01:15:29 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (09/20/2015 01:15:18 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (09/20/2015 01:15:18 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (09/20/2015 01:15:08 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (09/20/2015 01:15:08 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.

Error: (09/20/2015 01:14:58 PM) (Source: ESENT) (EventID: 413) (User: )
Description: SettingSyncHost (376) Es konnte keine neue Protokolldatei erstellt werden, weil die Datenbank nicht auf das Protokolllaufwerk schreiben kann. Das Laufwerk ist möglicherweise schreibgeschützt, falsch konfiguriert, beschädigt oder hat zu wenig freien Speicherplatz. Fehler -1032.

Error: (09/20/2015 01:14:58 PM) (Source: ESENT) (EventID: 488) (User: )
Description: SettingSyncHost (376) Der Versuch, die Datei "C:\WINDOWS\system32\edbtmp.log" zu erstellen, ist mit Systemfehler 5 (0x00000005): "Zugriff verweigert " fehlgeschlagen. Fehler -1032 (0xfffffbf8) beim Erstellen von Dateien.


Systemfehler:
=============
Error: (09/20/2015 12:34:21 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5

Error: (09/20/2015 12:33:57 AM) (Source: DCOM) (EventID: 10010) (User: SOL-PC)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca

Error: (09/20/2015 12:33:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/20/2015 12:33:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/20/2015 12:33:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/20/2015 12:33:54 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_Session2" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (09/19/2015 08:26:00 PM) (Source: Microsoft-Windows-WindowsUpdateClient) (EventID: 20) (User: NT-AUTORITÄT)
Description: Installationsfehler: Die Installation des folgenden Updates ist mit Fehler 0x80070490 fehlgeschlagen: HP - Enterprise WSD Multi-Function Printer, Other hardware - Null Fax - HP Officejet 4630 series

Error: (09/19/2015 01:15:37 PM) (Source: DCOM) (EventID: 10016) (User: SOL-PC)
Description: ComputerstandardLokalAktivierung{C2F03A33-21F5-47FA-B4BB-156362A2F239}{316CDED5-E4AE-4B15-9113-7055D84DCC97}SOL-PCdieFackelS-1-5-21-2542595381-3183390579-2223026719-1000LocalHost (unter Verwendung von LRPC)Microsoft.WindowsStore_2015.9.9.0_x64__8wekyb3d8bbweS-1-15-2-1609473798-1231923017-684268153-4268514328-882773646-2760585773-1760938157

Error: (09/19/2015 04:20:49 AM) (Source: Microsoft-Windows-Kernel-Power) (EventID: 137) (User: )
Description: 5

Error: (09/19/2015 04:20:20 AM) (Source: DCOM) (EventID: 10010) (User: SOL-PC)
Description: CortanaUI.AppXd4tad4d57t4wtdbnnmb8v2xtzym8c1n8.mca


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 955 Processor
Prozentuale Nutzung des RAM: 49%
Installierter physikalischer RAM: 8188.52 MB
Verfügbarer physikalischer RAM: 4158.71 MB
Summe virtueller Speicher: 16380.52 MB
Verfügbarer virtueller Speicher: 11185.61 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:24.16 GB) NTFS
Drive d: () (Fixed) (Total:931.41 GB) (Free:299.71 GB) NTFS
Drive e: (Civilization Beyond Earth) (CDROM) (Total:2.88 GB) (Free:0 GB) UDF

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 6B841FED)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9DEED671)
Partition 1: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         


Alt 20.09.2015, 17:54   #6
dieFackel
 
Malware Befall? - Standard

Malware Befall?



OTL 1/2
Code:
ATTFilter
OTL logfile created on: 20.09.2015 14:12:03 - Run 1
OTL by OldTimer - Version 3.2.69.0     Folder = C:\Users\dieFackel\Desktop
64bit- An unknown product  (Version = 6.2.9200) - Type = NTWorkstation
Internet Explorer (Version = 9.11.10240.16384)
Locale: 00000407 | Country: Deutschland | Language: DEU | Date Format: dd.MM.yyyy
 
8,00 Gb Total Physical Memory | 4,10 Gb Available Physical Memory | 51,24% Memory free
16,00 Gb Paging File | 11,46 Gb Available in Paging File | 71,62% Paging File free
Paging file location(s): ?:\pagefile.sys [binary data]
 
%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)
Drive C: | 119,14 Gb Total Space | 24,30 Gb Free Space | 20,40% Space Free | Partition Type: NTFS
Drive D: | 931,41 Gb Total Space | 117,87 Gb Free Space | 12,65% Space Free | Partition Type: NTFS
Drive E: | 2,88 Gb Total Space | 0,00 Gb Free Space | 0,00% Space Free | Partition Type: UDF
 
Computer Name: SOL-PC | User Name: dieFackel | Logged in as Administrator.
Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans
Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 60 Days
 
========== Processes (SafeList) ==========
 
PRC -  File not found
PRC - C:\Users\dieFackel\Desktop\OTL.exe (OldTimer Tools)
PRC - C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
PRC - C:\Program Files (x86)\Mozilla Firefox\firefox.exe (Mozilla Corporation)
PRC - D:\Spiele\Steam\Steam.exe (Valve Corporation)
PRC - D:\Spiele\Steam\bin\steamwebhelper.exe (Valve Corporation)
PRC - C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_18_0_0_232.exe (Adobe Systems, Inc.)
PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
PRC - C:\Programme\AVAST Software\Avast\avastui.exe (Avast Software s.r.o.)
PRC - C:\Programme\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
PRC - C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamresearch.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbam.exe (Malwarebytes Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
PRC - C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation)
PRC - C:\Windows\SysWOW64\SecUPDUtilSvc.exe ()
PRC - C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe (ROCCAT GmbH)
PRC - C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
PRC - C:\Program Files (x86)\Secunia\PSI\sua.exe (Secunia)
PRC - C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
PRC - C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe (ROCCAT GmbH)
PRC - C:\Windows\SysWOW64\XSrvSetup.exe ()
PRC - C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe (Ralink Technology, Corp.)
PRC - C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
PRC - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
PRC - C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE ()
 
 
========== Modules (No Company Name) ==========
 
MOD - D:\Spiele\Steam\video.dll ()
MOD - D:\Spiele\Steam\bin\chromehtml.dll ()
MOD - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll ()
MOD - D:\Spiele\Steam\bin\openvr_api.dll ()
MOD - D:\Spiele\Steam\v8.dll ()
MOD - D:\Spiele\Steam\bin\libcef.dll ()
MOD - D:\Spiele\Steam\icui18n.dll ()
MOD - D:\Spiele\Steam\icuuc.dll ()
MOD - D:\Spiele\Steam\SDL2.dll ()
MOD - C:\Programme\AVAST Software\Avast\libcef.dll ()
MOD - C:\Programme\AVAST Software\Avast\log.dll ()
MOD - C:\Programme\AVAST Software\Avast\JsonRpcServer.dll ()
MOD - C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll ()
MOD - D:\Spiele\Steam\libavcodec-56.dll ()
MOD - D:\Spiele\Steam\libswscale-3.dll ()
MOD - D:\Spiele\Steam\libavformat-56.dll ()
MOD - D:\Spiele\Steam\libavutil-54.dll ()
MOD - D:\Spiele\Steam\libavresample-2.dll ()
MOD - C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll ()
MOD - C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll ()
MOD - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\sqlite3.dll ()
 
 
========== Services (SafeList) ==========
 
SRV:64bit: - (NetSetupSvc) -- C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)
SRV:64bit: - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)
SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)
SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)
SRV:64bit: - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)
SRV:64bit: - (icssvc) -- C:\Windows\SysNative\tetheringservice.dll (Microsoft Corporation)
SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)
SRV:64bit: - (RetailDemo) -- C:\Windows\SysNative\RDXService.dll (Microsoft Corporation)
SRV:64bit: - (SensorDataService) -- C:\Windows\SysNative\SensorDataService.exe (Microsoft Corporation)
SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)
SRV:64bit: - (UserDataSvc) -- C:\Windows\SysNative\UserDataService.dll (Microsoft Corporation)
SRV:64bit: - (UnistoreSvc) -- C:\Windows\SysNative\Unistore.dll (Microsoft Corporation)
SRV:64bit: - (DoSvc) -- C:\Windows\SysNative\dosvc.dll (Microsoft Corporation)
SRV:64bit: - (UsoSvc) -- C:\Windows\SysNative\usocore.dll (Microsoft Corporation)
SRV:64bit: - (SensorService) -- C:\Windows\SysNative\SensorService.dll (Microsoft Corporation)
SRV:64bit: - (CoreMessagingRegistrar) -- C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)
SRV:64bit: - (ClipSVC) -- C:\Windows\SysNative\ClipSVC.dll (Microsoft Corporation)
SRV:64bit: - (w3logsvc) -- C:\Windows\SysNative\inetsrv\w3logsvc.dll (Microsoft Corporation)
SRV:64bit: - (MSMQ) -- C:\Windows\SysNative\mqsvc.exe (Microsoft Corporation)
SRV:64bit: - (tiledatamodelsvc) -- C:\Windows\SysNative\tileobjserver.dll (Microsoft Corporation)
SRV:64bit: - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation)
SRV:64bit: - (WalletService) -- C:\Windows\SysNative\WalletService.dll (Microsoft Corporation)
SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)
SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)
SRV:64bit: - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation)
SRV:64bit: - (IEEtwCollectorService) -- C:\WINDOWS\SysNative\IEEtwCollector.exe (Microsoft Corporation)
SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)
SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)
SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\bisrv.dll (Microsoft Corporation)
SRV:64bit: - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation)
SRV:64bit: - (PimIndexMaintenanceSvc) -- C:\Windows\SysNative\PimIndexMaintenance.dll (Microsoft Corporation)
SRV:64bit: - (WpnService) -- C:\Windows\SysNative\wpnservice.dll (Microsoft Corporation)
SRV:64bit: - (DevQueryBroker) -- C:\Windows\SysNative\DevQueryBroker.dll (Microsoft Corporation)
SRV:64bit: - (lfsvc) -- C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)
SRV:64bit: - (StateRepository) -- C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)
SRV:64bit: - (XblGameSave) -- C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)
SRV:64bit: - (XboxNetApiSvc) -- C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)
SRV:64bit: - (NgcSvc) -- C:\Windows\SysNative\ngcsvc.dll (Microsoft Corporation)
SRV:64bit: - (NgcCtnrSvc) -- C:\Windows\SysNative\NgcCtnrSvc.dll (Microsoft Corporation)
SRV:64bit: - (MapsBroker) -- C:\Windows\SysNative\moshost.dll (Microsoft Corporation)
SRV:64bit: - (AJRouter) -- C:\Windows\SysNative\AJRouter.dll (Microsoft Corporation)
SRV:64bit: - (LicenseManager) -- C:\Windows\SysNative\LicenseManagerSvc.dll (Microsoft Corporation)
SRV:64bit: - (CDPSvc) -- C:\Windows\SysNative\cdpsvc.dll (Microsoft Corporation)
SRV:64bit: - (embeddedmode) -- C:\Windows\SysNative\embeddedmodesvc.dll (Microsoft Corporation)
SRV:64bit: - (WSService) -- C:\Windows\SysNative\WSService.dll (Microsoft Corporation)
SRV:64bit: - (XblAuthManager) -- C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)
SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)
SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)
SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)
SRV:64bit: - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation)
SRV:64bit: - (UserManager) -- C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)
SRV:64bit: - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation)
SRV:64bit: - (OneSyncSvc) -- C:\Windows\SysNative\APHostService.dll (Microsoft Corporation)
SRV:64bit: - (DcpSvc) -- C:\Windows\SysNative\dcpsvc.dll (Microsoft Corporation)
SRV:64bit: - (diagnosticshub.standardcollector.service) -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (Microsoft Corporation)
SRV:64bit: - (DsSvc) -- C:\Windows\SysNative\dssvc.dll (Microsoft Corporation)
SRV:64bit: - (UserDataSvc_Session3) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
SRV:64bit: - (UnistoreSvc_Session3) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
SRV:64bit: - (PimIndexMaintenanceSvc_Session3) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
SRV:64bit: - (OneSyncSvc_Session3) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)
SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)
SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)
SRV:64bit: - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation)
SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)
SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)
SRV:64bit: - (EntAppSvc) -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll (Microsoft Corporation)
SRV:64bit: - (DmEnrollmentSvc) -- C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)
SRV:64bit: - (dmwappushservice) -- C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)
SRV:64bit: - (SmsRouter) -- C:\Windows\SysNative\SmsRouterSvc.dll (Microsoft Corporation)
SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)
SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (TimeBroker) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)
SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicvmsession) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)
SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV:64bit: - (BthHFSrv) -- C:\Windows\SysNative\BthHFSrv.dll (Microsoft Corporation)
SRV:64bit: - (AppleChargerSrv) -- C:\Windows\SysNative\AppleChargerSrv.exe ()
SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)
SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)
SRV - (AdobeFlashPlayerUpdateSvc) -- C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated)
SRV - (UnistoreSvc) -- C:\Windows\SysWOW64\Unistore.dll (Microsoft Corporation)
SRV - (CoreMessagingRegistrar) -- C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)
SRV - (WAS) -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (W3SVC) -- C:\Windows\SysWOW64\inetsrv\iisw3adm.dll (Microsoft Corporation)
SRV - (w3logsvc) -- C:\Windows\SysWOW64\inetsrv\w3logsvc.dll (Microsoft Corporation)
SRV - (AppHostSvc) -- C:\Windows\SysWOW64\inetsrv\apphostsvc.dll (Microsoft Corporation)
SRV - (Hamachi2Svc) -- D:\Dateien\LogMeIn Hamachi\hamachi-2.exe (LogMeIn Inc.)
SRV - (BEService) -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe ()
SRV - (Origin Client Service) -- D:\Spiele\Origin\OriginClientService.exe (Electronic Arts)
SRV - (GalaxyClientService) -- D:\Spiele\GalaxyClient\GalaxyClientService.exe (GOG.com)
SRV - (GalaxyCommunication) -- C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe (GOG.com)
SRV - (lfsvc) -- C:\Windows\SysWOW64\lfsvc.dll (Microsoft Corporation)
SRV - (StateRepository) -- C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)
SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation)
SRV - (DmEnrollmentSvc) -- C:\Windows\SysWOW64\Windows.Internal.Management.dll (Microsoft Corporation)
SRV - (PrintNotify) -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)
SRV - (SkypeUpdate) -- C:\Program Files (x86)\Skype\Updater\Updater.exe (Skype Technologies)
SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Systems Incorporated)
SRV - (avast! Antivirus) -- C:\Programme\AVAST Software\Avast\AvastSvc.exe (Avast Software s.r.o.)
SRV - (MBAMService) -- C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe (Malwarebytes Corporation)
SRV - (Sony PC Companion) -- C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe (Avanquest Software)
SRV - (Stereo Service) -- C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (NVIDIA Corporation)
SRV - (NvNetworkService) -- C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation)
SRV - (GfExperienceService) -- C:\Programme\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation)
SRV - (NvStreamSvc) -- C:\Programme\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (NVIDIA Corporation)
SRV - (SamsungUPDUtilSvc) -- C:\Windows\SysWOW64\SecUPDUtilSvc.exe ()
SRV - (BRSptStub) -- C:\ProgramData\BitRaider\BRSptStub.exe (BitRaider, LLC)
SRV - (TunngleService) -- C:\Program Files (x86)\Tunngle\TnglCtrl.exe (Tunngle.net GmbH)
SRV - (Secunia PSI Agent) -- C:\Program Files (x86)\Secunia\PSI\PSIA.exe (Secunia)
SRV - (Secunia Update Agent) -- C:\Program Files (x86)\Secunia\PSI\sua.exe (Secunia)
SRV - (JMB36X) -- C:\Windows\SysWOW64\XSrvSetup.exe ()
SRV - (RalinkRegistryWriter64) -- C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe (Ralink Technology, Corp.)
SRV - (RalinkRegistryWriter) -- C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe (Ralink Technology, Corp.)
SRV - (BCUService) -- C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCUService.exe (DeviceVM, Inc.)
SRV - (ES lite Service) -- C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE ()
 
 
========== Driver Services (SafeList) ==========
 
DRV:64bit: - (MBAMSwissArmy) -- C:\Windows\SysNative\drivers\MBAMSwissArmy.sys (Malwarebytes Corporation)
DRV:64bit: - (owahm) -- C:\Windows\SysNative\drivers\ggpcixbf.sys (Malwarebytes Corporation)
DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)
DRV:64bit: - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation)
DRV:64bit: - (ReFSv1) -- C:\WINDOWS\SysNative\drivers\refsv1.sys (Microsoft Corporation)
DRV:64bit: - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation)
DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)
DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\drivers\bthhfenum.sys (Microsoft Corporation)
DRV:64bit: - (UcmUcsi) -- C:\Windows\SysNative\drivers\UcmUcsi.sys (Microsoft Corporation)
DRV:64bit: - (MQAC) -- C:\Windows\SysNative\drivers\mqac.sys (Microsoft Corporation)
DRV:64bit: - (Wof) -- C:\WINDOWS\SysNative\drivers\wof.sys (Microsoft Corporation)
DRV:64bit: - (wdiwifi) -- C:\Windows\SysNative\drivers\WdiWiFi.sys (Microsoft Corporation)
DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)
DRV:64bit: - (hamachi) -- C:\Windows\SysNative\drivers\Hamdrv.sys (LogMeIn Inc.)
DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)
DRV:64bit: - (wpcfltr) -- C:\Windows\SysNative\drivers\wpcfltr.sys (Microsoft Corporation)
DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)
DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)
DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)
DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)
DRV:64bit: - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation)
DRV:64bit: - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)
DRV:64bit: - (WindowsTrustedRT) -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys (Microsoft Corporation)
DRV:64bit: - (UcmCx0101) -- C:\Windows\SysNative\drivers\UcmCx.sys (Microsoft Corporation)
DRV:64bit: - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation)
DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)
DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)
DRV:64bit: - (storqosflt) -- C:\Windows\SysNative\drivers\storqosflt.sys (Microsoft Corporation)
DRV:64bit: - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation)
DRV:64bit: - (IoQos) -- C:\Windows\SysNative\drivers\ioqos.sys (Microsoft Corporation)
DRV:64bit: - (MMCSS) -- C:\Windows\SysNative\drivers\mmcss.sys (Microsoft Corporation)
DRV:64bit: - (Ufx01000) -- C:\Windows\SysNative\drivers\ufx01000.sys (Microsoft Corporation)
DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)
DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)
DRV:64bit: - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation)
DRV:64bit: - (UrsCx01000) -- C:\Windows\SysNative\drivers\urscx01000.sys (Microsoft Corporation)
DRV:64bit: - (cnghwassist) -- C:\Windows\SysNative\drivers\cnghwassist.sys (Microsoft Corporation)
DRV:64bit: - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)
DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)
DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)
DRV:64bit: - (GpuEnergyDrv) -- C:\Windows\SysNative\drivers\gpuenergydrv.sys (Microsoft Corporation)
DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)
DRV:64bit: - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation)
DRV:64bit: - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)
DRV:64bit: - (WdNisDrv) -- C:\Windows\SysNative\drivers\WdNisDrv.sys (Microsoft Corporation)
DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation)
DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\drivers\WdFilter.sys (Microsoft Corporation)
DRV:64bit: - (Ucx01000) -- C:\Windows\SysNative\drivers\Ucx01000.sys (Microsoft Corporation)
DRV:64bit: - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation)
DRV:64bit: - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation)
DRV:64bit: - (FileCrypt) -- C:\Windows\SysNative\drivers\filecrypt.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)
DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\drivers\WdBoot.sys (Microsoft Corporation)
DRV:64bit: - (UdeCx) -- C:\Windows\SysNative\drivers\Udecx.sys ()
DRV:64bit: - (vhf) -- C:\Windows\SysNative\drivers\vhf.sys (Microsoft Corporation)
DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)
DRV:64bit: - (UrsChipidea) -- C:\Windows\SysNative\drivers\urschipidea.sys (Microsoft Corporation)
DRV:64bit: - (UrsSynopsys) -- C:\Windows\SysNative\drivers\urssynopsys.sys (Microsoft Corporation)
DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)
DRV:64bit: - (WindowsTrustedRTProxy) -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys (Microsoft Corporation)
DRV:64bit: - (mlx4_bus) -- C:\Windows\SysNative\drivers\mlx4_bus.sys (Mellanox)
DRV:64bit: - (rt640x64) -- C:\Windows\SysNative\drivers\rt640x64.sys (Realtek                                            )
DRV:64bit: - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation)
DRV:64bit: - (ibbus) -- C:\Windows\SysNative\drivers\ibbus.sys (Mellanox)
DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)
DRV:64bit: - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation)
DRV:64bit: - (ufxsynopsys) -- C:\Windows\SysNative\drivers\ufxsynopsys.sys (Microsoft Corporation)
DRV:64bit: - (UfxChipidea) -- C:\Windows\SysNative\drivers\UfxChipidea.sys (Microsoft Corporation)
DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation)
DRV:64bit: - (ndfltr) -- C:\Windows\SysNative\drivers\ndfltr.sys (Mellanox)
DRV:64bit: - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)
DRV:64bit: - (WinVerbs) -- C:\Windows\SysNative\drivers\winverbs.sys (Mellanox)
DRV:64bit: - (percsas3i) -- C:\Windows\SysNative\drivers\percsas3i.sys (Avago Technologies)
DRV:64bit: - (percsas2i) -- C:\Windows\SysNative\drivers\percsas2i.sys (LSI Corporation)
DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\drivers\BasicDisplay.sys (Microsoft Corporation)
DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\drivers\BasicRender.sys (Microsoft Corporation)
DRV:64bit: - (storufs) -- C:\Windows\SysNative\drivers\storufs.sys (Microsoft Corporation)
DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)
DRV:64bit: - (UEFI) -- C:\Windows\SysNative\drivers\uefi.sys (Microsoft Corporation)
DRV:64bit: - (WinMad) -- C:\Windows\SysNative\drivers\winmad.sys (Mellanox)
DRV:64bit: - (swenum) -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys (Microsoft Corporation)
DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (QLogic Corporation)
DRV:64bit: - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra)
DRV:64bit: - (iaStorAV) -- C:\Windows\SysNative\drivers\iaStorAV.sys (Intel Corporation)
DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (Broadcom Corporation)
DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)
DRV:64bit: - (xboxgip) -- C:\Windows\SysNative\drivers\xboxgip.sys (Microsoft Corporation)
DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)
DRV:64bit: - (CapImg) -- C:\Windows\SysNative\drivers\capimg.sys (Microsoft Corporation)
DRV:64bit: - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI)
DRV:64bit: - (LSI_SAS2i) -- C:\Windows\SysNative\drivers\lsi_sas2i.sys (LSI Corporation)
DRV:64bit: - (LSI_SAS3i) -- C:\Windows\SysNative\drivers\lsi_sas3i.sys (Avago Technologies)
DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation)
DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)
DRV:64bit: - (dc1-controller) -- C:\Windows\SysNative\drivers\dc1-controller.sys (Microsoft Corp.)
DRV:64bit: - (hidinterrupt) -- C:\Windows\SysNative\drivers\hidinterrupt.sys (Microsoft Corporation)
DRV:64bit: - (buttonconverter) -- C:\Windows\SysNative\drivers\buttonconverter.sys (Microsoft Corporation)
DRV:64bit: - (xinputhid) -- C:\Windows\SysNative\drivers\xinputhid.sys (Microsoft Corporation)
DRV:64bit: - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation)
DRV:64bit: - (genericusbfn) -- C:\Windows\SysNative\drivers\genericusbfn.sys (Microsoft Corporation)
DRV:64bit: - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)
DRV:64bit: - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation)
DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation)
DRV:64bit: - (StillCam) -- C:\Windows\SysNative\drivers\serscan.sys (Microsoft Corporation)
DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)
DRV:64bit: - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)
DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)
DRV:64bit: - (netvsc) -- C:\Windows\SysNative\drivers\netvsc.sys (Microsoft Corporation)
DRV:64bit: - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation)
DRV:64bit: - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation)
DRV:64bit: - (Synth3dVsc) -- C:\Windows\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation)
DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation)
DRV:64bit: - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation)
DRV:64bit: - (BthAvrcpTg) -- C:\Windows\SysNative\drivers\BthAvrcpTg.sys (Microsoft Corporation)
DRV:64bit: - (CompositeBus) -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys (Microsoft Corporation)
DRV:64bit: - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)
DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)
DRV:64bit: - (fcvsc) -- C:\Windows\SysNative\drivers\fcvsc.sys (Microsoft Corporation)
DRV:64bit: - (bthhfhid) -- C:\Windows\SysNative\drivers\BthhfHid.sys (Microsoft Corporation)
DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)
DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)
DRV:64bit: - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)
DRV:64bit: - (aswSP) -- C:\Windows\SysNative\drivers\aswSP.sys (Avast Software s.r.o.)
DRV:64bit: - (aswStm) -- C:\Windows\SysNative\drivers\aswStm.sys (Avast Software s.r.o.)
DRV:64bit: - (aswVmm) -- C:\WINDOWS\SysNative\drivers\aswVmm.sys ()
DRV:64bit: - (aswMonFlt) -- C:\Windows\SysNative\drivers\aswMonFlt.sys (Avast Software s.r.o.)
DRV:64bit: - (aswRvrt) -- C:\WINDOWS\SysNative\drivers\aswRvrt.sys ()
DRV:64bit: - (aswHwid) -- C:\Windows\SysNative\drivers\aswHwid.sys ()
DRV:64bit: - (aswRdr) -- C:\Windows\SysNative\drivers\aswRdr2.sys (Avast Software s.r.o.)
DRV:64bit: - (aswSnx) -- C:\Windows\SysNative\drivers\aswSnx.sys (Avast Software s.r.o.)
DRV:64bit: - (MBAMWebAccessControl) -- C:\Windows\SysNative\drivers\mwac.sys (Malwarebytes Corporation)
DRV:64bit: - (MBAMProtector) -- C:\Windows\SysNative\drivers\mbam.sys (Malwarebytes Corporation)
DRV:64bit: - (netr28x) -- C:\Windows\SysNative\drivers\netr28x.sys (MediaTek Inc.)
DRV:64bit: - (atksgt) -- C:\Windows\SysNative\drivers\atksgt.sys ()
DRV:64bit: - (lirsgt) -- C:\Windows\SysNative\drivers\lirsgt.sys ()
DRV:64bit: - (nvvad_WaveExtensible) -- C:\Windows\SysNative\drivers\nvvad64v.sys (NVIDIA Corporation)
DRV:64bit: - (VBoxNetAdp) -- C:\Windows\SysNative\drivers\VBoxNetAdp.sys (Oracle Corporation)
DRV:64bit: - (tap0901) -- C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)
DRV:64bit: - (VClone) -- C:\Windows\SysNative\drivers\VClone.sys (Elaborate Bytes AG)
DRV:64bit: - (PSI) -- C:\Windows\SysNative\drivers\psi_mf_amd64.sys (Secunia)
DRV:64bit: - (taphss6) -- C:\Windows\SysNative\drivers\taphss6.sys (Anchorfree Inc.)
DRV:64bit: - (ElbyCDIO) -- C:\Windows\SysNative\drivers\ElbyCDIO.sys (Elaborate Bytes AG)
DRV:64bit: - (AppleCharger) -- C:\Windows\SysNative\drivers\AppleCharger.sys ()
DRV:64bit: - (JRAID) -- C:\Windows\SysNative\drivers\jraid.sys (JMicron Technology Corp.)
DRV:64bit: - (usbfilter) -- C:\Windows\SysNative\drivers\usbfilter.sys (Advanced Micro Devices)
DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)
DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)
DRV:64bit: - (tap0901t) -- C:\Windows\SysNative\drivers\tap0901t.sys (Tunngle.net)
DRV:64bit: - (AtiPcie) -- C:\Windows\SysNative\drivers\AtiPcie.sys (Advanced Micro Devices Inc.)
DRV - (gdrv) -- C:\Windows\gdrv.sys (Windows (R) Server 2003 DDK provider)
DRV - (swenum) -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_2a699e44676b7781\swenum.sys (Microsoft Corporation)
DRV - (CompositeBus) -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_98334ba6e76853ba\CompositeBus.sys (Microsoft Corporation)
DRV - (NvStreamKms) -- C:\Programme\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys (NVIDIA Corporation)
DRV - (BRDriver64_1_3_3_E02B25FC) -- C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys (BitRaider)
DRV - (GVTDrv64) -- C:\Windows\GVTDrv64.sys ()
 
 
========== Standard Registry (SafeList) ==========
 
 
========== Internet Explorer ==========
 
IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm
IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}
IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC
 
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache AcceptLangs = de-DE
IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page Redirect Cache_TIMESTAMP = 67 87 FD 97 56 9C CE 01  [binary data]
IE - HKCU\..\URLSearchHook: {BC86E1AB-EDA5-4059-938F-CE307B0C6F0A} - C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\AddressBarSearch.dll (DeviceVM, Inc.)
IE - HKCU\..\SearchScopes,DefaultScope = {888255F5-E5F4-4626-9D68-92C58086424C}
IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02
IE - HKCU\..\SearchScopes\{62DB5B0D-4BDE-42ab-9009-2B3B3B097939}: "URL" = hxxp://www.google.com/custom?client=pub-3794288947762788&forid=1&channel=1975384696&ie=UTF-8&oe=UTF-8&safe=active&cof=GALT%3A%23008000%3BGL%3A1%3BDIV%3A%23336699%3BVLC%3A663399%3BAH%3Acenter%3BBGC%3AFFFFFF%3BLBGC%3A336699%3BALC%3A0000FF%3BLC%3A0000FF%3BT%3A000000%3BGFNT%3A0000FF%3BGIMP%3A0000FF%3BFORID%3A1&hl=de&q={searchTerms}
IE - HKCU\..\SearchScopes\{888255F5-E5F4-4626-9D68-92C58086424C}: "URL" = hxxp://de.search.yahoo.com/search?p={searchTerms}&fr=chr-devicevm&type=IEBD
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0
IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyOverride" = <local>
 
========== FireFox ==========
 
FF - prefs.js..browser.search.countryCode: "DE"
FF - prefs.js..browser.search.hiddenOneOffs: "Yahoo,Amazon.de,Bing,DuckDuckGo,eBay,Wikipedia (de),Twitter,Divinity Wiki (en),1&1 Suche,Englische Ergebnisse,GMX Suche,WEB.DE Bilder-Suche,WEB.DE Maps-Suche,WEB.DE Suche"
FF - prefs.js..browser.search.isUS: false
FF - prefs.js..browser.search.region: "DE"
FF - prefs.js..browser.search.useDBForOrder: true
FF - prefs.js..browser.startup.homepage: "Twitter.com"
FF - prefs.js..extensions.enabledAddons: %7Ba5312b79-bf0d-4825-a25f-b33d67d4a58a%7D:13.15.63.1-signed
FF - prefs.js..extensions.enabledAddons: %7Ba0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7%7D:20150708
FF - prefs.js..extensions.enabledAddons: %7B77d2ed30-4cd2-11e0-b8af-0800200c9a66%7D:13.0.2
FF - prefs.js..network.proxy.autoconfig_url: "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF - prefs.js..network.proxy.type: 2
 
 
FF:64bit: - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll File not found
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.0.7: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=2.1.5: C:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)
FF - HKLM\Software\MozillaPlugins\@adobe.com/FlashPlayer: C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll ()
FF - HKLM\Software\MozillaPlugins\@Google.com/GoogleEarthPlugin: C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll (Google)
FF - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.60.2: C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll (Oracle Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVision: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@nvidia.com/3DVisionStreaming: C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=3: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\@tools.google.com/Google Update;version=9: C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll (Google Inc.)
FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
FF - HKCU\Software\MozillaPlugins\ubisoft.com/uplaypc: C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll ()
 
FF - HKEY_LOCAL_MACHINE\software\mozilla\Firefox\Extensions\\wrc@avast.com: C:\Program Files\AVAST Software\Avast\WebRep\FF [2015.09.18 19:13:09 | 000,000,000 | ---D | M]
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Components: C:\Program Files (x86)\Mozilla Firefox\components
FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 40.0.3\extensions\\Plugins: C:\Program Files (x86)\Mozilla Firefox\plugins
 
[2013.08.18 23:06:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dieFackel\AppData\Roaming\mozilla\Extensions
[2015.09.19 20:08:19 | 000,000,000 | ---D | M] (No name found) -- C:\Users\dieFackel\AppData\Roaming\mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\extensions
[2015.08.25 19:30:39 | 000,000,000 | ---D | M] (FT DeepDark) -- C:\Users\dieFackel\AppData\Roaming\mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66}
[2015.07.10 11:33:39 | 000,000,000 | ---D | M] (WOT) -- C:\Users\dieFackel\AppData\Roaming\mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7}
[2015.09.19 20:08:19 | 001,548,404 | ---- | M] () (No name found) -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\extensions\firefox@ghostery.com.xpi
[2015.05.27 13:41:39 | 000,568,568 | ---- | M] () (No name found) -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi
[2015.05.30 01:24:40 | 000,050,455 | ---- | M] () (No name found) -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\extensions\{a5312b79-bf0d-4825-a25f-b33d67d4a58a}.xpi
[2015.07.28 21:27:01 | 000,963,213 | ---- | M] () (No name found) -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi
[2015.05.14 23:28:00 | 000,000,715 | ---- | M] () -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\searchplugins\divinity-wiki-en.xml
[2015.03.28 23:27:51 | 000,009,207 | ---- | M] () -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\searchplugins\twitter.xml
[2015.06.01 16:40:14 | 000,002,084 | ---- | M] () -- C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\searchplugins\youtube-videosuche.xml
[2015.08.28 00:16:15 | 000,000,000 | ---D | M] (No name found) -- C:\Program Files (x86)\mozilla firefox\browser\extensions
[2015.08.28 00:16:18 | 000,000,000 | ---D | M] (Default) -- C:\Program Files (x86)\mozilla firefox\browser\extensions\{972ce4c6-7e08-4474-a285-3208198ce6fd}
 
========== Chrome  ==========
 
CHR - Extension: No name found = C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki\10.2.0.190_0\
CHR - Extension: No name found = C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg\0.3.0.5_0\
CHR - Extension: No name found = C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.2.0_0\
 
O1 HOSTS File: ([2009.06.10 23:00:26 | 000,000,824 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts
O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE64.dll (Avast Software s.r.o.)
O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
O2:64bit: - BHO: (no name) - {F9E4A054-E9B1-4BC3-83A3-76A1AE736170} - No CLSID value found.
O2 - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll (Oracle Corporation)
O2 - BHO: (avast! Online Security) - {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} - C:\Programme\AVAST Software\Avast\aswWebRepIE.dll (Avast Software s.r.o.)
O2 - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll (Oracle Corporation)
O3:64bit: - HKLM\..\Toolbar: (no name) - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - No CLSID value found.
O4:64bit: - HKLM..\Run: [NvBackend] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation)
O4:64bit: - HKLM..\Run: [RTHDVCPL] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe (Realtek Semiconductor)
O4:64bit: - HKLM..\Run: [ShadowPlay] C:\WINDOWS\SysNative\nvspcap64.dll (NVIDIA Corporation)
O4 - HKLM..\Run: []  File not found
O4 - HKLM..\Run: [amd_dc_opt] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe (AMD)
O4 - HKLM..\Run: [AvastUI.exe] C:\Program Files\AVAST Software\Avast\AvastUI.exe (Avast Software s.r.o.)
O4 - HKLM..\Run: [BCU] C:\Program Files (x86)\DeviceVM\Browser Configuration Utility\BCU.exe (DeviceVM, Inc.)
O4 - HKLM..\Run: [JMB36X IDE Setup] C:\Windows\RaidTool\xInsIDE.exe ()
O4 - HKLM..\Run: [LogMeIn Hamachi Ui] D:\Dateien\LogMeIn Hamachi\hamachi-2-ui.exe (LogMeIn Inc.)
O4 - HKLM..\Run: [NUSB3MON] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe (NEC Electronics Corporation)
O4 - HKLM..\Run: [RoccatIsku] C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE (ROCCAT GmbH)
O4 - HKLM..\Run: [RoccatKoneXTD] C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE (ROCCAT GmbH)
O4 - HKLM..\Run: [VirtualCloneDrive] D:\Dateien\Programme\VirtualCloneDrive\VCDDaemon.exe (Elaborate Bytes AG)
O4 - HKCU..\Run: [CCleaner Monitoring] C:\Program Files\CCleaner\CCleaner64.exe (Piriform Ltd)
O4 - HKCU..\Run: [EADM] D:\Spiele\Origin\Origin.exe (Electronic Arts)
O4 - HKCU..\Run: [EvolveClient] D:\Dateien\Echobit\Evolve\EvolveClient.exe (Echobit LLC)
O4 - HKCU..\Run: [GalaxyClient] D:\Spiele\GalaxyClient\GalaxyClient.exe (GOG.com)
O4 - HKCU..\Run: [OneDrive] C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)
O4 - HKCU..\Run: [Sony PC Companion] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe (Sony)
O4 - HKLM..\RunOnce: [ Malwarebytes Anti-Malware  (cleanup)] C:\ProgramData\Malwarebytes\ Malwarebytes Anti-Malware \mbamdor.exe (Malwarebytes Corporation)
O4 - HKCU..\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64" File not found
O4 - HKCU..\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64" File not found
O4 - HKCU..\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64" File not found
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1
O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SoftwareSASGeneration = 1
O1364bit: - gopher Prefix: missing
O13 - gopher Prefix: missing
O16 - DPF: {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx (Dldrv2 Control)
O16 - DPF: {D27CDB6E-AE6D-11CF-96B8-444553540000} https://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab (Shockwave Flash Object)
O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{1e498d26-a69f-40b8-be95-ebbee9ff9f23}: DhcpNameServer = 192.168.1.1
O18:64bit: - Protocol\Handler\skype4com - No CLSID value found
O18:64bit: - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)
O18 - Protocol\Handler\skype4com {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\PROGRA~2\COMMON~1\Skype\SKYPE4~1.DLL (Skype Technologies)
O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\Windows\explorer.exe (Microsoft Corporation)
O20:64bit: - HKLM Winlogon: UserInit - (C:\Windows\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)
O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)
O20 - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysWOW64\userinit.exe (Microsoft Corporation)
O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.
O30:64bit: - LSA: Security Packages - (livessp) -  File not found
O30 - LSA: Security Packages - (livessp) -  File not found
O32 - HKLM CDRom: AutoRun - 1
O32 - AutoRun File - [2013.10.31 19:13:06 | 000,000,044 | R--- | M] () - E:\autorun.inf -- [ UDF ]
O34 - HKLM BootExecute: (autocheck autochk *)
O35:64bit: - HKLM\..comfile [open] -- "%1" %*
O35:64bit: - HKLM\..exefile [open] -- "%1" %*
O35 - HKLM\..comfile [open] -- "%1" %*
O35 - HKLM\..exefile [open] -- "%1" %*
O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*
O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*
O37 - HKLM\...com [@ = comfile] -- "%1" %*
O37 - HKLM\...exe [@ = exefile] -- "%1" %*
O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)
O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)
 
========== Files/Folders - Created Within 60 Days ==========
 
[2015.09.20 13:55:55 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
[2015.09.20 13:55:54 | 000,000,000 | ---D | C] -- C:\Program Files\CCleaner
[2015.09.20 13:55:04 | 000,602,112 | ---- | C] (OldTimer Tools) -- C:\Users\dieFackel\Desktop\OTL.exe
[2015.09.20 13:43:58 | 000,079,064 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\ggpcixbf.sys
[2015.09.20 13:35:19 | 000,113,880 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys
[2015.09.20 13:34:41 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
[2015.09.20 13:34:39 | 000,109,272 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mbamchameleon.sys
[2015.09.20 13:34:39 | 000,064,216 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mwac.sys
[2015.09.20 13:34:39 | 000,025,816 | ---- | C] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\mbam.sys
[2015.09.20 13:34:39 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\ Malwarebytes Anti-Malware 
[2015.09.20 13:34:39 | 000,000,000 | ---D | C] -- C:\ProgramData\Malwarebytes
[2015.09.19 02:33:10 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
[2015.09.18 19:13:17 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
[2015.09.18 19:13:10 | 000,364,472 | ---- | C] (Avast Software s.r.o.) -- C:\WINDOWS\SysNative\aswBoot.exe
[2015.09.18 19:10:10 | 000,000,000 | --SD | C] -- C:\WINDOWS\SysWow64\Microsoft
[2015.09.18 19:10:06 | 000,000,000 | ---D | C] -- C:\WINDOWS\Minidump
[2015.09.09 23:59:29 | 000,000,000 | --SD | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
[2015.09.09 14:54:19 | 021,874,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2015.09.09 14:54:19 | 018,806,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2015.09.09 14:54:16 | 002,350,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2015.09.09 14:54:16 | 001,774,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2015.09.09 14:54:15 | 003,586,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2015.09.09 14:54:15 | 002,153,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2015.09.09 14:54:15 | 001,612,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2015.09.09 14:54:14 | 000,826,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2015.09.09 14:54:14 | 000,650,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2015.09.09 14:54:14 | 000,608,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2015.09.09 14:54:14 | 000,596,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2015.09.09 14:54:14 | 000,578,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2015.09.09 14:54:14 | 000,541,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2015.09.09 14:54:14 | 000,484,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2015.09.09 14:54:13 | 001,382,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2015.09.09 14:54:13 | 000,576,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2015.09.09 14:54:13 | 000,365,568 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2015.09.09 14:54:13 | 000,303,104 | ---- | C] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2015.09.09 14:54:13 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.PicturePassword.dll
[2015.09.09 14:54:13 | 000,184,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shacct.dll
[2015.09.09 14:54:13 | 000,139,776 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\shacct.dll
[2015.09.09 14:54:13 | 000,077,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2015.09.09 14:54:12 | 000,045,568 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2015.09.09 14:54:12 | 000,037,376 | ---- | C] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2015.09.09 11:25:07 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
[2015.09.09 11:25:07 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Skype
[2015.09.09 11:25:06 | 000,000,000 | R--D | C] -- C:\Program Files (x86)\Skype
[2015.09.07 22:09:50 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParkControl
[2015.09.03 02:33:29 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\MicrosoftEdge
[2015.08.31 18:08:09 | 002,225,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2015.08.31 18:08:09 | 001,396,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2015.08.31 18:08:08 | 001,888,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2015.08.31 18:08:08 | 000,963,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2015.08.31 18:08:08 | 000,859,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2015.08.31 18:08:07 | 008,019,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2015.08.31 18:08:07 | 001,593,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2015.08.31 18:08:07 | 000,387,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupShim.dll
[2015.08.31 18:08:06 | 000,609,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2015.08.31 18:08:06 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupShim.dll
[2015.08.31 18:08:05 | 001,061,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2015.08.31 18:08:05 | 000,373,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2015.08.31 18:08:05 | 000,187,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
[2015.08.31 18:08:05 | 000,168,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
[2015.08.31 18:08:05 | 000,079,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthRadioMedia.dll
[2015.08.31 18:08:04 | 001,294,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcnwiz.dll
[2015.08.31 18:08:04 | 001,234,944 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2015.08.31 18:08:04 | 000,497,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2015.08.31 18:08:04 | 000,050,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnNetsh.dll
[2015.08.31 18:08:04 | 000,045,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2015.08.31 18:08:03 | 002,178,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2015.08.31 18:08:03 | 001,795,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2015.08.31 18:08:03 | 001,226,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wcnwiz.dll
[2015.08.31 18:08:03 | 000,193,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseModernAppMgmtCSP.dll
[2015.08.31 18:08:03 | 000,140,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll
[2015.08.31 18:08:03 | 000,117,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWCN.dll
[2015.08.31 18:08:03 | 000,112,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWCN.dll
[2015.08.31 18:08:03 | 000,100,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll
[2015.08.31 18:08:03 | 000,037,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2015.08.31 18:08:02 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultsvc.dll
[2015.08.31 18:08:02 | 000,246,272 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PackageStateRoaming.dll
[2015.08.31 18:08:02 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PackageStateRoaming.dll
[2015.08.29 15:43:03 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\YSearchUtil
[2015.08.29 15:43:02 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Yahoo!
[2015.08.29 15:40:22 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\Java
[2015.08.29 15:39:31 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Roaming\Sun
[2015.08.29 15:39:29 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\.oracle_jre_usage
[2015.08.28 00:16:15 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Mozilla Firefox
[2015.08.19 18:31:53 | 016,706,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2015.08.19 18:31:50 | 013,024,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2015.08.19 18:31:48 | 003,527,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2015.08.19 18:31:47 | 004,532,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2015.08.19 18:31:47 | 002,558,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2015.08.19 18:31:47 | 002,416,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2015.08.19 18:31:46 | 007,523,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2015.08.19 18:31:46 | 004,048,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2015.08.19 18:31:46 | 002,151,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2015.08.19 18:31:46 | 002,093,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2015.08.19 18:31:46 | 001,964,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2015.08.19 18:31:46 | 001,643,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2015.08.19 18:31:45 | 002,748,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2015.08.19 18:31:45 | 001,916,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2015.08.19 18:31:45 | 000,778,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2015.08.19 18:31:44 | 000,996,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2015.08.19 18:31:44 | 000,586,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2015.08.19 18:31:43 | 005,454,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2015.08.19 18:31:43 | 001,334,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2015.08.19 18:31:43 | 000,893,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2015.08.19 18:31:43 | 000,292,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
[2015.08.19 18:31:43 | 000,243,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
[2015.08.19 18:31:42 | 001,112,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2015.08.19 18:31:42 | 001,087,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2015.08.19 18:31:42 | 000,918,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2015.08.19 18:31:42 | 000,593,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll
[2015.08.19 18:31:42 | 000,563,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApi.dll
[2015.08.19 18:31:42 | 000,554,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\directmanipulation.dll
[2015.08.19 18:31:42 | 000,454,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\directmanipulation.dll
[2015.08.19 18:31:42 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationPermissions.dll
[2015.08.19 18:31:41 | 000,993,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2015.08.19 18:31:41 | 000,671,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
[2015.08.19 18:31:41 | 000,448,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApi.dll
[2015.08.19 18:31:41 | 000,336,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2015.08.19 18:31:41 | 000,235,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Notifications.dll
[2015.08.19 18:31:41 | 000,235,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
[2015.08.19 18:31:41 | 000,186,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cloudAP.dll
[2015.08.19 18:31:41 | 000,148,992 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll
[2015.08.19 18:31:41 | 000,115,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeParserTask.exe
[2015.08.19 18:31:41 | 000,080,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2015.08.19 18:31:40 | 002,462,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2015.08.19 18:31:40 | 000,845,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2015.08.19 18:31:40 | 000,642,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdbui.dll
[2015.08.19 18:31:40 | 000,483,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2015.08.19 18:31:40 | 000,414,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2015.08.19 18:31:40 | 000,342,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationGeofences.dll
[2015.08.19 18:31:40 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2015.08.19 18:31:40 | 000,274,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\syncutil.dll
[2015.08.19 18:31:40 | 000,269,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2015.08.19 18:31:40 | 000,159,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
[2015.08.19 18:31:39 | 000,621,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2015.08.19 18:31:39 | 000,553,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2015.08.19 18:31:39 | 000,442,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
[2015.08.19 18:31:39 | 000,372,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2015.08.19 18:31:39 | 000,131,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll
[2015.08.19 18:31:39 | 000,123,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2015.08.19 18:31:39 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFrameworkInternalPS.dll
[2015.08.19 18:31:39 | 000,052,224 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringclient.dll
[2015.08.19 18:31:39 | 000,042,496 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tetheringclient.dll
[2015.08.19 18:31:39 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuautoappupdate.dll
[2015.08.19 18:31:38 | 000,420,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2015.08.19 18:31:38 | 000,324,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2015.08.19 18:31:38 | 000,247,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2015.08.19 18:31:38 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReInfo.dll
[2015.08.11 21:51:47 | 008,613,200 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2015.08.11 21:51:47 | 006,878,256 | ---- | C] (Microsoft Corp.) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2015.08.11 21:51:30 | 003,780,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2015.08.11 21:51:26 | 001,212,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemoteNaturalLanguage.dll
[2015.08.11 21:51:25 | 002,415,104 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2015.08.11 21:51:25 | 001,601,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2015.08.11 21:51:25 | 001,162,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2015.08.11 21:51:25 | 000,898,560 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll
[2015.08.11 21:51:24 | 000,595,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2015.08.11 21:51:24 | 000,583,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2015.08.11 21:51:23 | 000,783,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2015.08.11 21:51:23 | 000,644,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2015.08.11 21:51:23 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
[2015.08.11 21:51:22 | 000,801,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2015.08.11 21:51:22 | 000,505,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2015.08.11 21:51:22 | 000,310,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenter.dll
[2015.08.11 21:51:22 | 000,273,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
[2015.08.11 21:51:22 | 000,195,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
[2015.08.11 21:51:21 | 000,700,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2015.08.11 21:51:21 | 000,685,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2015.08.11 21:51:21 | 000,261,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActionCenter.dll
[2015.08.11 21:51:21 | 000,171,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinBioDataModel.dll
[2015.08.11 21:51:21 | 000,162,304 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SubscriptionMgr.dll
[2015.08.11 21:51:21 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkStatus.dll
[2015.08.11 21:51:20 | 001,274,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2015.08.11 21:51:20 | 000,814,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctfuimanager.dll
[2015.08.11 21:51:20 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msctfuimanager.dll
[2015.08.11 21:51:20 | 000,573,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2015.08.11 21:51:20 | 000,516,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2015.08.11 21:51:20 | 000,306,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationObjFactory.dll
[2015.08.11 21:51:20 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NotificationObjFactory.dll
[2015.08.11 21:51:20 | 000,078,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll
[2015.08.11 21:51:19 | 001,822,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2015.08.11 21:51:19 | 000,317,440 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configmanager2.dll
[2015.08.11 21:51:19 | 000,215,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe
[2015.08.11 21:51:19 | 000,200,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wof.sys
[2015.08.11 21:51:19 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coredpus.dll
[2015.08.11 21:51:18 | 000,052,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wpcfltr.sys
[2015.08.11 21:51:17 | 000,594,472 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2015.08.11 21:51:17 | 000,046,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2015.08.11 21:51:15 | 000,243,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2015.08.11 21:51:14 | 000,393,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2015.08.11 21:51:11 | 000,384,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2015.08.11 21:51:11 | 000,311,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2015.08.11 21:51:11 | 000,193,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModelShim.dll
[2015.08.11 21:51:10 | 001,290,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2015.08.11 21:51:10 | 000,911,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2015.08.11 21:51:10 | 000,503,808 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tileobjserver.dll
[2015.08.11 21:51:09 | 000,282,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEEventDispatcher.dll
[2015.08.11 21:51:09 | 000,253,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_UserAccount.dll
[2015.08.11 21:51:09 | 000,217,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEEventDispatcher.dll
[2015.08.11 21:51:09 | 000,081,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEDataLayerHelpers.dll
[2015.08.11 21:51:08 | 000,122,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEDataLayerHelpers.dll
[2015.08.11 18:23:02 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LogMeIn Hamachi
[2015.08.10 14:20:08 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\SleepStudy
[2015.08.07 17:45:54 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\Documents\Baldur's Gate II - Enhanced Edition
[2015.08.06 19:48:11 | 000,000,000 | ---D | C] -- C:\WINDOWS\Panther
[2015.08.06 19:47:59 | 000,000,000 | -HSD | C] -- C:\Recovery
[2015.08.06 19:45:22 | 001,561,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2015.08.06 19:45:22 | 001,356,368 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2015.08.06 19:45:22 | 000,569,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2015.08.06 19:45:22 | 000,497,152 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
[2015.08.06 19:45:22 | 000,480,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2015.08.06 19:45:22 | 000,275,456 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2015.08.06 19:45:15 | 014,241,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2015.08.06 19:45:15 | 012,589,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2015.08.06 19:45:15 | 011,557,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2015.08.06 19:45:15 | 009,889,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2015.08.06 19:45:15 | 006,305,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2015.08.06 19:45:15 | 004,791,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2015.08.06 19:45:15 | 004,760,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2015.08.06 19:45:15 | 004,398,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2015.08.06 19:45:15 | 004,350,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2015.08.06 19:45:15 | 004,169,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2015.08.06 19:45:15 | 003,443,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2015.08.06 19:45:15 | 003,248,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2015.08.06 19:45:15 | 002,646,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2015.08.06 19:45:15 | 002,147,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2015.08.06 19:45:15 | 001,562,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2015.08.06 19:45:15 | 001,411,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
[2015.08.06 19:45:15 | 001,201,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
[2015.08.06 19:45:15 | 001,200,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2015.08.06 19:45:15 | 001,043,968 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
[2015.08.06 19:45:15 | 001,043,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2015.08.06 19:45:15 | 001,031,680 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2015.08.06 19:45:15 | 001,025,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2015.08.06 19:45:15 | 000,980,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2015.08.06 19:45:15 | 000,896,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2015.08.06 19:45:15 | 000,877,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2015.08.06 19:45:15 | 000,872,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2015.08.06 19:45:15 | 000,850,432 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2015.08.06 19:45:15 | 000,846,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2015.08.06 19:45:15 | 000,816,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2015.08.06 19:45:15 | 000,799,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpccpl.dll
[2015.08.06 19:45:15 | 000,754,688 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Cred.dll
[2015.08.06 19:45:15 | 000,713,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2015.08.06 19:45:15 | 000,670,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2015.08.06 19:45:15 | 000,599,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2015.08.06 19:45:15 | 000,589,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2015.08.06 19:45:15 | 000,589,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efscore.dll
[2015.08.06 19:45:15 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
[2015.08.06 19:45:15 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2015.08.06 19:45:15 | 000,584,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2015.08.06 19:45:15 | 000,584,544 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2015.08.06 19:45:15 | 000,542,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2015.08.06 19:45:15 | 000,527,952 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2015.08.06 19:45:15 | 000,521,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2015.08.06 19:45:15 | 000,501,008 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2015.08.06 19:45:15 | 000,487,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2015.08.06 19:45:15 | 000,485,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
[2015.08.06 19:45:15 | 000,473,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2015.08.06 19:45:15 | 000,437,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
[2015.08.06 19:45:15 | 000,414,720 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BioFeedback.dll
[2015.08.06 19:45:15 | 000,407,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProvDataModel.dll
[2015.08.06 19:45:15 | 000,373,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2015.08.06 19:45:15 | 000,356,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2015.08.06 19:45:15 | 000,335,360 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2015.08.06 19:45:15 | 000,333,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll
[2015.08.06 19:45:15 | 000,322,048 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BlockedShutdown.dll
[2015.08.06 19:45:15 | 000,316,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConhostV2.dll
[2015.08.06 19:45:15 | 000,310,784 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2015.08.06 19:45:15 | 000,294,912 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2015.08.06 19:45:15 | 000,291,840 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemcpl.dll
[2015.08.06 19:45:15 | 000,285,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll
[2015.08.06 19:45:15 | 000,283,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BioFeedback.dll
[2015.08.06 19:45:15 | 000,280,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2015.08.06 19:45:15 | 000,279,552 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\systemcpl.dll
[2015.08.06 19:45:15 | 000,271,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConsoleLogon.dll
[2015.08.06 19:45:15 | 000,252,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
[2015.08.06 19:45:15 | 000,251,392 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
[2015.08.06 19:45:15 | 000,232,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicesFlowBroker.dll
[2015.08.06 19:45:15 | 000,195,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fwpolicyiomgr.dll
[2015.08.06 19:45:15 | 000,181,760 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll
[2015.08.06 19:45:15 | 000,181,088 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll
[2015.08.06 19:45:15 | 000,179,712 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_SignInOptions.dll
[2015.08.06 19:45:15 | 000,179,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srumsvc.dll
[2015.08.06 19:45:15 | 000,167,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Privacy.dll
[2015.08.06 19:45:15 | 000,163,328 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwpolicyiomgr.dll
[2015.08.06 19:45:15 | 000,116,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sendmail.dll
[2015.08.06 19:45:15 | 000,104,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sendmail.dll
[2015.08.06 19:45:15 | 000,097,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcd.dll
[2015.08.06 19:45:15 | 000,082,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcd.dll
[2015.08.06 19:45:15 | 000,069,120 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spbcd.dll
[2015.08.06 19:45:15 | 000,068,096 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.ProxyStub.dll
[2015.08.06 19:45:15 | 000,060,928 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2015.08.06 19:45:15 | 000,056,320 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.PAL.Desktop.dll
[2015.08.06 19:45:15 | 000,032,768 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\calc.exe
[2015.08.06 19:45:15 | 000,031,232 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\calc.exe
[2015.08.06 19:45:09 | 007,569,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2015.08.06 19:45:09 | 007,051,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2015.08.06 19:45:09 | 006,101,504 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2015.08.06 19:45:09 | 005,076,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2015.08.06 19:45:09 | 003,362,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2015.08.06 19:45:09 | 001,521,664 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2015.08.06 19:45:09 | 001,420,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2015.08.06 19:45:09 | 001,418,240 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
[2015.08.06 19:45:09 | 001,294,352 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2015.08.06 19:45:09 | 001,203,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll
[2015.08.06 19:45:09 | 001,169,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2015.08.06 19:45:09 | 001,135,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2015.08.06 19:45:09 | 001,123,400 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2015.08.06 19:45:09 | 001,018,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2015.08.06 19:45:09 | 000,934,752 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys
[2015.08.06 19:45:09 | 000,925,696 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll
[2015.08.06 19:45:09 | 000,869,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2015.08.06 19:45:09 | 000,858,408 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2015.08.06 19:45:09 | 000,856,064 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContactApis.dll
[2015.08.06 19:45:09 | 000,832,512 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2015.08.06 19:45:09 | 000,783,872 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2015.08.06 19:45:09 | 000,752,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efscore.dll
[2015.08.06 19:45:09 | 000,695,136 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2015.08.06 19:45:09 | 000,654,848 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2015.08.06 19:45:09 | 000,630,160 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2015.08.06 19:45:09 | 000,623,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ContactApis.dll
[2015.08.06 19:45:09 | 000,521,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2015.08.06 19:45:09 | 000,494,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
[2015.08.06 19:45:09 | 000,446,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2015.08.06 19:45:09 | 000,430,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcomapi.dll
[2015.08.06 19:45:09 | 000,425,824 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2015.08.06 19:45:09 | 000,416,256 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdedit.exe
[2015.08.06 19:45:09 | 000,366,592 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2015.08.06 19:45:09 | 000,359,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2015.08.06 19:45:09 | 000,343,040 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2015.08.06 19:45:09 | 000,342,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2015.08.06 19:45:09 | 000,329,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2015.08.06 19:45:09 | 000,328,704 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2015.08.06 19:45:09 | 000,303,616 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll
[2015.08.06 19:45:09 | 000,287,744 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2015.08.06 19:45:09 | 000,268,800 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2015.08.06 19:45:09 | 000,242,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2015.08.06 19:45:09 | 000,229,376 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2015.08.06 19:45:09 | 000,208,736 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll
[2015.08.06 19:45:09 | 000,208,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srumsvc.dll
[2015.08.06 19:45:09 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll
[2015.08.06 19:45:09 | 000,204,288 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OmaDmAgent.dll
[2015.08.06 19:45:09 | 000,190,464 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReInfo.dll
[2015.08.06 19:45:09 | 000,187,904 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2015.08.06 19:45:09 | 000,186,880 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2015.08.06 19:45:09 | 000,185,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2015.08.06 19:45:09 | 000,176,640 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdboot.exe
[2015.08.06 19:45:09 | 000,169,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storewuauth.dll
[2015.08.06 19:45:09 | 000,150,528 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2015.08.06 19:45:09 | 000,137,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEStoreEventHandlers.dll
[2015.08.06 19:45:09 | 000,120,832 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmclient.exe
[2015.08.06 19:45:09 | 000,091,648 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.V2.dll
[2015.08.06 19:45:09 | 000,084,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spbcd.dll
[2015.08.06 19:45:09 | 000,080,384 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll
[2015.08.06 19:45:09 | 000,078,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsNativeApi.V2.dll
[2015.08.06 19:45:09 | 000,069,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setbcdlocale.dll
[2015.08.06 19:45:09 | 000,064,000 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unenrollhook.dll
[2015.08.06 19:45:09 | 000,061,280 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2015.08.06 19:45:09 | 000,057,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hmkd.dll
[2015.08.06 19:45:09 | 000,055,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2015.08.06 19:45:09 | 000,053,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmprc.exe
[2015.08.06 19:45:09 | 000,045,056 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hmkd.dll
[2015.08.06 19:45:09 | 000,041,984 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VoiceActivationManager.dll
[2015.08.06 19:45:09 | 000,024,576 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManagerShellext.exe
[2015.08.06 19:45:08 | 006,488,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2015.08.06 19:45:08 | 005,118,024 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2015.08.06 19:45:08 | 004,611,584 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2015.08.06 19:45:08 | 003,248,128 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2015.08.06 19:45:08 | 002,606,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2015.08.06 19:45:08 | 002,125,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2015.08.06 19:45:08 | 001,714,176 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2015.08.06 19:45:08 | 001,591,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2015.08.06 19:45:08 | 001,417,216 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2015.08.06 19:45:08 | 001,203,200 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2015.08.06 19:45:08 | 001,101,792 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2015.08.06 19:45:08 | 000,966,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2015.08.06 19:45:08 | 000,841,728 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
[2015.08.06 19:45:08 | 000,828,416 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2015.08.06 19:45:08 | 000,823,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2015.08.06 19:45:08 | 000,808,856 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2015.08.06 19:45:08 | 000,762,896 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2015.08.06 19:45:08 | 000,680,448 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
[2015.08.06 19:45:08 | 000,679,424 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
[2015.08.06 19:45:08 | 000,677,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2015.08.06 19:45:08 | 000,658,568 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2015.08.06 19:45:08 | 000,632,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2015.08.06 19:45:08 | 000,590,336 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MessagingDataModel2.dll
[2015.08.06 19:45:08 | 000,575,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
[2015.08.06 19:45:08 | 000,518,144 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationController.dll
[2015.08.06 19:45:08 | 000,510,976 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2015.08.06 19:45:08 | 000,503,296 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
[2015.08.06 19:45:08 | 000,465,920 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MessagingDataModel2.dll
[2015.08.06 19:45:08 | 000,441,344 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
[2015.08.06 19:45:08 | 000,421,888 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2015.08.06 19:45:08 | 000,335,248 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2015.08.06 19:45:08 | 000,296,960 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
[2015.08.06 19:45:08 | 000,290,312 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininit.exe
[2015.08.06 19:45:08 | 000,263,168 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
[2015.08.06 19:45:08 | 000,191,488 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
[2015.08.06 19:45:08 | 000,107,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmapi.dll
[2015.08.06 19:45:08 | 000,075,264 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ACPBackgroundManagerPolicy.dll
[2015.08.06 19:45:08 | 000,067,072 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbser.sys
[2015.08.06 19:45:08 | 000,065,536 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys
[2015.08.06 19:45:08 | 000,046,080 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys
[2015.08.06 19:45:08 | 000,034,816 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VoiceActivationManager.dll
[2015.08.06 19:45:08 | 000,028,672 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationControllerPS.dll
[2015.08.06 19:38:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\XPSViewer
[2015.08.06 19:38:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\msmq
[2015.08.06 19:38:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\BestPractices
[2015.08.06 19:38:13 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\BestPractices
[2015.08.06 19:38:12 | 000,000,000 | ---D | C] -- C:\Program Files\Reference Assemblies
[2015.08.06 19:38:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Reference Assemblies
[2015.08.06 19:38:12 | 000,000,000 | ---D | C] -- C:\Program Files\MSBuild
[2015.08.06 19:38:12 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\MSBuild
[2015.08.06 19:38:12 | 000,000,000 | ---D | C] -- C:\inetpub
[2015.08.06 19:37:47 | 000,778,936 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationNative_v0300.dll
[2015.08.06 19:37:47 | 000,102,608 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PresentationCFFRasterizerNative_v0300.dll
[2015.08.06 19:37:47 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\TsWpfWrp.exe
[2015.08.06 19:37:46 | 001,166,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationNative_v0300.dll
[2015.08.06 19:37:46 | 000,124,112 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PresentationCFFRasterizerNative_v0300.dll
[2015.08.06 19:37:46 | 000,035,480 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\TsWpfWrp.exe
[2015.08.06 19:10:12 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\Comms
[2015.08.06 19:05:45 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\OneDrive
[2015.08.06 19:05:05 | 006,358,016 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsData0009.dll
[2015.08.06 19:05:05 | 005,739,520 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\prm0009.dll
[2015.08.06 19:05:05 | 002,629,632 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NlsLexicons0009.dll
[2015.08.06 19:04:57 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\NetworkTiles
[2015.08.06 19:04:48 | 000,000,000 | ---D | C] -- C:\ProgramData\Microsoft OneDrive
[2015.08.06 19:03:13 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\Publishers
[2015.08.06 19:02:56 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\Packages
[2015.08.06 19:02:55 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\TileDataLayer
[2015.08.06 18:58:10 | 002,718,208 | ---- | C] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PrintConfig.dll
[2015.08.06 18:54:55 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\Common Files\SpeechEngines
[2015.08.06 18:54:53 | 000,000,000 | ---D | C] -- C:\Program Files\Common Files\SpeechEngines
[2015.08.06 18:53:43 | 000,000,000 | --SD | C] -- C:\Users\dieFackel\AppData\Roaming\Microsoft
[2015.08.06 18:53:43 | 000,000,000 | R-SD | C] -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
[2015.08.06 18:53:43 | 000,000,000 | R--D | C] -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
[2015.08.06 18:53:43 | 000,000,000 | R--D | C] -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
[2015.08.06 18:53:43 | 000,000,000 | R--D | C] -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Vorlagen
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\AppData\Local\Verlauf
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\AppData\Local\Temporary Internet Files
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Startmenü
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\SendTo
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Recent
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Netzwerkumgebung
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Lokale Einstellungen
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Documents\Eigene Videos
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Documents\Eigene Musik
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Eigene Dateien
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Documents\Eigene Bilder
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Druckumgebung
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Cookies
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\AppData\Local\Anwendungsdaten
[2015.08.06 18:53:43 | 000,000,000 | -HSD | C] -- C:\Users\dieFackel\Anwendungsdaten
[2015.08.06 18:53:43 | 000,000,000 | -H-D | C] -- C:\Users\dieFackel\AppData
[2015.08.06 18:53:43 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\Temp
[2015.08.06 18:53:43 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\Microsoft
[2015.08.06 18:53:43 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
[2015.08.06 18:50:31 | 000,000,000 | ---D | C] -- C:\ProgramData\Samsung
[2015.08.06 18:50:23 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysNative\DAX2
[2015.08.06 18:50:19 | 000,000,000 | ---D | C] -- C:\WINDOWS\SysWow64\RTCOM
[2015.08.06 18:50:19 | 000,000,000 | ---D | C] -- C:\Program Files\Realtek
[2015.08.06 18:50:18 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA
[2015.08.06 18:50:16 | 006,873,928 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2015.08.06 18:50:16 | 003,493,008 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[2015.08.06 18:50:16 | 002,558,608 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2015.08.06 18:50:16 | 000,385,168 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2015.08.06 18:50:16 | 000,062,608 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2015.08.06 18:50:08 | 000,000,000 | ---D | C] -- C:\ProgramData\NVIDIA Corporation
[2015.08.06 18:50:03 | 000,000,000 | ---D | C] -- C:\Program Files\NVIDIA Corporation
[2015.08.06 18:50:03 | 000,000,000 | ---D | C] -- C:\Program Files (x86)\NVIDIA Corporation
[2015.08.06 18:48:36 | 000,000,000 | ---D | C] -- C:\WINDOWS\Prefetch
[2015.08.05 16:55:42 | 000,000,000 | ---D | C] -- C:\ProgramData\Echobit
[2015.08.05 16:55:41 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\Echobit
[2015.08.05 03:40:16 | 018,385,304 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2015.08.05 03:40:16 | 015,762,912 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2015.08.05 03:40:14 | 030,529,168 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2015.08.05 03:40:14 | 022,983,824 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2015.08.05 03:40:14 | 016,169,160 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2015.08.05 03:40:14 | 013,285,144 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2015.08.05 03:40:14 | 001,569,080 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdagenco6420103.dll
[2015.08.05 03:40:14 | 001,173,904 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2015.08.05 03:40:14 | 001,071,248 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2015.08.05 03:40:14 | 000,999,864 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2015.08.05 03:40:14 | 000,993,608 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2015.08.05 03:40:14 | 000,418,448 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2015.08.05 03:40:14 | 000,374,600 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2015.08.05 03:40:14 | 000,206,152 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys
[2015.08.05 03:40:14 | 000,187,136 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2015.08.05 03:40:14 | 000,165,512 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2015.08.05 03:40:14 | 000,161,064 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglshim64.dll
[2015.08.05 03:40:14 | 000,137,224 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglshim32.dll
[2015.08.05 03:40:14 | 000,041,784 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdap64.dll
[2015.08.05 03:40:12 | 016,021,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2015.08.05 03:40:12 | 014,521,840 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2015.08.05 03:40:12 | 012,983,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2015.08.05 03:40:12 | 011,852,096 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2015.08.05 03:40:12 | 002,371,216 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2015.08.05 03:40:12 | 002,174,280 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2015.08.05 03:40:12 | 001,908,368 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6435362.dll
[2015.08.05 03:40:12 | 001,567,888 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6435362.dll
[2015.08.05 03:40:12 | 001,063,240 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2015.08.05 03:40:12 | 000,985,248 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2015.08.05 03:40:12 | 000,797,616 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2015.08.05 03:40:12 | 000,642,896 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2015.08.05 03:40:12 | 000,394,696 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2015.08.05 03:40:12 | 000,384,840 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvDecMFTMjpeg.dll
[2015.08.05 03:40:12 | 000,350,864 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvDecMFTMjpeg.dll
[2015.08.05 03:40:12 | 000,325,168 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2015.08.05 03:40:10 | 003,360,576 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2015.08.05 03:40:10 | 002,971,920 | ---- | C] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2015.08.04 14:46:41 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\LogMeIn
[2015.08.04 14:46:41 | 000,000,000 | ---D | C] -- C:\ProgramData\LogMeIn
[2015.08.04 14:45:15 | 000,033,856 | -H-- | C] (LogMeIn, Inc.) -- C:\WINDOWS\SysNative\hamachi.sys
[2015.08.04 14:45:12 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Local\LogMeIn Hamachi
[2015.08.03 12:12:32 | 000,045,680 | -H-- | C] (LogMeIn Inc.) -- C:\WINDOWS\SysNative\drivers\Hamdrv.sys
[2015.07.28 13:44:35 | 000,110,688 | ---- | C] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll
[2015.07.28 13:44:20 | 000,000,000 | ---D | C] -- C:\Program Files\Java
[2015.07.25 23:26:08 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Roaming\.StarMade
[2015.07.23 01:17:02 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Roaming\PFStaticIP
[2015.07.23 01:16:18 | 000,000,000 | ---D | C] -- C:\Users\dieFackel\AppData\Roaming\PortForward.com
[8 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
         

Geändert von dieFackel (20.09.2015 um 18:00 Uhr)

Alt 20.09.2015, 18:00   #7
dieFackel
 
Malware Befall? - Standard

Malware Befall?



OTL 2/2
Code:
ATTFilter
========== Files - Modified Within 60 Days ==========
 
[2015.09.20 13:59:25 | 000,001,132 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineUA.job
[2015.09.20 13:59:00 | 000,001,128 | ---- | M] () -- C:\WINDOWS\tasks\GoogleUpdateTaskMachineCore.job
[2015.09.20 13:55:55 | 000,000,863 | ---- | M] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015.09.20 13:55:13 | 000,602,112 | ---- | M] (OldTimer Tools) -- C:\Users\dieFackel\Desktop\OTL.exe
[2015.09.20 13:54:14 | 000,113,880 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\MBAMSwissArmy.sys
[2015.09.20 13:43:58 | 000,079,064 | ---- | M] (Malwarebytes Corporation) -- C:\WINDOWS\SysNative\drivers\ggpcixbf.sys
[2015.09.20 13:36:00 | 000,000,884 | ---- | M] () -- C:\WINDOWS\tasks\Adobe Flash Player Updater.job
[2015.09.20 13:34:41 | 000,001,175 | ---- | M] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2015.09.20 13:10:45 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\SOL-PC_dieFackel_HistoryPrediction.bin
[2015.09.20 13:10:39 | 2144,747,519 | -HS- | M] () -- C:\hiberfil.sys
[2015.09.20 13:10:39 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat
[2015.09.19 02:33:11 | 000,000,838 | ---- | M] () -- C:\Users\dieFackel\Desktop\CrystalDiskInfo.lnk
[2015.09.18 19:19:19 | 002,077,126 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015.09.18 19:19:19 | 000,883,584 | ---- | M] () -- C:\WINDOWS\SysNative\perfh007.dat
[2015.09.18 19:19:19 | 000,824,568 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat
[2015.09.18 19:19:19 | 000,195,718 | ---- | M] () -- C:\WINDOWS\SysNative\perfc007.dat
[2015.09.18 19:19:19 | 000,171,286 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat
[2015.09.18 19:13:17 | 000,001,967 | ---- | M] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2015.09.18 19:13:01 | 000,025,640 | ---- | M] (Windows (R) Server 2003 DDK provider) -- C:\WINDOWS\gdrv.sys
[2015.09.18 19:12:57 | 589,516,284 | ---- | M] () -- C:\WINDOWS\MEMORY.DMP
[2015.09.18 19:12:57 | 268,435,456 | -HS- | M] () -- C:\swapfile.sys
[2015.09.16 13:14:06 | 000,219,888 | ---- | M] () -- C:\WINDOWS\SysNative\FNTCACHE.DAT
[2015.09.02 03:20:52 | 000,077,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\acmigration.dll
[2015.09.02 02:25:58 | 003,586,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kfull.sys
[2015.09.02 02:25:34 | 001,382,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\win32kbase.sys
[2015.08.29 15:39:50 | 000,110,688 | ---- | M] (Oracle Corporation) -- C:\WINDOWS\SysNative\WindowsAccessBridge-64.dll
[2015.08.27 08:32:24 | 000,608,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fontdrvhost.exe
[2015.08.27 08:04:18 | 021,874,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\edgehtml.dll
[2015.08.27 07:54:40 | 000,365,568 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysNative\atmfd.dll
[2015.08.27 07:54:26 | 000,541,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fontdrvhost.exe
[2015.08.27 07:51:48 | 001,774,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Immersive.dll
[2015.08.27 07:51:42 | 002,350,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\authui.dll
[2015.08.27 07:43:57 | 000,826,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript.dll
[2015.08.27 07:43:31 | 000,576,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vbscript.dll
[2015.08.27 07:42:52 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.PicturePassword.dll
[2015.08.27 07:42:46 | 000,596,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingSync.dll
[2015.08.27 07:42:36 | 000,184,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shacct.dll
[2015.08.27 07:42:25 | 000,578,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winlogon.exe
[2015.08.27 07:39:42 | 000,045,568 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysNative\atmlib.dll
[2015.08.27 07:23:43 | 000,303,104 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\atmfd.dll
[2015.08.27 07:16:41 | 001,612,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Immersive.dll
[2015.08.27 07:16:38 | 002,153,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\authui.dll
[2015.08.27 07:16:03 | 018,806,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\edgehtml.dll
[2015.08.27 07:12:34 | 000,650,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\jscript.dll
[2015.08.27 07:11:54 | 000,484,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SettingSync.dll
[2015.08.27 07:11:39 | 000,139,776 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\shacct.dll
[2015.08.27 07:08:18 | 000,037,376 | ---- | M] (Adobe Systems) -- C:\WINDOWS\SysWow64\atmlib.dll
[2015.08.22 19:29:28 | 000,000,208 | ---- | M] () -- C:\Users\dieFackel\Desktop\Total War SHOGUN 2.url
[2015.08.20 08:07:55 | 008,019,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntoskrnl.exe
[2015.08.20 08:06:53 | 000,609,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ci.dll
[2015.08.20 07:26:23 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\InstallAgent.exe
[2015.08.20 07:21:13 | 000,193,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\EnterpriseModernAppMgmtCSP.dll
[2015.08.18 09:56:25 | 002,498,808 | ---- | M] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015.08.18 09:55:45 | 000,373,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBXHCI.SYS
[2015.08.18 09:54:30 | 001,396,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManager.dll
[2015.08.18 09:27:23 | 001,771,592 | ---- | M] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015.08.18 09:24:35 | 000,963,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LicenseManager.dll
[2015.08.18 09:13:10 | 000,497,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WlanMediaManager.dll
[2015.08.18 09:13:06 | 000,387,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupShim.dll
[2015.08.18 09:12:20 | 000,692,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\NfcCx.dll
[2015.08.18 09:12:18 | 002,225,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkMobileSettings.dll
[2015.08.18 09:04:20 | 000,859,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\modernexecserver.dll
[2015.08.18 09:04:14 | 001,234,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\aitstatic.exe
[2015.08.18 08:59:35 | 001,294,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcnwiz.dll
[2015.08.18 08:59:02 | 000,140,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnApi.dll
[2015.08.18 08:58:46 | 000,050,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WcnNetsh.dll
[2015.08.18 08:58:34 | 000,112,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fdWCN.dll
[2015.08.18 08:58:31 | 000,117,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dafWCN.dll
[2015.08.18 08:58:25 | 000,187,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetSetupSvc.dll
[2015.08.18 08:57:54 | 000,045,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wfdprov.dll
[2015.08.18 08:56:48 | 000,079,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BthRadioMedia.dll
[2015.08.18 08:55:01 | 002,178,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentServer.dll
[2015.08.18 08:54:11 | 000,247,296 | ---- | M] () -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2015.08.18 08:54:03 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\vaultsvc.dll
[2015.08.18 08:52:26 | 001,888,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmcore.dll
[2015.08.18 08:50:04 | 001,795,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentExtensions.dll
[2015.08.18 08:49:52 | 001,061,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\reseteng.dll
[2015.08.18 08:49:20 | 000,246,272 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PackageStateRoaming.dll
[2015.08.18 08:49:03 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NetSetupShim.dll
[2015.08.18 08:36:08 | 001,226,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wcnwiz.dll
[2015.08.18 08:35:49 | 000,100,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WcnApi.dll
[2015.08.18 08:34:44 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wfdprov.dll
[2015.08.18 08:29:11 | 001,593,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\dwmcore.dll
[2015.08.18 08:26:08 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PackageStateRoaming.dll
[2015.08.18 06:44:12 | 000,008,847 | ---- | M] () -- C:\WINDOWS\SysNative\ResPriHMImageList
[2015.08.17 23:58:53 | 000,001,089 | ---- | M] () -- C:\Users\dieFackel\Desktop\Common.lnk
[2015.08.14 03:25:18 | 000,001,902 | ---- | M] () -- C:\Users\dieFackel\Desktop\StarMade Server.lnk
[2015.08.13 06:22:26 | 002,093,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wlidsvc.dll
[2015.08.13 06:20:39 | 000,414,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppXDeploymentClient.dll
[2015.08.13 05:53:21 | 000,311,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppXDeploymentClient.dll
[2015.08.11 12:04:24 | 002,462,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfcore.dll
[2015.08.11 12:04:23 | 004,532,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\explorer.exe
[2015.08.11 12:04:15 | 001,087,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfplat.dll
[2015.08.11 12:03:09 | 000,442,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\storport.sys
[2015.08.11 12:02:57 | 000,554,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\directmanipulation.dll
[2015.08.11 12:02:56 | 000,080,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\stornvme.sys
[2015.08.11 12:02:49 | 000,292,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppHost.exe
[2015.08.11 11:52:49 | 000,993,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReAgent.dll
[2015.08.11 11:50:47 | 001,643,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\diagtrack.dll
[2015.08.11 11:40:22 | 004,048,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\explorer.exe
[2015.08.11 11:40:12 | 000,918,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfplat.dll
[2015.08.11 11:40:08 | 002,151,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfcore.dll
[2015.08.11 11:38:22 | 000,454,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\directmanipulation.dll
[2015.08.11 11:37:48 | 000,243,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppHost.exe
[2015.08.11 11:26:03 | 000,845,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReAgent.dll
[2015.08.11 11:23:59 | 016,706,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Xaml.dll
[2015.08.11 11:21:13 | 000,148,992 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringservice.dll
[2015.08.11 11:21:04 | 000,052,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tetheringclient.dll
[2015.08.11 11:20:02 | 000,483,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OneDriveSettingSyncProvider.dll
[2015.08.11 11:19:45 | 000,235,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Notifications.dll
[2015.08.11 11:18:44 | 000,235,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserMgrProxy.dll
[2015.08.11 11:16:32 | 002,416,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFMediaEngine.dll
[2015.08.11 11:14:02 | 000,404,480 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015.08.11 11:13:42 | 000,413,184 | ---- | M] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015.08.11 11:11:40 | 002,446,336 | ---- | M] () -- C:\WINDOWS\SysNative\InputService.dll
[2015.08.11 11:11:18 | 000,553,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\GamePanel.exe
[2015.08.11 11:10:47 | 000,293,376 | ---- | M] () -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2015.08.11 11:10:12 | 000,324,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.TestingFramework.dll
[2015.08.11 11:10:06 | 000,778,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.Store.dll
[2015.08.11 11:09:55 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuautoappupdate.dll
[2015.08.11 11:08:04 | 000,893,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApiPublic.dll
[2015.08.11 11:08:04 | 000,563,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeApi.dll
[2015.08.11 11:07:52 | 000,593,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmsvc.dll
[2015.08.11 11:07:44 | 000,115,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MbaeParserTask.exe
[2015.08.11 11:06:19 | 007,523,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Chakra.dll
[2015.08.11 11:05:48 | 000,342,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationGeofences.dll
[2015.08.11 11:05:27 | 000,269,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFramework.dll
[2015.08.11 11:05:23 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationFrameworkInternalPS.dll
[2015.08.11 11:05:20 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LocationPermissions.dll
[2015.08.11 11:05:10 | 000,996,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RDXService.dll
[2015.08.11 11:05:07 | 003,527,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tquery.dll
[2015.08.11 11:03:09 | 002,558,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssrch.dll
[2015.08.11 11:02:53 | 000,186,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\cloudAP.dll
[2015.08.11 11:02:15 | 000,621,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\enterprisecsps.dll
[2015.08.11 11:01:38 | 001,334,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIAutomationCore.dll
[2015.08.11 11:00:45 | 000,336,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchProtocolHost.exe
[2015.08.11 11:00:06 | 000,274,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\syncutil.dll
[2015.08.11 10:59:51 | 000,123,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mssprxy.dll
[2015.08.11 10:59:33 | 000,042,496 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tetheringclient.dll
[2015.08.11 10:59:27 | 000,642,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rdbui.dll
[2015.08.11 10:58:11 | 000,372,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\OneDriveSettingSyncProvider.dll
[2015.08.11 10:57:51 | 013,024,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Xaml.dll
[2015.08.11 10:57:12 | 000,159,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UserMgrProxy.dll
[2015.08.11 10:51:35 | 001,916,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFMediaEngine.dll
[2015.08.11 10:51:33 | 001,823,232 | ---- | M] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015.08.11 10:50:59 | 000,131,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Core.TextInput.dll
[2015.08.11 10:50:58 | 000,200,704 | ---- | M] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015.08.11 10:50:47 | 000,420,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\GamePanel.exe
[2015.08.11 10:49:50 | 000,586,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.dll
[2015.08.11 10:49:30 | 000,247,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.Store.TestingFramework.dll
[2015.08.11 10:48:25 | 000,671,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApiPublic.dll
[2015.08.11 10:47:09 | 000,448,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MbaeApi.dll
[2015.08.11 10:43:39 | 002,748,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\tquery.dll
[2015.08.11 10:42:33 | 005,454,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Chakra.dll
[2015.08.11 10:40:32 | 001,964,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mssrch.dll
[2015.08.11 10:40:12 | 001,112,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIAutomationCore.dll
[2015.08.11 10:38:43 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ReInfo.dll
[2015.08.08 17:38:46 | 000,794,088 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerApp.exe
[2015.08.08 17:38:46 | 000,179,688 | ---- | M] (Adobe Systems Incorporated) -- C:\WINDOWS\SysWow64\FlashPlayerCPLApp.cpl
[2015.08.08 09:29:58 | 001,822,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntdll.dll
[2015.08.08 08:24:15 | 002,415,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DWrite.dll
[2015.08.07 16:28:27 | 000,016,148 | ---- | M] () -- C:\WINDOWS\SysNative\DIEFACKEL-PC_dieFackel_HistoryPrediction.bin
[2015.08.06 19:45:22 | 001,561,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winmde.dll
[2015.08.06 19:45:22 | 001,356,368 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\winmde.dll
[2015.08.06 19:45:22 | 000,569,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MCRecvSrc.dll
[2015.08.06 19:45:22 | 000,497,152 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\PlayToManager.dll
[2015.08.06 19:45:22 | 000,480,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MCRecvSrc.dll
[2015.08.06 19:45:22 | 000,275,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcastdvr.exe
[2015.08.06 19:45:15 | 014,241,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmp.dll
[2015.08.06 19:45:15 | 012,589,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wmp.dll
[2015.08.06 19:45:15 | 011,557,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.dll
[2015.08.06 19:45:15 | 009,889,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.dll
[2015.08.06 19:45:15 | 006,305,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Search.dll
[2015.08.06 19:45:15 | 004,791,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\jscript9.dll
[2015.08.06 19:45:15 | 004,760,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ExplorerFrame.dll
[2015.08.06 19:45:15 | 004,398,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Search.dll
[2015.08.06 19:45:15 | 004,350,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ExplorerFrame.dll
[2015.08.06 19:45:15 | 004,169,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbon.dll
[2015.08.06 19:45:15 | 003,443,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbon.dll
[2015.08.06 19:45:15 | 003,248,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.dll
[2015.08.06 19:45:15 | 002,646,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.dll
[2015.08.06 19:45:15 | 002,147,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\d3d9.dll
[2015.08.06 19:45:15 | 001,562,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wmpmde.dll
[2015.08.06 19:45:15 | 001,411,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Editing.dll
[2015.08.06 19:45:15 | 001,201,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Cred.dll
[2015.08.06 19:45:15 | 001,200,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\rpcrt4.dll
[2015.08.06 19:45:15 | 001,043,968 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Editing.dll
[2015.08.06 19:45:15 | 001,043,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmp4srcsnk.dll
[2015.08.06 19:45:15 | 001,031,680 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorDataService.exe
[2015.08.06 19:45:15 | 001,025,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsrcsnk.dll
[2015.08.06 19:45:15 | 000,980,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SecConfig.efi
[2015.08.06 19:45:15 | 000,896,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsrcsnk.dll
[2015.08.06 19:45:15 | 000,877,016 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmp4srcsnk.dll
[2015.08.06 19:45:15 | 000,872,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ntshrui.dll
[2015.08.06 19:45:15 | 000,850,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\comdlg32.dll
[2015.08.06 19:45:15 | 000,846,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpncore.dll
[2015.08.06 19:45:15 | 000,816,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmpeg2srcsnk.dll
[2015.08.06 19:45:15 | 000,799,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpccpl.dll
[2015.08.06 19:45:15 | 000,754,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.Cred.dll
[2015.08.06 19:45:15 | 000,713,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmpeg2srcsnk.dll
[2015.08.06 19:45:15 | 000,670,208 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ieproxy.dll
[2015.08.06 19:45:15 | 000,599,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wpnapps.dll
[2015.08.06 19:45:15 | 000,589,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\uxtheme.dll
[2015.08.06 19:45:15 | 000,589,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\efscore.dll
[2015.08.06 19:45:15 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Sensors.dll
[2015.08.06 19:45:15 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\UIRibbonRes.dll
[2015.08.06 19:45:15 | 000,584,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UIRibbonRes.dll
[2015.08.06 19:45:15 | 000,584,544 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wimgapi.dll
[2015.08.06 19:45:15 | 000,542,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SearchFolder.dll
[2015.08.06 19:45:15 | 000,527,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioSes.dll
[2015.08.06 19:45:15 | 000,521,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PsmServiceExtHost.dll
[2015.08.06 19:45:15 | 000,501,008 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEng.dll
[2015.08.06 19:45:15 | 000,487,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfmkvsrcsnk.dll
[2015.08.06 19:45:15 | 000,485,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BlockedShutdown.dll
[2015.08.06 19:45:15 | 000,473,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wpnapps.dll
[2015.08.06 19:45:15 | 000,437,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Sensors.dll
[2015.08.06 19:45:15 | 000,414,720 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.BioFeedback.dll
[2015.08.06 19:45:15 | 000,407,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CredProvDataModel.dll
[2015.08.06 19:45:15 | 000,373,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfmkvsrcsnk.dll
[2015.08.06 19:45:15 | 000,356,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\stobject.dll
[2015.08.06 19:45:15 | 000,335,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CredProvDataModel.dll
[2015.08.06 19:45:15 | 000,333,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MFPlay.dll
[2015.08.06 19:45:15 | 000,322,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BlockedShutdown.dll
[2015.08.06 19:45:15 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConhostV2.dll
[2015.08.06 19:45:15 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsApi.dll
[2015.08.06 19:45:15 | 000,294,912 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ieproxy.dll
[2015.08.06 19:45:15 | 000,291,840 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\systemcpl.dll
[2015.08.06 19:45:15 | 000,285,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MFPlay.dll
[2015.08.06 19:45:15 | 000,283,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.UI.BioFeedback.dll
[2015.08.06 19:45:15 | 000,280,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AudioEndpointBuilder.dll
[2015.08.06 19:45:15 | 000,279,552 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\systemcpl.dll
[2015.08.06 19:45:15 | 000,271,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ConsoleLogon.dll
[2015.08.06 19:45:15 | 000,252,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContentDeliveryManager.Utilities.dll
[2015.08.06 19:45:15 | 000,251,392 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsApi.dll
[2015.08.06 19:45:15 | 000,232,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DevicesFlowBroker.dll
[2015.08.06 19:45:15 | 000,195,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\fwpolicyiomgr.dll
[2015.08.06 19:45:15 | 000,181,760 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\shutdownux.dll
[2015.08.06 19:45:15 | 000,181,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppxAllUserStore.dll
[2015.08.06 19:45:15 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_SignInOptions.dll
[2015.08.06 19:45:15 | 000,179,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\srumsvc.dll
[2015.08.06 19:45:15 | 000,167,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_Privacy.dll
[2015.08.06 19:45:15 | 000,163,328 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\fwpolicyiomgr.dll
[2015.08.06 19:45:15 | 000,116,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sendmail.dll
[2015.08.06 19:45:15 | 000,104,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\sendmail.dll
[2015.08.06 19:45:15 | 000,097,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcd.dll
[2015.08.06 19:45:15 | 000,082,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\bcd.dll
[2015.08.06 19:45:15 | 000,069,120 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\spbcd.dll
[2015.08.06 19:45:15 | 000,068,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.ProxyStub.dll
[2015.08.06 19:45:15 | 000,060,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.OneCore.dll
[2015.08.06 19:45:15 | 000,056,320 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.PAL.Desktop.dll
[2015.08.06 19:45:15 | 000,032,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\calc.exe
[2015.08.06 19:45:15 | 000,031,232 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\calc.exe
[2015.08.06 19:45:09 | 007,569,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mos.dll
[2015.08.06 19:45:09 | 007,051,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BingMaps.dll
[2015.08.06 19:45:09 | 006,101,504 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mos.dll
[2015.08.06 19:45:09 | 005,076,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\BingMaps.dll
[2015.08.06 19:45:09 | 003,362,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msi.dll
[2015.08.06 19:45:09 | 001,521,664 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActiveSyncProvider.dll
[2015.08.06 19:45:09 | 001,420,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\UserDataService.dll
[2015.08.06 19:45:09 | 001,418,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RecoveryDrive.exe
[2015.08.06 19:45:09 | 001,294,352 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.efi
[2015.08.06 19:45:09 | 001,203,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Unistore.dll
[2015.08.06 19:45:09 | 001,169,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dosvc.dll
[2015.08.06 19:45:09 | 001,135,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipUp.exe
[2015.08.06 19:45:09 | 001,123,400 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winload.exe
[2015.08.06 19:45:09 | 001,018,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.efi
[2015.08.06 19:45:09 | 000,934,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\refsv1.sys
[2015.08.06 19:45:09 | 000,925,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Unistore.dll
[2015.08.06 19:45:09 | 000,869,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapControlCore.dll
[2015.08.06 19:45:09 | 000,858,408 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\winresume.exe
[2015.08.06 19:45:09 | 000,856,064 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ContactApis.dll
[2015.08.06 19:45:09 | 000,832,512 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapsStore.dll
[2015.08.06 19:45:09 | 000,783,872 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuapi.dll
[2015.08.06 19:45:09 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\efscore.dll
[2015.08.06 19:45:09 | 000,695,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimgapi.dll
[2015.08.06 19:45:09 | 000,654,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\PlayToManager.dll
[2015.08.06 19:45:09 | 000,630,160 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wer.dll
[2015.08.06 19:45:09 | 000,623,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ContactApis.dll
[2015.08.06 19:45:09 | 000,521,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wimserv.exe
[2015.08.06 19:45:09 | 000,505,344 | ---- | M] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015.08.06 19:45:09 | 000,494,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\StoreAgent.dll
[2015.08.06 19:45:09 | 000,446,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MapConfiguration.dll
[2015.08.06 19:45:09 | 000,430,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\sppcomapi.dll
[2015.08.06 19:45:09 | 000,425,824 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hal.dll
[2015.08.06 19:45:09 | 000,416,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdedit.exe
[2015.08.06 19:45:09 | 000,366,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wuuhext.dll
[2015.08.06 19:45:09 | 000,359,936 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ncsi.dll
[2015.08.06 19:45:09 | 000,343,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\usocore.dll
[2015.08.06 19:45:09 | 000,342,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcastdvr.exe
[2015.08.06 19:45:09 | 000,329,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusUpdateHandlers.dll
[2015.08.06 19:45:09 | 000,328,704 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MapConfiguration.dll
[2015.08.06 19:45:09 | 000,303,616 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MBMediaManager.dll
[2015.08.06 19:45:09 | 000,287,744 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provhandlers.dll
[2015.08.06 19:45:09 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provengine.dll
[2015.08.06 19:45:09 | 000,242,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\updatehandlers.dll
[2015.08.06 19:45:09 | 000,229,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorService.dll
[2015.08.06 19:45:09 | 000,208,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxAllUserStore.dll
[2015.08.06 19:45:09 | 000,208,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\srumsvc.dll
[2015.08.06 19:45:09 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wcmcsp.dll
[2015.08.06 19:45:09 | 000,204,288 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\OmaDmAgent.dll
[2015.08.06 19:45:09 | 000,190,464 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ReInfo.dll
[2015.08.06 19:45:09 | 000,187,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\provisioningcsp.dll
[2015.08.06 19:45:09 | 000,186,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\BootMenuUX.dll
[2015.08.06 19:45:09 | 000,185,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\psmsrv.dll
[2015.08.06 19:45:09 | 000,176,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\bcdboot.exe
[2015.08.06 19:45:09 | 000,169,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\storewuauth.dll
[2015.08.06 19:45:09 | 000,150,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotification.exe
[2015.08.06 19:45:09 | 000,144,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UMDF\SensorsCx.dll
[2015.08.06 19:45:09 | 000,137,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEStoreEventHandlers.dll
[2015.08.06 19:45:09 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmclient.exe
[2015.08.06 19:45:09 | 000,091,648 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SensorsNativeApi.V2.dll
[2015.08.06 19:45:09 | 000,084,480 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\spbcd.dll
[2015.08.06 19:45:09 | 000,080,384 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppxSysprep.dll
[2015.08.06 19:45:09 | 000,078,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\SensorsNativeApi.V2.dll
[2015.08.06 19:45:09 | 000,069,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\setbcdlocale.dll
[2015.08.06 19:45:09 | 000,064,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\unenrollhook.dll
[2015.08.06 19:45:09 | 000,061,280 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dam.sys
[2015.08.06 19:45:09 | 000,057,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\hmkd.dll
[2015.08.06 19:45:09 | 000,055,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MusNotificationUx.exe
[2015.08.06 19:45:09 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\omadmprc.exe
[2015.08.06 19:45:09 | 000,045,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\hmkd.dll
[2015.08.06 19:45:09 | 000,041,984 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VoiceActivationManager.dll
[2015.08.06 19:45:09 | 000,032,768 | ---- | M] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015.08.06 19:45:09 | 000,024,576 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LicenseManagerShellext.exe
[2015.08.06 19:45:08 | 006,488,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\windows.storage.dll
[2015.08.06 19:45:08 | 005,118,024 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\windows.storage.dll
[2015.08.06 19:45:08 | 004,611,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\actxprxy.dll
[2015.08.06 19:45:08 | 003,248,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msftedit.dll
[2015.08.06 19:45:08 | 002,606,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msftedit.dll
[2015.08.06 19:45:08 | 002,125,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinui.appcore.dll
[2015.08.06 19:45:08 | 001,714,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinui.appcore.dll
[2015.08.06 19:45:08 | 001,591,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\gdi32.dll
[2015.08.06 19:45:08 | 001,417,216 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\lsasrv.dll
[2015.08.06 19:45:08 | 001,203,200 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Devices.Bluetooth.dll
[2015.08.06 19:45:08 | 001,101,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MrmCoreR.dll
[2015.08.06 19:45:08 | 000,966,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\twinapi.appcore.dll
[2015.08.06 19:45:08 | 000,841,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Import.dll
[2015.08.06 19:45:08 | 000,828,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Devices.Bluetooth.dll
[2015.08.06 19:45:08 | 000,823,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MrmCoreR.dll
[2015.08.06 19:45:08 | 000,808,856 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\CoreMessaging.dll
[2015.08.06 19:45:08 | 000,762,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\twinapi.appcore.dll
[2015.08.06 19:45:08 | 000,680,448 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Networking.Connectivity.dll
[2015.08.06 19:45:08 | 000,679,424 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\AppContracts.dll
[2015.08.06 19:45:08 | 000,677,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wuapi.dll
[2015.08.06 19:45:08 | 000,658,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ClipSVC.dll
[2015.08.06 19:45:08 | 000,632,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dxgi.dll
[2015.08.06 19:45:08 | 000,590,336 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\MessagingDataModel2.dll
[2015.08.06 19:45:08 | 000,575,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Import.dll
[2015.08.06 19:45:08 | 000,518,144 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationController.dll
[2015.08.06 19:45:08 | 000,510,976 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\CoreMessaging.dll
[2015.08.06 19:45:08 | 000,503,296 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Networking.Connectivity.dll
[2015.08.06 19:45:08 | 000,465,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\MessagingDataModel2.dll
[2015.08.06 19:45:08 | 000,441,344 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\AppContracts.dll
[2015.08.06 19:45:08 | 000,421,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Bluetooth.dll
[2015.08.06 19:45:08 | 000,335,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wintrust.dll
[2015.08.06 19:45:08 | 000,296,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Internal.Bluetooth.dll
[2015.08.06 19:45:08 | 000,290,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wininit.exe
[2015.08.06 19:45:08 | 000,263,168 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\DisplayManager.dll
[2015.08.06 19:45:08 | 000,191,488 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\DisplayManager.dll
[2015.08.06 19:45:08 | 000,107,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\dwmapi.dll
[2015.08.06 19:45:08 | 000,075,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ACPBackgroundManagerPolicy.dll
[2015.08.06 19:45:08 | 000,067,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\usbser.sys
[2015.08.06 19:45:08 | 000,065,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\bthhfenum.sys
[2015.08.06 19:45:08 | 000,046,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\UcmUcsi.sys
[2015.08.06 19:45:08 | 000,034,816 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VoiceActivationManager.dll
[2015.08.06 19:45:08 | 000,028,672 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationControllerPS.dll
[2015.08.06 19:38:10 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqoa.tlb
[2015.08.06 19:38:10 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqoa10.tlb
[2015.08.06 19:38:09 | 000,635,904 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqsnap.dll
[2015.08.06 19:38:09 | 000,202,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iisRtl.dll
[2015.08.06 19:38:09 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqoa30.tlb
[2015.08.06 19:38:09 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqoa20.tlb
[2015.08.06 19:38:09 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\admwprox.dll
[2015.08.06 19:38:09 | 000,053,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ahadmin.dll
[2015.08.06 19:38:09 | 000,018,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iisreset.exe
[2015.08.06 19:38:09 | 000,015,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wamregps.dll
[2015.08.06 19:38:09 | 000,014,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqcertui.dll
[2015.08.06 19:38:09 | 000,013,312 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\iisrstap.dll
[2015.08.06 19:38:08 | 000,564,224 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqutil.dll
[2015.08.06 19:38:08 | 000,265,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqoa.dll
[2015.08.06 19:38:08 | 000,229,888 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqrt.dll
[2015.08.06 19:38:08 | 000,175,104 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\mqac.sys
[2015.08.06 19:38:08 | 000,168,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iisRtl.dll
[2015.08.06 19:38:08 | 000,130,048 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqlogmgr.dll
[2015.08.06 19:38:08 | 000,050,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\admwprox.dll
[2015.08.06 19:38:08 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ahadmin.dll
[2015.08.06 19:38:08 | 000,016,896 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iisreset.exe
[2015.08.06 19:38:08 | 000,011,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\wamregps.dll
[2015.08.06 19:38:08 | 000,010,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\iisrstap.dll
[2015.08.06 19:38:08 | 000,009,096 | ---- | M] () -- C:\WINDOWS\SysWow64\msmqtrc.mof
[2015.08.06 19:38:07 | 000,813,056 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqsnap.dll
[2015.08.06 19:38:07 | 000,096,768 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqoa.tlb
[2015.08.06 19:38:07 | 000,091,136 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqoa30.tlb
[2015.08.06 19:38:07 | 000,055,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqoa20.tlb
[2015.08.06 19:38:07 | 000,037,376 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqoa10.tlb
[2015.08.06 19:38:07 | 000,018,944 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqcertui.dll
[2015.08.06 19:38:06 | 001,417,728 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqqm.dll
[2015.08.06 19:38:06 | 000,562,176 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqutil.dll
[2015.08.06 19:38:06 | 000,316,928 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqoa.dll
[2015.08.06 19:38:06 | 000,161,792 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mqrt.dll
[2015.08.06 19:38:06 | 000,009,096 | ---- | M] () -- C:\WINDOWS\SysNative\msmqtrc.mof
[2015.08.06 19:38:05 | 000,052,736 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqbkup.exe
[2015.08.06 19:38:05 | 000,026,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mqsvc.exe
[2015.08.06 19:01:24 | 000,010,447 | ---- | M] () -- C:\WINDOWS\diagerr.xml
[2015.08.06 19:01:24 | 000,009,528 | ---- | M] () -- C:\WINDOWS\diagwrn.xml
[2015.08.06 19:01:00 | 000,022,960 | ---- | M] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2015.08.06 18:51:04 | 001,980,268 | ---- | M] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2015.08.06 18:50:26 | 000,000,000 | -H-- | M] () -- C:\ProgramData\DP45977C.lfl
[2015.08.06 18:27:40 | 000,023,168 | -H-- | M] () -- C:\WINDOWS\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
[2015.08.06 18:27:40 | 000,023,168 | -H-- | M] () -- C:\WINDOWS\SysNative\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
[2015.08.06 13:39:48 | 000,001,924 | ---- | M] () -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700.lnk
[2015.08.06 05:17:40 | 000,200,528 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wof.sys
[2015.08.06 04:22:03 | 000,685,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\WdiWiFi.sys
[2015.08.05 06:49:51 | 000,783,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfsvr.dll
[2015.08.05 06:29:04 | 000,644,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\mfsvr.dll
[2015.08.05 06:00:28 | 000,310,784 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\ActionCenter.dll
[2015.08.05 05:54:25 | 001,274,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\wifinetworkmanager.dll
[2015.08.05 05:39:56 | 000,261,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\ActionCenter.dll
[2015.08.05 03:40:16 | 018,385,304 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvwgf2umx.dll
[2015.08.05 03:40:16 | 015,762,912 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvwgf2um.dll
[2015.08.05 03:40:14 | 030,529,168 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglv64.dll
[2015.08.05 03:40:14 | 022,983,824 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglv32.dll
[2015.08.05 03:40:14 | 016,169,160 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvopencl.dll
[2015.08.05 03:40:14 | 013,285,144 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvopencl.dll
[2015.08.05 03:40:14 | 001,569,080 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdagenco6420103.dll
[2015.08.05 03:40:14 | 001,173,904 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvumdshimx.dll
[2015.08.05 03:40:14 | 001,071,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFR64.dll
[2015.08.05 03:40:14 | 000,999,864 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvumdshim.dll
[2015.08.05 03:40:14 | 000,993,608 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFR.dll
[2015.08.05 03:40:14 | 000,418,448 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvIFROpenGL.dll
[2015.08.05 03:40:14 | 000,374,600 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvIFROpenGL.dll
[2015.08.05 03:40:14 | 000,206,152 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\drivers\nvhda64v.sys
[2015.08.05 03:40:14 | 000,187,136 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvinitx.dll
[2015.08.05 03:40:14 | 000,165,512 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvinit.dll
[2015.08.05 03:40:14 | 000,161,064 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvoglshim64.dll
[2015.08.05 03:40:14 | 000,137,224 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvoglshim32.dll
[2015.08.05 03:40:14 | 000,041,784 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvhdap64.dll
[2015.08.05 03:40:12 | 042,740,552 | ---- | M] () -- C:\WINDOWS\SysNative\nvcompiler.dll
[2015.08.05 03:40:12 | 037,759,304 | ---- | M] () -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2015.08.05 03:40:12 | 016,021,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvd3dumx.dll
[2015.08.05 03:40:12 | 014,521,840 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuda.dll
[2015.08.05 03:40:12 | 012,983,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvd3dum.dll
[2015.08.05 03:40:12 | 011,852,096 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuda.dll
[2015.08.05 03:40:12 | 002,371,216 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcuvid.dll
[2015.08.05 03:40:12 | 002,174,280 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvcuvid.dll
[2015.08.05 03:40:12 | 001,908,368 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispco6435362.dll
[2015.08.05 03:40:12 | 001,567,888 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvdispgenco6435362.dll
[2015.08.05 03:40:12 | 001,063,240 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\NvFBC64.dll
[2015.08.05 03:40:12 | 000,985,248 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\NvFBC.dll
[2015.08.05 03:40:12 | 000,797,616 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncMFTH264.dll
[2015.08.05 03:40:12 | 000,642,896 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncMFTH264.dll
[2015.08.05 03:40:12 | 000,394,696 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvEncodeAPI64.dll
[2015.08.05 03:40:12 | 000,384,840 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvDecMFTMjpeg.dll
[2015.08.05 03:40:12 | 000,350,864 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvDecMFTMjpeg.dll
[2015.08.05 03:40:12 | 000,325,168 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvEncodeAPI.dll
[2015.08.05 03:40:10 | 003,360,576 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvapi64.dll
[2015.08.05 03:40:10 | 002,971,920 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysWow64\nvapi.dll
[2015.08.04 06:41:15 | 000,003,584 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\de-DE\mountmgr.sys.mui
[2015.08.04 06:06:24 | 000,583,128 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mf.dll
[2015.08.04 06:06:14 | 000,243,248 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\mfps.dll
[2015.08.04 05:23:25 | 000,078,848 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VPNv2CSP.dll
[2015.08.04 04:59:20 | 001,212,416 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\RemoteNaturalLanguage.dll
[2015.08.04 04:47:23 | 000,898,560 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\RemoteNaturalLanguage.dll
[2015.08.03 12:12:32 | 000,045,680 | -H-- | M] (LogMeIn Inc.) -- C:\WINDOWS\SysNative\drivers\Hamdrv.sys
[2015.08.03 12:12:32 | 000,033,856 | -H-- | M] (LogMeIn, Inc.) -- C:\WINDOWS\SysNative\hamachi.sys
[2015.08.03 04:32:49 | 000,306,688 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NotificationObjFactory.dll
[2015.08.03 04:28:04 | 000,268,800 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\NotificationObjFactory.dll
[2015.08.03 04:19:59 | 000,505,696 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms2.sys
[2015.08.03 04:19:58 | 000,393,568 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\dxgmms1.sys
[2015.08.03 04:18:37 | 000,046,432 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\msgpiowin32.sys
[2015.08.03 04:18:28 | 000,594,472 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Internal.Shell.Broker.dll
[2015.08.03 04:18:01 | 008,613,200 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\SysNative\Windows.Media.Protection.PlayReady.dll
[2015.08.03 04:17:53 | 000,052,264 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\wpcfltr.sys
[2015.08.03 04:17:45 | 000,516,960 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\drivers\USBHUB3.SYS
[2015.08.03 04:12:58 | 000,801,632 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WWAHost.exe
[2015.08.03 03:56:47 | 006,878,256 | ---- | M] (Microsoft Corp.) -- C:\WINDOWS\SysWow64\Windows.Media.Protection.PlayReady.dll
[2015.08.03 03:49:58 | 000,700,256 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\WWAHost.exe
[2015.08.03 03:31:01 | 000,911,360 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModel.dll
[2015.08.03 03:30:59 | 000,253,952 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_UserAccount.dll
[2015.08.03 03:24:24 | 000,193,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SharedStartModelShim.dll
[2015.08.03 03:24:19 | 000,503,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\tileobjserver.dll
[2015.08.03 03:24:05 | 000,282,112 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEEventDispatcher.dll
[2015.08.03 03:23:57 | 000,122,880 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\VEDataLayerHelpers.dll
[2015.08.03 03:22:51 | 000,317,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\configmanager2.dll
[2015.08.03 03:22:23 | 001,601,536 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Media.Speech.dll
[2015.08.03 03:21:25 | 000,179,712 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\coredpus.dll
[2015.08.03 03:19:54 | 000,215,040 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\notepad.exe
[2015.08.03 03:18:43 | 003,780,096 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SettingsHandlers_nt.dll
[2015.08.03 03:18:24 | 000,162,304 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\SubscriptionMgr.dll
[2015.08.03 03:18:07 | 000,120,832 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\NetworkStatus.dll
[2015.08.03 03:15:28 | 000,573,440 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.Cortana.Desktop.dll
[2015.08.03 03:15:25 | 001,290,752 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.UI.Shell.dll
[2015.08.03 03:15:24 | 000,171,520 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\WinBioDataModel.dll
[2015.08.03 03:15:18 | 000,595,456 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LogonController.dll
[2015.08.03 03:15:00 | 000,384,000 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\LockAppBroker.dll
[2015.08.03 03:14:52 | 000,273,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\Windows.ApplicationModel.LockScreen.dll
[2015.08.03 03:12:54 | 000,217,088 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEEventDispatcher.dll
[2015.08.03 03:12:48 | 000,081,920 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\VEDataLayerHelpers.dll
[2015.08.03 03:11:40 | 000,814,080 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysNative\msctfuimanager.dll
[2015.08.03 03:10:15 | 001,162,240 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.Media.Speech.dll
[2015.08.03 03:03:28 | 000,494,592 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LogonController.dll
[2015.08.03 03:02:44 | 000,311,808 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\LockAppBroker.dll
[2015.08.03 03:02:18 | 000,195,072 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\Windows.ApplicationModel.LockScreen.dll
[2015.08.03 02:59:11 | 000,752,640 | ---- | M] (Microsoft Corporation) -- C:\WINDOWS\SysWow64\msctfuimanager.dll
[2015.07.25 23:24:40 | 000,000,209 | ---- | M] () -- C:\Users\dieFackel\Desktop\StarMade Demo.url
[2015.07.23 04:02:12 | 000,031,976 | ---- | M] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2015.07.23 03:10:18 | 002,558,608 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvcr.dll
[2015.07.23 03:10:18 | 000,385,168 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvmctray.dll
[2015.07.23 03:10:18 | 000,062,608 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvshext.dll
[2015.07.23 03:10:17 | 006,873,928 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvcpl.dll
[2015.07.23 03:10:17 | 003,493,008 | ---- | M] (NVIDIA Corporation) -- C:\WINDOWS\SysNative\nvsvc64.dll
[8 C:\WINDOWS\SysNative\drivers\*.tmp files -> C:\WINDOWS\SysNative\drivers\*.tmp -> ]
[1 C:\WINDOWS\SysWow64\*.tmp files -> C:\WINDOWS\SysWow64\*.tmp -> ]
[1 C:\WINDOWS\*.tmp files -> C:\WINDOWS\*.tmp -> ]
 
========== Files Created - No Company Name ==========
 
[2015.09.20 13:55:55 | 000,000,863 | ---- | C] () -- C:\Users\Public\Desktop\CCleaner.lnk
[2015.09.20 13:34:41 | 000,001,175 | ---- | C] () -- C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
[2015.09.20 13:10:45 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\SOL-PC_dieFackel_HistoryPrediction.bin
[2015.09.19 02:33:11 | 000,000,838 | ---- | C] () -- C:\Users\dieFackel\Desktop\CrystalDiskInfo.lnk
[2015.09.18 19:13:17 | 000,001,967 | ---- | C] () -- C:\Users\Public\Desktop\Avast Free Antivirus.lnk
[2015.09.17 14:07:09 | 000,028,672 | ---- | C] () -- C:\Users\dieFackel\Desktop\memtest.exe
[2015.08.31 18:08:09 | 002,498,808 | ---- | C] () -- C:\WINDOWS\SysNative\CoreUIComponents.dll
[2015.08.31 18:08:08 | 001,771,592 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreUIComponents.dll
[2015.08.31 18:08:06 | 000,247,296 | ---- | C] () -- C:\WINDOWS\SysNative\facecredentialprovider.dll
[2015.08.31 18:08:05 | 000,008,847 | ---- | C] () -- C:\WINDOWS\SysNative\ResPriHMImageList
[2015.08.22 19:29:28 | 000,000,208 | ---- | C] () -- C:\Users\dieFackel\Desktop\Total War SHOGUN 2.url
[2015.08.19 18:31:45 | 002,446,336 | ---- | C] () -- C:\WINDOWS\SysNative\InputService.dll
[2015.08.19 18:31:43 | 001,823,232 | ---- | C] () -- C:\WINDOWS\SysWow64\InputService.dll
[2015.08.19 18:31:42 | 000,413,184 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_win.dll
[2015.08.19 18:31:42 | 000,404,480 | ---- | C] () -- C:\WINDOWS\SysNative\diagtrack_wininternal.dll
[2015.08.19 18:31:41 | 000,293,376 | ---- | C] () -- C:\WINDOWS\SysNative\TextInputFramework.dll
[2015.08.19 18:31:39 | 000,200,704 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputFramework.dll
[2015.08.17 23:58:57 | 000,001,089 | ---- | C] () -- C:\Users\dieFackel\Desktop\Common.lnk
[2015.08.14 03:25:23 | 000,001,902 | ---- | C] () -- C:\Users\dieFackel\Desktop\StarMade Server.lnk
[2015.08.07 16:28:27 | 000,016,148 | ---- | C] () -- C:\WINDOWS\SysNative\DIEFACKEL-PC_dieFackel_HistoryPrediction.bin
[2015.08.06 19:45:09 | 000,505,344 | ---- | C] () -- C:\WINDOWS\SysNative\EditionUpgradeManagerObj.dll
[2015.08.06 19:45:09 | 000,032,768 | ---- | C] () -- C:\WINDOWS\SysNative\LicenseManagerApi.dll
[2015.08.06 19:05:45 | 000,002,406 | ---- | C] () -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
[2015.08.06 19:04:58 | 000,001,051 | ---- | C] () -- C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Optionale Features.lnk
[2015.08.06 19:01:00 | 000,022,960 | ---- | C] () -- C:\WINDOWS\SysNative\emptyregdb.dat
[2015.08.06 18:57:46 | 2144,747,519 | -HS- | C] () -- C:\hiberfil.sys
[2015.08.06 18:56:30 | 000,001,576 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
[2015.08.06 18:51:07 | 002,077,126 | ---- | C] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI
[2015.08.06 18:51:04 | 001,980,268 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI
[2015.08.06 18:50:26 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl
[2015.08.06 18:50:16 | 005,121,613 | ---- | C] () -- C:\WINDOWS\SysNative\nvcoproc.bin
[2015.08.06 18:48:36 | 268,435,456 | -HS- | C] () -- C:\swapfile.sys
[2015.08.06 18:24:15 | 000,010,447 | ---- | C] () -- C:\WINDOWS\diagerr.xml
[2015.08.06 18:24:15 | 000,009,528 | ---- | C] () -- C:\WINDOWS\diagwrn.xml
[2015.08.05 16:57:03 | 000,000,872 | ---- | C] () -- C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Evolve.lnk
[2015.08.05 03:40:12 | 042,740,552 | ---- | C] () -- C:\WINDOWS\SysNative\nvcompiler.dll
[2015.08.05 03:40:12 | 037,759,304 | ---- | C] () -- C:\WINDOWS\SysWow64\nvcompiler.dll
[2015.07.25 23:24:40 | 000,000,209 | ---- | C] () -- C:\Users\dieFackel\Desktop\StarMade Demo.url
[2015.07.23 04:02:12 | 000,031,976 | ---- | C] () -- C:\WINDOWS\SysNative\nvinfo.pb
[2015.07.10 14:20:52 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat
[2015.07.10 13:04:39 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT
[2015.07.10 13:04:38 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat
[2015.07.10 13:00:35 | 000,161,632 | ---- | C] () -- C:\WINDOWS\SysWow64\weretw.dll
[2015.07.10 13:00:33 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat
[2015.07.10 13:00:32 | 000,047,104 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll
[2015.07.10 13:00:31 | 000,156,672 | ---- | C] () -- C:\WINDOWS\SysWow64\MTF.dll
[2015.07.10 13:00:30 | 000,028,672 | ---- | C] () -- C:\WINDOWS\SysWow64\dtdump.exe
[2015.07.10 13:00:29 | 000,081,408 | ---- | C] () -- C:\WINDOWS\SysWow64\InputLocaleManager.dll
[2015.07.10 13:00:29 | 000,057,344 | ---- | C] () -- C:\WINDOWS\SysWow64\EditBufferTestHook.dll
[2015.07.10 13:00:29 | 000,053,760 | ---- | C] () -- C:\WINDOWS\SysWow64\WpKbdLayout.dll
[2015.07.10 13:00:29 | 000,022,016 | ---- | C] () -- C:\WINDOWS\SysWow64\WordBreakers.dll
[2015.07.10 13:00:28 | 000,270,848 | ---- | C] () -- C:\WINDOWS\SysWow64\HrtfApo.dll
[2015.07.10 13:00:27 | 000,364,544 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll
[2015.07.10 13:00:26 | 000,022,528 | ---- | C] () -- C:\WINDOWS\SysWow64\efsext.dll
[2015.07.10 13:00:25 | 000,002,269 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini
[2015.07.10 13:00:24 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat
[2015.07.10 12:59:51 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin
[2015.06.21 20:51:40 | 000,009,494 | ---- | C] () -- C:\Users\dieFackel\AppData\Local\recently-used.xbel
[2015.04.23 19:43:16 | 000,118,576 | ---- | C] () -- C:\WINDOWS\SysWow64\SecUPDUtilSvc.exe
[2015.04.23 19:43:06 | 002,738,496 | ---- | C] () -- C:\WINDOWS\TotalUninstaller.exe
[2015.04.21 13:24:13 | 000,007,603 | ---- | C] () -- C:\Users\dieFackel\AppData\Local\Resmon.ResmonCfg
[2015.02.02 04:09:57 | 000,000,000 | -HS- | C] () -- C:\Users\dieFackel\AppData\Local\LumaEmu
[2014.10.31 15:44:14 | 000,000,000 | ---- | C] () -- C:\Users\dieFackel\AppData\Local\{A310A91F-EC09-4402-A3F7-8F8D2A6ACFCD}
[2013.10.01 20:17:19 | 000,000,037 | -HS- | C] () -- C:\Users\dieFackel\AppData\Local\70149b02515b3bb20dd492.47983420
[2013.09.01 13:00:24 | 000,000,057 | ---- | C] () -- C:\ProgramData\Ament.ini
 
========== ZeroAccess Check ==========
 
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
 
[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64
 
[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64
"" = C:\Windows\SysNative\windows.storage.dll -- [2015.08.06 19:45:08 | 006,488,312 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]
"" = %SystemRoot%\system32\windows.storage.dll -- [2015.08.06 19:45:08 | 005,118,024 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Apartment
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2015.07.10 12:59:53 | 000,995,328 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]
"" = %systemroot%\system32\wbem\fastprox.dll -- [2015.07.10 13:00:23 | 000,754,688 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Free
 
[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64
"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2015.07.10 12:59:55 | 000,516,096 | ---- | M] (Microsoft Corporation)
"ThreadingModel" = Both
 
[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

< End of report >
         

Alt 20.09.2015, 19:12   #8
burningice
/// Malwareteam
 
Malware Befall? - Standard

Malware Befall?



Schritt 1
Lade Dir bitte von hier Revo Uninstaller Download Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
  • Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
  • Klicke auf Optionen und wähle als Sprache Deutsch.
  • Suche im Uninstallerfeld nach den Programmen:

    Browser Configuration Utility

  • Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
  • Wähle anschließend den Modus "Moderat" aus.
  • Reste löschen:
    Klicke auf dann auf und dann auf .

 



Schritt 2
Downloade dir bitte Malwarebytes Anti-Rootkit Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.
  • Starte bitte die mbar.exe.
  • Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
  • Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
  • Klicke auf den CleanUp Button und erlaube den Neustart.
  • Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
  • Nach dem Neustart starte die mbar.exe erneut.
  • Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.
Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers


Schritt 3
Downloade dir bitte TDSSKiller TDSSKiller.exe und speichere diese Datei auf dem Desktop
  • Starte die TDSSKiller.exe - Einstellen wie in der Anleitung zu TDSSKiller beschrieben.
  • Drücke Start Scan
  • Sollten infizierte Objekte gefunden werden, wähle keinesfalls Cure. Wähle Skip und klicke auf Continue.
    TDSSKiller wird eine Logfile auf deinem Systemlaufwerk speichern (Meistens C:\)
    Als Beispiel: C:\TDSSKiller.<Version_Datum_Uhrzeit>log.txt
Poste den Inhalt bitte in jedem Fall hier in deinen Thread.


Bitte poste in deiner nächsten Antwort also:
  • Log von MBAR
  • Log von TDSSKiller
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Alt 21.09.2015, 16:25   #9
dieFackel
 
Malware Befall? - Standard

Malware Befall?



Browser Configuration Utility habe ich erfolgreich entfernt und die anderen beiden Programme haben, wohl zum Glück, nichts gefunden.
Hier die Logs:

MBAR
Code:
ATTFilter
Malwarebytes Anti-Rootkit BETA 1.9.3.1001
www.malwarebytes.org

Database version:
  main:    v2015.09.21.04
  rootkit: v2015.09.18.01

Windows 10 x64 NTFS
Internet Explorer 11.0.10240.16431
dieFackel :: SOL-PC [administrator]

21.09.2015 16:06:25
mbar-log-2015-09-21 (16-06-25).txt

Scan type: Quick scan
Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken
Scan options disabled: 
Objects scanned: 447082
Time elapsed: 10 minute(s), 39 second(s)

Memory Processes Detected: 0
(No malicious items detected)

Memory Modules Detected: 0
(No malicious items detected)

Registry Keys Detected: 0
(No malicious items detected)

Registry Values Detected: 0
(No malicious items detected)

Registry Data Items Detected: 0
(No malicious items detected)

Folders Detected: 0
(No malicious items detected)

Files Detected: 0
(No malicious items detected)

Physical Sectors Detected: 0
(No malicious items detected)

(end)
         
TDSSKiller
Code:
ATTFilter
16:21:13.0571 0x2118  TDSS rootkit removing tool 3.1.0.5 Jul 24 2015 12:29:57
16:21:15.0488 0x2118  ============================================================
16:21:15.0488 0x2118  Current date / time: 2015/09/21 16:21:15.0488
16:21:15.0489 0x2118  SystemInfo:
16:21:15.0489 0x2118  
16:21:15.0489 0x2118  OS Version: 10.0.10240 ServicePack: 0.0
16:21:15.0489 0x2118  Product type: Workstation
16:21:15.0489 0x2118  ComputerName: SOL-PC
16:21:15.0489 0x2118  UserName: dieFackel
16:21:15.0489 0x2118  Windows directory: C:\WINDOWS
16:21:15.0489 0x2118  System windows directory: C:\WINDOWS
16:21:15.0489 0x2118  Running under WOW64
16:21:15.0489 0x2118  Processor architecture: Intel x64
16:21:15.0489 0x2118  Number of processors: 4
16:21:15.0489 0x2118  Page size: 0x1000
16:21:15.0489 0x2118  Boot type: Normal boot
16:21:15.0489 0x2118  ============================================================
16:21:15.0562 0x2118  KLMD registered as C:\WINDOWS\system32\drivers\00742783.sys
16:21:15.0649 0x2118  System UUID: {9087F08A-3F3A-1B8D-DDC7-FA3D68387CAB}
16:21:15.0962 0x2118  Drive \Device\Harddisk0\DR0 - Size: 0x1DCF856000 ( 119.24 Gb ), SectorSize: 0x200, Cylinders: 0x3CCE, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:21:15.0978 0x2118  Drive \Device\Harddisk1\DR1 - Size: 0xE8E0DB6000 ( 931.51 Gb ), SectorSize: 0x200, Cylinders: 0x1DB01, SectorsPerTrack: 0x3F, TracksPerCylinder: 0xFF, Type 'K0', Flags 0x00000040
16:21:15.0983 0x2118  ============================================================
16:21:15.0983 0x2118  \Device\Harddisk0\DR0:
16:21:15.0983 0x2118  MBR partitions:
16:21:15.0983 0x2118  \Device\Harddisk0\DR0\Partition1: MBR, Type 0x7, StartLBA 0x800, BlocksNum 0x32000
16:21:15.0983 0x2118  \Device\Harddisk0\DR0\Partition2: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0xEE49000
16:21:15.0983 0x2118  \Device\Harddisk1\DR1:
16:21:15.0983 0x2118  MBR partitions:
16:21:15.0983 0x2118  \Device\Harddisk1\DR1\Partition1: MBR, Type 0x7, StartLBA 0x32800, BlocksNum 0x746D3000
16:21:15.0983 0x2118  ============================================================
16:21:15.0984 0x2118  C: <-> \Device\Harddisk0\DR0\Partition2
16:21:16.0002 0x2118  D: <-> \Device\Harddisk1\DR1\Partition1
16:21:16.0002 0x2118  ============================================================
16:21:16.0002 0x2118  Initialize success
16:21:16.0002 0x2118  ============================================================
16:21:18.0567 0x2360  ============================================================
16:21:18.0567 0x2360  Scan started
16:21:18.0567 0x2360  Mode: Manual; 
16:21:18.0567 0x2360  ============================================================
16:21:18.0567 0x2360  KSN ping started
16:21:21.0022 0x2360  KSN ping finished: true
16:21:21.0856 0x2360  ================ Scan system memory ========================
16:21:21.0856 0x2360  System memory - ok
16:21:21.0857 0x2360  ================ Scan services =============================
16:21:21.0915 0x2360  1394ohci - ok
16:21:21.0918 0x2360  3ware - ok
16:21:21.0922 0x2360  ACPI - ok
16:21:21.0927 0x2360  acpiex - ok
16:21:21.0932 0x2360  acpipagr - ok
16:21:21.0937 0x2360  AcpiPmi - ok
16:21:21.0941 0x2360  acpitime - ok
16:21:21.0949 0x2360  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:21:21.0951 0x2360  AdobeARMservice - ok
16:21:21.0994 0x2360  [ 368290D0A612D62DA6F3D798B1BB8FE7, D573BF8543F37BC51B88A2473EDFD28AFBCCC446E8CADD54A90FA48D8739D222 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:21:21.0999 0x2360  AdobeFlashPlayerUpdateSvc - ok
16:21:22.0005 0x2360  ADP80XX - ok
16:21:22.0010 0x2360  AFD - ok
16:21:22.0013 0x2360  agp440 - ok
16:21:22.0017 0x2360  ahcache - ok
16:21:22.0021 0x2360  AJRouter - ok
16:21:22.0024 0x2360  ALG - ok
16:21:22.0028 0x2360  AmdK8 - ok
16:21:22.0032 0x2360  AmdPPM - ok
16:21:22.0037 0x2360  [ 53D8D46D51D390ABDB54ECA623165CB7, D16A3604412D0DC3EA68320FB6980D146ED60D587AAB6B65810C038AFF1EC237 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
16:21:22.0039 0x2360  amdsata - ok
16:21:22.0042 0x2360  amdsbs - ok
16:21:22.0047 0x2360  [ 75C51148154E34EB3D7BB84749A758D5, 8865F223CBAE166A9BF6CBCDA66F63369F151CCB449A28E95560C36AD45D0C85 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
16:21:22.0048 0x2360  amdxata - ok
16:21:22.0051 0x2360  AppHostSvc - ok
16:21:22.0054 0x2360  AppID - ok
16:21:22.0058 0x2360  AppIDSvc - ok
16:21:22.0062 0x2360  Appinfo - ok
16:21:22.0066 0x2360  [ 301AA64F9643BC453D90A66C4C0E7204, F9EDAD13F865B5F0A89FF59827EECB519F113EB037F2DA8367F1572629B503B1 ] AppleCharger    C:\WINDOWS\system32\DRIVERS\AppleCharger.sys
16:21:22.0067 0x2360  AppleCharger - ok
16:21:22.0072 0x2360  [ 95EF7247C50C7241FDAE39A9B3AFF4AE, 6E08FB095C04B2E217B139D6431336C0F24C128A2A83082A3085DC8C44AA247D ] AppleChargerSrv C:\WINDOWS\system32\AppleChargerSrv.exe
16:21:22.0073 0x2360  AppleChargerSrv - ok
16:21:22.0078 0x2360  AppReadiness - ok
16:21:22.0083 0x2360  AppXSvc - ok
16:21:22.0087 0x2360  arcsas - ok
16:21:22.0103 0x2360  aspnet_state - ok
16:21:22.0108 0x2360  [ B5B4C90E9F52DA8586F1E5461AD90A5D, D1EAA34E6AEB014E942D22F8CB5FB19BF1E2EADE5B5357274C001F44FDC25F05 ] aswHwid         C:\WINDOWS\system32\drivers\aswHwid.sys
16:21:22.0110 0x2360  aswHwid - ok
16:21:22.0118 0x2360  [ 300CB8E510855189CAD0B72FFB5590CB, EB50DC553FA8FD9DE3F60AAFED20702EAFBB1498EBD3220A39CC52A12F694246 ] aswMonFlt       C:\WINDOWS\system32\drivers\aswMonFlt.sys
16:21:22.0120 0x2360  aswMonFlt - ok
16:21:22.0126 0x2360  [ 6D37D8DB30D086739507C5F6E542656A, 746D9E32E729138EA19062F4E6B6C98B6833504020A296E3E2A9CD92E0FED0B9 ] aswRdr          C:\WINDOWS\system32\drivers\aswRdr2.sys
16:21:22.0129 0x2360  aswRdr - ok
16:21:22.0135 0x2360  [ 07E32DFCA422A2920482D762D01957EC, A6502D26266D708E55EB2883897673AD3087C41D9EA0B41CD6BF6BD923EBDCB8 ] aswRvrt         C:\WINDOWS\system32\drivers\aswRvrt.sys
16:21:22.0136 0x2360  aswRvrt - ok
16:21:22.0160 0x2360  [ 3B4AC2DBFC86F7247C1FF1FAF2860530, A54A693D01C02AAE2B78BFE9B3900B5A6DD0C2C37C8FA58B14B5F57107032FF5 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys
16:21:22.0179 0x2360  aswSnx - ok
16:21:22.0193 0x2360  [ A04F190FCD762E7BCC9BFC70563C52DB, 2BF6823F2EADBDA28DF1CCECCAC84D9FF37D3CFB66A7B402575C6B9FCFB45EB3 ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys
16:21:22.0201 0x2360  aswSP - ok
16:21:22.0208 0x2360  [ 6E53278ECCFFBC2ACC2A5006745ED4BB, 392170073A8933DB43CD1D64AD087F972F1971BF83BCAFE5B8FA1273C02026CE ] aswStm          C:\WINDOWS\system32\drivers\aswStm.sys
16:21:22.0212 0x2360  aswStm - ok
16:21:22.0221 0x2360  [ 91782404718C6352C26B3242BAC3F0F1, 84B1CDD1EBC83FAEBDCC8F67B13CA405C6CF0C518FC016603889EBE48FC91AB9 ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys
16:21:22.0225 0x2360  aswVmm - ok
16:21:22.0230 0x2360  AsyncMac - ok
16:21:22.0233 0x2360  atapi - ok
16:21:22.0237 0x2360  [ 7C5D273E29DCC5505469B299C6F29163, 206CAB85CE12A3953F0861C811575DC7FD000147436219EEE334584A33370B3A ] AtiPcie         C:\WINDOWS\system32\drivers\AtiPcie.sys
16:21:22.0239 0x2360  AtiPcie - ok
16:21:22.0249 0x2360  [ FC0E8778C000291CAF60EB88C011E931, 09BCCA3DE01021AEF76DFB46F01D21BA6FF409E816FA7547E5C3DFBF3A615ED2 ] atksgt          C:\WINDOWS\system32\DRIVERS\atksgt.sys
16:21:22.0255 0x2360  atksgt - ok
16:21:22.0259 0x2360  AudioEndpointBuilder - ok
16:21:22.0262 0x2360  Audiosrv - ok
16:21:22.0276 0x2360  [ 54236E79A44F909612391C8A2D70D512, B0DF5BCC4F90AF087D0306F8D81F90B2CAE0176813E3AA6A7D5460F7878677CD ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
16:21:22.0282 0x2360  avast! Antivirus - ok
16:21:22.0286 0x2360  AxInstSV - ok
16:21:22.0289 0x2360  b06bdrv - ok
16:21:22.0292 0x2360  BasicDisplay - ok
16:21:22.0296 0x2360  BasicRender - ok
16:21:22.0301 0x2360  bcmfn2 - ok
16:21:22.0304 0x2360  BDESVC - ok
16:21:22.0308 0x2360  Beep - ok
16:21:22.0333 0x2360  [ 2EE42E7539BBF4252F7F47B288E61CEA, 2113A7C825AE2D222FD80D092BAA254AB3EFA8A2F58EC8325837A6BC611BC715 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
16:21:22.0354 0x2360  BEService - ok
16:21:22.0359 0x2360  BFE - ok
16:21:22.0362 0x2360  BITS - ok
16:21:22.0366 0x2360  bowser - ok
16:21:22.0372 0x2360  [ 7487B46E104303E247F68D485C12326F, BAC6A4FFD5B4009B4B673479630FAA2784618438925DFB6489F07BF163188114 ] BRDriver64_1_3_3_E02B25FC C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys
16:21:22.0374 0x2360  BRDriver64_1_3_3_E02B25FC - ok
16:21:22.0378 0x2360  BrokerInfrastructure - ok
16:21:22.0381 0x2360  Browser - ok
16:21:22.0392 0x2360  [ 448917845F097FCE9D4554C3D2001EF3, BDCBEC01579D7CF28963E4E13CDC5B26E4B69CA24FA2CC4D6E24CAE0DDBCB3FE ] BRSptStub       C:\ProgramData\BitRaider\BRSptStub.exe
16:21:22.0399 0x2360  BRSptStub - ok
16:21:22.0403 0x2360  BthAvrcpTg - ok
16:21:22.0406 0x2360  BthHFEnum - ok
16:21:22.0410 0x2360  bthhfhid - ok
16:21:22.0414 0x2360  BthHFSrv - ok
16:21:22.0417 0x2360  BTHMODEM - ok
16:21:22.0422 0x2360  bthserv - ok
16:21:22.0425 0x2360  buttonconverter - ok
16:21:22.0431 0x2360  CapImg - ok
16:21:22.0436 0x2360  cdfs - ok
16:21:22.0440 0x2360  CDPSvc - ok
16:21:22.0444 0x2360  cdrom - ok
16:21:22.0448 0x2360  CertPropSvc - ok
16:21:22.0452 0x2360  circlass - ok
16:21:22.0455 0x2360  CLFS - ok
16:21:22.0461 0x2360  ClipSVC - ok
16:21:22.0474 0x2360  CmBatt - ok
16:21:22.0481 0x2360  CNG - ok
16:21:22.0485 0x2360  cnghwassist - ok
16:21:22.0508 0x2360  CompositeBus - ok
16:21:22.0513 0x2360  COMSysApp - ok
16:21:22.0517 0x2360  condrv - ok
16:21:22.0521 0x2360  CoreMessagingRegistrar - ok
16:21:22.0530 0x2360  CryptSvc - ok
16:21:22.0538 0x2360  dam - ok
16:21:22.0544 0x2360  dc1-controller - ok
16:21:22.0556 0x2360  DcomLaunch - ok
16:21:22.0560 0x2360  DcpSvc - ok
16:21:22.0565 0x2360  defragsvc - ok
16:21:22.0568 0x2360  DeviceAssociationService - ok
16:21:22.0571 0x2360  DeviceInstall - ok
16:21:22.0574 0x2360  DevQueryBroker - ok
16:21:22.0579 0x2360  Dfsc - ok
16:21:22.0583 0x2360  Dhcp - ok
16:21:22.0587 0x2360  diagnosticshub.standardcollector.service - ok
16:21:22.0590 0x2360  DiagTrack - ok
16:21:22.0594 0x2360  disk - ok
16:21:22.0599 0x2360  DmEnrollmentSvc - ok
16:21:22.0602 0x2360  dmvsc - ok
16:21:22.0606 0x2360  dmwappushservice - ok
16:21:22.0609 0x2360  Dnscache - ok
16:21:22.0614 0x2360  dot3svc - ok
16:21:22.0618 0x2360  DPS - ok
16:21:22.0621 0x2360  drmkaud - ok
16:21:22.0624 0x2360  DsmSvc - ok
16:21:22.0628 0x2360  DsSvc - ok
16:21:22.0632 0x2360  DXGKrnl - ok
16:21:22.0635 0x2360  Eaphost - ok
16:21:22.0638 0x2360  ebdrv - ok
16:21:22.0642 0x2360  EFS - ok
16:21:22.0645 0x2360  EhStorClass - ok
16:21:22.0649 0x2360  EhStorTcgDrv - ok
16:21:22.0653 0x2360  [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
16:21:22.0655 0x2360  ElbyCDIO - ok
16:21:22.0658 0x2360  embeddedmode - ok
16:21:22.0662 0x2360  EntAppSvc - ok
16:21:22.0666 0x2360  ErrDev - ok
16:21:22.0671 0x2360  [ B8FA96995726D1FA58476E352C02AD82, 6BBD49B16A19CC3C3337707EFBEB6BC355CB077CBBBC99D8985A3FBB6E871A89 ] ES lite Service C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
16:21:22.0673 0x2360  ES lite Service - ok
16:21:22.0680 0x2360  EventSystem - ok
16:21:22.0684 0x2360  exfat - ok
16:21:22.0688 0x2360  fastfat - ok
16:21:22.0691 0x2360  Fax - ok
16:21:22.0694 0x2360  fcvsc - ok
16:21:22.0698 0x2360  fdc - ok
16:21:22.0702 0x2360  fdPHost - ok
16:21:22.0705 0x2360  FDResPub - ok
16:21:22.0709 0x2360  fhsvc - ok
16:21:22.0713 0x2360  FileCrypt - ok
16:21:22.0716 0x2360  FileInfo - ok
16:21:22.0720 0x2360  Filetrace - ok
16:21:22.0723 0x2360  flpydisk - ok
16:21:22.0726 0x2360  FltMgr - ok
16:21:22.0731 0x2360  FontCache - ok
16:21:22.0734 0x2360  FontCache3.0.0.0 - ok
16:21:22.0738 0x2360  FsDepends - ok
16:21:22.0741 0x2360  Fs_Rec - ok
16:21:22.0744 0x2360  fvevol - ok
16:21:22.0749 0x2360  gagp30kx - ok
16:21:22.0809 0x2360  [ 7037D548B726108F9420B9F345573DC4, 659202CD4F8E789B47D9E7281312DD87B4718A615EC8B5C7F143E84AC7B9ACA3 ] GalaxyClientService D:\Spiele\GalaxyClient\GalaxyClientService.exe
16:21:22.0848 0x2360  GalaxyClientService - ok
16:21:23.0002 0x2360  [ 7747954B78DEED16169FC816108FE995, 677A09A5702884A138C83739487AF23EF6E4C8F79875997D26417E823D692293 ] GalaxyCommunication C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
16:21:23.0146 0x2360  GalaxyCommunication - ok
16:21:23.0175 0x2360  [ 7907E14F9BCF3A4689C9A74A1A873CB6, 17927B93B2D6AB4271C158F039CAE2D60591D6A14458F5A5690AEC86F5D54229 ] gdrv            C:\Windows\gdrv.sys
16:21:23.0176 0x2360  gdrv - ok
16:21:23.0180 0x2360  gencounter - ok
16:21:23.0184 0x2360  genericusbfn - ok
16:21:23.0212 0x2360  [ C2730FE9713C1C474257A7085386B11E, 7D35D00D2B455841C8C9A87CE92885CD22F4B8B6690CB21443ED1B515117EF95 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
16:21:23.0231 0x2360  GfExperienceService - ok
16:21:23.0237 0x2360  GPIOClx0101 - ok
16:21:23.0241 0x2360  gpsvc - ok
16:21:23.0245 0x2360  GpuEnergyDrv - ok
16:21:23.0251 0x2360  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:21:23.0254 0x2360  gupdate - ok
16:21:23.0259 0x2360  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:21:23.0262 0x2360  gupdatem - ok
16:21:23.0266 0x2360  [ 8126331FBD4ED29EB3B356F9C905064D, A58BCE904591DD762410E99960FD956FB579C2CE78FA7BF1406075D29537EF82 ] GVTDrv64        C:\Windows\GVTDrv64.sys
16:21:23.0267 0x2360  GVTDrv64 - ok
16:21:23.0272 0x2360  [ 7F79205B4EFA98F0767309479C8C01C6, 4B576903A83F33A8CF31D3887144A3D51C56D1187115C83AC99C0E9F6B4BF128 ] hamachi         C:\WINDOWS\system32\DRIVERS\Hamdrv.sys
16:21:23.0274 0x2360  hamachi - ok
16:21:23.0364 0x2360  [ 2ADED86ED9B92885378467CFEE9ABE8F, 78703B6E51C5E7DCFFBA9F15C404DB2A0054FE8F2F92B7AD470B08498995712A ] Hamachi2Svc     D:\Dateien\LogMeIn Hamachi\hamachi-2.exe
16:21:23.0403 0x2360  Hamachi2Svc - ok
16:21:23.0410 0x2360  HDAudBus - ok
16:21:23.0435 0x2360  HidBatt - ok
16:21:23.0448 0x2360  HidBth - ok
16:21:23.0451 0x2360  hidi2c - ok
16:21:23.0456 0x2360  hidinterrupt - ok
16:21:23.0460 0x2360  HidIr - ok
16:21:23.0464 0x2360  hidserv - ok
16:21:23.0468 0x2360  HidUsb - ok
16:21:23.0472 0x2360  HomeGroupListener - ok
16:21:23.0477 0x2360  HomeGroupProvider - ok
16:21:23.0481 0x2360  HpSAMD - ok
16:21:23.0485 0x2360  HTTP - ok
16:21:23.0489 0x2360  hwpolicy - ok
16:21:23.0493 0x2360  hyperkbd - ok
16:21:23.0499 0x2360  HyperVideo - ok
16:21:23.0503 0x2360  i8042prt - ok
16:21:23.0508 0x2360  iaLPSSi_GPIO - ok
16:21:23.0512 0x2360  iaLPSSi_I2C - ok
16:21:23.0516 0x2360  iaStorAV - ok
16:21:23.0519 0x2360  iaStorV - ok
16:21:23.0523 0x2360  ibbus - ok
16:21:23.0527 0x2360  icssvc - ok
16:21:23.0532 0x2360  [ 1CF03C69B49ACB70C722DF92755C0C8C, C227850C133F29BB9DED91A26A22AE077FD69629CEF35B67D305F016C4BDAA81 ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
16:21:23.0534 0x2360  IDriverT - ok
16:21:23.0539 0x2360  IEEtwCollectorService - ok
16:21:23.0542 0x2360  IKEEXT - ok
16:21:23.0634 0x2360  [ 3A2D6740F51BE48C0FD01AD907329DEE, 4FD899CD6E3B3D5C9803E52CB72F002B6CFC144D524FAF6845CF6D115EC6E059 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
16:21:23.0723 0x2360  IntcAzAudAddService - ok
16:21:23.0731 0x2360  intelide - ok
16:21:23.0735 0x2360  intelpep - ok
16:21:23.0738 0x2360  intelppm - ok
16:21:23.0742 0x2360  IoQos - ok
16:21:23.0746 0x2360  IpFilterDriver - ok
16:21:23.0753 0x2360  iphlpsvc - ok
16:21:23.0767 0x2360  IPMIDRV - ok
16:21:23.0770 0x2360  IPNAT - ok
16:21:23.0774 0x2360  IRENUM - ok
16:21:23.0779 0x2360  isapnp - ok
16:21:23.0784 0x2360  iScsiPrt - ok
16:21:23.0822 0x2360  [ F3A41EC4C6506E76E07A219B3A1DF8D2, B34FDAA453E6E089374B33533A89F76DEE1C2D14F9939AF3669B6F33FA41DD76 ] JMB36X          C:\Windows\SysWOW64\XSrvSetup.exe
16:21:23.0837 0x2360  JMB36X - ok
16:21:23.0843 0x2360  [ 1C368C1A2733DCC5B8E15420AA2B0F6D, C43A3534E33CEAEB8359D493FDB4663CB7C1E9286862B2CEE2788E9EA060DF1D ] JRAID           C:\WINDOWS\system32\drivers\jraid.sys
16:21:23.0847 0x2360  JRAID - ok
16:21:23.0852 0x2360  kbdclass - ok
16:21:23.0856 0x2360  kbdhid - ok
16:21:23.0860 0x2360  kdnic - ok
16:21:23.0864 0x2360  KeyIso - ok
16:21:23.0869 0x2360  KSecDD - ok
16:21:23.0873 0x2360  KSecPkg - ok
16:21:23.0878 0x2360  ksthunk - ok
16:21:23.0884 0x2360  KtmRm - ok
16:21:23.0888 0x2360  LanmanServer - ok
16:21:23.0892 0x2360  LanmanWorkstation - ok
16:21:23.0899 0x2360  lfsvc - ok
16:21:23.0903 0x2360  LicenseManager - ok
16:21:23.0907 0x2360  [ 156AB2E56DC3CA0B582E3362E07CDED7, 7B03929273861690DC42E4C686E655BE5A1C60136AE5E739D7E62306AFD4AB9A ] lirsgt          C:\WINDOWS\system32\DRIVERS\lirsgt.sys
16:21:23.0909 0x2360  lirsgt - ok
16:21:23.0913 0x2360  lltdio - ok
16:21:23.0916 0x2360  lltdsvc - ok
16:21:23.0920 0x2360  lmhosts - ok
16:21:23.0925 0x2360  LSI_SAS - ok
16:21:23.0929 0x2360  LSI_SAS2i - ok
16:21:23.0932 0x2360  LSI_SAS3i - ok
16:21:23.0935 0x2360  LSI_SSS - ok
16:21:23.0939 0x2360  LSM - ok
16:21:23.0942 0x2360  luafv - ok
16:21:23.0946 0x2360  MapsBroker - ok
16:21:23.0950 0x2360  [ A8D28D5B3E2A528D1EF0E338E44F2820, 40D1EFDD253BC0A0D984A5AD8A2721C3E83B15F14D538204714E6D5B00D92CEB ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
16:21:23.0952 0x2360  MBAMProtector - ok
16:21:23.0977 0x2360  [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
16:21:23.0996 0x2360  MBAMService - ok
16:21:24.0003 0x2360  [ 85CFE7AB85B43B6B7AC7961AA3983A9F, 4E88B75818FD00C0ABBDF8E02EBFB550A67B46E5E13D3B3DF52611793F7DA0DD ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
16:21:24.0005 0x2360  MBAMWebAccessControl - ok
16:21:24.0008 0x2360  megasas - ok
16:21:24.0011 0x2360  megasr - ok
16:21:24.0015 0x2360  mlx4_bus - ok
16:21:24.0018 0x2360  MMCSS - ok
16:21:24.0022 0x2360  Modem - ok
16:21:24.0025 0x2360  monitor - ok
16:21:24.0029 0x2360  mouclass - ok
16:21:24.0032 0x2360  mouhid - ok
16:21:24.0036 0x2360  mountmgr - ok
16:21:24.0042 0x2360  [ CC11EEB7AF4617D65DF0E9A21FC1ABD0, A683A5FB26E1B9FB4EEB40A9C7186F8433E3FB0A45848DF6102EF07B4DC75AC8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:21:24.0045 0x2360  MozillaMaintenance - ok
16:21:24.0048 0x2360  mpsdrv - ok
16:21:24.0052 0x2360  MpsSvc - ok
16:21:24.0055 0x2360  MQAC - ok
16:21:24.0059 0x2360  MRxDAV - ok
16:21:24.0062 0x2360  mrxsmb - ok
16:21:24.0066 0x2360  mrxsmb10 - ok
16:21:24.0069 0x2360  mrxsmb20 - ok
16:21:24.0073 0x2360  MsBridge - ok
16:21:24.0077 0x2360  MSDTC - ok
16:21:24.0084 0x2360  Msfs - ok
16:21:24.0088 0x2360  msgpiowin32 - ok
16:21:24.0092 0x2360  mshidkmdf - ok
16:21:24.0096 0x2360  mshidumdf - ok
16:21:24.0099 0x2360  msisadrv - ok
16:21:24.0103 0x2360  MSiSCSI - ok
16:21:24.0107 0x2360  msiserver - ok
16:21:24.0111 0x2360  MSKSSRV - ok
16:21:24.0116 0x2360  MsLldp - ok
16:21:24.0120 0x2360  MSMQ - ok
16:21:24.0123 0x2360  MSPCLOCK - ok
16:21:24.0127 0x2360  MSPQM - ok
16:21:24.0131 0x2360  MsRPC - ok
16:21:24.0136 0x2360  mssmbios - ok
16:21:24.0140 0x2360  MSTEE - ok
16:21:24.0143 0x2360  MTConfig - ok
16:21:24.0147 0x2360  Mup - ok
16:21:24.0150 0x2360  mvumis - ok
16:21:24.0156 0x2360  NativeWifiP - ok
16:21:24.0159 0x2360  NcaSvc - ok
16:21:24.0163 0x2360  NcbService - ok
16:21:24.0167 0x2360  NcdAutoSetup - ok
16:21:24.0170 0x2360  ndfltr - ok
16:21:24.0174 0x2360  NDIS - ok
16:21:24.0178 0x2360  NdisCap - ok
16:21:24.0181 0x2360  NdisImPlatform - ok
16:21:24.0185 0x2360  NdisTapi - ok
16:21:24.0188 0x2360  Ndisuio - ok
16:21:24.0192 0x2360  NdisVirtualBus - ok
16:21:24.0195 0x2360  NdisWan - ok
16:21:24.0199 0x2360  ndiswanlegacy - ok
16:21:24.0202 0x2360  ndproxy - ok
16:21:24.0213 0x2360  Ndu - ok
16:21:24.0216 0x2360  NetBIOS - ok
16:21:24.0221 0x2360  NetBT - ok
16:21:24.0224 0x2360  Netlogon - ok
16:21:24.0230 0x2360  Netman - ok
16:21:24.0238 0x2360  NetMsmqActivator - ok
16:21:24.0240 0x2360  NetPipeActivator - ok
16:21:24.0245 0x2360  netprofm - ok
16:21:24.0297 0x2360  [ 152E946E60EEF45088D7D1E74D9F1779, A0330BBE51E900F5956BA92BD04C54CC6CB57A611AF1A3FF2454FEB852E105BA ] netr28x         C:\WINDOWS\system32\DRIVERS\netr28x.sys
16:21:24.0343 0x2360  netr28x - ok
16:21:24.0350 0x2360  NetSetupSvc - ok
16:21:24.0352 0x2360  NetTcpActivator - ok
16:21:24.0356 0x2360  NetTcpPortSharing - ok
16:21:24.0361 0x2360  netvsc - ok
16:21:24.0366 0x2360  NgcCtnrSvc - ok
16:21:24.0369 0x2360  NgcSvc - ok
16:21:24.0373 0x2360  NlaSvc - ok
16:21:24.0376 0x2360  Npfs - ok
16:21:24.0380 0x2360  npsvctrig - ok
16:21:24.0383 0x2360  nsi - ok
16:21:24.0387 0x2360  nsiproxy - ok
16:21:24.0392 0x2360  NTFS - ok
16:21:24.0397 0x2360  Null - ok
16:21:24.0404 0x2360  [ 3EC9421780196DDA1A4C368BC7471778, FC5DEB52CAA76F968D3FF5F2418FA0A9DAC9E07BA5B259DEA5380759305F290E ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys
16:21:24.0409 0x2360  NVHDA - ok
16:21:24.0615 0x2360  [ 9BE2E483F588B3A57C67352847037046, 1D0A4D86853C8A9188C4545842037F99DCC423CBA9DB68F51D10ACE302DE5AE2 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
16:21:24.0828 0x2360  nvlddmkm - ok
16:21:24.0902 0x2360  [ F9CF3FB8DD81B390783532B3C98D6976, 8C94638136CFAEB3ED6DD7CE2059E98B64B15918DDB0796CC0B88474EE99F5BF ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
16:21:24.0930 0x2360  NvNetworkService - ok
16:21:24.0936 0x2360  nvraid - ok
16:21:24.0939 0x2360  nvstor - ok
16:21:24.0944 0x2360  [ 3A7B0570D896602E37EAF80EC3D1615A, 1F5A71432F96731115ADA2A50E605923666188D08F9FD748424AB6588D0E1482 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
16:21:24.0945 0x2360  NvStreamKms - ok
16:21:24.0948 0x2360  NvStreamSvc - ok
16:21:24.0970 0x2360  [ DFCCA437717EACA8418F47992A41B39A, E587A629B894EE6A16AC414747D492FFC6B6E9F051B40F7D25F0D4406E2FF919 ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
16:21:24.0992 0x2360  nvsvc - ok
16:21:24.0998 0x2360  [ DBFE7B2DF103F74AE51840B3C5F25FE9, 436CAA417FD24BA870F117FA4BABA2AB694825795508BCFCC8C927CC2D5BBC5E ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
16:21:25.0000 0x2360  nvvad_WaveExtensible - ok
16:21:25.0003 0x2360  nv_agp - ok
16:21:25.0006 0x2360  OneSyncSvc - ok
16:21:25.0069 0x2360  [ 29B093BA6759118DB14AF41026385E03, 660176D122344A79E52FFD9FE3D32D1967D9B22BC4AD76549D839B09693D0713 ] Origin Client Service D:\Spiele\Origin\OriginClientService.exe
16:21:25.0109 0x2360  Origin Client Service - ok
16:21:25.0134 0x2360  [ 60F5579B6B33F509C52200207F79B795, 1AB99528EF65799CBA7BCF43A654698ABE37A6DB8EB9BE2AC6ED7758AF795327 ] owahm           C:\WINDOWS\system32\drivers\ggpcixbf.sys
16:21:25.0136 0x2360  owahm - ok
16:21:25.0140 0x2360  p2pimsvc - ok
16:21:25.0143 0x2360  p2psvc - ok
16:21:25.0147 0x2360  Parport - ok
16:21:25.0150 0x2360  partmgr - ok
16:21:25.0155 0x2360  PcaSvc - ok
16:21:25.0158 0x2360  pci - ok
16:21:25.0163 0x2360  pciide - ok
16:21:25.0166 0x2360  pcmcia - ok
16:21:25.0169 0x2360  pcw - ok
16:21:25.0173 0x2360  pdc - ok
16:21:25.0177 0x2360  PEAUTH - ok
16:21:25.0180 0x2360  percsas2i - ok
16:21:25.0184 0x2360  percsas3i - ok
16:21:25.0222 0x2360  PerfHost - ok
16:21:25.0230 0x2360  PimIndexMaintenanceSvc - ok
16:21:25.0235 0x2360  pla - ok
16:21:25.0239 0x2360  PlugPlay - ok
16:21:25.0242 0x2360  PNRPAutoReg - ok
16:21:25.0247 0x2360  PNRPsvc - ok
16:21:25.0250 0x2360  PolicyAgent - ok
16:21:25.0255 0x2360  Power - ok
16:21:25.0259 0x2360  PptpMiniport - ok
16:21:25.0340 0x2360  [ 12E2582F69ACA40A6BAE91DA578CBF34, 648C6394763906AA4163976DA2C3308F8B706486D9D8F16258CB1D61C2929930 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
16:21:25.0398 0x2360  PrintNotify - ok
16:21:25.0406 0x2360  Processor - ok
16:21:25.0409 0x2360  ProfSvc - ok
16:21:25.0412 0x2360  Psched - ok
16:21:25.0416 0x2360  [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI             C:\WINDOWS\system32\DRIVERS\psi_mf_amd64.sys
16:21:25.0418 0x2360  PSI - ok
16:21:25.0421 0x2360  QWAVE - ok
16:21:25.0424 0x2360  QWAVEdrv - ok
16:21:25.0432 0x2360  [ 720FEA3AAA15FE7E0BEAB10AC2E6D2B0, E1E6A79751B7CAA86F4C7F9DD2A835D5C30FBD433644F916B8E54CD8105D00D2 ] RalinkRegistryWriter C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe
16:21:25.0435 0x2360  RalinkRegistryWriter - ok
16:21:25.0443 0x2360  [ 178CEF55E09DC320FF6561D4EEB4F632, 0B11CE080341CAD324F6A46ABE30D71E3BD2C27EA9188A0C9574ED757706E8A7 ] RalinkRegistryWriter64 C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe
16:21:25.0447 0x2360  RalinkRegistryWriter64 - ok
16:21:25.0450 0x2360  RasAcd - ok
16:21:25.0453 0x2360  RasAgileVpn - ok
16:21:25.0457 0x2360  RasAuto - ok
16:21:25.0460 0x2360  Rasl2tp - ok
16:21:25.0464 0x2360  RasMan - ok
16:21:25.0467 0x2360  RasPppoe - ok
16:21:25.0470 0x2360  RasSstp - ok
16:21:25.0474 0x2360  rdbss - ok
16:21:25.0479 0x2360  rdpbus - ok
16:21:25.0483 0x2360  RDPDR - ok
16:21:25.0490 0x2360  RdpVideoMiniport - ok
16:21:25.0494 0x2360  rdyboost - ok
16:21:25.0498 0x2360  ReFSv1 - ok
16:21:25.0502 0x2360  RemoteAccess - ok
16:21:25.0506 0x2360  RemoteRegistry - ok
16:21:25.0512 0x2360  RetailDemo - ok
16:21:25.0516 0x2360  RpcEptMapper - ok
16:21:25.0520 0x2360  RpcLocator - ok
16:21:25.0524 0x2360  RpcSs - ok
16:21:25.0528 0x2360  rspndr - ok
16:21:25.0533 0x2360  rt640x64 - ok
16:21:25.0538 0x2360  s3cap - ok
16:21:25.0541 0x2360  SamSs - ok
16:21:25.0550 0x2360  [ B7A4102FCA57F022CF69E3E1EAD61421, 75B70A96925E855E07AE3A364D9CA7A433A7FEB4185891F4124BA64D490C24F3 ] SamsungUPDUtilSvc C:\Windows\SysWOW64\SecUPDUtilSvc.exe
16:21:25.0557 0x2360  SamsungUPDUtilSvc - ok
16:21:25.0561 0x2360  sbp2port - ok
16:21:25.0566 0x2360  SCardSvr - ok
16:21:25.0569 0x2360  ScDeviceEnum - ok
16:21:25.0573 0x2360  scfilter - ok
16:21:25.0578 0x2360  Schedule - ok
16:21:25.0583 0x2360  SCPolicySvc - ok
16:21:25.0588 0x2360  sdbus - ok
16:21:25.0592 0x2360  SDRSVC - ok
16:21:25.0596 0x2360  sdstor - ok
16:21:25.0600 0x2360  seclogon - ok
16:21:25.0630 0x2360  [ 05E383849FA1FBBBC160612B0080618C, 43A33CC6BD24635EE849E89DB4391AB36292DDC0AC407E1B480B6E1DF7FC3BC5 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe
16:21:25.0650 0x2360  Secunia PSI Agent - ok
16:21:25.0668 0x2360  [ F8173F1454F21C451439CB47EF75830A, CF87917CD061686CD956884D4ED73AA8C0B04B0B7B5BA36BAA4CC4A03C8C0263 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe
16:21:25.0678 0x2360  Secunia Update Agent - ok
16:21:25.0684 0x2360  SENS - ok
16:21:25.0688 0x2360  SensorDataService - ok
16:21:25.0692 0x2360  SensorService - ok
16:21:25.0696 0x2360  SensrSvc - ok
16:21:25.0699 0x2360  SerCx - ok
16:21:25.0703 0x2360  SerCx2 - ok
16:21:25.0706 0x2360  Serenum - ok
16:21:25.0710 0x2360  Serial - ok
16:21:25.0714 0x2360  sermouse - ok
16:21:25.0723 0x2360  SessionEnv - ok
16:21:25.0731 0x2360  sfloppy - ok
16:21:25.0735 0x2360  SharedAccess - ok
16:21:25.0738 0x2360  ShellHWDetection - ok
16:21:25.0742 0x2360  SiSRaid2 - ok
16:21:25.0746 0x2360  SiSRaid4 - ok
16:21:25.0757 0x2360  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
16:21:25.0763 0x2360  SkypeUpdate - ok
16:21:25.0766 0x2360  smphost - ok
16:21:25.0769 0x2360  SmsRouter - ok
16:21:25.0779 0x2360  SNMPTRAP - ok
16:21:25.0786 0x2360  [ 21FF393512F51F5A98620C794B4488A3, 8A35923D3D6993FC014D86F0F7BD5C106586824DB8D26C04DC2AD0B8ED13ED20 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
16:21:25.0789 0x2360  Sony PC Companion - ok
16:21:25.0793 0x2360  spaceport - ok
16:21:25.0796 0x2360  SpbCx - ok
16:21:25.0801 0x2360  Spooler - ok
16:21:25.0804 0x2360  sppsvc - ok
16:21:25.0808 0x2360  srv - ok
16:21:25.0812 0x2360  srv2 - ok
16:21:25.0815 0x2360  srvnet - ok
16:21:25.0819 0x2360  SSDPSRV - ok
16:21:25.0822 0x2360  SstpSvc - ok
16:21:25.0826 0x2360  StateRepository - ok
16:21:25.0847 0x2360  [ 2A6EDC2FBB4B9C11BB21BE3881C7A692, 74482CA4EC2B98C069A32C224BA5449AE10A8B41BFC053A4C23B6F65113A97A4 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
16:21:25.0862 0x2360  Steam Client Service - ok
16:21:25.0875 0x2360  [ C64C157B167FE562E8670984E72C25FA, 9302C82A75CA65515297B72F3A6230307AAE0B14FD8C9C7FA343F7B62E5ED376 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
16:21:25.0882 0x2360  Stereo Service - ok
16:21:25.0886 0x2360  stexstor - ok
16:21:25.0890 0x2360  [ 7C4D2F167FA6153B4FE7145FE6D3DF15, F39ED9CDF323DDC57D0F64F9CC121E911EA53819A3A941A2F6EA557C35FCB372 ] StillCam        C:\WINDOWS\system32\DRIVERS\serscan.sys
16:21:25.0892 0x2360  StillCam - ok
16:21:25.0895 0x2360  stisvc - ok
16:21:25.0898 0x2360  storahci - ok
16:21:25.0902 0x2360  storflt - ok
16:21:25.0905 0x2360  stornvme - ok
16:21:25.0909 0x2360  storqosflt - ok
16:21:25.0914 0x2360  StorSvc - ok
16:21:25.0917 0x2360  storufs - ok
16:21:25.0921 0x2360  storvsc - ok
16:21:25.0924 0x2360  svsvc - ok
16:21:25.0945 0x2360  swenum - ok
16:21:25.0948 0x2360  swprv - ok
16:21:25.0952 0x2360  Synth3dVsc - ok
16:21:25.0955 0x2360  SysMain - ok
16:21:25.0959 0x2360  SystemEventsBroker - ok
16:21:25.0964 0x2360  TabletInputService - ok
16:21:25.0970 0x2360  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901         C:\WINDOWS\System32\drivers\tap0901.sys
16:21:25.0972 0x2360  tap0901 - ok
16:21:25.0976 0x2360  [ B08740047145B9BCE15BF75CA0F9718A, 3E2A8A5A2A4DC4D0F05E22EA2C0EBD85AA5C7C6854E873D53538D1F54B8F7C63 ] tap0901t        C:\WINDOWS\System32\drivers\tap0901t.sys
16:21:25.0978 0x2360  tap0901t - ok
16:21:25.0982 0x2360  [ 3A7CABF7DE8F1325BE8F46685469AEC3, 03B2FDEA5E10B9584EFC4ED22D6C2529322FBEF0DFEC60FE12FCE5C4A2E42F9C ] taphss6         C:\WINDOWS\system32\DRIVERS\taphss6.sys
16:21:25.0984 0x2360  taphss6 - ok
16:21:25.0987 0x2360  TapiSrv - ok
16:21:25.0991 0x2360  Tcpip - ok
16:21:25.0995 0x2360  Tcpip6 - ok
16:21:26.0002 0x2360  tcpipreg - ok
16:21:26.0006 0x2360  tdx - ok
16:21:26.0010 0x2360  terminpt - ok
16:21:26.0015 0x2360  TermService - ok
16:21:26.0019 0x2360  Themes - ok
16:21:26.0023 0x2360  tiledatamodelsvc - ok
16:21:26.0025 0x2360  TimeBroker - ok
16:21:26.0030 0x2360  TPM - ok
16:21:26.0033 0x2360  TrkWks - ok
16:21:26.0038 0x2360  TrustedInstaller - ok
16:21:26.0043 0x2360  TsUsbFlt - ok
16:21:26.0053 0x2360  TsUsbGD - ok
16:21:26.0059 0x2360  tunnel - ok
16:21:26.0087 0x2360  [ 57D1025FD44FA47BAE92EDF4D7645BD5, 20577723BA72927A38C851BE6EC3861E4C311C159FDDA773FF6F18063B899676 ] TunngleService  C:\Program Files (x86)\Tunngle\TnglCtrl.exe
16:21:26.0101 0x2360  TunngleService - ok
16:21:26.0105 0x2360  uagp35 - ok
16:21:26.0109 0x2360  UASPStor - ok
16:21:26.0114 0x2360  UcmCx0101 - ok
16:21:26.0117 0x2360  UcmUcsi - ok
16:21:26.0121 0x2360  Ucx01000 - ok
16:21:26.0125 0x2360  UdeCx - ok
16:21:26.0130 0x2360  udfs - ok
16:21:26.0133 0x2360  UEFI - ok
16:21:26.0137 0x2360  Ufx01000 - ok
16:21:26.0141 0x2360  UfxChipidea - ok
16:21:26.0148 0x2360  ufxsynopsys - ok
16:21:26.0155 0x2360  UI0Detect - ok
16:21:26.0158 0x2360  uliagpkx - ok
16:21:26.0162 0x2360  umbus - ok
16:21:26.0166 0x2360  UmPass - ok
16:21:26.0170 0x2360  UmRdpService - ok
16:21:26.0173 0x2360  UnistoreSvc - ok
16:21:26.0179 0x2360  upnphost - ok
16:21:26.0183 0x2360  UrsChipidea - ok
16:21:26.0187 0x2360  UrsCx01000 - ok
16:21:26.0191 0x2360  UrsSynopsys - ok
16:21:26.0194 0x2360  usbccgp - ok
16:21:26.0198 0x2360  usbcir - ok
16:21:26.0201 0x2360  usbehci - ok
16:21:26.0206 0x2360  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\WINDOWS\system32\DRIVERS\usbfilter.sys
16:21:26.0208 0x2360  usbfilter - ok
16:21:26.0214 0x2360  usbhub - ok
16:21:26.0218 0x2360  USBHUB3 - ok
16:21:26.0222 0x2360  usbohci - ok
16:21:26.0225 0x2360  usbprint - ok
16:21:26.0229 0x2360  usbser - ok
16:21:26.0232 0x2360  USBSTOR - ok
16:21:26.0236 0x2360  usbuhci - ok
16:21:26.0239 0x2360  USBXHCI - ok
16:21:26.0243 0x2360  UserDataSvc - ok
16:21:26.0248 0x2360  UserManager - ok
16:21:26.0251 0x2360  UsoSvc - ok
16:21:26.0255 0x2360  VaultSvc - ok
16:21:26.0261 0x2360  [ 8CD776EB77695524CCE594AAC3A71569, AEF6F9B0E5F67E87819EB0E9FA5220EEF247A160A2BF8511CEDC8D12A9D4D941 ] VBoxNetAdp      C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
16:21:26.0265 0x2360  VBoxNetAdp - ok
16:21:26.0269 0x2360  [ 3C8E2C591345F38149C69FE8E5DF8C90, 9F4BB9BDA09CB2E99A6A888B288F322AE5C460B5D124CD714C6F00FF5029144B ] VClone          C:\WINDOWS\System32\drivers\VClone.sys
16:21:26.0271 0x2360  VClone - ok
16:21:26.0274 0x2360  vdrvroot - ok
16:21:26.0278 0x2360  vds - ok
16:21:26.0281 0x2360  VerifierExt - ok
16:21:26.0285 0x2360  vhdmp - ok
16:21:26.0289 0x2360  vhf - ok
16:21:26.0292 0x2360  vmbus - ok
16:21:26.0296 0x2360  VMBusHID - ok
16:21:26.0299 0x2360  vmicguestinterface - ok
16:21:26.0303 0x2360  vmicheartbeat - ok
16:21:26.0306 0x2360  vmickvpexchange - ok
16:21:26.0310 0x2360  vmicrdv - ok
16:21:26.0314 0x2360  vmicshutdown - ok
16:21:26.0317 0x2360  vmictimesync - ok
16:21:26.0320 0x2360  vmicvmsession - ok
16:21:26.0323 0x2360  vmicvss - ok
16:21:26.0327 0x2360  volmgr - ok
16:21:26.0331 0x2360  volmgrx - ok
16:21:26.0335 0x2360  volsnap - ok
16:21:26.0338 0x2360  vpci - ok
16:21:26.0341 0x2360  vsmraid - ok
16:21:26.0345 0x2360  VSS - ok
16:21:26.0349 0x2360  VSTXRAID - ok
16:21:26.0353 0x2360  vwifibus - ok
16:21:26.0356 0x2360  vwififlt - ok
16:21:26.0360 0x2360  vwifimp - ok
16:21:26.0363 0x2360  W32Time - ok
16:21:26.0367 0x2360  w3logsvc - ok
16:21:26.0370 0x2360  W3SVC - ok
16:21:26.0374 0x2360  WacomPen - ok
16:21:26.0378 0x2360  WalletService - ok
16:21:26.0382 0x2360  wanarp - ok
16:21:26.0386 0x2360  wanarpv6 - ok
16:21:26.0390 0x2360  WAS - ok
16:21:26.0395 0x2360  wbengine - ok
16:21:26.0399 0x2360  WbioSrvc - ok
16:21:26.0402 0x2360  Wcmsvc - ok
16:21:26.0406 0x2360  wcncsvc - ok
16:21:26.0410 0x2360  WcsPlugInService - ok
16:21:26.0414 0x2360  WdBoot - ok
16:21:26.0418 0x2360  Wdf01000 - ok
16:21:26.0422 0x2360  WdFilter - ok
16:21:26.0426 0x2360  WdiServiceHost - ok
16:21:26.0429 0x2360  WdiSystemHost - ok
16:21:26.0433 0x2360  wdiwifi - ok
16:21:26.0437 0x2360  WdNisDrv - ok
16:21:26.0440 0x2360  WdNisSvc - ok
16:21:26.0445 0x2360  WebClient - ok
16:21:26.0448 0x2360  Wecsvc - ok
16:21:26.0452 0x2360  WEPHOSTSVC - ok
16:21:26.0456 0x2360  wercplsupport - ok
16:21:26.0459 0x2360  WerSvc - ok
16:21:26.0463 0x2360  wfpcapture - ok
16:21:26.0467 0x2360  WFPLWFS - ok
16:21:26.0471 0x2360  WiaRpc - ok
16:21:26.0474 0x2360  WIMMount - ok
16:21:26.0477 0x2360  WinDefend - ok
16:21:26.0485 0x2360  WindowsTrustedRT - ok
16:21:26.0489 0x2360  WindowsTrustedRTProxy - ok
16:21:26.0492 0x2360  WinHttpAutoProxySvc - ok
16:21:26.0496 0x2360  WinMad - ok
16:21:26.0502 0x2360  Winmgmt - ok
16:21:26.0506 0x2360  WinRM - ok
16:21:26.0514 0x2360  WINUSB - ok
16:21:26.0517 0x2360  WinVerbs - ok
16:21:26.0521 0x2360  WlanSvc - ok
16:21:26.0524 0x2360  wlidsvc - ok
16:21:26.0528 0x2360  WmiAcpi - ok
16:21:26.0533 0x2360  wmiApSrv - ok
16:21:26.0536 0x2360  WMPNetworkSvc - ok
16:21:26.0541 0x2360  Wof - ok
16:21:26.0546 0x2360  workfolderssvc - ok
16:21:26.0550 0x2360  wpcfltr - ok
16:21:26.0555 0x2360  WPDBusEnum - ok
16:21:26.0558 0x2360  WpdUpFltr - ok
16:21:26.0562 0x2360  WpnService - ok
16:21:26.0565 0x2360  ws2ifsl - ok
16:21:26.0569 0x2360  wscsvc - ok
16:21:26.0572 0x2360  WSearch - ok
16:21:26.0578 0x2360  WSService - ok
16:21:26.0581 0x2360  wuauserv - ok
16:21:26.0585 0x2360  WudfPf - ok
16:21:26.0588 0x2360  WUDFRd - ok
16:21:26.0592 0x2360  wudfsvc - ok
16:21:26.0595 0x2360  WwanSvc - ok
16:21:26.0600 0x2360  XblAuthManager - ok
16:21:26.0603 0x2360  XblGameSave - ok
16:21:26.0607 0x2360  xboxgip - ok
16:21:26.0610 0x2360  XboxNetApiSvc - ok
16:21:26.0614 0x2360  xinputhid - ok
16:21:26.0617 0x2360  ================ Scan global ===============================
16:21:26.0629 0x2360  [ Global ] - ok
16:21:26.0629 0x2360  ================ Scan MBR ==================================
16:21:26.0632 0x2360  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
16:21:26.0720 0x2360  \Device\Harddisk0\DR0 - ok
16:21:26.0723 0x2360  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
16:21:26.0728 0x2360  \Device\Harddisk1\DR1 - ok
16:21:26.0729 0x2360  ================ Scan VBR ==================================
16:21:26.0731 0x2360  [ B137EA7CDA7CEA43F9889BEB0C129048 ] \Device\Harddisk0\DR0\Partition1
16:21:26.0732 0x2360  \Device\Harddisk0\DR0\Partition1 - ok
16:21:26.0734 0x2360  [ 42E846FE50911FA991BE6513EB7B0677 ] \Device\Harddisk0\DR0\Partition2
16:21:26.0736 0x2360  \Device\Harddisk0\DR0\Partition2 - ok
16:21:26.0738 0x2360  [ DDC71AC668D786C5DE83C16A232B042C ] \Device\Harddisk1\DR1\Partition1
16:21:26.0775 0x2360  \Device\Harddisk1\DR1\Partition1 - ok
16:21:26.0775 0x2360  ================ Scan generic autorun ======================
16:21:27.0035 0x2360  [ D0E9E2E198C8BA95297EF8C9D04865F1, 1889A66AEEEE1E9D80FB99E23AFBB23AF37044BAA8AE00070667D3B2E32AB804 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
16:21:27.0243 0x2360  RTHDVCPL - ok
16:21:27.0260 0x2360  ShadowPlay - ok
16:21:27.0319 0x2360  [ 046DDF9B31BEC14D03CCC97DD728A4D1, D29F49F870B27553E13F9C1486D9B27A27C41FBEC7ACEC77EDFD5552C941E710 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
16:21:27.0361 0x2360  NvBackend - ok
16:21:27.0379 0x2360  [ 63E0C11E1CEBA6CC05443E98041BB1E0, 3C52E5F7191519A0DF545DFA42B140F55426D01E0CEF6212CEE263E0D7BFD9EC ] C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE
16:21:27.0388 0x2360  RoccatKoneXTD - ok
16:21:27.0392 0x2360  [ 17D9440D55500418C8FDB8EF1390C5AD, C4C57AE427FB89EFDFC1D111C300BB588E475BE90DD57084C03399557641F948 ] C:\Windows\RaidTool\xInsIDE.exe
16:21:27.0393 0x2360  JMB36X IDE Setup - ok
16:21:27.0399 0x2360  [ 087A06DB98D0E84C0DE90EE308707E63, 96E8CDC492115A93B1B244196947E45D3C30CF64F538EAB634E0B02BEFBF1607 ] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
16:21:27.0401 0x2360  NUSB3MON - ok
16:21:27.0415 0x2360  [ D0B1DA5382433AFBF52DE8815298EB0C, A326D01783359CCA1054210D82F17533638A9769A7A08C2BD0621DE016909359 ] C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE
16:21:27.0425 0x2360  RoccatIsku - ok
16:21:27.0432 0x2360  [ EBC0E8C0A4DDA2C32A7D5863462A321A, 2F410138DB66D0219254339F1F098E401CEDAA032596F1F67BC54F394256FC68 ] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
16:21:27.0434 0x2360  amd_dc_opt - ok
16:21:27.0439 0x2360  [ 34D296AFC913E302953C70463EF09A48, BC413307CBC56C039EE8A05B51A56E14EF59678FBB33815AEB320078056C8CE7 ] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
16:21:27.0441 0x2360  HP Software Update - ok
16:21:27.0451 0x2360  [ 9DECF401AE4CB834D89957BDBF484068, 084056EAA068F88B6168566F14D315F2AD35F2202B18CFC5F88A466C154210A3 ] C:\Program Files\AVAST Software\Avast\setup\emupdate\5b9c12bd-ec1a-4df2-8712-ac5ed4039682.exe
16:21:27.0454 0x2360  20150107 - ok
16:21:27.0484 0x2360  OneDriveSetup - ok
16:21:27.0486 0x2360  OneDriveSetup - ok
16:21:27.0499 0x2360  [ 8F97EDDF827C64AB2C42971095BF2F76, 5A42AA8E3A5E5BA6E93F1CD5B3229022D881B6180976E48A219A7C80F3EBE37D ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
16:21:27.0507 0x2360  Sony PC Companion - ok
16:21:27.0628 0x2360  [ F2B4338E54D09E15E28E170B3EB2B430, 6B7008C4D58806D8D67F0E860138A1660BAC3000CE239C34480E40379F792B6F ] D:\Spiele\Origin\Origin.exe
16:21:27.0696 0x2360  EADM - ok
16:21:27.0920 0x2360  [ 36C55F2645D61F15457D23B56F0149DA, 410DDEA347DD8AA58838560CC01AABD3F7D40A6879482AADD09BC4A82E26D48D ] D:\Spiele\GalaxyClient\GalaxyClient.exe
16:21:28.0125 0x2360  GalaxyClient - ok
16:21:28.0300 0x2360  [ 0AF9C61507E71E715B94C3AC228B34DD, 2426D70F95E1AA4A30E4549B90C15BB1FCA58231376BA311C8B3578BCA4FC3C5 ] D:\Dateien\Echobit\Evolve\EvolveClient.exe
16:21:28.0365 0x2360  EvolveClient - ok
16:21:28.0384 0x2360  [ C2D2FFD27F46815951C9562F0A2EC864, 892A5DC5C3D797E3FD36230710BA9AF43ADA5CDFD19A03268D20D5A9DA3CCB3A ] C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\OneDrive.exe
16:21:28.0391 0x2360  OneDrive - ok
16:21:28.0394 0x2360  Skype - ok
16:21:28.0575 0x2360  [ FB5B78A3DE88FD3B725DA574497BC225, 0096C3ED0E29153E6A9E84C121B79A170FEDFE521AEA1BC602BC536E1795E5F3 ] C:\Program Files\CCleaner\CCleaner64.exe
16:21:28.0701 0x2360  CCleaner Monitoring - ok
16:21:28.0719 0x2360  Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 - ok
16:21:28.0725 0x2360  Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64 - ok
16:21:28.0731 0x2360  Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64 - ok
16:21:28.0733 0x2360  OneDriveSetup - ok
16:21:28.0734 0x2360  Waiting for KSN requests completion. In queue: 55
16:21:29.0734 0x2360  Waiting for KSN requests completion. In queue: 55
16:21:30.0734 0x2360  Waiting for KSN requests completion. In queue: 55
16:21:31.0774 0x2360  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.10240.16384 ), 0x60100 ( disabled : updated )
16:21:31.0780 0x2360  AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 10.2.2218.942 ), 0x41000 ( enabled : updated )
16:21:31.0805 0x2360  Win FW state via NFP2: enabled ( trusted )
16:21:34.0221 0x2360  ============================================================
16:21:34.0221 0x2360  Scan finished
16:21:34.0221 0x2360  ============================================================
16:21:34.0232 0x2210  Detected object count: 0
16:21:34.0232 0x2210  Actual detected object count: 0
16:22:04.0938 0x17b4  ============================================================
16:22:04.0938 0x17b4  Scan started
16:22:04.0938 0x17b4  Mode: Manual; 
16:22:04.0939 0x17b4  ============================================================
16:22:04.0939 0x17b4  KSN ping started
16:22:07.0261 0x17b4  KSN ping finished: true
16:22:07.0924 0x17b4  ================ Scan system memory ========================
16:22:07.0924 0x17b4  System memory - ok
16:22:07.0925 0x17b4  ================ Scan services =============================
16:22:07.0976 0x17b4  1394ohci - ok
16:22:07.0980 0x17b4  3ware - ok
16:22:07.0984 0x17b4  ACPI - ok
16:22:07.0987 0x17b4  acpiex - ok
16:22:07.0991 0x17b4  acpipagr - ok
16:22:07.0995 0x17b4  AcpiPmi - ok
16:22:08.0000 0x17b4  acpitime - ok
16:22:08.0008 0x17b4  [ 013697369EAFFA675D0671607F036020, 65611C775AC4681E46A6565E5A7A4FF3363C66EBDC98C4C58AFB365D40BE23B6 ] AdobeARMservice C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
16:22:08.0010 0x17b4  AdobeARMservice - ok
16:22:08.0045 0x17b4  [ 368290D0A612D62DA6F3D798B1BB8FE7, D573BF8543F37BC51B88A2473EDFD28AFBCCC446E8CADD54A90FA48D8739D222 ] AdobeFlashPlayerUpdateSvc C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
16:22:08.0050 0x17b4  AdobeFlashPlayerUpdateSvc - ok
16:22:08.0055 0x17b4  ADP80XX - ok
16:22:08.0060 0x17b4  AFD - ok
16:22:08.0064 0x17b4  agp440 - ok
16:22:08.0068 0x17b4  ahcache - ok
16:22:08.0072 0x17b4  AJRouter - ok
16:22:08.0075 0x17b4  ALG - ok
16:22:08.0080 0x17b4  AmdK8 - ok
16:22:08.0084 0x17b4  AmdPPM - ok
16:22:08.0089 0x17b4  [ 53D8D46D51D390ABDB54ECA623165CB7, D16A3604412D0DC3EA68320FB6980D146ED60D587AAB6B65810C038AFF1EC237 ] amdsata         C:\WINDOWS\system32\drivers\amdsata.sys
16:22:08.0091 0x17b4  amdsata - ok
16:22:08.0094 0x17b4  amdsbs - ok
16:22:08.0099 0x17b4  [ 75C51148154E34EB3D7BB84749A758D5, 8865F223CBAE166A9BF6CBCDA66F63369F151CCB449A28E95560C36AD45D0C85 ] amdxata         C:\WINDOWS\system32\drivers\amdxata.sys
16:22:08.0100 0x17b4  amdxata - ok
16:22:08.0103 0x17b4  AppHostSvc - ok
16:22:08.0106 0x17b4  AppID - ok
16:22:08.0110 0x17b4  AppIDSvc - ok
16:22:08.0114 0x17b4  Appinfo - ok
16:22:08.0118 0x17b4  [ 301AA64F9643BC453D90A66C4C0E7204, F9EDAD13F865B5F0A89FF59827EECB519F113EB037F2DA8367F1572629B503B1 ] AppleCharger    C:\WINDOWS\system32\DRIVERS\AppleCharger.sys
16:22:08.0118 0x17b4  AppleCharger - ok
16:22:08.0122 0x17b4  [ 95EF7247C50C7241FDAE39A9B3AFF4AE, 6E08FB095C04B2E217B139D6431336C0F24C128A2A83082A3085DC8C44AA247D ] AppleChargerSrv C:\WINDOWS\system32\AppleChargerSrv.exe
16:22:08.0123 0x17b4  AppleChargerSrv - ok
16:22:08.0127 0x17b4  AppReadiness - ok
16:22:08.0130 0x17b4  AppXSvc - ok
16:22:08.0134 0x17b4  arcsas - ok
16:22:08.0148 0x17b4  aspnet_state - ok
16:22:08.0152 0x17b4  [ B5B4C90E9F52DA8586F1E5461AD90A5D, D1EAA34E6AEB014E942D22F8CB5FB19BF1E2EADE5B5357274C001F44FDC25F05 ] aswHwid         C:\WINDOWS\system32\drivers\aswHwid.sys
16:22:08.0153 0x17b4  aswHwid - ok
16:22:08.0158 0x17b4  [ 300CB8E510855189CAD0B72FFB5590CB, EB50DC553FA8FD9DE3F60AAFED20702EAFBB1498EBD3220A39CC52A12F694246 ] aswMonFlt       C:\WINDOWS\system32\drivers\aswMonFlt.sys
16:22:08.0160 0x17b4  aswMonFlt - ok
16:22:08.0166 0x17b4  [ 6D37D8DB30D086739507C5F6E542656A, 746D9E32E729138EA19062F4E6B6C98B6833504020A296E3E2A9CD92E0FED0B9 ] aswRdr          C:\WINDOWS\system32\drivers\aswRdr2.sys
16:22:08.0167 0x17b4  aswRdr - ok
16:22:08.0172 0x17b4  [ 07E32DFCA422A2920482D762D01957EC, A6502D26266D708E55EB2883897673AD3087C41D9EA0B41CD6BF6BD923EBDCB8 ] aswRvrt         C:\WINDOWS\system32\drivers\aswRvrt.sys
16:22:08.0174 0x17b4  aswRvrt - ok
16:22:08.0198 0x17b4  [ 3B4AC2DBFC86F7247C1FF1FAF2860530, A54A693D01C02AAE2B78BFE9B3900B5A6DD0C2C37C8FA58B14B5F57107032FF5 ] aswSnx          C:\WINDOWS\system32\drivers\aswSnx.sys
16:22:08.0214 0x17b4  aswSnx - ok
16:22:08.0227 0x17b4  [ A04F190FCD762E7BCC9BFC70563C52DB, 2BF6823F2EADBDA28DF1CCECCAC84D9FF37D3CFB66A7B402575C6B9FCFB45EB3 ] aswSP           C:\WINDOWS\system32\drivers\aswSP.sys
16:22:08.0235 0x17b4  aswSP - ok
16:22:08.0242 0x17b4  [ 6E53278ECCFFBC2ACC2A5006745ED4BB, 392170073A8933DB43CD1D64AD087F972F1971BF83BCAFE5B8FA1273C02026CE ] aswStm          C:\WINDOWS\system32\drivers\aswStm.sys
16:22:08.0245 0x17b4  aswStm - ok
16:22:08.0254 0x17b4  [ 91782404718C6352C26B3242BAC3F0F1, 84B1CDD1EBC83FAEBDCC8F67B13CA405C6CF0C518FC016603889EBE48FC91AB9 ] aswVmm          C:\WINDOWS\system32\drivers\aswVmm.sys
16:22:08.0258 0x17b4  aswVmm - ok
16:22:08.0262 0x17b4  AsyncMac - ok
16:22:08.0266 0x17b4  atapi - ok
16:22:08.0270 0x17b4  [ 7C5D273E29DCC5505469B299C6F29163, 206CAB85CE12A3953F0861C811575DC7FD000147436219EEE334584A33370B3A ] AtiPcie         C:\WINDOWS\system32\drivers\AtiPcie.sys
16:22:08.0271 0x17b4  AtiPcie - ok
16:22:08.0281 0x17b4  [ FC0E8778C000291CAF60EB88C011E931, 09BCCA3DE01021AEF76DFB46F01D21BA6FF409E816FA7547E5C3DFBF3A615ED2 ] atksgt          C:\WINDOWS\system32\DRIVERS\atksgt.sys
16:22:08.0286 0x17b4  atksgt - ok
16:22:08.0290 0x17b4  AudioEndpointBuilder - ok
16:22:08.0293 0x17b4  Audiosrv - ok
16:22:08.0306 0x17b4  [ 54236E79A44F909612391C8A2D70D512, B0DF5BCC4F90AF087D0306F8D81F90B2CAE0176813E3AA6A7D5460F7878677CD ] avast! Antivirus C:\Program Files\AVAST Software\Avast\AvastSvc.exe
16:22:08.0312 0x17b4  avast! Antivirus - ok
16:22:08.0316 0x17b4  AxInstSV - ok
16:22:08.0320 0x17b4  b06bdrv - ok
16:22:08.0324 0x17b4  BasicDisplay - ok
16:22:08.0327 0x17b4  BasicRender - ok
16:22:08.0333 0x17b4  bcmfn2 - ok
16:22:08.0337 0x17b4  BDESVC - ok
16:22:08.0340 0x17b4  Beep - ok
16:22:08.0365 0x17b4  [ 2EE42E7539BBF4252F7F47B288E61CEA, 2113A7C825AE2D222FD80D092BAA254AB3EFA8A2F58EC8325837A6BC611BC715 ] BEService       C:\Program Files (x86)\Common Files\BattlEye\BEService.exe
16:22:08.0383 0x17b4  BEService - ok
16:22:08.0388 0x17b4  BFE - ok
16:22:08.0391 0x17b4  BITS - ok
16:22:08.0394 0x17b4  bowser - ok
16:22:08.0401 0x17b4  [ 7487B46E104303E247F68D485C12326F, BAC6A4FFD5B4009B4B673479630FAA2784618438925DFB6489F07BF163188114 ] BRDriver64_1_3_3_E02B25FC C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys
16:22:08.0403 0x17b4  BRDriver64_1_3_3_E02B25FC - ok
16:22:08.0406 0x17b4  BrokerInfrastructure - ok
16:22:08.0409 0x17b4  Browser - ok
16:22:08.0420 0x17b4  [ 448917845F097FCE9D4554C3D2001EF3, BDCBEC01579D7CF28963E4E13CDC5B26E4B69CA24FA2CC4D6E24CAE0DDBCB3FE ] BRSptStub       C:\ProgramData\BitRaider\BRSptStub.exe
16:22:08.0426 0x17b4  BRSptStub - ok
16:22:08.0431 0x17b4  BthAvrcpTg - ok
16:22:08.0435 0x17b4  BthHFEnum - ok
16:22:08.0439 0x17b4  bthhfhid - ok
16:22:08.0442 0x17b4  BthHFSrv - ok
16:22:08.0446 0x17b4  BTHMODEM - ok
16:22:08.0451 0x17b4  bthserv - ok
16:22:08.0454 0x17b4  buttonconverter - ok
16:22:08.0458 0x17b4  CapImg - ok
16:22:08.0461 0x17b4  cdfs - ok
16:22:08.0465 0x17b4  CDPSvc - ok
16:22:08.0468 0x17b4  cdrom - ok
16:22:08.0471 0x17b4  CertPropSvc - ok
16:22:08.0475 0x17b4  circlass - ok
16:22:08.0478 0x17b4  CLFS - ok
16:22:08.0482 0x17b4  ClipSVC - ok
16:22:08.0491 0x17b4  CmBatt - ok
16:22:08.0494 0x17b4  CNG - ok
16:22:08.0498 0x17b4  cnghwassist - ok
16:22:08.0519 0x17b4  CompositeBus - ok
16:22:08.0522 0x17b4  COMSysApp - ok
16:22:08.0526 0x17b4  condrv - ok
16:22:08.0530 0x17b4  CoreMessagingRegistrar - ok
16:22:08.0536 0x17b4  CryptSvc - ok
16:22:08.0540 0x17b4  dam - ok
16:22:08.0543 0x17b4  dc1-controller - ok
16:22:08.0548 0x17b4  DcomLaunch - ok
16:22:08.0552 0x17b4  DcpSvc - ok
16:22:08.0555 0x17b4  defragsvc - ok
16:22:08.0558 0x17b4  DeviceAssociationService - ok
16:22:08.0562 0x17b4  DeviceInstall - ok
16:22:08.0565 0x17b4  DevQueryBroker - ok
16:22:08.0569 0x17b4  Dfsc - ok
16:22:08.0572 0x17b4  Dhcp - ok
16:22:08.0576 0x17b4  diagnosticshub.standardcollector.service - ok
16:22:08.0579 0x17b4  DiagTrack - ok
16:22:08.0583 0x17b4  disk - ok
16:22:08.0587 0x17b4  DmEnrollmentSvc - ok
16:22:08.0590 0x17b4  dmvsc - ok
16:22:08.0593 0x17b4  dmwappushservice - ok
16:22:08.0597 0x17b4  Dnscache - ok
16:22:08.0602 0x17b4  dot3svc - ok
16:22:08.0605 0x17b4  DPS - ok
16:22:08.0609 0x17b4  drmkaud - ok
16:22:08.0612 0x17b4  DsmSvc - ok
16:22:08.0616 0x17b4  DsSvc - ok
16:22:08.0619 0x17b4  DXGKrnl - ok
16:22:08.0623 0x17b4  Eaphost - ok
16:22:08.0626 0x17b4  ebdrv - ok
16:22:08.0630 0x17b4  EFS - ok
16:22:08.0634 0x17b4  EhStorClass - ok
16:22:08.0637 0x17b4  EhStorTcgDrv - ok
16:22:08.0642 0x17b4  [ BE2902E13CA69383F449B6BF927844FB, F092785E305D8E1FE795AF98A7A7B7B4548A0D6687060568C9E078FFA8D65C1C ] ElbyCDIO        C:\WINDOWS\system32\Drivers\ElbyCDIO.sys
16:22:08.0643 0x17b4  ElbyCDIO - ok
16:22:08.0646 0x17b4  embeddedmode - ok
16:22:08.0650 0x17b4  EntAppSvc - ok
16:22:08.0653 0x17b4  ErrDev - ok
16:22:08.0658 0x17b4  [ B8FA96995726D1FA58476E352C02AD82, 6BBD49B16A19CC3C3337707EFBEB6BC355CB077CBBBC99D8985A3FBB6E871A89 ] ES lite Service C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
16:22:08.0659 0x17b4  ES lite Service - ok
16:22:08.0665 0x17b4  EventSystem - ok
16:22:08.0669 0x17b4  exfat - ok
16:22:08.0672 0x17b4  fastfat - ok
16:22:08.0676 0x17b4  Fax - ok
16:22:08.0679 0x17b4  fcvsc - ok
16:22:08.0682 0x17b4  fdc - ok
16:22:08.0686 0x17b4  fdPHost - ok
16:22:08.0689 0x17b4  FDResPub - ok
16:22:08.0693 0x17b4  fhsvc - ok
16:22:08.0696 0x17b4  FileCrypt - ok
16:22:08.0700 0x17b4  FileInfo - ok
16:22:08.0703 0x17b4  Filetrace - ok
16:22:08.0707 0x17b4  flpydisk - ok
16:22:08.0710 0x17b4  FltMgr - ok
16:22:08.0714 0x17b4  FontCache - ok
16:22:08.0717 0x17b4  FontCache3.0.0.0 - ok
16:22:08.0721 0x17b4  FsDepends - ok
16:22:08.0724 0x17b4  Fs_Rec - ok
16:22:08.0727 0x17b4  fvevol - ok
16:22:08.0731 0x17b4  gagp30kx - ok
16:22:08.0821 0x17b4  [ 7037D548B726108F9420B9F345573DC4, 659202CD4F8E789B47D9E7281312DD87B4718A615EC8B5C7F143E84AC7B9ACA3 ] GalaxyClientService D:\Spiele\GalaxyClient\GalaxyClientService.exe
16:22:08.0848 0x17b4  GalaxyClientService - ok
16:22:08.0982 0x17b4  [ 7747954B78DEED16169FC816108FE995, 677A09A5702884A138C83739487AF23EF6E4C8F79875997D26417E823D692293 ] GalaxyCommunication C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe
16:22:09.0089 0x17b4  GalaxyCommunication - ok
16:22:09.0103 0x17b4  [ 7907E14F9BCF3A4689C9A74A1A873CB6, 17927B93B2D6AB4271C158F039CAE2D60591D6A14458F5A5690AEC86F5D54229 ] gdrv            C:\Windows\gdrv.sys
16:22:09.0104 0x17b4  gdrv - ok
16:22:09.0108 0x17b4  gencounter - ok
16:22:09.0112 0x17b4  genericusbfn - ok
16:22:09.0139 0x17b4  [ C2730FE9713C1C474257A7085386B11E, 7D35D00D2B455841C8C9A87CE92885CD22F4B8B6690CB21443ED1B515117EF95 ] GfExperienceService C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
16:22:09.0157 0x17b4  GfExperienceService - ok
16:22:09.0162 0x17b4  GPIOClx0101 - ok
16:22:09.0167 0x17b4  gpsvc - ok
16:22:09.0170 0x17b4  GpuEnergyDrv - ok
16:22:09.0177 0x17b4  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdate         C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:22:09.0180 0x17b4  gupdate - ok
16:22:09.0184 0x17b4  [ DD7423ABBE2913E70D50E9318AD57EE4, 74BC123808F3FA60ADDC51C1383F8250608D3DBA3A8DC175B3418A1CF0BC53E9 ] gupdatem        C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
16:22:09.0187 0x17b4  gupdatem - ok
16:22:09.0190 0x17b4  [ 8126331FBD4ED29EB3B356F9C905064D, A58BCE904591DD762410E99960FD956FB579C2CE78FA7BF1406075D29537EF82 ] GVTDrv64        C:\Windows\GVTDrv64.sys
16:22:09.0191 0x17b4  GVTDrv64 - ok
16:22:09.0196 0x17b4  [ 7F79205B4EFA98F0767309479C8C01C6, 4B576903A83F33A8CF31D3887144A3D51C56D1187115C83AC99C0E9F6B4BF128 ] hamachi         C:\WINDOWS\system32\DRIVERS\Hamdrv.sys
16:22:09.0198 0x17b4  hamachi - ok
16:22:09.0385 0x17b4  [ 2ADED86ED9B92885378467CFEE9ABE8F, 78703B6E51C5E7DCFFBA9F15C404DB2A0054FE8F2F92B7AD470B08498995712A ] Hamachi2Svc     D:\Dateien\LogMeIn Hamachi\hamachi-2.exe
16:22:09.0424 0x17b4  Hamachi2Svc - ok
16:22:09.0434 0x17b4  HDAudBus - ok
16:22:09.0438 0x17b4  HidBatt - ok
16:22:09.0442 0x17b4  HidBth - ok
16:22:09.0446 0x17b4  hidi2c - ok
16:22:09.0451 0x17b4  hidinterrupt - ok
16:22:09.0454 0x17b4  HidIr - ok
16:22:09.0459 0x17b4  hidserv - ok
16:22:09.0463 0x17b4  HidUsb - ok
16:22:09.0467 0x17b4  HomeGroupListener - ok
16:22:09.0473 0x17b4  HomeGroupProvider - ok
16:22:09.0477 0x17b4  HpSAMD - ok
16:22:09.0481 0x17b4  HTTP - ok
16:22:09.0486 0x17b4  hwpolicy - ok
16:22:09.0490 0x17b4  hyperkbd - ok
16:22:09.0494 0x17b4  HyperVideo - ok
16:22:09.0498 0x17b4  i8042prt - ok
16:22:09.0503 0x17b4  iaLPSSi_GPIO - ok
16:22:09.0507 0x17b4  iaLPSSi_I2C - ok
16:22:09.0510 0x17b4  iaStorAV - ok
16:22:09.0514 0x17b4  iaStorV - ok
16:22:09.0519 0x17b4  ibbus - ok
16:22:09.0523 0x17b4  icssvc - ok
16:22:09.0528 0x17b4  [ 1CF03C69B49ACB70C722DF92755C0C8C, C227850C133F29BB9DED91A26A22AE077FD69629CEF35B67D305F016C4BDAA81 ] IDriverT        C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe
16:22:09.0530 0x17b4  IDriverT - ok
16:22:09.0535 0x17b4  IEEtwCollectorService - ok
16:22:09.0539 0x17b4  IKEEXT - ok
16:22:09.0631 0x17b4  [ 3A2D6740F51BE48C0FD01AD907329DEE, 4FD899CD6E3B3D5C9803E52CB72F002B6CFC144D524FAF6845CF6D115EC6E059 ] IntcAzAudAddService C:\WINDOWS\system32\drivers\RTKVHD64.sys
16:22:09.0700 0x17b4  IntcAzAudAddService - ok
16:22:09.0710 0x17b4  intelide - ok
16:22:09.0714 0x17b4  intelpep - ok
16:22:09.0717 0x17b4  intelppm - ok
16:22:09.0720 0x17b4  IoQos - ok
16:22:09.0724 0x17b4  IpFilterDriver - ok
16:22:09.0727 0x17b4  iphlpsvc - ok
16:22:09.0731 0x17b4  IPMIDRV - ok
16:22:09.0735 0x17b4  IPNAT - ok
16:22:09.0738 0x17b4  IRENUM - ok
16:22:09.0742 0x17b4  isapnp - ok
16:22:09.0746 0x17b4  iScsiPrt - ok
16:22:09.0778 0x17b4  [ F3A41EC4C6506E76E07A219B3A1DF8D2, B34FDAA453E6E089374B33533A89F76DEE1C2D14F9939AF3669B6F33FA41DD76 ] JMB36X          C:\Windows\SysWOW64\XSrvSetup.exe
16:22:09.0790 0x17b4  JMB36X - ok
16:22:09.0796 0x17b4  [ 1C368C1A2733DCC5B8E15420AA2B0F6D, C43A3534E33CEAEB8359D493FDB4663CB7C1E9286862B2CEE2788E9EA060DF1D ] JRAID           C:\WINDOWS\system32\drivers\jraid.sys
16:22:09.0798 0x17b4  JRAID - ok
16:22:09.0801 0x17b4  kbdclass - ok
16:22:09.0805 0x17b4  kbdhid - ok
16:22:09.0808 0x17b4  kdnic - ok
16:22:09.0811 0x17b4  KeyIso - ok
16:22:09.0815 0x17b4  KSecDD - ok
16:22:09.0819 0x17b4  KSecPkg - ok
16:22:09.0822 0x17b4  ksthunk - ok
16:22:09.0826 0x17b4  KtmRm - ok
16:22:09.0831 0x17b4  LanmanServer - ok
16:22:09.0836 0x17b4  LanmanWorkstation - ok
16:22:09.0841 0x17b4  lfsvc - ok
16:22:09.0845 0x17b4  LicenseManager - ok
16:22:09.0850 0x17b4  [ 156AB2E56DC3CA0B582E3362E07CDED7, 7B03929273861690DC42E4C686E655BE5A1C60136AE5E739D7E62306AFD4AB9A ] lirsgt          C:\WINDOWS\system32\DRIVERS\lirsgt.sys
16:22:09.0852 0x17b4  lirsgt - ok
16:22:09.0855 0x17b4  lltdio - ok
16:22:09.0859 0x17b4  lltdsvc - ok
16:22:09.0863 0x17b4  lmhosts - ok
16:22:09.0868 0x17b4  LSI_SAS - ok
16:22:09.0871 0x17b4  LSI_SAS2i - ok
16:22:09.0875 0x17b4  LSI_SAS3i - ok
16:22:09.0878 0x17b4  LSI_SSS - ok
16:22:09.0882 0x17b4  LSM - ok
16:22:09.0885 0x17b4  luafv - ok
16:22:09.0889 0x17b4  MapsBroker - ok
16:22:09.0893 0x17b4  [ A8D28D5B3E2A528D1EF0E338E44F2820, 40D1EFDD253BC0A0D984A5AD8A2721C3E83B15F14D538204714E6D5B00D92CEB ] MBAMProtector   C:\WINDOWS\system32\drivers\mbam.sys
16:22:09.0894 0x17b4  MBAMProtector - ok
16:22:09.0920 0x17b4  [ 83C982A395D00BAFF6515FB38424EA76, 0E1B66F84A483D47550347D4A9426B95A066DB5104C4284F606A16768A11DB0C ] MBAMService     C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe
16:22:09.0939 0x17b4  MBAMService - ok
16:22:09.0947 0x17b4  [ 85CFE7AB85B43B6B7AC7961AA3983A9F, 4E88B75818FD00C0ABBDF8E02EBFB550A67B46E5E13D3B3DF52611793F7DA0DD ] MBAMWebAccessControl C:\WINDOWS\system32\drivers\mwac.sys
16:22:09.0949 0x17b4  MBAMWebAccessControl - ok
16:22:09.0952 0x17b4  megasas - ok
16:22:09.0956 0x17b4  megasr - ok
16:22:09.0961 0x17b4  mlx4_bus - ok
16:22:09.0965 0x17b4  MMCSS - ok
16:22:09.0969 0x17b4  Modem - ok
16:22:09.0972 0x17b4  monitor - ok
16:22:09.0977 0x17b4  mouclass - ok
16:22:09.0981 0x17b4  mouhid - ok
16:22:09.0985 0x17b4  mountmgr - ok
16:22:09.0992 0x17b4  [ CC11EEB7AF4617D65DF0E9A21FC1ABD0, A683A5FB26E1B9FB4EEB40A9C7186F8433E3FB0A45848DF6102EF07B4DC75AC8 ] MozillaMaintenance C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe
16:22:09.0995 0x17b4  MozillaMaintenance - ok
16:22:09.0999 0x17b4  mpsdrv - ok
16:22:10.0003 0x17b4  MpsSvc - ok
16:22:10.0006 0x17b4  MQAC - ok
16:22:10.0010 0x17b4  MRxDAV - ok
16:22:10.0013 0x17b4  mrxsmb - ok
16:22:10.0016 0x17b4  mrxsmb10 - ok
16:22:10.0020 0x17b4  mrxsmb20 - ok
16:22:10.0023 0x17b4  MsBridge - ok
16:22:10.0026 0x17b4  MSDTC - ok
16:22:10.0033 0x17b4  Msfs - ok
16:22:10.0036 0x17b4  msgpiowin32 - ok
16:22:10.0039 0x17b4  mshidkmdf - ok
16:22:10.0043 0x17b4  mshidumdf - ok
16:22:10.0046 0x17b4  msisadrv - ok
16:22:10.0050 0x17b4  MSiSCSI - ok
16:22:10.0053 0x17b4  msiserver - ok
16:22:10.0056 0x17b4  MSKSSRV - ok
16:22:10.0059 0x17b4  MsLldp - ok
16:22:10.0064 0x17b4  MSMQ - ok
16:22:10.0068 0x17b4  MSPCLOCK - ok
16:22:10.0071 0x17b4  MSPQM - ok
16:22:10.0074 0x17b4  MsRPC - ok
16:22:10.0079 0x17b4  mssmbios - ok
16:22:10.0083 0x17b4  MSTEE - ok
16:22:10.0086 0x17b4  MTConfig - ok
16:22:10.0090 0x17b4  Mup - ok
16:22:10.0093 0x17b4  mvumis - ok
16:22:10.0098 0x17b4  NativeWifiP - ok
16:22:10.0101 0x17b4  NcaSvc - ok
16:22:10.0105 0x17b4  NcbService - ok
16:22:10.0108 0x17b4  NcdAutoSetup - ok
16:22:10.0111 0x17b4  ndfltr - ok
16:22:10.0115 0x17b4  NDIS - ok
16:22:10.0118 0x17b4  NdisCap - ok
16:22:10.0122 0x17b4  NdisImPlatform - ok
16:22:10.0125 0x17b4  NdisTapi - ok
16:22:10.0128 0x17b4  Ndisuio - ok
16:22:10.0132 0x17b4  NdisVirtualBus - ok
16:22:10.0136 0x17b4  NdisWan - ok
16:22:10.0139 0x17b4  ndiswanlegacy - ok
16:22:10.0143 0x17b4  ndproxy - ok
16:22:10.0146 0x17b4  Ndu - ok
16:22:10.0150 0x17b4  NetBIOS - ok
16:22:10.0154 0x17b4  NetBT - ok
16:22:10.0158 0x17b4  Netlogon - ok
16:22:10.0162 0x17b4  Netman - ok
16:22:10.0169 0x17b4  NetMsmqActivator - ok
16:22:10.0172 0x17b4  NetPipeActivator - ok
16:22:10.0177 0x17b4  netprofm - ok
16:22:10.0230 0x17b4  [ 152E946E60EEF45088D7D1E74D9F1779, A0330BBE51E900F5956BA92BD04C54CC6CB57A611AF1A3FF2454FEB852E105BA ] netr28x         C:\WINDOWS\system32\DRIVERS\netr28x.sys
16:22:10.0271 0x17b4  netr28x - ok
16:22:10.0279 0x17b4  NetSetupSvc - ok
16:22:10.0282 0x17b4  NetTcpActivator - ok
16:22:10.0286 0x17b4  NetTcpPortSharing - ok
16:22:10.0291 0x17b4  netvsc - ok
16:22:10.0296 0x17b4  NgcCtnrSvc - ok
16:22:10.0300 0x17b4  NgcSvc - ok
16:22:10.0304 0x17b4  NlaSvc - ok
16:22:10.0307 0x17b4  Npfs - ok
16:22:10.0311 0x17b4  npsvctrig - ok
16:22:10.0316 0x17b4  nsi - ok
16:22:10.0319 0x17b4  nsiproxy - ok
16:22:10.0324 0x17b4  NTFS - ok
16:22:10.0328 0x17b4  Null - ok
16:22:10.0336 0x17b4  [ 3EC9421780196DDA1A4C368BC7471778, FC5DEB52CAA76F968D3FF5F2418FA0A9DAC9E07BA5B259DEA5380759305F290E ] NVHDA           C:\WINDOWS\system32\drivers\nvhda64v.sys
16:22:10.0340 0x17b4  NVHDA - ok
16:22:10.0551 0x17b4  [ 9BE2E483F588B3A57C67352847037046, 1D0A4D86853C8A9188C4545842037F99DCC423CBA9DB68F51D10ACE302DE5AE2 ] nvlddmkm        C:\WINDOWS\system32\DRIVERS\nvlddmkm.sys
16:22:10.0726 0x17b4  nvlddmkm - ok
16:22:10.0784 0x17b4  [ F9CF3FB8DD81B390783532B3C98D6976, 8C94638136CFAEB3ED6DD7CE2059E98B64B15918DDB0796CC0B88474EE99F5BF ] NvNetworkService C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
16:22:10.0812 0x17b4  NvNetworkService - ok
16:22:10.0818 0x17b4  nvraid - ok
16:22:10.0822 0x17b4  nvstor - ok
16:22:10.0827 0x17b4  [ 3A7B0570D896602E37EAF80EC3D1615A, 1F5A71432F96731115ADA2A50E605923666188D08F9FD748424AB6588D0E1482 ] NvStreamKms     C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys
16:22:10.0828 0x17b4  NvStreamKms - ok
16:22:10.0831 0x17b4  NvStreamSvc - ok
16:22:10.0854 0x17b4  [ DFCCA437717EACA8418F47992A41B39A, E587A629B894EE6A16AC414747D492FFC6B6E9F051B40F7D25F0D4406E2FF919 ] nvsvc           C:\WINDOWS\system32\nvvsvc.exe
16:22:10.0876 0x17b4  nvsvc - ok
16:22:10.0882 0x17b4  [ DBFE7B2DF103F74AE51840B3C5F25FE9, 436CAA417FD24BA870F117FA4BABA2AB694825795508BCFCC8C927CC2D5BBC5E ] nvvad_WaveExtensible C:\WINDOWS\system32\drivers\nvvad64v.sys
16:22:10.0883 0x17b4  nvvad_WaveExtensible - ok
16:22:10.0886 0x17b4  nv_agp - ok
16:22:10.0890 0x17b4  OneSyncSvc - ok
16:22:10.0978 0x17b4  [ 29B093BA6759118DB14AF41026385E03, 660176D122344A79E52FFD9FE3D32D1967D9B22BC4AD76549D839B09693D0713 ] Origin Client Service D:\Spiele\Origin\OriginClientService.exe
16:22:11.0011 0x17b4  Origin Client Service - ok
16:22:11.0019 0x17b4  [ 60F5579B6B33F509C52200207F79B795, 1AB99528EF65799CBA7BCF43A654698ABE37A6DB8EB9BE2AC6ED7758AF795327 ] owahm           C:\WINDOWS\system32\drivers\ggpcixbf.sys
16:22:11.0021 0x17b4  owahm - ok
16:22:11.0024 0x17b4  p2pimsvc - ok
16:22:11.0029 0x17b4  p2psvc - ok
16:22:11.0032 0x17b4  Parport - ok
16:22:11.0036 0x17b4  partmgr - ok
16:22:11.0040 0x17b4  PcaSvc - ok
16:22:11.0043 0x17b4  pci - ok
16:22:11.0048 0x17b4  pciide - ok
16:22:11.0052 0x17b4  pcmcia - ok
16:22:11.0055 0x17b4  pcw - ok
16:22:11.0059 0x17b4  pdc - ok
16:22:11.0062 0x17b4  PEAUTH - ok
16:22:11.0066 0x17b4  percsas2i - ok
16:22:11.0070 0x17b4  percsas3i - ok
16:22:11.0101 0x17b4  PerfHost - ok
16:22:11.0110 0x17b4  PimIndexMaintenanceSvc - ok
16:22:11.0116 0x17b4  pla - ok
16:22:11.0119 0x17b4  PlugPlay - ok
16:22:11.0122 0x17b4  PNRPAutoReg - ok
16:22:11.0126 0x17b4  PNRPsvc - ok
16:22:11.0130 0x17b4  PolicyAgent - ok
16:22:11.0135 0x17b4  Power - ok
16:22:11.0139 0x17b4  PptpMiniport - ok
16:22:11.0220 0x17b4  [ 12E2582F69ACA40A6BAE91DA578CBF34, 648C6394763906AA4163976DA2C3308F8B706486D9D8F16258CB1D61C2929930 ] PrintNotify     C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll
16:22:11.0282 0x17b4  PrintNotify - ok
16:22:11.0294 0x17b4  Processor - ok
16:22:11.0299 0x17b4  ProfSvc - ok
16:22:11.0303 0x17b4  Psched - ok
16:22:11.0308 0x17b4  [ DD3FD48D69F5FBBB21D46D1514C1C2DB, 2B188E3AC4BD9B608D375DD550507717852C2AF7C0F99FFED90098999B9D4F01 ] PSI             C:\WINDOWS\system32\DRIVERS\psi_mf_amd64.sys
16:22:11.0310 0x17b4  PSI - ok
16:22:11.0315 0x17b4  QWAVE - ok
16:22:11.0318 0x17b4  QWAVEdrv - ok
16:22:11.0326 0x17b4  [ 720FEA3AAA15FE7E0BEAB10AC2E6D2B0, E1E6A79751B7CAA86F4C7F9DD2A835D5C30FBD433644F916B8E54CD8105D00D2 ] RalinkRegistryWriter C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe
16:22:11.0330 0x17b4  RalinkRegistryWriter - ok
16:22:11.0341 0x17b4  [ 178CEF55E09DC320FF6561D4EEB4F632, 0B11CE080341CAD324F6A46ABE30D71E3BD2C27EA9188A0C9574ED757706E8A7 ] RalinkRegistryWriter64 C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe
16:22:11.0345 0x17b4  RalinkRegistryWriter64 - ok
16:22:11.0350 0x17b4  RasAcd - ok
16:22:11.0356 0x17b4  RasAgileVpn - ok
16:22:11.0360 0x17b4  RasAuto - ok
16:22:11.0365 0x17b4  Rasl2tp - ok
16:22:11.0368 0x17b4  RasMan - ok
16:22:11.0372 0x17b4  RasPppoe - ok
16:22:11.0377 0x17b4  RasSstp - ok
16:22:11.0381 0x17b4  rdbss - ok
16:22:11.0387 0x17b4  rdpbus - ok
16:22:11.0391 0x17b4  RDPDR - ok
16:22:11.0399 0x17b4  RdpVideoMiniport - ok
16:22:11.0402 0x17b4  rdyboost - ok
16:22:11.0406 0x17b4  ReFSv1 - ok
16:22:11.0411 0x17b4  RemoteAccess - ok
16:22:11.0418 0x17b4  RemoteRegistry - ok
16:22:11.0424 0x17b4  RetailDemo - ok
16:22:11.0444 0x17b4  RpcEptMapper - ok
16:22:11.0454 0x17b4  RpcLocator - ok
16:22:11.0460 0x17b4  RpcSs - ok
16:22:11.0465 0x17b4  rspndr - ok
16:22:11.0469 0x17b4  rt640x64 - ok
16:22:11.0474 0x17b4  s3cap - ok
16:22:11.0479 0x17b4  SamSs - ok
16:22:11.0498 0x17b4  [ B7A4102FCA57F022CF69E3E1EAD61421, 75B70A96925E855E07AE3A364D9CA7A433A7FEB4185891F4124BA64D490C24F3 ] SamsungUPDUtilSvc C:\Windows\SysWOW64\SecUPDUtilSvc.exe
16:22:11.0506 0x17b4  SamsungUPDUtilSvc - ok
16:22:11.0511 0x17b4  sbp2port - ok
16:22:11.0526 0x17b4  SCardSvr - ok
16:22:11.0533 0x17b4  ScDeviceEnum - ok
16:22:11.0538 0x17b4  scfilter - ok
16:22:11.0543 0x17b4  Schedule - ok
16:22:11.0550 0x17b4  SCPolicySvc - ok
16:22:11.0558 0x17b4  sdbus - ok
16:22:11.0562 0x17b4  SDRSVC - ok
16:22:11.0567 0x17b4  sdstor - ok
16:22:11.0573 0x17b4  seclogon - ok
16:22:11.0610 0x17b4  [ 05E383849FA1FBBBC160612B0080618C, 43A33CC6BD24635EE849E89DB4391AB36292DDC0AC407E1B480B6E1DF7FC3BC5 ] Secunia PSI Agent C:\Program Files (x86)\Secunia\PSI\PSIA.exe
16:22:11.0630 0x17b4  Secunia PSI Agent - ok
16:22:11.0649 0x17b4  [ F8173F1454F21C451439CB47EF75830A, CF87917CD061686CD956884D4ED73AA8C0B04B0B7B5BA36BAA4CC4A03C8C0263 ] Secunia Update Agent C:\Program Files (x86)\Secunia\PSI\sua.exe
16:22:11.0660 0x17b4  Secunia Update Agent - ok
16:22:11.0664 0x17b4  SENS - ok
16:22:11.0668 0x17b4  SensorDataService - ok
16:22:11.0672 0x17b4  SensorService - ok
16:22:11.0676 0x17b4  SensrSvc - ok
16:22:11.0681 0x17b4  SerCx - ok
16:22:11.0685 0x17b4  SerCx2 - ok
16:22:11.0691 0x17b4  Serenum - ok
16:22:11.0695 0x17b4  Serial - ok
16:22:11.0699 0x17b4  sermouse - ok
16:22:11.0707 0x17b4  SessionEnv - ok
16:22:11.0715 0x17b4  sfloppy - ok
16:22:11.0721 0x17b4  SharedAccess - ok
16:22:11.0724 0x17b4  ShellHWDetection - ok
16:22:11.0727 0x17b4  SiSRaid2 - ok
16:22:11.0732 0x17b4  SiSRaid4 - ok
16:22:11.0742 0x17b4  [ 52F7E8603E888E3DB0A8B3D1804098E9, 4E23DC9442C0C14AAE7146DACBB0B39743F1FFAA463EE7069CCDF866AD27BD77 ] SkypeUpdate     C:\Program Files (x86)\Skype\Updater\Updater.exe
16:22:11.0747 0x17b4  SkypeUpdate - ok
16:22:11.0752 0x17b4  smphost - ok
16:22:11.0755 0x17b4  SmsRouter - ok
16:22:11.0764 0x17b4  SNMPTRAP - ok
16:22:11.0771 0x17b4  [ 21FF393512F51F5A98620C794B4488A3, 8A35923D3D6993FC014D86F0F7BD5C106586824DB8D26C04DC2AD0B8ED13ED20 ] Sony PC Companion C:\Program Files (x86)\Sony\Sony PC Companion\PCCService.exe
16:22:11.0774 0x17b4  Sony PC Companion - ok
16:22:11.0777 0x17b4  spaceport - ok
16:22:11.0781 0x17b4  SpbCx - ok
16:22:11.0785 0x17b4  Spooler - ok
16:22:11.0790 0x17b4  sppsvc - ok
16:22:11.0794 0x17b4  srv - ok
16:22:11.0797 0x17b4  srv2 - ok
16:22:11.0801 0x17b4  srvnet - ok
16:22:11.0804 0x17b4  SSDPSRV - ok
16:22:11.0809 0x17b4  SstpSvc - ok
16:22:11.0812 0x17b4  StateRepository - ok
16:22:11.0833 0x17b4  [ 2A6EDC2FBB4B9C11BB21BE3881C7A692, 74482CA4EC2B98C069A32C224BA5449AE10A8B41BFC053A4C23B6F65113A97A4 ] Steam Client Service C:\Program Files (x86)\Common Files\Steam\SteamService.exe
16:22:11.0847 0x17b4  Steam Client Service - ok
16:22:11.0861 0x17b4  [ C64C157B167FE562E8670984E72C25FA, 9302C82A75CA65515297B72F3A6230307AAE0B14FD8C9C7FA343F7B62E5ED376 ] Stereo Service  C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
16:22:11.0868 0x17b4  Stereo Service - ok
16:22:11.0872 0x17b4  stexstor - ok
16:22:11.0877 0x17b4  [ 7C4D2F167FA6153B4FE7145FE6D3DF15, F39ED9CDF323DDC57D0F64F9CC121E911EA53819A3A941A2F6EA557C35FCB372 ] StillCam        C:\WINDOWS\system32\DRIVERS\serscan.sys
16:22:11.0878 0x17b4  StillCam - ok
16:22:11.0881 0x17b4  stisvc - ok
16:22:11.0889 0x17b4  storahci - ok
16:22:11.0892 0x17b4  storflt - ok
16:22:11.0898 0x17b4  stornvme - ok
16:22:11.0901 0x17b4  storqosflt - ok
16:22:11.0905 0x17b4  StorSvc - ok
16:22:11.0908 0x17b4  storufs - ok
16:22:11.0912 0x17b4  storvsc - ok
16:22:11.0916 0x17b4  svsvc - ok
16:22:11.0936 0x17b4  swenum - ok
16:22:11.0939 0x17b4  swprv - ok
16:22:11.0943 0x17b4  Synth3dVsc - ok
16:22:11.0947 0x17b4  SysMain - ok
16:22:11.0950 0x17b4  SystemEventsBroker - ok
16:22:11.0953 0x17b4  TabletInputService - ok
16:22:11.0958 0x17b4  [ 3C32FF010F869BC184DF71290477384E, 55CFCEC7F026C6E2E96A2FBE846AB513BB12BB0348735274FE1B71AF019C837B ] tap0901         C:\WINDOWS\System32\drivers\tap0901.sys
16:22:11.0960 0x17b4  tap0901 - ok
16:22:11.0964 0x17b4  [ B08740047145B9BCE15BF75CA0F9718A, 3E2A8A5A2A4DC4D0F05E22EA2C0EBD85AA5C7C6854E873D53538D1F54B8F7C63 ] tap0901t        C:\WINDOWS\System32\drivers\tap0901t.sys
16:22:11.0966 0x17b4  tap0901t - ok
16:22:11.0970 0x17b4  [ 3A7CABF7DE8F1325BE8F46685469AEC3, 03B2FDEA5E10B9584EFC4ED22D6C2529322FBEF0DFEC60FE12FCE5C4A2E42F9C ] taphss6         C:\WINDOWS\system32\DRIVERS\taphss6.sys
16:22:11.0972 0x17b4  taphss6 - ok
16:22:11.0975 0x17b4  TapiSrv - ok
16:22:11.0978 0x17b4  Tcpip - ok
16:22:11.0981 0x17b4  Tcpip6 - ok
16:22:11.0987 0x17b4  tcpipreg - ok
16:22:11.0992 0x17b4  tdx - ok
16:22:11.0996 0x17b4  terminpt - ok
16:22:12.0000 0x17b4  TermService - ok
16:22:12.0003 0x17b4  Themes - ok
16:22:12.0006 0x17b4  tiledatamodelsvc - ok
16:22:12.0011 0x17b4  TimeBroker - ok
16:22:12.0015 0x17b4  TPM - ok
16:22:12.0019 0x17b4  TrkWks - ok
16:22:12.0022 0x17b4  TrustedInstaller - ok
16:22:12.0027 0x17b4  TsUsbFlt - ok
16:22:12.0031 0x17b4  TsUsbGD - ok
16:22:12.0034 0x17b4  tunnel - ok
16:22:12.0053 0x17b4  [ 57D1025FD44FA47BAE92EDF4D7645BD5, 20577723BA72927A38C851BE6EC3861E4C311C159FDDA773FF6F18063B899676 ] TunngleService  C:\Program Files (x86)\Tunngle\TnglCtrl.exe
16:22:12.0065 0x17b4  TunngleService - ok
16:22:12.0069 0x17b4  uagp35 - ok
16:22:12.0072 0x17b4  UASPStor - ok
16:22:12.0076 0x17b4  UcmCx0101 - ok
16:22:12.0079 0x17b4  UcmUcsi - ok
16:22:12.0083 0x17b4  Ucx01000 - ok
16:22:12.0086 0x17b4  UdeCx - ok
16:22:12.0089 0x17b4  udfs - ok
16:22:12.0093 0x17b4  UEFI - ok
16:22:12.0097 0x17b4  Ufx01000 - ok
16:22:12.0101 0x17b4  UfxChipidea - ok
16:22:12.0104 0x17b4  ufxsynopsys - ok
16:22:12.0111 0x17b4  UI0Detect - ok
16:22:12.0115 0x17b4  uliagpkx - ok
16:22:12.0119 0x17b4  umbus - ok
16:22:12.0122 0x17b4  UmPass - ok
16:22:12.0126 0x17b4  UmRdpService - ok
16:22:12.0129 0x17b4  UnistoreSvc - ok
16:22:12.0134 0x17b4  upnphost - ok
16:22:12.0138 0x17b4  UrsChipidea - ok
16:22:12.0141 0x17b4  UrsCx01000 - ok
16:22:12.0145 0x17b4  UrsSynopsys - ok
16:22:12.0150 0x17b4  usbccgp - ok
16:22:12.0153 0x17b4  usbcir - ok
16:22:12.0157 0x17b4  usbehci - ok
16:22:12.0161 0x17b4  [ 2C780746DC44A28FE67004DC58173F05, 9E0596CE35C7430A31A7E77B4D12A1F521B9ED8EB0614E6FB38403AC614C3EE3 ] usbfilter       C:\WINDOWS\system32\DRIVERS\usbfilter.sys
16:22:12.0163 0x17b4  usbfilter - ok
16:22:12.0166 0x17b4  usbhub - ok
16:22:12.0170 0x17b4  USBHUB3 - ok
16:22:12.0173 0x17b4  usbohci - ok
16:22:12.0176 0x17b4  usbprint - ok
16:22:12.0180 0x17b4  usbser - ok
16:22:12.0183 0x17b4  USBSTOR - ok
16:22:12.0187 0x17b4  usbuhci - ok
16:22:12.0192 0x17b4  USBXHCI - ok
16:22:12.0196 0x17b4  UserDataSvc - ok
16:22:12.0201 0x17b4  UserManager - ok
16:22:12.0205 0x17b4  UsoSvc - ok
16:22:12.0209 0x17b4  VaultSvc - ok
16:22:12.0215 0x17b4  [ 8CD776EB77695524CCE594AAC3A71569, AEF6F9B0E5F67E87819EB0E9FA5220EEF247A160A2BF8511CEDC8D12A9D4D941 ] VBoxNetAdp      C:\WINDOWS\system32\DRIVERS\VBoxNetAdp.sys
16:22:12.0218 0x17b4  VBoxNetAdp - ok
16:22:12.0223 0x17b4  [ 3C8E2C591345F38149C69FE8E5DF8C90, 9F4BB9BDA09CB2E99A6A888B288F322AE5C460B5D124CD714C6F00FF5029144B ] VClone          C:\WINDOWS\System32\drivers\VClone.sys
16:22:12.0225 0x17b4  VClone - ok
16:22:12.0228 0x17b4  vdrvroot - ok
16:22:12.0231 0x17b4  vds - ok
16:22:12.0234 0x17b4  VerifierExt - ok
16:22:12.0239 0x17b4  vhdmp - ok
16:22:12.0243 0x17b4  vhf - ok
16:22:12.0247 0x17b4  vmbus - ok
16:22:12.0251 0x17b4  VMBusHID - ok
16:22:12.0255 0x17b4  vmicguestinterface - ok
16:22:12.0258 0x17b4  vmicheartbeat - ok
16:22:12.0261 0x17b4  vmickvpexchange - ok
16:22:12.0265 0x17b4  vmicrdv - ok
16:22:12.0268 0x17b4  vmicshutdown - ok
16:22:12.0272 0x17b4  vmictimesync - ok
16:22:12.0276 0x17b4  vmicvmsession - ok
16:22:12.0279 0x17b4  vmicvss - ok
16:22:12.0283 0x17b4  volmgr - ok
16:22:12.0287 0x17b4  volmgrx - ok
16:22:12.0290 0x17b4  volsnap - ok
16:22:12.0294 0x17b4  vpci - ok
16:22:12.0297 0x17b4  vsmraid - ok
16:22:12.0302 0x17b4  VSS - ok
16:22:12.0305 0x17b4  VSTXRAID - ok
16:22:12.0309 0x17b4  vwifibus - ok
16:22:12.0313 0x17b4  vwififlt - ok
16:22:12.0317 0x17b4  vwifimp - ok
16:22:12.0320 0x17b4  W32Time - ok
16:22:12.0324 0x17b4  w3logsvc - ok
16:22:12.0327 0x17b4  W3SVC - ok
16:22:12.0331 0x17b4  WacomPen - ok
16:22:12.0335 0x17b4  WalletService - ok
16:22:12.0338 0x17b4  wanarp - ok
16:22:12.0342 0x17b4  wanarpv6 - ok
16:22:12.0345 0x17b4  WAS - ok
16:22:12.0350 0x17b4  wbengine - ok
16:22:12.0353 0x17b4  WbioSrvc - ok
16:22:12.0357 0x17b4  Wcmsvc - ok
16:22:12.0360 0x17b4  wcncsvc - ok
16:22:12.0365 0x17b4  WcsPlugInService - ok
16:22:12.0369 0x17b4  WdBoot - ok
16:22:12.0373 0x17b4  Wdf01000 - ok
16:22:12.0376 0x17b4  WdFilter - ok
16:22:12.0380 0x17b4  WdiServiceHost - ok
16:22:12.0383 0x17b4  WdiSystemHost - ok
16:22:12.0387 0x17b4  wdiwifi - ok
16:22:12.0391 0x17b4  WdNisDrv - ok
16:22:12.0394 0x17b4  WdNisSvc - ok
16:22:12.0398 0x17b4  WebClient - ok
16:22:12.0402 0x17b4  Wecsvc - ok
16:22:12.0405 0x17b4  WEPHOSTSVC - ok
16:22:12.0409 0x17b4  wercplsupport - ok
16:22:12.0413 0x17b4  WerSvc - ok
16:22:12.0416 0x17b4  wfpcapture - ok
16:22:12.0420 0x17b4  WFPLWFS - ok
16:22:12.0423 0x17b4  WiaRpc - ok
16:22:12.0430 0x17b4  WIMMount - ok
16:22:12.0432 0x17b4  WinDefend - ok
16:22:12.0440 0x17b4  WindowsTrustedRT - ok
16:22:12.0444 0x17b4  WindowsTrustedRTProxy - ok
16:22:12.0447 0x17b4  WinHttpAutoProxySvc - ok
16:22:12.0451 0x17b4  WinMad - ok
16:22:12.0457 0x17b4  Winmgmt - ok
16:22:12.0460 0x17b4  WinRM - ok
16:22:12.0467 0x17b4  WINUSB - ok
16:22:12.0471 0x17b4  WinVerbs - ok
16:22:12.0474 0x17b4  WlanSvc - ok
16:22:12.0478 0x17b4  wlidsvc - ok
16:22:12.0481 0x17b4  WmiAcpi - ok
16:22:12.0486 0x17b4  wmiApSrv - ok
16:22:12.0489 0x17b4  WMPNetworkSvc - ok
16:22:12.0493 0x17b4  Wof - ok
16:22:12.0499 0x17b4  workfolderssvc - ok
16:22:12.0503 0x17b4  wpcfltr - ok
16:22:12.0508 0x17b4  WPDBusEnum - ok
16:22:12.0511 0x17b4  WpdUpFltr - ok
16:22:12.0516 0x17b4  WpnService - ok
16:22:12.0519 0x17b4  ws2ifsl - ok
16:22:12.0523 0x17b4  wscsvc - ok
16:22:12.0526 0x17b4  WSearch - ok
16:22:12.0531 0x17b4  WSService - ok
16:22:12.0535 0x17b4  wuauserv - ok
16:22:12.0539 0x17b4  WudfPf - ok
16:22:12.0543 0x17b4  WUDFRd - ok
16:22:12.0546 0x17b4  wudfsvc - ok
16:22:12.0550 0x17b4  WwanSvc - ok
16:22:12.0555 0x17b4  XblAuthManager - ok
16:22:12.0558 0x17b4  XblGameSave - ok
16:22:12.0562 0x17b4  xboxgip - ok
16:22:12.0566 0x17b4  XboxNetApiSvc - ok
16:22:12.0569 0x17b4  xinputhid - ok
16:22:12.0571 0x17b4  ================ Scan global ===============================
16:22:12.0582 0x17b4  [ Global ] - ok
16:22:12.0582 0x17b4  ================ Scan MBR ==================================
16:22:12.0584 0x17b4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk0\DR0
16:22:12.0666 0x17b4  \Device\Harddisk0\DR0 - ok
16:22:12.0677 0x17b4  [ A36C5E4F47E84449FF07ED3517B43A31 ] \Device\Harddisk1\DR1
16:22:12.0689 0x17b4  \Device\Harddisk1\DR1 - ok
16:22:12.0690 0x17b4  ================ Scan VBR ==================================
16:22:12.0693 0x17b4  [ B137EA7CDA7CEA43F9889BEB0C129048 ] \Device\Harddisk0\DR0\Partition1
16:22:12.0695 0x17b4  \Device\Harddisk0\DR0\Partition1 - ok
16:22:12.0697 0x17b4  [ 42E846FE50911FA991BE6513EB7B0677 ] \Device\Harddisk0\DR0\Partition2
16:22:12.0698 0x17b4  \Device\Harddisk0\DR0\Partition2 - ok
16:22:12.0701 0x17b4  [ DDC71AC668D786C5DE83C16A232B042C ] \Device\Harddisk1\DR1\Partition1
16:22:12.0743 0x17b4  \Device\Harddisk1\DR1\Partition1 - ok
16:22:12.0744 0x17b4  ================ Scan generic autorun ======================
16:22:13.0002 0x17b4  [ D0E9E2E198C8BA95297EF8C9D04865F1, 1889A66AEEEE1E9D80FB99E23AFBB23AF37044BAA8AE00070667D3B2E32AB804 ] C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
16:22:13.0212 0x17b4  RTHDVCPL - ok
16:22:13.0230 0x17b4  ShadowPlay - ok
16:22:13.0289 0x17b4  [ 046DDF9B31BEC14D03CCC97DD728A4D1, D29F49F870B27553E13F9C1486D9B27A27C41FBEC7ACEC77EDFD5552C941E710 ] C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
16:22:13.0329 0x17b4  NvBackend - ok
16:22:13.0348 0x17b4  [ 63E0C11E1CEBA6CC05443E98041BB1E0, 3C52E5F7191519A0DF545DFA42B140F55426D01E0CEF6212CEE263E0D7BFD9EC ] C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE
16:22:13.0357 0x17b4  RoccatKoneXTD - ok
16:22:13.0361 0x17b4  [ 17D9440D55500418C8FDB8EF1390C5AD, C4C57AE427FB89EFDFC1D111C300BB588E475BE90DD57084C03399557641F948 ] C:\Windows\RaidTool\xInsIDE.exe
16:22:13.0362 0x17b4  JMB36X IDE Setup - ok
16:22:13.0367 0x17b4  [ 087A06DB98D0E84C0DE90EE308707E63, 96E8CDC492115A93B1B244196947E45D3C30CF64F538EAB634E0B02BEFBF1607 ] C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
16:22:13.0369 0x17b4  NUSB3MON - ok
16:22:13.0384 0x17b4  [ D0B1DA5382433AFBF52DE8815298EB0C, A326D01783359CCA1054210D82F17533638A9769A7A08C2BD0621DE016909359 ] C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE
16:22:13.0392 0x17b4  RoccatIsku - ok
16:22:13.0398 0x17b4  [ EBC0E8C0A4DDA2C32A7D5863462A321A, 2F410138DB66D0219254339F1F098E401CEDAA032596F1F67BC54F394256FC68 ] C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe
16:22:13.0399 0x17b4  amd_dc_opt - ok
16:22:13.0403 0x17b4  [ 34D296AFC913E302953C70463EF09A48, BC413307CBC56C039EE8A05B51A56E14EF59678FBB33815AEB320078056C8CE7 ] C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe
16:22:13.0405 0x17b4  HP Software Update - ok
16:22:13.0416 0x17b4  [ 9DECF401AE4CB834D89957BDBF484068, 084056EAA068F88B6168566F14D315F2AD35F2202B18CFC5F88A466C154210A3 ] C:\Program Files\AVAST Software\Avast\setup\emupdate\5b9c12bd-ec1a-4df2-8712-ac5ed4039682.exe
16:22:13.0419 0x17b4  20150107 - ok
16:22:13.0448 0x17b4  OneDriveSetup - ok
16:22:13.0449 0x17b4  OneDriveSetup - ok
16:22:13.0462 0x17b4  [ 8F97EDDF827C64AB2C42971095BF2F76, 5A42AA8E3A5E5BA6E93F1CD5B3229022D881B6180976E48A219A7C80F3EBE37D ] C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe
16:22:13.0469 0x17b4  Sony PC Companion - ok
16:22:13.0591 0x17b4  [ F2B4338E54D09E15E28E170B3EB2B430, 6B7008C4D58806D8D67F0E860138A1660BAC3000CE239C34480E40379F792B6F ] D:\Spiele\Origin\Origin.exe
16:22:13.0649 0x17b4  EADM - ok
16:22:13.0849 0x17b4  [ 36C55F2645D61F15457D23B56F0149DA, 410DDEA347DD8AA58838560CC01AABD3F7D40A6879482AADD09BC4A82E26D48D ] D:\Spiele\GalaxyClient\GalaxyClient.exe
16:22:13.0959 0x17b4  GalaxyClient - ok
16:22:14.0088 0x17b4  [ 0AF9C61507E71E715B94C3AC228B34DD, 2426D70F95E1AA4A30E4549B90C15BB1FCA58231376BA311C8B3578BCA4FC3C5 ] D:\Dateien\Echobit\Evolve\EvolveClient.exe
16:22:14.0139 0x17b4  EvolveClient - ok
16:22:14.0159 0x17b4  [ C2D2FFD27F46815951C9562F0A2EC864, 892A5DC5C3D797E3FD36230710BA9AF43ADA5CDFD19A03268D20D5A9DA3CCB3A ] C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\OneDrive.exe
16:22:14.0165 0x17b4  OneDrive - ok
16:22:14.0168 0x17b4  Skype - ok
16:22:14.0350 0x17b4  [ FB5B78A3DE88FD3B725DA574497BC225, 0096C3ED0E29153E6A9E84C121B79A170FEDFE521AEA1BC602BC536E1795E5F3 ] C:\Program Files\CCleaner\CCleaner64.exe
16:22:14.0478 0x17b4  CCleaner Monitoring - ok
16:22:14.0494 0x17b4  Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64 - ok
16:22:14.0499 0x17b4  Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64 - ok
16:22:14.0505 0x17b4  Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64 - ok
16:22:14.0507 0x17b4  OneDriveSetup - ok
16:22:14.0511 0x17b4  AV detected via SS2: Windows Defender, C:\Program Files\Windows Defender\MSASCui.exe ( 4.8.10240.16384 ), 0x60100 ( disabled : updated )
16:22:14.0512 0x17b4  AV detected via SS2: avast! Antivirus, C:\Program Files\AVAST Software\Avast\VisthAux.exe ( 10.2.2218.942 ), 0x41000 ( enabled : updated )
16:22:14.0514 0x17b4  Win FW state via NFP2: enabled ( trusted )
16:22:16.0854 0x17b4  ============================================================
16:22:16.0854 0x17b4  Scan finished
16:22:16.0855 0x17b4  ============================================================
16:22:16.0880 0x221c  Detected object count: 0
16:22:16.0880 0x221c  Actual detected object count: 0
16:22:36.0008 0x0328  Deinitialize success
         

Alt 21.09.2015, 18:51   #10
burningice
/// Malwareteam
 
Malware Befall? - Standard

Malware Befall?



Schritt 1
Downloade Dir bitte Malwarebytes Anti-Malware
  • Installiere das Programm in den vorgegebenen Pfad. (Bebilderte Anleitung zu MBAM)
  • Starte Malwarebytes' Anti-Malware (MBAM).
  • Klicke im Anschluss auf Scannen, wähle den Bedrohungssuchlauf aus und klicke auf Suchlauf starten.
  • Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Auswahl entfernen.
  • Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
  • Starte MBAM, klicke auf Verlauf und dann auf Anwendungsprotokolle.
  • Wähle das neueste Scan-Protokoll aus und klicke auf Export. Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab. Das Logfile von MBAM findest du hier.
  • Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.



Schritt 2
Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt 3

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

  • Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
  • Drücke eine beliebige Taste, um das Tool zu starten.
  • Je nach System kann der Scan eine Weile dauern.
  • Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
  • Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.



Bitte poste in deiner nächsten Antwort also:
  • Log von Malwarebytes
  • Log von AdwCleaner
  • Log von JRT
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Alt 21.09.2015, 20:00   #11
dieFackel
 
Malware Befall? - Standard

Malware Befall?



Hier sind alle 3 Logs:

mbam
Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 21.09.2015
Suchlaufzeit: 19:46
Protokolldatei: mbam.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.09.21.05
Rootkit-Datenbank: v2015.09.18.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: dieFackel

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 430545
Abgelaufene Zeit: 4 Min., 34 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 0
(keine bösartigen Elemente erkannt)

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Dateien: 0
(keine bösartigen Elemente erkannt)

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
AdwCleane[C1]
Code:
ATTFilter
# AdwCleaner v5.008 - Bericht erstellt am 21/09/2015 um 19:55:52
# Aktualisiert am 18/09/2015 von Xplode
# Datenbank : 2015-09-20.1 [Server]
# Betriebssystem : Windows 10 Home  (x64)
# Benutzername : dieFackel - SOL-PC
# Gestartet von : C:\Users\dieFackel\Desktop\AdwCleaner_5.008.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\WINDOWS\SysWOW64\config\systemprofile\AppData\Local\YSearchUtil

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\END
[-] Datei Gelöscht : C:\WINDOWS\Sysnative\roboot64.exe

***** [ Verknüpfungen ] *****


***** [ Geplante Tasks ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{1AA60054-57D9-4F99-9A55-D0FBFBE7ECD3}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{E69D4A59-73DE-4E38-9FB3-740EC4D9060D}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{F9E4A054-E9B1-4BC3-83A3-76A1AE736170}
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\systweak
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\systweak
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\OCS
[!] Schlüssel Nicht Gelöscht : [x64] HKCU\Software\systweak

***** [ Internetbrowser ] *****


*************************

:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Chrome Richtlinien gelöscht

########## EOF - C:\AdwCleaner\AdwCleaner[C1].txt - [1618 Bytes] ##########
         
JRT
Code:
ATTFilter
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Junkware Removal Tool (JRT) by Malwarebytes
Version: 7.6.2 (09.14.2015:1)
OS: Windows 10 Home x64
Ran by dieFackel on 21.09.2015 at 19:24:48,84
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~




~~~ Services



~~~ Tasks



~~~ Registry Values



~~~ Registry Keys



~~~ Files

Successfully deleted: [File] C:\WINDOWS\SysWOW64\REN21DD.tmp



~~~ Folders

Successfully deleted: [Folder] C:\ProgramData\apn
Successfully deleted: [Folder] C:\Users\dieFackel\Appdata\Local\ysearchutil
Successfully deleted: [Folder] C:\Users\dieFackel\AppData\Roaming\systweak



~~~ FireFox

Successfully deleted: [File] C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\user.js
Successfully deleted the following from C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\prefs.js

user_pref(extensions.unitedinternet.email.runonceNewUsersShown, true);
Emptied folder: C:\Users\dieFackel\AppData\Roaming\mozilla\firefox\profiles\xdjdf4al.default-1384448785210\minidumps [168 files]



~~~ Chrome

Successfully deleted: [Registry Key] HKEY_LOCAL_MACHINE\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeoo

[C:\Users\dieFackel\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - default search provider reset

[C:\Users\dieFackel\Appdata\Local\Google\Chrome\User Data\Default\Preferences] - Extensions Deleted:

[C:\Users\dieFackel\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - default search provider reset

[C:\Users\dieFackel\Appdata\Local\Google\Chrome\User Data\Default\Secure Preferences] - Extensions Deleted:
[
  npdicihegicnhaangkdmcgbjceoemeoo
]





~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
Scan was completed on 21.09.2015 at 19:52:24,87
End of JRT log
~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
         

Alt 22.09.2015, 11:17   #12
burningice
/// Malwareteam
 
Malware Befall? - Standard

Malware Befall?



Schritt 1

ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt 2
Downloade Dir bitte SecurityCheck und:

  • Speichere es auf dem Desktop.
  • Starte SecurityCheck.exe und folge den Anweisungen in der DOS-Box.
  • Wenn der Scan beendet wurde sollte sich ein Textdokument (checkup.txt) öffnen.
Poste den Inhalt bitte hier.


Schritt 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Scan

Bitte poste in deiner nächsten Antwort also:
  • Log von Eset
  • Log von Security Check
  • Frst.txt
  • Addition.txt
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Alt 22.09.2015, 22:37   #13
dieFackel
 
Malware Befall? - Standard

Malware Befall?



ESET
Code:
ATTFilter
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=996933657e44f143a78691769cb8acd2
# end=init
# utc_time=2015-09-22 05:43:13
# local_time=2015-09-22 07:43:13 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 25886
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=996933657e44f143a78691769cb8acd2
# end=updated
# utc_time=2015-09-22 05:57:22
# local_time=2015-09-22 07:57:22 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=996933657e44f143a78691769cb8acd2
# engine=25886
# end=stopped
# remove_checked=false
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-09-22 06:01:36
# local_time=2015-09-22 08:01:36 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Internet Security'
# compatibility_mode=779 16777213 85 72 86670 207365386 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 3997622 6418908 0 0
# scanned=11638
# found=1
# cleaned=0
# scan_time=253
sh=E2E7555ACD0F7F6827A0958817774C8E4253DC21 ft=1 fh=117f72a1057668b7 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\Sysnative\roboot64.exe.vir"
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=996933657e44f143a78691769cb8acd2
# end=init
# utc_time=2015-09-22 06:03:22
# local_time=2015-09-22 08:03:22 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
esets_scanner_update returned -1 esets_gle=53251
Update Finalize
Updated modules version: 25886
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=996933657e44f143a78691769cb8acd2
# end=updated
# utc_time=2015-09-22 06:03:43
# local_time=2015-09-22 08:03:43 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=996933657e44f143a78691769cb8acd2
# engine=25886
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2015-09-22 08:18:12
# local_time=2015-09-22 10:18:12 (+0100, Mitteleuropäische Sommerzeit)
# country="Germany"
# lang=1031
# osver=6.2.9200 NT 
# compatibility_mode_1='avast! Internet Security'
# compatibility_mode=779 16777213 85 72 94866 207373582 0 0
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 4005818 6427104 0 0
# scanned=400484
# found=7
# cleaned=0
# scan_time=8068
sh=E2E7555ACD0F7F6827A0958817774C8E4253DC21 ft=1 fh=117f72a1057668b7 vn="Variante von Win64/Systweak.A evtl. unerwünschte Anwendung" ac=I fn="C:\AdwCleaner\Quarantine\C\WINDOWS\Sysnative\roboot64.exe.vir"
sh=62BFF91A7E351CB1A21EF92320815874B2D2DFA8 ft=1 fh=fc2555afc5bde153 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\dieFackel\AppData\Local\Temp\DMR\dmr_72.exe"
sh=421792EDD972FB462D93583199B1F6AD2B3112BC ft=1 fh=7ee4243048f143d1 vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\dieFackel\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279 - CHIP-Installer.exe"
sh=7669F3D56E0CD22381C7EACE00B9D3B1DD41BF07 ft=1 fh=fc296988becdd3eb vn="Win32/Somoto.Q evtl. unerwünschte Anwendung" ac=I fn="C:\Users\dieFackel\Downloads\Core-Temp-installer.exe"
sh=122266E2AAFE4A2BCC61B19B893FA56D899A556A ft=1 fh=8a8902424563b20f vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\dieFackel\Downloads\LogMeIn Hamachi - CHIP-Installer.exe"
sh=CF3B72A1C6BF0A3327B4A519F017CDBDBF4B1A9D ft=1 fh=8021f457eaa3edfa vn="Variante von Win32/DownloadSponsor.C evtl. unerwünschte Anwendung" ac=I fn="C:\Users\dieFackel\Downloads\MemTest - CHIP-Installer.exe"
sh=7240E7CC914E468D926040896195AAD97B54E512 ft=1 fh=57dbf025aafc7e25 vn="Variante von Win32/AdkDLLWrapper.A evtl. unerwünschte Anwendung" ac=I fn="D:\Dateien\uTorrent\uTorrent.exe"
         
Security Check
Code:
ATTFilter
 Results of screen317's Security Check version 1.008  
   x64 (UAC is enabled)  
 Internet Explorer 11  
``````````````Antivirus/Firewall Check:`````````````` 
Windows Defender   
avast! Antivirus   
 Antivirus up to date!   
`````````Anti-malware/Other Utilities Check:````````` 
 Secunia PSI (3.0.0.7011)   
 Java 8 Update 60  
 Adobe Flash Player 	19.0.0.185  
 Mozilla Firefox (40.0.3) 
 Google Chrome (45.0.2454.85) 
 Google Chrome (45.0.2454.93) 
````````Process Check: objlist.exe by Laurent````````  
 AVAST Software Avast AvastSvc.exe  
 AVAST Software Avast avastui.exe  
`````````````````System Health check````````````````` 
 Total Fragmentation on Drive C:  % 
````````````````````End of Log``````````````````````
         
FRST
Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015
durchgeführt von dieFackel (Administrator) auf SOL-PC (22-09-2015 22:35:29)
Gestartet von C:\Users\dieFackel\Desktop
Geladene Profile: dieFackel (Verfügbare Profile: dieFackel & DefaultAppPool)
Platform: Windows 10 Home (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: FF)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe
() C:\Program Files (x86)\Gigabyte\EasySaver\essvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
() C:\Windows\SysWOW64\XSrvSetup.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe
(Ralink Technology, Corp.) C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psia.exe
() C:\Windows\SysWOW64\SecUPDUtilSvc.exe
(LogMeIn Inc.) D:\Dateien\LogMeIn Hamachi\hamachi-2.exe
(LogMeIn, Inc.) D:\Dateien\LogMeIn Hamachi\LMIGuardianSvc.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\sua.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Bitsum LLC) D:\Dateien\ParkControl\ParkControl.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Secunia) C:\Program Files (x86)\Secunia\PSI\psi_tray.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(NEC Electronics Corporation) C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
(Hewlett-Packard) C:\Program Files (x86)\HP\HP Software Update\hpwuschd2.exe
(Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\avastui.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Valve Corporation) D:\Spiele\Steam\Steam.exe
(Valve Corporation) D:\Spiele\Steam\bin\steamwebhelper.exe
(Valve Corporation) D:\Spiele\Steam\bin\steamwebhelper.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe
(Adobe Systems, Inc.) C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerPlugin_19_0_0_185.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [14021336 2015-06-18] (Realtek Semiconductor)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2685072 2015-05-01] (NVIDIA Corporation)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [558944 2012-11-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [JMB36X IDE Setup] => C:\Windows\RaidTool\xInsIDE.exe [43632 2010-01-19] ()
HKLM-x32\...\Run: [NUSB3MON] => C:\Program Files (x86)\NEC Electronics\USB 3.0 Host Controller Driver\Application\nusb3mon.exe [106496 2009-11-20] (NEC Electronics Corporation)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [amd_dc_opt] => C:\Program Files (x86)\AMD\Dual-Core Optimizer\amd_dc_opt.exe [77824 2008-07-22] (AMD)
HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\Hp\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-07-02] (Avast Software s.r.o.)
HKLM-x32\...\Run: [VirtualCloneDrive] => D:\Dateien\Programme\VirtualCloneDrive\VCDDaemon.exe [88984 2013-03-10] (Elaborate Bytes AG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => D:\Dateien\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [597552 2015-08-04] (Oracle Corporation)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [Sony PC Companion] => C:\Program Files (x86)\Sony\Sony PC Companion\PCCompanion.exe [456576 2015-06-10] (Sony)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [EADM] => D:\Spiele\Origin\Origin.exe [3632112 2015-07-25] (Electronic Arts)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [GalaxyClient] => D:\Spiele\GalaxyClient\GalaxyClient.exe [7247416 2015-07-20] (GOG.com)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [EvolveClient] => D:\Dateien\Echobit\Evolve\EvolveClient.exe [3334016 2015-08-05] (Echobit LLC)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [8455960 2015-08-20] (Piriform Ltd)
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5892.0626\amd64"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5907.0716\amd64"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\RunOnce: [Uninstall C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\dieFackel\AppData\Local\Microsoft\OneDrive\17.3.5930.0814\amd64"
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-07-02] (Avast Software s.r.o.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Secunia PSI Tray.lnk [2013-08-18]
ShortcutTarget: Secunia PSI Tray.lnk -> C:\Program Files (x86)\Secunia\PSI\psi_tray.exe (Secunia)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Sitecom Wireless Utility.lnk [2013-08-18]
ShortcutTarget: Sitecom Wireless Utility.lnk -> C:\Program Files (x86)\Sitecom\Common\WLANUtil.exe (Sitecom Europe BV.)
Startup: C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Officejet 6700.lnk [2013-09-01]
ShortcutTarget: Tintenwarnungen überwachen - HP Officejet 6700.lnk -> C:\Program Files\HP\HP Officejet 6700\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\..\Interfaces\{1e498d26-a69f-40b8-be95-ebbee9ff9f23}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp
SearchScopes: HKU\S-1-5-21-2542595381-3183390579-2223026719-1000 -> DefaultScope {888255F5-E5F4-4626-9D68-92C58086424C} URL = 
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_60\bin\ssv.dll [2015-08-29] (Oracle Corporation)
BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-07-02] (Avast Software s.r.o.)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-29] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-08-29] (Oracle Corporation)
BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-07-02] (Avast Software s.r.o.)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-08-29] (Oracle Corporation)
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} -  Keine Datei
DPF: HKLM-x32 {0D6709DD-4ED8-40CA-B459-2757AEEF7BEE} hxxp://download.gigabyte.com.tw/object/Dldrv.ocx
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)

FireFox:
========
FF ProfilePath: C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210
FF Homepage: Twitter.com
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D"
FF NetworkProxy: "type", 2
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_19_0_0_185.dll [2015-09-22] ()
FF Plugin: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-29] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-29] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.0.7 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_19_0_0_185.dll [2015-09-22] ()
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2013-10-07] (Google)
FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-08-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-08-29] (Oracle Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-12] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-12] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.28.15\npGoogleUpdate3.dll [2015-09-16] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-07-03] (Adobe Systems Inc.)
FF Plugin HKU\S-1-5-21-2542595381-3183390579-2223026719-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2014-06-04] ()
FF SearchPlugin: C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\searchplugins\divinity-wiki-en.xml [2015-05-14]
FF SearchPlugin: C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\searchplugins\youtube-videosuche.xml [2015-06-01]
FF Extension: FT DeepDark - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{77d2ed30-4cd2-11e0-b8af-0800200c9a66} [2015-08-25]
FF Extension: WOT - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{a0d7ccb3-214d-498b-b4aa-0e8fda9a7bf7} [2015-07-10]
FF Extension: Ghostery - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\firefox@ghostery.com.xpi [2013-11-14]
FF Extension: Reddit Enhancement Suite - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\jid1-xUfzOsOFlzSOXg@jetpack.xpi [2015-04-01]
FF Extension: New Tab Wallpapers - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{a5312b79-bf0d-4825-a25f-b33d67d4a58a}.xpi [2013-11-14]
FF Extension: Adblock Plus - C:\Users\dieFackel\AppData\Roaming\Mozilla\Firefox\Profiles\xdjdf4al.default-1384448785210\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2013-11-14]
FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF
FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2013-08-19]

Chrome: 
=======
CHR Profile: C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Avast Online Security) - C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gomekmidlodglbbmalcneegieacbdmki [2015-06-25]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-08-26]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\dieFackel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2013-11-14]
CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-07-02]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 AppleChargerSrv; C:\Windows\System32\AppleChargerSrv.exe [31272 2010-04-06] ()
R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-07-02] (Avast Software s.r.o.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1128448 2015-07-28] ()
S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2014-11-01] (BitRaider, LLC)
R2 ES lite Service; C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE [68136 2009-08-24] ()
S3 GalaxyClientService; D:\Spiele\GalaxyClient\GalaxyClientService.exe [1718840 2015-07-20] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6871608 2015-07-20] (GOG.com)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-01] (NVIDIA Corporation)
R2 Hamachi2Svc; D:\Dateien\LogMeIn Hamachi\hamachi-2.exe [2545512 2015-08-03] (LogMeIn Inc.)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]
R2 JMB36X; C:\Windows\SysWOW64\XSrvSetup.exe [72304 2010-01-19] ()
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MSMQ; C:\Windows\system32\mqsvc.exe [26112 2015-08-06] (Microsoft Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1884304 2015-05-01] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [22997648 2015-05-01] (NVIDIA Corporation)
S3 Origin Client Service; D:\Spiele\Origin\OriginClientService.exe [2007048 2015-07-25] (Electronic Arts)
R2 RalinkRegistryWriter; C:\Program Files (x86)\Sitecom\Common\RaRegistry.exe [185632 2009-12-15] (Ralink Technology, Corp.)
R2 RalinkRegistryWriter64; C:\Program Files (x86)\Sitecom\Common\RaRegistry64.exe [212256 2009-12-15] (Ralink Technology, Corp.)
R2 SamsungUPDUtilSvc; C:\Windows\SysWOW64\SecUPDUtilSvc.exe [118576 2014-11-26] ()
R2 Secunia PSI Agent; C:\Program Files (x86)\Secunia\PSI\PSIA.exe [1228504 2013-07-03] (Secunia)
R2 Secunia Update Agent; C:\Program Files (x86)\Secunia\PSI\sua.exe [660184 2013-07-03] (Secunia)
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [757144 2013-08-16] (Tunngle.net GmbH) [Datei ist nicht signiert]
S3 w3logsvc; C:\Windows\system32\inetsrv\w3logsvc.dll [84480 2015-08-06] (Microsoft Corporation)
R2 W3SVC; C:\Windows\system32\inetsrv\iisw3adm.dll [578560 2015-08-06] (Microsoft Corporation)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [362928 2015-07-10] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-07-10] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 AppleCharger; C:\Windows\System32\DRIVERS\AppleCharger.sys [21544 2010-04-27] ()
R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-07-02] ()
R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-07-02] (Avast Software s.r.o.)
R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-07-02] (Avast Software s.r.o.)
R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-07-02] ()
S1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-07-02] (Avast Software s.r.o.)
R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-07-02] (Avast Software s.r.o.)
R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-07-02] (Avast Software s.r.o.)
R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-07-02] ()
R2 atksgt; C:\Windows\System32\DRIVERS\atksgt.sys [314016 2015-02-09] ()
S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2014-11-01] (BitRaider)
S3 dc1-controller; C:\Windows\System32\drivers\dc1-controller.sys [50688 2015-07-10] (Microsoft Corp.)
S3 GVTDrv64; C:\Windows\GVTDrv64.sys [30528 2013-08-19] ()
R3 hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [45680 2015-08-03] (LogMeIn Inc.)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43680 2015-02-09] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MQAC; C:\Windows\System32\drivers\mqac.sys [175104 2015-08-06] (Microsoft Corporation)
S3 netr28x; C:\Windows\system32\DRIVERS\netr28x.sys [2554528 2015-06-12] (MediaTek Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-01] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2014-11-22] (NVIDIA Corporation)
R3 PSI; C:\Windows\System32\DRIVERS\psi_mf_amd64.sys [18456 2013-07-03] (Secunia)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [587264 2015-07-10] (Realtek                                            )
R3 tap0901t; C:\Windows\System32\drivers\tap0901t.sys [31232 2009-09-16] (Tunngle.net)
S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2013-06-21] (Anchorfree Inc.)
S3 UdeCx; C:\Windows\System32\drivers\udecx.sys [44032 2015-07-10] ()
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-07-10] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [291680 2015-07-10] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [119648 2015-07-10] (Microsoft Corporation)
U3 idsvc; kein ImagePath
S3 wfpcapture; \SystemRoot\System32\drivers\wfpcapture.sys [X]
U3 wpcsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-22 22:29 - 2015-09-22 22:29 - 00016148 _____ C:\WINDOWS\system32\SOL-PC_dieFackel_HistoryPrediction.bin
2015-09-22 19:42 - 2015-09-22 22:32 - 00852704 _____ C:\Users\dieFackel\Desktop\SecurityCheck.exe
2015-09-22 19:42 - 2015-09-22 19:42 - 02870984 _____ (ESET) C:\Users\dieFackel\Desktop\esetsmartinstaller_deu.exe
2015-09-21 19:55 - 2015-09-21 19:56 - 00001709 _____ C:\Users\dieFackel\Desktop\AdwCleaner[C1].txt
2015-09-21 19:52 - 2015-09-21 19:52 - 00002003 _____ C:\Users\dieFackel\Desktop\JRT.txt
2015-09-21 19:50 - 2015-09-21 19:50 - 00001199 _____ C:\Users\dieFackel\Desktop\mbam.txt
2015-09-21 19:24 - 2015-09-21 19:59 - 00000000 ____D C:\AdwCleaner
2015-09-21 19:20 - 2015-09-21 19:24 - 01798976 _____ (Malwarebytes) C:\Users\dieFackel\Desktop\JRT.exe
2015-09-21 19:20 - 2015-09-21 19:22 - 01662976 _____ C:\Users\dieFackel\Desktop\AdwCleaner_5.008.exe
2015-09-21 19:19 - 2015-09-21 19:20 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\dieFackel\Downloads\mbam-setup-2.1.8.1057(1).exe
2015-09-21 16:06 - 2015-09-21 16:19 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)
2015-09-21 16:01 - 2015-09-21 16:20 - 00000000 ____D C:\Users\dieFackel\Desktop\mbar
2015-09-21 16:00 - 2015-09-21 16:21 - 04404952 _____ (Kaspersky Lab ZAO) C:\Users\dieFackel\Desktop\tdsskiller.exe
2015-09-21 15:59 - 2015-09-21 16:01 - 16563352 _____ (Malwarebytes Corp.) C:\Users\dieFackel\Downloads\mbar-1.09.3.1001.exe
2015-09-21 15:59 - 2015-09-21 15:59 - 00001341 _____ C:\Users\dieFackel\Desktop\Revo Uninstaller.lnk
2015-09-21 15:59 - 2015-09-21 15:59 - 00000000 ____D C:\Program Files (x86)\VS Revo Group
2015-09-21 15:58 - 2015-09-21 15:58 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\dieFackel\Downloads\revosetup95.exe
2015-09-20 17:40 - 2015-09-20 17:40 - 00095516 _____ C:\Users\dieFackel\Desktop\Addition.txt
2015-09-20 17:39 - 2015-09-22 22:35 - 00024674 _____ C:\Users\dieFackel\Desktop\FRST.txt
2015-09-20 17:39 - 2015-09-22 22:35 - 00000000 ____D C:\FRST
2015-09-20 17:38 - 2015-09-20 17:39 - 02191360 _____ (Farbar) C:\Users\dieFackel\Desktop\FRST64.exe
2015-09-20 15:25 - 2015-09-20 15:25 - 00001336 _____ C:\Users\dieFackel\Desktop\Malwarebytes.txt
2015-09-20 14:20 - 2015-09-20 14:20 - 00347864 _____ C:\Users\dieFackel\Desktop\OTL.Txt
2015-09-20 14:20 - 2015-09-20 14:20 - 00181926 _____ C:\Users\dieFackel\Desktop\Extras.Txt
2015-09-20 13:55 - 2015-09-20 13:55 - 06667640 _____ (Piriform Ltd) C:\Users\dieFackel\Downloads\ccsetup509.exe
2015-09-20 13:55 - 2015-09-20 13:55 - 00602112 _____ (OldTimer Tools) C:\Users\dieFackel\Desktop\OTL.exe
2015-09-20 13:55 - 2015-09-20 13:55 - 00002860 _____ C:\WINDOWS\System32\Tasks\CCleanerSkipUAC
2015-09-20 13:55 - 2015-09-20 13:55 - 00000863 _____ C:\Users\Public\Desktop\CCleaner.lnk
2015-09-20 13:55 - 2015-09-20 13:55 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CCleaner
2015-09-20 13:55 - 2015-09-20 13:55 - 00000000 ____D C:\Program Files\CCleaner
2015-09-20 13:35 - 2015-09-21 19:53 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-09-20 13:34 - 2015-09-21 16:01 - 00109272 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamchameleon.sys
2015-09-20 13:34 - 2015-09-20 13:34 - 24345872 _____ (Malwarebytes Corporation ) C:\Users\dieFackel\Downloads\mbam-setup-2.1.8.1057.exe
2015-09-20 13:34 - 2015-09-20 13:34 - 00001175 _____ C:\Users\Public\Desktop\ Malwarebytes Anti-Malware .lnk
2015-09-20 13:34 - 2015-09-20 13:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-09-20 13:34 - 2015-09-20 13:34 - 00000000 ____D C:\ProgramData\Malwarebytes
2015-09-20 13:34 - 2015-09-20 13:34 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 
2015-09-20 13:34 - 2015-06-18 08:42 - 00064216 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mwac.sys
2015-09-20 13:34 - 2015-06-18 08:41 - 00025816 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\mbam.sys
2015-09-19 02:33 - 2015-09-19 02:33 - 00000838 _____ C:\Users\dieFackel\Desktop\CrystalDiskInfo.lnk
2015-09-19 02:33 - 2015-09-19 02:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-09-19 02:29 - 2015-09-19 02:29 - 03908184 _____ (Crystal Dew World ) C:\Users\dieFackel\Downloads\CrystalDiskInfo6_5_2-en.exe
2015-09-19 02:21 - 2015-09-19 02:21 - 02354034 _____ C:\Users\dieFackel\Downloads\cpu-z_1.73-en.zip
2015-09-18 19:13 - 2015-09-18 19:13 - 00001967 _____ C:\Users\Public\Desktop\Avast Free Antivirus.lnk
2015-09-18 19:13 - 2015-09-18 19:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software
2015-09-18 19:13 - 2015-07-02 00:46 - 00364472 _____ (Avast Software s.r.o.) C:\WINDOWS\system32\aswBoot.exe
2015-09-18 19:12 - 2015-09-18 19:12 - 00337536 _____ C:\WINDOWS\Minidump\091815-8671-01.dmp
2015-09-18 19:10 - 2015-09-18 19:12 - 00000000 ____D C:\WINDOWS\Minidump
2015-09-18 19:10 - 2015-09-18 19:10 - 00339336 _____ C:\WINDOWS\Minidump\091815-10203-01.dmp
2015-09-17 23:17 - 2015-09-17 23:17 - 00000020 ___SH C:\Users\DefaultAppPool\ntuser.ini
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2015-09-17 23:17 - 2015-09-17 23:17 - 00000000 ____D C:\Users\DefaultAppPool
2015-09-17 23:17 - 2015-08-20 13:18 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-17 23:17 - 2015-08-06 18:56 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Macromedia
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 __RSD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Windows PowerShell
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\System Tools
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 ___RD C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Accessibility
2015-09-17 23:17 - 2015-07-10 13:04 - 00000000 ____D C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Maintenance
2015-09-17 14:07 - 2014-07-24 13:01 - 00028672 _____ () C:\Users\dieFackel\Desktop\memtest.exe
2015-09-17 14:05 - 2015-09-17 14:05 - 00015201 _____ C:\Users\dieFackel\Downloads\MemTest41.zip
2015-09-17 14:04 - 2015-09-17 14:04 - 01457952 _____ C:\Users\dieFackel\Downloads\MemTest - CHIP-Installer.exe
2015-09-09 23:59 - 2015-09-09 23:59 - 00000000 ___SD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\OpenOffice 4.1.1
2015-09-09 23:49 - 2015-09-09 23:57 - 164858324 _____ C:\Users\dieFackel\Downloads\Apache_OpenOffice_4.1.1_Win_x86_install_de.exe
2015-09-09 14:54 - 2015-09-02 03:20 - 00077400 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-09-09 14:54 - 2015-09-02 02:25 - 03586560 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-09-09 14:54 - 2015-09-02 02:25 - 01382912 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-09-09 14:54 - 2015-08-27 08:36 - 03620736 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-09-09 14:54 - 2015-08-27 08:32 - 00608936 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-09-09 14:54 - 2015-08-27 08:04 - 21874688 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-09-09 14:54 - 2015-08-27 07:59 - 02880032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-09-09 14:54 - 2015-08-27 07:55 - 24594944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-09-09 14:54 - 2015-08-27 07:54 - 00541248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-09-09 14:54 - 2015-08-27 07:54 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-09-09 14:54 - 2015-08-27 07:51 - 02350592 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-09-09 14:54 - 2015-08-27 07:51 - 01774592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Immersive.dll
2015-09-09 14:54 - 2015-08-27 07:49 - 01008640 _____ (Microsoft Corporation) C:\WINDOWS\system32\schedsvc.dll
2015-09-09 14:54 - 2015-08-27 07:47 - 12503552 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-09-09 14:54 - 2015-08-27 07:43 - 00826880 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-09-09 14:54 - 2015-08-27 07:43 - 00576000 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-09-09 14:54 - 2015-08-27 07:42 - 00596480 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSync.dll
2015-09-09 14:54 - 2015-08-27 07:42 - 00578560 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2015-09-09 14:54 - 2015-08-27 07:42 - 00187904 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.PicturePassword.dll
2015-09-09 14:54 - 2015-08-27 07:42 - 00184320 _____ (Microsoft Corporation) C:\WINDOWS\system32\shacct.dll
2015-09-09 14:54 - 2015-08-27 07:39 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-09-09 14:54 - 2015-08-27 07:23 - 19324416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-09-09 14:54 - 2015-08-27 07:23 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-09-09 14:54 - 2015-08-27 07:16 - 18806272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-09-09 14:54 - 2015-08-27 07:16 - 02153472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-09-09 14:54 - 2015-08-27 07:16 - 01612288 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Immersive.dll
2015-09-09 14:54 - 2015-08-27 07:12 - 00650752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-09-09 14:54 - 2015-08-27 07:12 - 00504320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-09-09 14:54 - 2015-08-27 07:11 - 00484352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSync.dll
2015-09-09 14:54 - 2015-08-27 07:11 - 00139776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shacct.dll
2015-09-09 14:54 - 2015-08-27 07:09 - 11262464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-09-09 14:54 - 2015-08-27 07:08 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-09-09 11:25 - 2015-09-09 11:25 - 00000000 ___RD C:\Program Files (x86)\Skype
2015-09-09 11:25 - 2015-09-09 11:25 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-09-07 22:09 - 2015-09-22 19:37 - 00003096 _____ C:\WINDOWS\System32\Tasks\ParkControl
2015-09-07 22:09 - 2015-09-07 22:09 - 00650928 _____ (Bitsum LLC) C:\Users\dieFackel\Downloads\parkcontrolsetup64.exe
2015-09-07 22:09 - 2015-09-07 22:09 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ParkControl
2015-09-05 14:13 - 2015-09-05 14:13 - 00025163 _____ C:\Users\dieFackel\Downloads\LB160-15D_04(1).zip
2015-09-03 02:33 - 2015-09-03 02:33 - 00000000 ____D C:\Users\dieFackel\AppData\Local\MicrosoftEdge
2015-09-02 14:11 - 2015-09-02 14:11 - 00025163 _____ C:\Users\dieFackel\Downloads\LB160-15D_04.zip
2015-08-31 18:08 - 2015-08-20 08:07 - 08019296 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-08-31 18:08 - 2015-08-20 08:06 - 00609592 _____ (Microsoft Corporation) C:\WINDOWS\system32\ci.dll
2015-08-31 18:08 - 2015-08-20 08:02 - 22324656 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-08-31 18:08 - 2015-08-20 07:26 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-08-31 18:08 - 2015-08-20 07:21 - 00193024 _____ (Microsoft Corporation) C:\WINDOWS\system32\EnterpriseModernAppMgmtCSP.dll
2015-08-31 18:08 - 2015-08-20 07:16 - 20857848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-08-31 18:08 - 2015-08-20 07:13 - 02235904 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-08-31 18:08 - 2015-08-18 09:56 - 02498808 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-08-31 18:08 - 2015-08-18 09:55 - 00373072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\USBXHCI.SYS
2015-08-31 18:08 - 2015-08-18 09:54 - 01396064 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-08-31 18:08 - 2015-08-18 09:27 - 01771592 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-08-31 18:08 - 2015-08-18 09:24 - 00963920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-08-31 18:08 - 2015-08-18 09:13 - 00497664 _____ (Microsoft Corporation) C:\WINDOWS\system32\WlanMediaManager.dll
2015-08-31 18:08 - 2015-08-18 09:13 - 00387584 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupShim.dll
2015-08-31 18:08 - 2015-08-18 09:12 - 02225664 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-08-31 18:08 - 2015-08-18 09:07 - 02226688 _____ (Microsoft Corporation) C:\WINDOWS\system32\wlansvc.dll
2015-08-31 18:08 - 2015-08-18 09:04 - 01234944 _____ (Microsoft Corporation) C:\WINDOWS\system32\aitstatic.exe
2015-08-31 18:08 - 2015-08-18 09:04 - 00859136 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-08-31 18:08 - 2015-08-18 08:59 - 01294336 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcnwiz.dll
2015-08-31 18:08 - 2015-08-18 08:59 - 00140288 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnApi.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00187392 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00117760 _____ (Microsoft Corporation) C:\WINDOWS\system32\dafWCN.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00112640 _____ (Microsoft Corporation) C:\WINDOWS\system32\fdWCN.dll
2015-08-31 18:08 - 2015-08-18 08:58 - 00050176 _____ (Microsoft Corporation) C:\WINDOWS\system32\WcnNetsh.dll
2015-08-31 18:08 - 2015-08-18 08:57 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\system32\wfdprov.dll
2015-08-31 18:08 - 2015-08-18 08:56 - 00079872 _____ (Microsoft Corporation) C:\WINDOWS\system32\BthRadioMedia.dll
2015-08-31 18:08 - 2015-08-18 08:55 - 02178560 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2015-08-31 18:08 - 2015-08-18 08:54 - 00322048 _____ (Microsoft Corporation) C:\WINDOWS\system32\vaultsvc.dll
2015-08-31 18:08 - 2015-08-18 08:54 - 00247296 _____ C:\WINDOWS\system32\facecredentialprovider.dll
2015-08-31 18:08 - 2015-08-18 08:52 - 01888768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dwmcore.dll
2015-08-31 18:08 - 2015-08-18 08:50 - 01795072 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.dll
2015-08-31 18:08 - 2015-08-18 08:49 - 01061888 _____ (Microsoft Corporation) C:\WINDOWS\system32\reseteng.dll
2015-08-31 18:08 - 2015-08-18 08:49 - 00274432 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupShim.dll
2015-08-31 18:08 - 2015-08-18 08:49 - 00246272 _____ (Microsoft Corporation) C:\WINDOWS\system32\PackageStateRoaming.dll
2015-08-31 18:08 - 2015-08-18 08:36 - 01226752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wcnwiz.dll
2015-08-31 18:08 - 2015-08-18 08:35 - 00100352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WcnApi.dll
2015-08-31 18:08 - 2015-08-18 08:35 - 00095744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fdWCN.dll
2015-08-31 18:08 - 2015-08-18 08:34 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wfdprov.dll
2015-08-31 18:08 - 2015-08-18 08:29 - 01593344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dwmcore.dll
2015-08-31 18:08 - 2015-08-18 08:26 - 00195584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PackageStateRoaming.dll
2015-08-31 18:08 - 2015-08-18 06:44 - 00008847 _____ C:\WINDOWS\system32\ResPriHMImageList
2015-08-29 15:39 - 2015-08-29 15:40 - 00000000 ____D C:\Users\dieFackel\.oracle_jre_usage
2015-08-29 15:39 - 2015-08-29 15:39 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\Sun
2015-08-28 00:16 - 2015-09-07 12:36 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-09-22 22:22 - 2013-08-18 23:34 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\Skype
2015-09-22 21:59 - 2013-08-28 19:37 - 00001132 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-09-22 21:52 - 2015-07-10 14:22 - 00000275 _____ C:\WINDOWS\WindowsUpdate.log
2015-09-22 21:36 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\sru
2015-09-22 21:36 - 2014-03-16 11:51 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-09-22 20:26 - 2014-01-24 20:35 - 00000000 ____D C:\Users\dieFackel\AppData\Local\Battle.net
2015-09-22 20:26 - 2014-01-24 20:35 - 00000000 ____D C:\Program Files (x86)\Battle.net
2015-09-22 19:44 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-09-22 19:37 - 2013-08-28 19:37 - 00001128 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-09-21 21:28 - 2015-08-19 23:43 - 00004162 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{5C282664-0F36-4F05-B367-33191A713477}
2015-09-21 20:03 - 2015-08-06 18:51 - 02077126 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-09-21 20:03 - 2015-07-10 18:34 - 00883584 _____ C:\WINDOWS\system32\perfh007.dat
2015-09-21 20:03 - 2015-07-10 18:34 - 00195718 _____ C:\WINDOWS\system32\perfc007.dat
2015-09-21 20:03 - 2015-07-10 12:55 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-09-21 19:57 - 2015-08-06 18:50 - 00000000 ____D C:\ProgramData\NVIDIA
2015-09-21 19:57 - 2015-08-06 18:48 - 00010954 _____ C:\WINDOWS\PFRO.log
2015-09-21 19:57 - 2015-07-10 14:21 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-09-21 19:57 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\Branding
2015-09-21 19:57 - 2013-08-19 00:49 - 00025640 _____ (Windows (R) Server 2003 DDK provider) C:\WINDOWS\gdrv.sys
2015-09-21 19:57 - 2013-08-19 00:18 - 00000144 _____ C:\service.log
2015-09-21 19:56 - 2015-07-10 11:05 - 00262144 ___SH C:\WINDOWS\system32\config\BBI
2015-09-21 18:25 - 2013-08-24 20:40 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2015-09-21 18:23 - 2015-04-13 22:32 - 00000000 ___RD C:\Users\dieFackel\Desktop\Games
2015-09-21 16:02 - 2009-07-14 05:20 - 00000000 ____D C:\Users\Default.migrated
2015-09-21 02:07 - 2013-10-01 22:23 - 00000000 ____D C:\Users\dieFackel\AppData\Roaming\TS3Client
2015-09-20 21:41 - 2015-04-14 11:46 - 00000080 _____ C:\Users\dieFackel\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-09-20 14:56 - 2015-04-13 22:18 - 00000000 ____D C:\Users\dieFackel\Desktop\University
2015-09-20 14:26 - 2014-06-15 14:32 - 00000000 ____D C:\Users\dieFackel\Documents\WB Games
2015-09-20 14:26 - 2013-08-19 19:19 - 00000000 ____D C:\Users\dieFackel\Documents\my games
2015-09-20 14:23 - 2014-09-18 00:41 - 00000000 ____D C:\Users\dieFackel\AppData\Local\LOOT
2015-09-20 14:18 - 2015-07-10 13:04 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Accessories
2015-09-20 14:18 - 2009-07-14 07:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-09-19 02:22 - 2015-04-13 22:33 - 00000000 ___RD C:\Users\dieFackel\Desktop\Programme
2015-09-18 23:03 - 2013-12-29 18:01 - 00000000 ____D C:\Users\dieFackel\AppData\Local\DayZ
2015-09-18 20:25 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\restore
2015-09-18 20:12 - 2015-08-06 19:47 - 00000000 __SHD C:\Recovery
2015-09-18 19:13 - 2013-08-19 00:44 - 00004006 _____ C:\WINDOWS\System32\Tasks\avast! Emergency Update
2015-09-18 19:12 - 2015-07-21 21:57 - 589516284 _____ C:\WINDOWS\MEMORY.DMP
2015-09-17 00:00 - 2015-08-06 18:53 - 00000000 ____D C:\Users\dieFackel
2015-09-16 13:54 - 2013-08-28 19:37 - 00004190 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-09-16 13:54 - 2013-08-28 19:37 - 00003958 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-09-16 13:35 - 2015-08-06 19:02 - 00000000 ____D C:\Users\dieFackel\AppData\Local\Packages
2015-09-16 13:15 - 2015-08-06 19:05 - 00000000 ____D C:\Users\dieFackel\OneDrive
2015-09-16 13:14 - 2015-07-10 14:20 - 00219888 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-09-16 13:12 - 2015-07-10 18:46 - 00000000 ____D C:\Program Files\Windows Journal
2015-09-16 13:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-09-15 16:01 - 2015-08-06 19:05 - 00002406 _____ C:\Users\dieFackel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-09-11 18:01 - 2014-07-23 20:53 - 00000000 ____D C:\Users\dieFackel\Desktop\Hearthstone Screenshots
2015-09-10 14:19 - 2013-08-18 21:54 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-09-09 11:25 - 2013-08-18 23:34 - 00000000 ____D C:\ProgramData\Skype
2015-09-08 13:12 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\rescache
2015-09-07 12:37 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-09-07 12:36 - 2013-08-18 23:06 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service
2015-09-06 13:08 - 2015-08-06 19:10 - 00000000 ____D C:\Users\dieFackel\AppData\Local\Comms
2015-08-29 16:07 - 2013-10-19 17:01 - 00000000 ____D C:\ProgramData\Oracle
2015-08-29 15:40 - 2015-07-28 13:44 - 00000000 ____D C:\Program Files\Java
2015-08-29 15:40 - 2014-10-21 17:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-08-29 15:40 - 2013-08-18 23:30 - 00000000 ____D C:\Program Files (x86)\Java
2015-08-29 15:39 - 2015-07-28 13:44 - 00110688 _____ (Oracle Corporation) C:\WINDOWS\system32\WindowsAccessBridge-64.dll
2015-08-27 11:26 - 2015-07-10 13:04 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-08-26 18:37 - 2013-08-18 21:54 - 134753440 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2013-10-01 20:17 - 2013-10-01 20:17 - 0000037 ___SH () C:\Users\dieFackel\AppData\Local\70149b02515b3bb20dd492.47983420
2015-02-02 04:09 - 2015-02-02 04:09 - 0000000 ___SH () C:\Users\dieFackel\AppData\Local\LumaEmu
2015-06-21 20:51 - 2015-06-21 20:51 - 0009494 _____ () C:\Users\dieFackel\AppData\Local\recently-used.xbel
2015-04-21 13:24 - 2015-04-21 13:24 - 0007603 _____ () C:\Users\dieFackel\AppData\Local\Resmon.ResmonCfg
2014-10-31 15:44 - 2014-10-31 15:44 - 0000000 _____ () C:\Users\dieFackel\AppData\Local\{A310A91F-EC09-4402-A3F7-8F8D2A6ACFCD}
2013-09-01 13:00 - 2013-09-01 13:00 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-08-06 18:50 - 2015-08-06 18:50 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\dieFackel\AppData\Local\Temp\jre-8u60-windows-au.exe
C:\Users\dieFackel\AppData\Local\Temp\sqlite3.dll
C:\Users\dieFackel\AppData\Local\Temp\Uninstall.exe
C:\Users\dieFackel\AppData\Local\Temp\ytb.exe
C:\Users\dieFackel\AppData\Local\Temp\__pythonRunner.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-09-21 19:31

==================== Ende von FRST.txt ============================
         

Alt 22.09.2015, 22:38   #14
dieFackel
 
Malware Befall? - Standard

Malware Befall?



Addition
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015
durchgeführt von dieFackel (2015-09-22 22:36:04)
Gestartet von C:\Users\dieFackel\Desktop
Windows 10 Home (X64) (2015-08-06 17:02:52)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2542595381-3183390579-2223026719-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-2542595381-3183390579-2223026719-503 - Limited - Disabled)
dieFackel (S-1-5-21-2542595381-3183390579-2223026719-1000 - Administrator - Enabled) => C:\Users\dieFackel
Gast (S-1-5-21-2542595381-3183390579-2223026719-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2542595381-3183390579-2223026719-1003 - Limited - Enabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

@BIOS (HKLM-x32\...\{B2DC3F08-2EB2-49A5-AA24-15DFC8B1CB83}) (Version: 2.08 - GIGABYTE)
µTorrent (HKLM-x32\...\uTorrent) (Version: 3.3.0.29625 - BitTorrent Inc.)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.008.20082 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 15.0.0.293 - Adobe Systems Incorporated)
Adobe Flash Player 19 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 19.0.0.185 - Adobe Systems Incorporated)
AutoGreen B10.0517.1 (HKLM-x32\...\InstallShield_{C75FAD21-EC08-42F3-92D6-C9C0AB355345}) (Version: 1.00.0000 - GIGABYTE)
AutoGreen B10.0517.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
AutoHotkey 1.1.15.03 (HKLM\...\AutoHotkey) (Version: 1.1.15.03 - Lexikos)
Avast Free Antivirus (HKLM-x32\...\avast) (Version: 10.2.2218 - AVAST Software)
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
Batman: Arkham City GOTY (HKLM-x32\...\Steam App 200260) (Version:  - Rocksteady Studios)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC)
Capsule (HKLM-x32\...\Capsule) (Version: 1.0.000 - Green Man Gaming Limited)
CCleaner (HKLM\...\CCleaner) (Version: 5.09 - Piriform)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cisco EAP-FAST Module (HKLM-x32\...\{64BF0187-F3D2-498B-99EA-163AF9AE6EC9}) (Version: 2.2.14 - Cisco Systems, Inc.)
Cisco LEAP Module (HKLM-x32\...\{51C7AD07-C3F6-4635-8E8A-231306D810FE}) (Version: 1.0.19 - Cisco Systems, Inc.)
Cisco PEAP Module (HKLM-x32\...\{ED5776D5-59B4-46B7-AF81-5F2D94D7C640}) (Version: 1.1.6 - Cisco Systems, Inc.)
Convoy (HKLM-x32\...\Steam App 318230) (Version:  - Convoy Games)
Core Temp 1.0 RC6 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Crazy Machines 2 (HKLM-x32\...\Steam App 18400) (Version:  - Fakt Software)
CrystalDiskInfo 6.5.2 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 6.5.2 - Crystal Dew World)
DARK SOULS™ II (HKLM-x32\...\Steam App 236430) (Version:  - FromSoftware, Inc)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Divinity: Original Sin (HKLM-x32\...\Steam App 230230) (Version:  - Larian Studios)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.3 - Electronic Arts)
Dual-Core Optimizer (HKLM-x32\...\{9FD6F1A8-5550-46AF-8509-271DF0E768B5}) (Version: 1.1.4.0169 - AMD)
Easy Tune 6 B10.0516.1 (HKLM-x32\...\InstallShield_{457D7505-D665-4F95-91C3-ECB8C56E9ACA}) (Version: 1.00.0000 - GIGABYTE)
Easy Tune 6 B10.0516.1 (x32 Version: 1.00.0000 - GIGABYTE) Hidden
EasySaver B9.1214.1  (HKLM-x32\...\{07300F01-89CA-4CF8-92BD-2A605EB83C95}) (Version: 1.00.0000 - Gigabyte)
Evolve (HKLM\...\{670B1B49-9FD3-4827-9B41-471EFF580AA8}) (Version: 1.8.17 - Echobit, LLC)
Evolve (HKLM-x32\...\Steam App 273350) (Version:  - Turtle Rock Studios)
FormatFactory 3.1.1 (HKLM-x32\...\FormatFactory) (Version: 3.1.1 - Free Time)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Free Audio Converter version 5.0.57.301 (HKLM-x32\...\Free Audio Converter_is1) (Version: 5.0.57.301 - DVDVideoSoft Ltd.)
FTL: Faster Than Light (HKLM-x32\...\Steam App 212680) (Version:  - Subset Games)
Gigabyte Raid Configurer (HKLM-x32\...\{3A1B5D40-41E9-43FA-8C7B-A8667F5586EF}) (Version: 1.00.0001 - GIGABYTE Technologies, Inc.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
GOG.com Downloader version 3.6.0 (HKLM-x32\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 45.0.2454.93 - Google Inc.)
Google Earth Plug-in (HKLM-x32\...\{4AB54F11-2F8C-11E3-B09F-B8AC6F97B88E}) (Version: 7.1.2.2041 - Google)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.28.15 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
Hotline Miami 2 - Wrong Number (HKLM-x32\...\1424773427_is1) (Version: 2.0.0.1 - GOG.com)
HP Officejet 4630 series - Grundlegende Software für das Gerät (HKLM\...\{CCF92FFE-5341-4263-9048-472D9E3C5703}) (Version: 32.0.1180.44630 - Hewlett-Packard Co.)
HP Officejet 6700 - Grundlegende Software für das Gerät (HKLM\...\{9086D601-50B7-491D-A143-28193DADE36B}) (Version: 28.0.1315.0 - Hewlett-Packard Co.)
HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)
I.R.I.S. OCR (HKLM-x32\...\{CA6BCA2F-EDEB-408F-850B-31404BE16A61}) (Version: 12.3.4.0 - HP)
inSSIDer 3 (HKLM-x32\...\{A80CEA4E-74C1-4F9F-806B-E1D9AFC01768}) (Version: 3.0.7.48 - MetaGeek, LLC)
Java 8 Update 60 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418060F0}) (Version: 8.0.600.27 - Oracle Corporation)
Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)
JDownloader 2 (HKLM\...\jdownloader2) (Version: 2.0 - AppWork GmbH)
Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version:  - Valve)
Link Shell Extension (HKLM\...\HardlinkShellExt) (Version: 3.8.6.0 - Hermann Schinagl)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
METAL GEAR RISING: REVENGEANCE (HKLM-x32\...\Steam App 235460) (Version:  - PlatinumGames)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{4CB0307C-565E-4441-86BE-0DF2E4FB828C}) (Version: 3.5.50.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Xbox One Controller for Windows (HKLM\...\{DC2CB48C-FD96-48EB-A36A-7D995BB587EB}) (Version: 1.0.2 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)
NEC Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{D7BF9739-8A68-4335-BBEE-37752AD9E86B}) (Version: 1.0.18.0 - NEC Electronics Corporation)
NEC Electronics USB 3.0 Host Controller Driver (x32 Version: 1.0.18.0 - NEC Electronics Corporation) Hidden
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.4.5 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 352.86 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.3.22 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.3.22 - NVIDIA Corporation)
NVIDIA Grafiktreiber 352.86 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 352.86 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
ON_OFF Charge B10.0427.1 (HKLM-x32\...\{3DECD372-76A1-4483-BF10-B547790A3261}) (Version: 1.00.0001 - GIGABYTE)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.5.1.571 - Electronic Arts, Inc.)
Papers, Please (HKLM-x32\...\GOGPACKPAPERSPLEASE_is1) (Version: 2.4.0.10 - GOG.com)
ParkControl (HKLM-x32\...\ParkControl) (Version: 0.0.3.0 - Bitsum)
Project Zomboid (HKLM-x32\...\Steam App 108600) (Version:  - The Indie Stone)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.18.322.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7541 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.48 - Piriform)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.6.5 - Rockstar Games)
Samsung Universal Print Driver 2 (HKLM-x32\...\Samsung Universal Print Driver 2) (Version: 2.50.06.00 - Samsung Electronics Co., Ltd.)
Secunia PSI (3.0.0.7011) (HKLM-x32\...\Secunia PSI) (Version: 3.0.0.7011 - Secunia)
SHIELD Streaming (Version: 4.1.1000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.3.22 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Sid Meier's Civilization: Beyond Earth (HKLM-x32\...\Steam App 65980) (Version:  - Firaxis Games)
Sitecom Europe BV Wireless LAN (HKLM-x32\...\{8FC4F1DD-F7FD-4766-804D-3C8FF1D309AF}) (Version: 1.5.6.0 - Sitecom)
Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)
Sony PC Companion 2.10.275 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.275 - Sony)
Spelunky (HKLM-x32\...\Steam App 239350) (Version:  - )
Star Wars: Empire at War Gold (HKLM-x32\...\Steam App 32470) (Version:  - Petroglyph)
Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.)
StarCraft II - Legacy of the Void Beta (HKLM-x32\...\StarCraft II - Legacy of the Void Beta) (Version:  - Blizzard Entertainment)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
StarMade Demo (HKLM-x32\...\Steam App 335180) (Version:  - Schine, GmbH)
System Requirements Lab (HKLM-x32\...\{0F659036-14C7-4622-9505-35A0DC93526A}) (Version: 6.1.3.0 - Husdawg, LLC)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.7.0 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Triss (HKLM-x32\...\Alternative Look for Triss_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Alternative Look for Yennefer (HKLM-x32\...\Alternative Look for Yennefer_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Ballad Heroes - Neutral Gwent Card Set (HKLM-x32\...\Ballad Heroes - Neutral Gwent Card Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Beard and Hairstyle Set (HKLM-x32\...\Beard and Hairstyle Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Elite Crossbow Set (HKLM-x32\...\Elite Crossbow Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Contract - Skellige's Most Wanted (HKLM-x32\...\New Quest - Contract: Skellige's Most Wanted_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Contract Missing Miners (HKLM-x32\...\New Quest - Contract Missing Miners_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Fool's Gold (HKLM-x32\...\New Quest - Fool's Gold_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Scavenger Hunt - Wolf School Gear (HKLM-x32\...\New Quest - Scavenger Hunt: Wolf School Gear_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - New Quest - Where the Cat and Wolf Play... (HKLM-x32\...\New Quest - Where the Cat and Wolf Play..._is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Nilfgaardian Armor Set (HKLM-x32\...\Nilfgaardian Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Skellige Armor Set (HKLM-x32\...\Skellige Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
The Witcher 3: Wild Hunt - Temerian Armor Set (HKLM-x32\...\Temerian Armor Set_is1) (Version: 1.0.0.0 - GOG.com)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version:  - 11 bit studios)
Total War: ATTILA (HKLM-x32\...\Steam App 325610) (Version:  - Creative Assembly)
Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)
Tunngle beta (HKLM-x32\...\Tunngle beta_is1) (Version:  - Tunngle.net GmbH)
Ubisoft Game Launcher (HKLM-x32\...\{888F1505-C2B3-4FDE-835D-36353EBD4754}) (Version: 1.0.0.0 - UBISOFT)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Wasteland 2 Ranger Edition MULTi7 Update 1 1.0 (HKLM-x32\...\Wasteland 2 Ranger Edition MULTi7 Update 1 1.0) (Version:  - )
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live ID Sign-in Assistant (HKLM\...\{9B48B0AC-C813-4174-9042-476A887592C7}) (Version: 6.500.3165.0 - Microsoft Corporation)
WinRAR 4.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 4.20.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Wiederherstellungspunkte =========================

19-09-2015 00:28:20 Windows Update
21-09-2015 16:00:44 Revo Uninstaller's restore point - Browser Configuration Utility

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {007FD569-54C3-49A3-8253-0E0F395482D0} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {0383F50C-10FC-4040-A88B-255E40ED0718} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {084C4971-47A8-45F9-B3D4-6428B1DEE881} - System32\Tasks\CreateChoiceProcessTask => C:\Windows\System32\browserchoice.exe
Task: {12D881B8-E734-416A-A028-6015E7EC6595} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {150F6739-4D66-4199-B9E0-4A6036F6D1E3} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {1E3858FF-E903-44C5-B3FD-123E185A4418} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-07-07] (Adobe Systems Incorporated)
Task: {28815D36-92F8-47FB-8122-5993A2D7FAE0} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {2956CF19-F792-4A9B-8BEE-AD0E8AC9BB44} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {2FB4C784-7B77-4FC1-AD9E-BDB7965DB6AA} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-09-18] (Avast Software s.r.o.)
Task: {310AAB93-F31B-419C-AC9C-1341BFDD3539} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {33EF87E4-1891-4EEF-A7C9-E6E04D9214E0} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe
Task: {377E7CDC-2A35-4D14-A9D8-49128516DB1A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {3FD4EB54-C2D6-4967-BB88-80BBF8C40A43} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2015-08-20] (Piriform Ltd)
Task: {44FE11CF-3C38-40A3-9493-A4A49EA471C3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4DA4623F-2143-4DED-8840-199F2039EC86} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {537EDD82-D044-4E4B-A66C-5101874B229E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {59D77CEA-ED7B-4500-89C9-0232E7206C55} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-09-22] (Adobe Systems Incorporated)
Task: {5EF69986-67D5-4614-B028-C38706C7912F} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {5F71DF05-892E-400C-BCFA-20C877FF8FFB} - \ASP -> Keine Datei <==== ACHTUNG
Task: {62161B17-BBE0-4CC8-84E3-8F778C923A0F} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {66CA6249-C5C4-42EA-A114-32777C647074} - System32\Tasks\{CEED1077-07CF-4FE6-BA38-F89840399C6C} => pcalua.exe -a "D:\Spiele\Steam\SteamApps\common\The Talos Principle\Uninstall.exe"
Task: {6C6B408C-ABB7-4CDE-A2FC-598219EC69AF} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {739DA745-42F7-41D9-9FD8-F145E77A2852} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {759FD429-B6FA-4A99-9616-3B9517B3B377} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {75DD3EDE-5FD2-4C70-8102-FF1C5D38B12A} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {7E7CF516-AEF8-4C55-8ACC-86E52E53C5E7} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {81F54F4F-AB64-4C47-B080-C79FAB3FB46A} - System32\Tasks\ParkControl => D:\Dateien\ParkControl\parkcontrol.exe [2015-09-06] (Bitsum LLC)
Task: {8928D6C7-7F61-40AF-BCCC-7B0E5D089856} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {8FA47A0E-248D-4A4C-ABC7-739455135FE2} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {99F43B2C-4B9B-458F-8253-C56307D66F25} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {9B99641C-82AD-430E-99D3-95403253A9F4} - System32\Tasks\{1B1DFA78-A4FB-400D-8359-E064CBA855AC} => pcalua.exe -a C:\Users\dieFackel\Downloads\AdobeAIRInstaller.exe -d C:\Users\dieFackel\Downloads
Task: {9DF62012-097A-432A-A864-896C0D0A58C7} - System32\Tasks\{17B1D9FC-619A-4019-9106-9E42DBD0F377} => pcalua.exe -a "D:\Spiele\Endless Legend\Uninstall.exe"
Task: {A02D7968-4E72-40FF-BFD5-EE9EFB9F69B1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-28] (Google Inc.)
Task: {A0C3ED9C-6CCF-46DD-AFC1-B7A92242AEDB} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {A3B958EF-6EA8-46FD-BC9C-7D831347D2F2} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {AAF7903A-042E-445F-BCF0-D2989889D7AF} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {B0E4BE89-8ACC-45E6-AA66-80418E141D6B} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {B3BA9488-CC8E-4610-9991-318DF6AC4EA5} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {BA7FDBED-76CC-4426-9BB3-4E40EB345604} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {C209C164-6EB7-4B8F-9858-E6E9D867CC1A} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {C7C0D305-2AE3-428A-9A0F-0CE0850295B0} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {CED20494-E076-4B29-B6AD-5BA2F019E82E} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-08-26] (Microsoft Corporation)
Task: {DA5E6DF4-4A57-477B-9EED-99B2E8A73250} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {E2822C6F-6FA1-4C79-8CBA-E875A3523E86} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {EDBF36E0-04A5-40EE-B88E-32965CAB73DC} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {F1B6BD64-4062-4FEA-A3EE-F93D36875EFD} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {F4ED529C-8F47-43CD-92D4-0FB6C947774B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-08-06 19:45 - 2015-08-06 19:45 - 00032768 _____ () C:\WINDOWS\SYSTEM32\licensemanagerapi.dll
2015-04-23 19:40 - 2014-04-16 10:22 - 00029184 _____ () C:\WINDOWS\System32\usp02l.dll
2013-08-19 00:18 - 2009-08-24 14:38 - 00068136 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\ESSVR.EXE
2015-08-19 18:31 - 2015-08-11 11:14 - 00404480 _____ () C:\WINDOWS\System32\diagtrack_wininternal.dll
2013-08-19 00:21 - 2010-01-19 04:31 - 00072304 ____R () C:\Windows\SysWOW64\XSrvSetup.exe
2015-04-23 19:43 - 2014-11-26 13:07 - 00118576 _____ () C:\Windows\SysWOW64\SecUPDUtilSvc.exe
2015-08-06 18:50 - 2015-07-23 03:10 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-08-31 18:08 - 2015-08-18 09:56 - 02498808 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-08-31 18:08 - 2015-08-18 09:56 - 02498808 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00429056 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-07-10 12:59 - 2015-07-10 12:59 - 00143360 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\XamlTileRendering.dll
2015-08-11 21:51 - 2015-08-03 03:11 - 06569472 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00471040 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-08-19 18:31 - 2015-08-11 10:58 - 01808384 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-08-11 21:51 - 2015-08-03 03:09 - 02274816 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-07-10 13:00 - 2015-07-10 18:45 - 00210432 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.ProxyStub.dll
2015-08-24 20:28 - 2015-08-24 20:28 - 00057344 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-07-02 00:45 - 2015-07-02 00:45 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll
2015-07-02 00:45 - 2015-07-02 00:45 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll
2015-09-21 19:23 - 2015-09-21 19:23 - 02965504 _____ () C:\Program Files\AVAST Software\Avast\defs\15092101\algo.dll
2015-09-22 19:45 - 2015-09-22 19:45 - 02965504 _____ () C:\Program Files\AVAST Software\Avast\defs\15092200\algo.dll
2013-08-19 00:18 - 2009-03-13 11:30 - 00109096 _____ () C:\Program Files (x86)\Gigabyte\EasySaver\YCC.DLL
2015-05-22 16:45 - 2015-05-01 18:52 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2013-08-19 00:15 - 2012-06-17 11:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2014-06-09 04:02 - 2010-11-04 11:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2015-07-02 00:45 - 2015-07-02 00:46 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll
2014-08-03 17:42 - 2015-07-03 18:12 - 00778240 _____ () D:\Spiele\Steam\SDL2.dll
2015-01-20 19:25 - 2015-07-03 18:12 - 04962816 _____ () D:\Spiele\Steam\v8.dll
2014-08-03 17:42 - 2015-08-19 22:39 - 02413248 _____ () D:\Spiele\Steam\video.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 02396672 _____ () D:\Spiele\Steam\libavcodec-56.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00479744 _____ () D:\Spiele\Steam\libavformat-56.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00332800 _____ () D:\Spiele\Steam\libavresample-2.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00442880 _____ () D:\Spiele\Steam\libavutil-54.dll
2014-08-29 17:22 - 2014-12-01 23:31 - 00485888 _____ () D:\Spiele\Steam\libswscale-3.dll
2015-01-20 19:25 - 2015-07-03 18:12 - 01556992 _____ () D:\Spiele\Steam\icui18n.dll
2015-01-20 19:25 - 2015-07-03 18:12 - 01187840 _____ () D:\Spiele\Steam\icuuc.dll
2014-08-03 17:42 - 2015-08-19 22:39 - 00704192 _____ () D:\Spiele\Steam\bin\chromehtml.DLL
2015-07-22 19:33 - 2015-07-27 03:13 - 00171008 _____ () D:\Spiele\Steam\bin\openvr_api.dll
2014-08-03 17:42 - 2015-07-03 18:12 - 39553928 _____ () D:\Spiele\Steam\bin\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\Control Panel\Desktop\\Wallpaper -> D:\Dateien\Bilder\Wallpaper\song-of-ice-and-fire-a-song-of-ice-and-fire-game-of-thrones-game-of-thrones-serial-book.jpg
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\StartupFolder: => "Sitecom Wireless Utility.lnk"
HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "EvolveClient"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "GalaxyClient"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "EADM"
HKU\S-1-5-21-2542595381-3183390579-2223026719-1000\...\StartupApproved\Run: => "Sony PC Companion"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{3BC6CFE2-7EA2-4011-84BA-7FEED091D83A}] => (Allow) D:\Dateien\Echobit\Evolve\EvolveClient.exe
FirewallRules: [{61375D69-A18E-4803-8779-D8BF39D6268A}] => (Allow) D:\Dateien\Echobit\Evolve\EvoSvc.exe
FirewallRules: [UDP Query User{6BD38B9B-C5B3-444B-9445-275EE4EF4F01}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe] => (Allow) D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe
FirewallRules: [TCP Query User{0FFDD242-BB2F-49BF-905C-5B05E6D833B6}D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe] => (Allow) D:\spiele\steam\steamapps\common\star wars empire at war\corruption\swfoc.exe
FirewallRules: [{37DBD5E1-76BC-46E5-8F23-179DADB6C408}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{F1DBD15E-DA8E-47A6-9329-BFD53767D7C6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme2.exe
FirewallRules: [{0C591109-FBC6-4F73-BBBB-61092B9BB943}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [{131CBD8F-19F4-4077-AA23-2E3A9B932972}] => (Allow) D:\Spiele\Steam\SteamApps\common\Star Wars Empire at War\runme.exe
FirewallRules: [UDP Query User{AC4641F8-12FC-420F-823F-EFFC3F28FDBE}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [TCP Query User{AA80F67F-5B29-4F21-AF43-610BD2557134}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe
FirewallRules: [UDP Query User{B0847E20-BD2F-4CE3-81BD-B269F8AE2DCE}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{99791AC9-E644-49DE-86C4-F301DA9B706F}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [UDP Query User{52E2A39D-CDF8-4BD2-A960-F3FB7AC8F64D}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [TCP Query User{D499F6AB-D5DA-4AE8-B1FE-0C5672BDAAEC}C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe] => (Block) C:\program files (x86)\java\jre1.8.0_51\bin\javaw.exe
FirewallRules: [{49FBEF79-5265-4DBB-80C5-04929B850A06}] => (Allow) D:\Spiele\Steam\SteamApps\common\StarMade\StarMade-starter.exe
FirewallRules: [{96EBA60C-D22C-4AE4-B9FF-48344DCD1A8B}] => (Allow) D:\Spiele\Steam\SteamApps\common\StarMade\StarMade-starter.exe
FirewallRules: [UDP Query User{0D90916A-B2DB-4CD4-9340-B147B03340B9}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [TCP Query User{679176C4-B17C-48AC-9438-D72A64AADF45}D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base36442\sc2_x64.exe
FirewallRules: [UDP Query User{94A160E1-66C3-4B87-9603-39556EFD9D49}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe
FirewallRules: [TCP Query User{89EFC158-2255-4AD5-AD13-C0E7D8C6DDF0}C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe] => (Allow) C:\program files (x86)\portforward\port forward network utilities\pfportchecker.exe
FirewallRules: [{47331124-787A-4A26-A875-7E33D2E60C2E}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{0BB03995-1E3A-4C68-839F-2683138514C7}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{A4AE1FED-1B2E-4400-B66B-44EF7AB1085C}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{7F4738E0-D875-4AAA-8603-B22CCD24074A}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{C8F9D5F7-0F0E-4656-B32A-EC826FEB347F}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{4E00D23C-FC6C-460D-B09D-C74E9829E1E6}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{260998F8-92AC-4377-B056-ABB93BE243F7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{E20C141F-B4E3-40B8-9EE2-4E3D0395E972}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{6680ACBA-36E3-4AAD-B9B0-01E7654230F0}] => (Block) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [{9A344900-C141-44D8-A5DD-68DA9610A391}] => (Block) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [UDP Query User{C27FDE17-733B-4E36-8FB2-179CA232B7F5}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [TCP Query User{44A642B9-0B12-4F97-84BE-93251718E92E}D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base35543\sc2_x64.exe
FirewallRules: [{50A0F398-48A6-498F-9B67-4D5C9A071F1B}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{F7EC3CDC-284C-442A-BB04-2AC14E401D19}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{8B769242-BA38-42BD-B61E-C869E9D4AFD6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{7E08556E-1E48-491D-9432-D0CD72FB0C37}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{8B88620A-E50A-426E-949A-8CC410A9D244}] => (Allow) D:\Spiele\Steam\SteamApps\common\Convoy\Convoy.exe
FirewallRules: [{1007BD7E-888D-41BC-9DF6-6016D0A2C516}] => (Allow) D:\Spiele\Steam\SteamApps\common\Convoy\Convoy.exe
FirewallRules: [{E737A0A8-401F-4D1D-BDDD-A74D8366577F}] => (Allow) C:\Program Files (x86)\Samsung\Samsung Universal Print Driver 2\PrinterSelector\SUPDApp.exe
FirewallRules: [{DA0A9DB6-75C2-4D33-AF3E-957E96B0EF8D}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{85C5C8CE-4D27-4531-A568-5EFDE17198F5}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{B4495F83-B379-4899-85D3-E45164AF6B0E}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{454B6152-3A20-4BB5-852C-649F4293A1FA}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{C536F582-753F-4E9C-976A-1D730B05E962}] => (Allow) C:\Users\dieFackel\AppData\Local\Temp\InsA09A\Setup.exe
FirewallRules: [{E30A1B3E-FE21-4810-B6DC-2DF67F566FAC}] => (Block) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [{10F2AA7E-B647-4859-A997-8DCA038F947F}] => (Block) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{71783481-456F-4E47-B816-DE0237716065}D:\spiele\rockstar games\grand theft auto v\gta5.exe] => (Allow) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{E264AEE9-98D1-4F0C-A8D8-EF320B419BA4}D:\spiele\rockstar games\grand theft auto v\gta5.exe] => (Allow) D:\spiele\rockstar games\grand theft auto v\gta5.exe
FirewallRules: [{A2F61F36-90A6-400C-8F5B-32D7A043FC06}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{6FCEA93C-55AE-4EB2-98EB-B68ED3541B24}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{874CB0D8-1A02-4AC9-A166-9F8293E19B86}] => (Allow) C:\Steam\Total War Attila\launcher\launcher.exe
FirewallRules: [{C94F57A0-0A4A-470F-B710-2DAAB728AFB3}] => (Allow) C:\Steam\Total War Attila\launcher\launcher.exe
FirewallRules: [{732BA3E2-1182-4397-8D28-A9A2C88849AA}] => (Block) D:\Spiele\GOG Games\Hotline Miami 2 - Wrong Number\HotlineMiami2.exe
FirewallRules: [{5712810A-D8E8-47F1-867C-8A567865F1FA}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{121C2BBA-ADCF-4A00-A003-8E4DC7C19F42}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [UDP Query User{01F3AAB2-F100-486D-9ECE-B0CE0B6D9092}D:\spiele\der herr der ringe online\lotroclient.exe] => (Allow) D:\spiele\der herr der ringe online\lotroclient.exe
FirewallRules: [TCP Query User{7E0D2860-2926-4758-9E61-C3D62A6EE882}D:\spiele\der herr der ringe online\lotroclient.exe] => (Allow) D:\spiele\der herr der ringe online\lotroclient.exe
FirewallRules: [UDP Query User{EF620606-1FAD-4D0F-A60A-B3D46FA847CD}D:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) D:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [TCP Query User{E6809934-F0AB-44EA-92A3-4F06E02800A4}D:\spiele\starcraft ii\versions\base32283\sc2.exe] => (Allow) D:\spiele\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [{5185CE5F-6F3A-4005-9FFA-99A07BFC30AF}] => (Block) D:\Spiele\The Escapists\TheEscapists.exe
FirewallRules: [UDP Query User{994ABB63-697E-4845-8262-7188C1B3840C}C:\steam\total war attila\attila.exe] => (Allow) C:\steam\total war attila\attila.exe
FirewallRules: [TCP Query User{E16FC49E-8D94-4B67-A2C9-9950910F8D4F}C:\steam\total war attila\attila.exe] => (Allow) C:\steam\total war attila\attila.exe
FirewallRules: [UDP Query User{3F166EB9-307C-4A2B-9432-B9F44FD2DAB3}D:\spiele\steam\steamapps\common\total war attila\attila.exe] => (Allow) D:\spiele\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [TCP Query User{AB7ED2C4-B673-4C55-83A0-5E725CB106E4}D:\spiele\steam\steamapps\common\total war attila\attila.exe] => (Allow) D:\spiele\steam\steamapps\common\total war attila\attila.exe
FirewallRules: [{A69E166B-B8ED-48C9-8F37-7BC3560B9061}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Attila\launcher\launcher.exe
FirewallRules: [{A0EFB1FA-5906-4CDD-B7CD-CF975BD867FD}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Attila\launcher\launcher.exe
FirewallRules: [{0EF27D38-E34C-49C9-8FFF-A8DEE122C744}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{D9020509-1915-46C3-8F77-73656050A0ED}] => (Allow) D:\Spiele\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{4701180F-828D-4A7D-BEE2-0525E357EEDF}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{042A055D-138C-4D24-943A-D29B3400242B}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{84E05554-EBD4-4F2C-935A-8476C0213A1B}] => (Allow) D:\Dateien\Winamp\winamp.exe
FirewallRules: [{AF973B7E-92F7-4563-88EC-4D14DF7F570A}] => (Allow) D:\Dateien\Winamp\winamp.exe
FirewallRules: [{65ED1D28-06B3-4520-B7A1-C1B0B3C19453}] => (Block) D:\Spiele\Dying Light - Season Pass Edition\Dying Light - Season Pass Edition\DyingLightGame.exe
FirewallRules: [{B8262556-3A71-44D0-844E-C47F3BF5FE9C}] => (Block) D:\Spiele\Dying Light - Season Pass Edition\DyingLightGame.exe
FirewallRules: [{47C063DB-E35A-4680-ACF9-074E46A11E7F}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\Bin\TalosLauncher.exe
FirewallRules: [{9A669733-4F0E-4354-A9F2-783A3E91ABC0}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{E51C2980-FA5D-4DD3-9111-65127B787228}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{9E96DFA9-52C0-465E-ABC3-2E5E6D034881}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\original\Talos_Unrestricted.exe
FirewallRules: [{A6441CE9-9B08-426E-BD68-524B7CA68ACA}] => (Block) D:\Spiele\Steam\SteamApps\common\The Talos Principle\original\Talos.exe
FirewallRules: [{66BD3D56-1118-4FC3-9E54-80150813DA09}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{EE93AA36-B737-4CE9-A350-E7329041BB81}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{0C0652B7-FCB4-46F4-B493-383EA1E10206}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
FirewallRules: [{77F7FC88-7D10-47A1-A934-A458A2FD7952}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveBeta\Bin64_SteamRetail\StaticLauncher64.exe
FirewallRules: [{5BEEE90D-0BBE-4967-8B44-654F73F5E717}] => (Allow) D:\Spiele\Steam\SteamApps\common\the banner saga factions\win32\The Banner Saga Factions.exe
FirewallRules: [{4E55DE75-0541-4FFF-A27A-B8E7A0708C41}] => (Allow) D:\Spiele\Steam\SteamApps\common\the banner saga factions\win32\The Banner Saga Factions.exe
FirewallRules: [{BD02DD28-83A4-40BE-BCB0-A01DEB78070A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{791AE8AB-8F4F-4403-997C-7D6431C71758}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{200F8714-305F-4403-A7E8-177A79F7581D}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{CBC7F8AB-00EB-4892-9F01-78F6C467AA2D}] => (Allow) D:\Spiele\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe
FirewallRules: [{6BF50E30-7EB9-4353-BC55-1167AFD223F4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{B030A168-6281-48CA-9621-76A8AEA3AF09}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe
FirewallRules: [{BAEB663C-7F5E-4F29-A51D-1235BF4C7897}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{B83D49E3-C9EE-49E5-93EC-0C2A0ECB1797}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3669\Agent.exe
FirewallRules: [{A58FCE97-E1C6-441E-BCA5-4F1A94A75D35}] => (Allow) D:\Spiele\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{6824D999-E278-4D96-A8EB-3C4D6761872C}] => (Allow) D:\Spiele\Steam\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{90C2CADE-0B84-499A-B2F0-315635D1D7C9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{FF29EDB2-18BB-4CCD-896A-52444C37CE8C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3668\Agent.exe
FirewallRules: [{7ABD6415-AAE2-4A3F-AD8C-0056BCBE5447}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{80C91602-0A9B-403A-8488-F952FA86D28F}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{6DB10C88-5451-485A-B1DB-C7936DD88213}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{50CA82F3-6FD3-4198-BC73-5E7FB0BEC229}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{4110D224-9A94-479B-BDD6-927B5E0CD22F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [{B5CC3189-6AFD-4B0A-BF7B-606DB90611A2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe
FirewallRules: [UDP Query User{721024D8-CA0B-4E5A-8BD3-1DD886EF554B}C:\steam\dayz\dayz_experimental.exe] => (Allow) C:\steam\dayz\dayz_experimental.exe
FirewallRules: [TCP Query User{C7489638-ABE6-4C6E-9EF0-20E06C24DBF4}C:\steam\dayz\dayz_experimental.exe] => (Allow) C:\steam\dayz\dayz_experimental.exe
FirewallRules: [{52E231DB-F5D6-4028-BEC4-8E8ED67F12AD}] => (Allow) D:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [{5FD0AFAB-647B-413F-8806-D83B6639A7D5}] => (Allow) D:\Spiele\StarCraft II\StarCraft II.exe
FirewallRules: [{B243255C-A7CC-4062-88F3-5A68A9818BF0}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{71EDB1FE-7946-4123-80C9-0B72647F813D}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [UDP Query User{46682FD8-186D-49C6-A2F6-8726E2F384C5}D:\spiele\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\far cry 4\bin\farcry4.exe
FirewallRules: [TCP Query User{2087E360-86C8-4F44-9479-A342A8F24C4C}D:\spiele\far cry 4\bin\farcry4.exe] => (Allow) D:\spiele\far cry 4\bin\farcry4.exe
FirewallRules: [UDP Query User{3BD0FB36-6A35-474D-B8D4-54428A7073F7}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [TCP Query User{1E2E57F1-9282-4817-BF17-86AF3119982D}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [UDP Query User{768ADEDF-7348-4888-A306-9D2D9BCFAB3C}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{E4D7CB05-04C0-4D43-AF88-AD7F4CADA6A7}C:\program files (x86)\hearthstone\hearthstone.exe] => (Allow) C:\program files (x86)\hearthstone\hearthstone.exe
FirewallRules: [{3C37B9E7-A1B0-41FF-BB5C-41BB7071420B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{487C9432-BD35-49B9-99F5-3BAFE1A664EE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [UDP Query User{2B0BD43A-F410-4B4D-B059-B6240AFC9884}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{8C2A0CB4-B109-46D4-AABB-C160E0B4BC2A}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{EF209801-AE72-41D9-9F77-608AD8263367}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{5A3687F6-AA2F-41D8-BC1F-6D0028F43762}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [{75FC0C17-CEE6-4683-A000-68DC461CDDCF}] => (Allow) D:\Spiele\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{C1F02300-6FE1-413E-97D5-9D2E1BCC7BE5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe
FirewallRules: [{A2F231C9-4CD8-4395-81DF-C34C6DE0F706}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{E6612FF6-20D1-486B-BE99-B2EE40A8EE64}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{B2F30D36-41BD-46C2-BFAC-77710BEA7E86}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{91F29332-8300-4A77-8646-391A0E36647B}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{F32D8B5C-0A39-4213-B311-4264F61EDD29}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [{4CEB2609-F630-445B-ADE0-E7A4F484BD37}] => (Allow) D:\Spiele\BioWare\Star Wars-The Old Republic\launcher.exe
FirewallRules: [UDP Query User{34BCA22E-99A9-4037-899C-174952D355DE}D:\spiele\turbine\lotro\lotroclient.exe] => (Allow) D:\spiele\turbine\lotro\lotroclient.exe
FirewallRules: [TCP Query User{75A8E893-2DB3-4F96-A700-1BDD93AEC419}D:\spiele\turbine\lotro\lotroclient.exe] => (Allow) D:\spiele\turbine\lotro\lotroclient.exe
FirewallRules: [UDP Query User{91E2485E-E838-477D-A73E-4A2676154231}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{DF81AFF9-6AB8-429F-9D37-56BCA58078BB}C:\users\diefackel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\diefackel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{3675F0AF-25B1-45AE-BDED-BEECEADB7462}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{05B42524-C3C8-41AE-898B-8F2B08533BBD}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{5B828859-7EB5-48C0-B521-DAF312FC3B92}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{6ACFD153-8905-467B-970D-055343BD393E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Divinity - Original Sin\Shipping\EoCApp.exe
FirewallRules: [{50A4018A-E9AB-4375-85D1-DB1EA03F464C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{12F913B6-00F8-4DEB-B3E4-8D97D2850BED}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3507\Agent.exe
FirewallRules: [{612F91F9-9A30-412D-B951-56F8B50574E5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{850377DC-94A3-4B2A-AA1F-2D4A61142648}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_Mantle.exe
FirewallRules: [{725EA809-0C27-44BB-A6D1-42DFFB83A5B6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [{1162E8DD-48DD-4181-812E-659536393FF0}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization Beyond Earth\CivilizationBE_DX11.exe
FirewallRules: [UDP Query User{A1C93A3A-B967-4C58-A16D-F1E7DE6A8FA3}D:\spiele\alien isolation\ai.exe] => (Allow) D:\spiele\alien isolation\ai.exe
FirewallRules: [TCP Query User{E9B168F0-3A0F-4CB0-8F7B-1762918B2F50}D:\spiele\alien isolation\ai.exe] => (Allow) D:\spiele\alien isolation\ai.exe
FirewallRules: [{63E93650-FC6E-470D-B081-ED7D3885B788}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{B715B48F-AF68-463A-94F5-8E0D35B547A9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe
FirewallRules: [{F4001CEF-B676-4F8F-9CBE-5F88C6865C09}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [{466FED5B-6575-4E15-87A2-545F7300F3DA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe
FirewallRules: [UDP Query User{D156C6E4-CF56-47E4-8877-C9FA020097D1}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [TCP Query User{2E3D86B6-3222-4719-A1C3-6465A9825C7E}C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe] => (Allow) C:\users\diefackel\appdata\local\jdownloader v2.0\jdownloader2.exe
FirewallRules: [{EA07A9B6-AE7B-426E-90FB-069CCDCFB202}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [{1DC62405-5788-4878-AEEF-73C0E95C6951}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe
FirewallRules: [UDP Query User{3FF88DA6-90AD-4569-A544-9BD32D95B4DE}C:\users\diefackel\desktop\candisoft load!\load.exe] => (Allow) C:\users\diefackel\desktop\candisoft load!\load.exe
FirewallRules: [TCP Query User{FDAB8299-263A-4540-98EB-B9BF2FFF7833}C:\users\diefackel\desktop\candisoft load!\load.exe] => (Allow) C:\users\diefackel\desktop\candisoft load!\load.exe
FirewallRules: [{F3B481F2-78BB-4809-B174-E6BF94AD446C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{A27DCD31-FB3D-4FFE-A0A1-8EB8491B9F49}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe
FirewallRules: [{C8111857-2C72-45AC-91FB-4FEDD31A8BBC}] => (Allow) D:\Spiele\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{5C97D2AD-62A5-4F8E-A76D-8CBD095C76AB}] => (Allow) D:\Spiele\Steam\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{B407A014-5DA2-44E3-B87F-65197BCC60D6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{4AE9B7C5-F214-42B4-BD04-4D111B6C6902}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3346\Agent.exe
FirewallRules: [{8A07CC39-D9D6-4986-A7E7-FC3984AC7127}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{161B3A9B-F20F-432A-A4F8-529C74EDA64C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3334\Agent.exe
FirewallRules: [{8E689C35-4729-49A6-BAD2-957DC852D36D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{1FDDD19F-D61F-4E96-9476-9EE53E29A059}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3332\Agent.exe
FirewallRules: [{473F3C8B-E48E-49EC-B8ED-971DDEED3907}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{5CE8D20C-85C6-4DE3-A472-B7817AC6AAEA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3323\Agent.exe
FirewallRules: [{2E372AA7-F0B1-41BF-9BCF-3AFE1A50E663}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{7BE77165-226E-4090-ACA4-A8C96846A894}] => (Allow) D:\Spiele\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{1AC1DBEE-839F-431D-8D8E-029BC8B31A0B}] => (Allow) D:\Spiele\Steam\SteamApps\common\Resident Evil 4\Bin32\bio4.exe
FirewallRules: [{C82C6185-880F-4E6E-8746-2B6BB818BD6B}] => (Allow) D:\Spiele\Steam\SteamApps\common\Resident Evil 4\Bin32\bio4.exe
FirewallRules: [UDP Query User{10CE2B65-E5F4-42BC-8163-71E573619FB5}C:\programdata\battle.net\agent\agent.3286\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3286\agent.exe
FirewallRules: [TCP Query User{A35D10AF-D92A-4ABA-ACBF-C15CE5BC4854}C:\programdata\battle.net\agent\agent.3286\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3286\agent.exe
FirewallRules: [{24AD6035-4531-4D19-88F4-22279AFC5DAA}] => (Allow) D:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{2E04DF7B-58DC-40FD-9861-C65DEEF3472B}] => (Allow) D:\Spiele\Steam\bin\steamwebhelper.exe
FirewallRules: [{65BCD715-1B96-40FB-93BC-46BB53473CA1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{BB349080-4EF5-4A0F-AFCF-58D1A5BE541D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3235\Agent.exe
FirewallRules: [{C976ADF5-7175-4272-B4BE-CCD10EAC1E1C}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{930A184D-3AC6-40FF-A3BD-97983CF14E97}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3182\Agent.exe
FirewallRules: [{3A7BC421-EDBF-409F-AE22-B79A7C6D1E11}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{C346D2EC-0F46-4B35-BF88-45A910E8F65D}] => (Allow) LPort=5357
FirewallRules: [{A20C7EC1-D7F0-4699-A999-C11A6AF98445}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\Bin\DeviceSetup.exe
FirewallRules: [{FA10D693-1CA9-4710-A397-22E92281F546}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\bin\SendAFax.exe
FirewallRules: [{F4E28960-8EA3-4167-B305-A5D09CF4CB1B}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\bin\DigitalWizards.exe
FirewallRules: [{396624B1-C30D-48C7-A088-13E424FC2A24}] => (Allow) C:\Program Files\HP\HP Officejet 4630 series\bin\FaxApplications.exe
FirewallRules: [{7E35D448-A58D-4FC2-BA21-430360FADCD6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{0BAE9171-52B3-4EC5-9A19-A016C1E03D02}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3147\Agent.exe
FirewallRules: [{E5A67602-3EB0-42DE-B3AD-4031D2D252F9}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{42E8ED7D-6813-475E-9526-E86E74431098}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3109\Agent.exe
FirewallRules: [{4FEC670E-A4A5-4FCA-AD3C-C8CEBC9F80E4}] => (Allow) D:\Spiele\Steam\SteamApps\common\METAL GEAR RISING REVENGEANCE\METAL GEAR RISING REVENGEANCE.exe
FirewallRules: [{6A1E11C6-2FD4-4442-B793-54CAD8E63F82}] => (Allow) D:\Spiele\Steam\SteamApps\common\METAL GEAR RISING REVENGEANCE\METAL GEAR RISING REVENGEANCE.exe
FirewallRules: [{6083F112-8C04-4F34-8B81-E280FF1B4F08}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{5E9EC2DE-8C92-4258-AC76-9FA200A6CFCA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3023\Agent.exe
FirewallRules: [{D37AC809-3DCF-48D3-A935-663B1B235D36}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{27B6BBB1-7DD7-44E0-9F5F-821FCBFA2D98}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2880\Agent.exe
FirewallRules: [{22EF0059-D71E-46A6-A646-B5E9903D7EB7}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{08FE3F0B-E290-4A32-8D1A-5E0431B92CD9}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daupdatersvc.service.exe
FirewallRules: [{271C88E9-96B2-4725-ADE1-49DBFA58099D}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{4D31A50F-DD2C-44A1-8106-12450F1BD174}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{E5325EEB-3F01-445B-B94D-A233B1AEBA19}] => (Allow) D:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{30BD7EC9-61EF-43AD-BFCA-932704125836}] => (Allow) D:\Spiele\Dragon Age\DAOriginsLauncher.exe
FirewallRules: [{35241231-34FA-42D4-921F-BAC90A61C91A}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{27D80C77-5768-47B2-BC71-ECEF146C8A2D}] => (Allow) D:\Spiele\Dragon Age\bin_ship\daorigins.exe
FirewallRules: [{4373D304-EC2F-4DC7-A098-1034ED7EC19D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{804D6F11-A546-48E8-8806-D776353B49F5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{28B9B0CA-69CF-49C4-886D-1F7E6D0E63E0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F23413BE-72FF-48FF-935F-B4423B56EB70}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{9D0EB4A1-0242-4620-8E01-2CCDF0A2AD7C}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F8966F84-0191-401B-B9D7-BDE8ECAE8DB2}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0E181344-9146-427F-B8C5-F7CEC8AE589F}] => (Allow) D:\Ubisoft\Future Soldier DX9.exe
FirewallRules: [{BE6201F6-47F2-4F6D-A260-1DE904ACCA50}] => (Allow) D:\Ubisoft\Future Soldier DX9.exe
FirewallRules: [{C970D1FA-1BB1-45FB-8E2F-1EDEC790AEBC}] => (Allow) D:\Ubisoft\Future Soldier DX11.exe
FirewallRules: [{B3B18623-32C2-4E9A-953A-C7A9D41C08DD}] => (Allow) D:\Ubisoft\Future Soldier DX11.exe
FirewallRules: [{01A59A15-B150-4261-A832-C13E2333934A}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [{5933A99D-DE56-4D42-A127-7361BCDDBA2B}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\UbisoftGameLauncher.exe
FirewallRules: [UDP Query User{8B6CB9A1-CCD9-4ED2-8550-672343D27E06}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [TCP Query User{811D149A-8102-4474-B680-7B0E1F1DB80D}D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe] => (Allow) D:\spiele\starcitizen\citizenclient\bin64\starcitizen.exe
FirewallRules: [{FF515000-9D08-408E-9921-26D9E623A3EB}] => (Allow) D:\Spiele\Diablo III\Diablo III.exe
FirewallRules: [{F1F436EB-F01E-4B64-89F0-D9D9CC3237A5}] => (Allow) D:\Spiele\Diablo III\Diablo III.exe
FirewallRules: [{0898D30C-4DDF-4852-9CEF-CD79E0FB0347}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{59C36A26-852E-4745-BEF7-698FF9D6C85E}] => (Allow) D:\Spiele\Steam\SteamApps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{454808A4-0F57-4997-A163-A11BEB797424}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{BD7E8AC0-D371-47DC-A1E0-8F627C3E1039}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2816\Agent.exe
FirewallRules: [{967DF2D9-1094-404F-95FB-747EDD01CEFB}] => (Allow) D:\Spiele\Steam\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{98F95051-3DCF-440C-9AE9-E94D278E79EB}] => (Allow) D:\Spiele\Steam\SteamApps\common\FTL Faster Than Light\FTLGame.exe
FirewallRules: [{B8E9E7A8-22E9-46D2-B15A-2616ACBE94FF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [{E3458C9D-9AD5-42D0-8D36-940F11B65F9D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2787\Agent.exe
FirewallRules: [UDP Query User{F5D0F458-A64A-4AAC-88D7-6DB7D0B66659}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2753\agent.exe
FirewallRules: [TCP Query User{26D928E9-F98F-40D1-A2AE-23E28514F798}C:\programdata\battle.net\agent\agent.beta.2753\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.beta.2753\agent.exe
FirewallRules: [{15789D71-645E-40BA-A62F-658AE5200343}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{A7964258-CEEC-492B-89D8-9130CD0587CC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2737\Agent.exe
FirewallRules: [{E8E042D8-E451-44F8-82FA-536CB3D94352}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [{4A5DB823-6EE7-455F-A4B4-66B5A92E1DAC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2717\Agent.exe
FirewallRules: [UDP Query User{C7336522-0718-4032-B21C-44DAB4327448}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [TCP Query User{0E4CC603-C65B-4D8A-9395-77790EFC0784}C:\steam\dayz\dayz.exe] => (Allow) C:\steam\dayz\dayz.exe
FirewallRules: [{E52FDDF5-AC5F-464C-A17A-6D47A3EB837E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{BF657D00-BF2C-4E0D-B45C-68D76EB62355}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2689\Agent.exe
FirewallRules: [{3E09C03A-4152-4866-8740-9436C209C174}] => (Allow) D:\Spiele\Steam\SteamApps\common\Banished\Application-steam-x64.exe
FirewallRules: [{229F2905-9307-4961-B2F4-EEB6BE81AAE4}] => (Allow) D:\Spiele\Steam\SteamApps\common\Banished\Application-steam-x64.exe
FirewallRules: [{0E12E7A7-B93C-4E19-B9B7-6095AF6767F1}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{9A7C1B98-4563-4D9C-BAB1-247FB5423C24}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2680\Agent.exe
FirewallRules: [{02077CB4-DEE6-45F8-9434-2E73F92525A4}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{9F8489F4-D6C3-45C7-A2F1-E8D675DAD137}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{E5AD670E-B9DC-4C91-A919-746F255CF8A1}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{D8D7A9A1-B3A6-4931-9103-5F103D19E2C7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{FE67CB5F-9D76-4332-8418-D9684CBAAF40}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{17802179-CA10-493D-89B9-93EDC204577E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{E46B9AE6-F4BC-4DDC-A396-475B489DD224}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{7946B31A-3D86-4532-8C59-B2608D2F5089}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{1BFB075B-45D6-4E2A-85A9-291CD184C82D}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{4963AD04-0B6C-4175-BDC5-D89A44D8BBE8}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{9285C295-959E-446A-A96B-12113128E64F}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{4C509833-4E81-4B7D-9786-A86864E79778}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{C921C817-C4BD-46C0-B066-1FE300EA2322}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{8759A254-2AFE-4E31-912C-C534E6F5F517}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{78C7F32C-24C4-45B6-8186-FD812927A836}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{4DCD9165-0CDD-43E8-89E4-C09A2AFEC4F6}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{AD04575E-BD2A-49DC-8256-0902D8205E44}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{005CA57C-0C3A-47D0-8BF8-250011EEADDB}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{BFA46502-EAF1-45ED-903C-835E538F931F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{86B7401E-8AB8-447F-BEA3-F5DD0CDF19CA}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2638\Agent.exe
FirewallRules: [{E1FA138B-3E50-44DE-AFE2-901A23E91FD9}] => (Allow) D:\Spiele\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{3D77A983-461C-4A06-BDE7-A19AD55B4DD8}] => (Allow) D:\Spiele\Steam\SteamApps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{EF868012-A3C8-4B3F-979D-4580606B6089}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{05C433B1-045D-4649-9FE8-AA33A16A6681}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{E93BF174-DA47-4A48-9243-942B83AF5711}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{74B20526-C704-4197-B388-4CC6E61A0C1C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{65CA368D-AA79-49E2-99A8-3734AD9636F2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{C7F5C892-26AC-492E-AF4B-B91D56F57A5C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{A2BBD7E9-1467-4104-9099-CD811030CD9C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{8BEDEFB4-D4DD-49DB-AF32-02BC67C7F08E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{05890CEC-27A6-4394-90E0-BB59AF447910}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{2B1DAD53-06C0-466F-9E22-55FA34F4F7C1}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{A0FFBA22-BA61-4766-8CA9-F76115D3ABC2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{33EC2108-E97A-4AA1-BD77-5008A89FC222}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{18B2ED39-6F83-4A48-8D68-DC86F3330C75}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{F7B00440-33F6-4F71-976D-3587989F807C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{3303FDE8-CEFC-452C-B250-A1DB46463A31}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{7BB0851D-6A74-42EB-A886-3DD13A42722B}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe
FirewallRules: [{8F403FA8-32ED-4220-B599-037F2278A985}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{D6C0EDC8-5443-432D-B927-A42C0252C284}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe
FirewallRules: [{45D8D20D-013A-4430-8691-DF5DB7BB3C5B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{44B570B6-8F9C-49AC-8F60-141064742DDE}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{B63F0017-2F7E-41CE-B2BB-357A5923027F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3FEAF7FE-3E22-4EC7-A31F-206284E9E1CA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{592D499E-5BC0-476C-A7C2-512F75587FD3}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{F7500448-256C-4CF4-921E-F82C761ED2EB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{9B47F7B1-0285-4904-8D57-52FDC09473D8}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{B9EA31C3-7A77-4730-9AA5-8E0C39EEF0C4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.beta.2581\Agent.exe
FirewallRules: [{B7A18863-2979-473F-980B-236D675FB059}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{B9E397A5-6684-438B-A818-1DF8C61E9B38}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.2380\Agent.exe
FirewallRules: [{D2FFE9DA-6BEA-4700-A64E-D9652A604C6C}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{11C01E43-C6A3-487F-98FC-F8720A67124B}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{CF1307F5-73F8-47A0-8567-8409FD73B1D9}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{44789199-E0E1-4D74-9AA9-927C61BEBF41}] => (Allow) D:\Spiele\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{F2545E51-0152-4CD8-9DDD-4070AF02854B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{6BDCEACE-97D2-4073-9739-91AA434DA97A}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A7CDDBE0-F603-4ED4-BD35-F587C8055EBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [{A093B23A-34C2-4679-B293-D93929427E28}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
FirewallRules: [UDP Query User{09D3B12E-1D64-4720-9738-808B2BB03418}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe] => (Allow) D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe
FirewallRules: [TCP Query User{1E242760-BA70-462B-8804-2B2DD000B617}D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe] => (Allow) D:\spiele\capsule\capsulegames\the witcher ii assassins of kings - pc\bin\witcher2.exe
FirewallRules: [{A7ED935A-F3EC-42F6-BFD7-2BECCA4668BD}] => (Allow) D:\Spiele\Steam\SteamApps\common\Spelunky\Spelunky.exe
FirewallRules: [{A9CBEE33-4680-41F4-B98A-79F7E51310D2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Spelunky\Spelunky.exe
FirewallRules: [{AAE2CD6D-47F5-408E-A3CA-675F1053E35C}] => (Allow) D:\Spiele\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{66A06236-BF4D-4C8A-91D8-1036C1CED3C5}] => (Allow) D:\Spiele\Steam\SteamApps\common\Rogue Legacy\RogueLegacy.exe
FirewallRules: [{5E7713F5-7BBD-4363-9B96-0C255F7D2E3D}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{D623BF2F-54FC-4366-84B2-1CAC8D46AACA}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [UDP Query User{9ECD126D-32EB-4A1F-9489-25F4A7842E71}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [TCP Query User{66FE9211-BCCF-4D46-BFE7-8A2DF6DCC740}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe
FirewallRules: [UDP Query User{34AB8C0E-5E53-439E-945C-0A955A44B729}D:\spiele\steam\steam.exe] => (Allow) D:\spiele\steam\steam.exe
FirewallRules: [TCP Query User{F0114F43-EF09-4068-9E8B-99DE01B36196}D:\spiele\steam\steam.exe] => (Allow) D:\spiele\steam\steam.exe
FirewallRules: [UDP Query User{B520E170-4F76-4BC5-A52D-FB024EEF4451}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [TCP Query User{5C786FE9-C1E2-4B8A-B90E-6B8D503599A0}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [UDP Query User{A9C1AB2D-4EB1-4FFF-BF4F-6A34049E98AA}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{8F8759CE-CB68-4E5B-8674-F698BF887F6D}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [{9F1CCF75-75D5-46FC-B93F-A8C688C0CD17}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{B7600AF9-C7D4-4B5D-81ED-C091D5432314}] => (Allow) C:\Steam\Total War Rome II\launcher\launcher.exe
FirewallRules: [{F9AC4827-BB5D-4839-AA25-366ECF0B46D9}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{6865C0BD-E5FB-4EE7-A14C-6BC7ADC5AF5E}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_specify_properties.bat
FirewallRules: [{CDE2447B-D5E2-4DBE-8C94-F911A02C6F62}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{0B4EBB85-0C1D-4E89-8CE1-83B826995FED}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\benchmarks\benchmark_current_settings.bat
FirewallRules: [{0512736B-D209-4A68-9032-8F1E5EBC5663}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{F19E59A1-2DF8-4F3D-9B53-F93106C90DF2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\data\encyclopedia\how_to_play.html
FirewallRules: [{3130F182-68CD-449D-A804-A997F2261D73}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{0D67BF69-771F-4CC6-B60E-FE209BC5D2AA}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\Shogun2.exe
FirewallRules: [{8BE9C610-6900-4DC0-ABAD-CB4AC37F2188}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\launcher\launcher.exe
FirewallRules: [{27CF53A7-4C2D-447E-B96F-CA6BFAACB147}] => (Allow) D:\Spiele\Steam\SteamApps\common\Total War SHOGUN 2\launcher\launcher.exe
FirewallRules: [{3A2FD336-EDBD-40E1-B06A-24C24C50670E}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{18E3DFF2-8E7F-4F8D-B17D-9CEFEF9410D2}] => (Allow) D:\Spiele\Steam\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [UDP Query User{14B7CD50-9E78-45C7-B322-B12F8E02D065}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{153FC93A-87EC-47B0-9686-645FBEB20530}C:\steam\total war rome ii\rome2.exe] => (Allow) C:\steam\total war rome ii\rome2.exe
FirewallRules: [UDP Query User{9F485F74-1D47-45B3-8AFD-61787933B854}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [TCP Query User{53CA6491-A5DE-489E-9250-55D4291DBB2E}D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe] => (Allow) D:\spiele\steam\steamapps\common\total war rome ii\rome2.exe
FirewallRules: [{D0AB18AF-7B1B-40D8-A1DD-648716E7511F}] => (Allow) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicatorCom.exe
FirewallRules: [{6FD1367F-BE5F-445D-9450-6288750D57E0}] => (Allow) C:\Program Files\HP\HP Officejet 6700\Bin\HPNetworkCommunicator.exe
FirewallRules: [{02753EB8-721E-4F3C-A12C-34C33645F4AA}] => (Allow) C:\Program Files\HP\HP Officejet 6700\Bin\DeviceSetup.exe
FirewallRules: [{8478B8DE-38F7-4608-B84F-15A89CCCF4D7}] => (Allow) C:\Program Files\HP\HP Officejet 6700\bin\SendAFax.exe
FirewallRules: [{8D209263-84F7-4FE6-B69E-868302C09FD2}] => (Allow) C:\Program Files\HP\HP Officejet 6700\bin\DigitalWizards.exe
FirewallRules: [{3827FB5E-BF15-4667-9A6F-FF5A3112D939}] => (Allow) C:\Program Files\HP\HP Officejet 6700\bin\FaxApplications.exe
FirewallRules: [{7DB26FD5-0ED8-4977-B3AE-74BC78F74905}] => (Allow) D:\Spiele\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{B9C5D61E-29CD-43E9-9445-093116FC9FC8}] => (Allow) D:\Spiele\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{20947C9C-C050-4E24-ACE3-A9192112A63A}] => (Allow) D:\Spiele\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{3555AFC8-175C-4A2E-B148-CC93257FCED2}] => (Allow) D:\Spiele\Steam\SteamApps\common\Hitman Absolution\HMA.exe
FirewallRules: [{D0D54C33-B40E-4A4D-BBA6-C10B67E8D7D7}] => (Allow) D:\Spiele\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [{88F4AE15-7AAB-4B72-BEC4-9C72D67F7A88}] => (Allow) D:\Spiele\Steam\SteamApps\common\Deus Ex - Human Revolution\dxhr.exe
FirewallRules: [UDP Query User{10132D8F-7597-4747-9782-0BFFDD89409C}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [TCP Query User{7B5AAE01-E32C-41F9-85E7-F96EAD837CB8}D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe] => (Allow) D:\spiele\steam\steamapps\common\dark souls prepare to die edition\data\data.exe
FirewallRules: [{05E2912F-1FB3-4D2D-B26F-731F9C4972A1}] => (Allow) D:\Spiele\Steam\SteamApps\common\mark_of_the_ninja\bin\game.exe
FirewallRules: [{E9182879-663A-4583-AC43-287F507628A2}] => (Allow) D:\Spiele\Steam\SteamApps\common\mark_of_the_ninja\bin\game.exe
FirewallRules: [{F4512911-456B-4408-9148-46ED2516F2E2}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{DB1D0129-9430-4B7A-A461-18021DEE16BD}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{CB685B40-307C-4D72-82A9-2C5D9C1300FD}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{15548B49-43E5-471A-931A-2699DE5B0C2A}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{95590C03-1640-4DFA-88D5-77BEC88C5CAB}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{62EE0961-BA3D-4D95-9334-21F2BADA5749}] => (Allow) D:\Spiele\Riot Games\League of Legends\lol.launcher.exe
FirewallRules: [{BB5826E7-2A22-4527-A02E-B9188881C9CC}] => (Allow) C:\Program Files (x86)\Dll-Files.com Fixer\DLLFixer.exe
FirewallRules: [{522D8F47-7A69-4C86-8D0A-3B96A5BA7490}] => (Allow) D:\Spiele\Steam\Steam.exe
FirewallRules: [{5A635D4F-1529-4FD1-87C0-0B9C1FAAA69A}] => (Allow) D:\Spiele\Steam\Steam.exe
FirewallRules: [{347A10AF-F98B-4779-B70B-3F025D418E11}] => (Allow) D:\Dateien\uTorrent\uTorrent.exe
FirewallRules: [{CF3A864B-8FB3-4AA1-A68D-7373BD05BB5D}] => (Allow) D:\Dateien\uTorrent\uTorrent.exe
FirewallRules: [{CAE2BF93-7E85-46CB-9CEA-5A4A49612521}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{C72CC072-C3AB-4D93-AE47-0CC79584F85E}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{688477AC-2BC2-432D-BB5F-610B8EE78714}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{7E712ACE-081E-4A1D-A7DB-1DA6AA724707}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{F4ED5D7F-A38F-4D71-BF80-C1EEA149F559}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{DC2D9DB8-5B41-4D64-9AB6-C65C58B1EC1F}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{72C456E5-DAA4-431D-9980-04CFD84D8BE1}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{6CFE4AB8-AACC-4D53-BDE9-4B7B1DC85A49}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe
FirewallRules: [UDP Query User{70BA62A2-5F2E-4255-A782-5AC9112EBBCF}D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe] => (Allow) D:\spiele\starcraft ii - legacy of the void beta\versions\base37164\sc2_x64.exe
FirewallRules: [{C8F2300C-DFA2-4270-8E8F-A07F00192E4C}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{D9575063-E67C-4168-A0F9-EC0C4BA3A36D}] => (Allow) D:\Spiele\Steam\SteamApps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{C3F3315C-1356-4F3B-9F77-FE5B9DE9966A}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{6C2CB2BE-9CBB-42C8-B541-075309D8621E}] => (Allow) D:\Spiele\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{FB27EE1E-1789-4ECE-B224-B3F27B5E82FE}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{D8C55077-E30F-4B93-B5F6-02699B7E744F}] => (Allow) C:\Steam\DayZ\DayZ_BE.exe
FirewallRules: [{0A7AC2B9-D334-4A5F-BAD8-BBBA43FAEF85}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{4645DAC2-F3D9-474A-A7D9-B5F5D59E5881}] => (Allow) D:\Spiele\Steam\SteamApps\common\Crazy Machines 2\cm2.exe
FirewallRules: [{2DF53158-848F-4AA9-A2B1-B2172D1FFA34}] => (Allow) D:\Spiele\Steam\SteamApps\common\Crazy Machines 2\cm2.exe

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (09/22/2015 10:30:27 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 08:03:05 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 08:01:58 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 08:01:54 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 07:42:55 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 07:42:54 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 07:42:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest1". Fehler in Manifest- oder Richtliniendatei "C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest2" in Zeile C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest3.
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\WINDOWS\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_f41f7b285750ef43.manifest.
Komponente 2: C:\WINDOWS\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.10240.16384_none_3bccb1ff6bcd1849.manifest.

Error: (09/22/2015 07:38:15 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: xInsIDE.exe, Version: 0.0.0.0, Zeitstempel: 0x45ff80e2
Name des fehlerhaften Moduls: xInsIDE.exe, Version: 0.0.0.0, Zeitstempel: 0x45ff80e2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000257b
ID des fehlerhaften Prozesses: 0xbf0
Startzeit der fehlerhaften Anwendung: 0xxInsIDE.exe0
Pfad der fehlerhaften Anwendung: xInsIDE.exe1
Pfad des fehlerhaften Moduls: xInsIDE.exe2
Berichtskennung: xInsIDE.exe3
Vollständiger Name des fehlerhaften Pakets: xInsIDE.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: xInsIDE.exe5

Error: (09/22/2015 12:22:55 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: SOL-PC)
Description: Bei der Aktivierung der App „Microsoft.Windows.Cortana_cw5n1h2txyewy!CortanaUI“ ist folgender Fehler aufgetreten: -2144927141. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (09/21/2015 07:57:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: xInsIDE.exe, Version: 0.0.0.0, Zeitstempel: 0x45ff80e2
Name des fehlerhaften Moduls: xInsIDE.exe, Version: 0.0.0.0, Zeitstempel: 0x45ff80e2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000257b
ID des fehlerhaften Prozesses: 0x1f54
Startzeit der fehlerhaften Anwendung: 0xxInsIDE.exe0
Pfad der fehlerhaften Anwendung: xInsIDE.exe1
Pfad des fehlerhaften Moduls: xInsIDE.exe2
Berichtskennung: xInsIDE.exe3
Vollständiger Name des fehlerhaften Pakets: xInsIDE.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: xInsIDE.exe5


Systemfehler:
=============
Error: (09/22/2015 08:03:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (09/22/2015 08:03:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\DIEFAC~1\AppData\Local\Temp\ehdrv.sys

Error: (09/22/2015 08:03:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (09/22/2015 08:03:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\DIEFAC~1\AppData\Local\Temp\ehdrv.sys

Error: (09/22/2015 08:03:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (09/22/2015 08:03:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\DIEFAC~1\AppData\Local\Temp\ehdrv.sys

Error: (09/22/2015 08:03:39 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (09/22/2015 08:03:39 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\DIEFAC~1\AppData\Local\Temp\ehdrv.sys

Error: (09/22/2015 08:03:38 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
%%1275

Error: (09/22/2015 08:03:38 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\DIEFAC~1\AppData\Local\Temp\ehdrv.sys


==================== Speicherinformationen =========================== 

Prozessor: AMD Phenom(tm) II X4 955 Processor
Prozentuale Nutzung des RAM: 44%
Installierter physikalischer RAM: 8188.52 MB
Verfügbarer physikalischer RAM: 4508.34 MB
Summe virtueller Speicher: 16380.52 MB
Verfügbarer virtueller Speicher: 11814.21 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:119.14 GB) (Free:31.3 GB) NTFS
Drive d: () (Fixed) (Total:931.41 GB) (Free:293.95 GB) NTFS
Drive e: (Civilization Beyond Earth) (CDROM) (Total:2.88 GB) (Free:0 GB) UDF

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 6B841FED)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=119.1 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 9DEED671)
Partition 1: (Not Active) - (Size=931.4 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Alt 23.09.2015, 11:54   #15
burningice
/// Malwareteam
 
Malware Befall? - Standard

Malware Befall?



Schritt 1
Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
ATTFilter
closeprocesses:
C:\Users\dieFackel\Downloads\0006-64bit_Win7_Win8_Win81_Win10_R279 - CHIP-Installer.exe
C:\Users\dieFackel\Downloads\Core-Temp-installer.exe
C:\Users\dieFackel\Downloads\LogMeIn Hamachi - CHIP-Installer.exe
C:\Users\dieFackel\Downloads\MemTest - CHIP-Installer.exe
HKLM-x32\...\Run: [] => [X]
Toolbar: HKLM - Kein Name - {318A227B-5E9F-45bd-8999-7F8F10CA4CF5} - Keine Datei
FF NetworkProxy: "autoconfig_url", "data:text/javascript,function%20FindProxyForURL(url%2C%20host)%20%7Bif%20(shExpMatch(url%2C%20'http%3A%2F%2Fwww.rdio.com*')%20%7C%7C%20host%20%3D%3D%20'www.pandora.com'%20%7C%7C%20url.indexOf('play.google.com')%20!%3D%20-1%20%7C%7C%20(url.indexOf('youtube.com%2Fvideoplayback')%20!%3D%20-1%20%26%26%20url.indexOf('%26gcr%3Dus')%20!%3D%20-1%20%26%26%20url.indexOf('%26ptchn')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fext.last.fm*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fsecure.funimation.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fgrooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fretro.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fhtml5.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Flisten.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.grooveshark.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpreview.grooveshark.com*')%20%7C%7C%20url.indexOf('vevo.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fpiki.fm*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fpiki.fm*')%20%7C%7C%20url.indexOf('discoverymedia.com')%20!%3D%20-1%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fdsc.discovery.com%2F*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fsongza.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.daisuki.net*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.mtv.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fmedia.mtvnservices.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fplay.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.spotify.com*')%20%7C%7C%20(url.indexOf('proxmate%3Dactive')%20!%3D%20-1%20%26%26%20url.indexOf('amazonaws.com')%20%3D%3D%20-1)%20%7C%7C%20(url.indexOf('proxmate%3Dus')%20!%3D%20-1)%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.crunchyroll.com*')%20%7C%7C%20shExpMatch(url%2C%20'https%3A%2F%2Faccount.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.beatsmusic.com*')%20%7C%7C%20shExpMatch(url%2C%20'http%3A%2F%2Fwww.iheart.com*')%20%7C%7C%20host%20%3D%3D%20's.hulu.com'%20%7C%7C%20url.indexOf('southparkstudios.com')%20!%3D%20-1)%20%7B%20return%20'PROXY%20nq-us09.personalitycores.com%3A8000%3B%20PROXY%20nq-us08.personalitycores.com%3A8000%3B%20PROXY%20nq-us07.personalitycores.com%3A8000%3B%20PROXY%20nq-us04.personalitycores.com%3A8000%3B%20PROXY%20nq-us05.personalitycores.com%3A8000%3B%20PROXY%20nq-us06.personalitycores.com%3A8000%3B%20PROXY%20nq-us12.personalitycores.com%3A8000%3B%20PROXY%20nq-us11.personalitycores.com%3A8000%3B%20PROXY%20nq-us10.personalitycores.com%3A8000'%3B%7D%20%20else%20%7B%20return%20'DIRECT'%3B%20%7D%7D" 
FF NetworkProxy: "type", 2
removeproxy:
Task: {007FD569-54C3-49A3-8253-0E0F395482D0} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {12D881B8-E734-416A-A028-6015E7EC6595} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG 
Task: {150F6739-4D66-4199-B9E0-4A6036F6D1E3} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {377E7CDC-2A35-4D14-A9D8-49128516DB1A} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {44FE11CF-3C38-40A3-9493-A4A49EA471C3} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {4DA4623F-2143-4DED-8840-199F2039EC86} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG 
Task: {537EDD82-D044-4E4B-A66C-5101874B229E} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5F71DF05-892E-400C-BCFA-20C877FF8FFB} - \ASP -> Keine Datei <==== ACHTUNG
Task: {75DD3EDE-5FD2-4C70-8102-FF1C5D38B12A} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {8928D6C7-7F61-40AF-BCCC-7B0E5D089856} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {E2822C6F-6FA1-4C79-8CBA-E875A3523E86} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F4ED529C-8F47-43CD-92D4-0FB6C947774B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
emptytemp:
         

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.


Schritt 2
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Scan


Frage
Wie verhält sich den System jetzt so? Hat es sich verbessert?

Bitte poste in deiner nächsten Antwort also:
  • Fixlog.txt
  • Frst.txt
  • Addition.txt
  • Antwort auf die Frage
__________________
Mfg,
Rafael

~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~

Unterstütze uns mit einer Spende
......... Lob, Kritik oder Wünsche .........
.......... Folge uns auf Facebook ..........

Antwort

Themen zu Malware Befall?
akamai, browser, converter, crystaldiskinfo, error, firefox, flash player, format, google, grand theft auto, homepage, iexplore.exe, install.exe, installation, logfile, malware, mozilla, officejet, realtek, recuva, registry, rundll, scan, security, software, tcp, teamspeak, updates, windows, yahoo search, zugriff verweigert



Ähnliche Themen: Malware Befall?


  1. möglicher malware - Befall meines PC
    Plagegeister aller Art und deren Bekämpfung - 20.01.2015 (9)
  2. Befall von Malware (zym.tollbahsuburban.com) auf Windows 8 Professional PC
    Plagegeister aller Art und deren Bekämpfung - 26.09.2014 (15)
  3. W7 Malware Befall – Rester löschen
    Log-Analyse und Auswertung - 11.09.2013 (14)
  4. vermuteter Malware Befall
    Log-Analyse und Auswertung - 09.06.2013 (13)
  5. Rootkit/ Malware Befall
    Plagegeister aller Art und deren Bekämpfung - 03.10.2012 (7)
  6. Log-Analyse nach Trojaner/Malware befall (Malware.Trace / Trojan.BHO)
    Log-Analyse und Auswertung - 26.09.2011 (16)
  7. Trojaner Befall - Malware findet nichts
    Log-Analyse und Auswertung - 14.11.2010 (7)
  8. Befall mit Malware. Was tuen?
    Plagegeister aller Art und deren Bekämpfung - 26.09.2010 (1)
  9. Malware Befall 'TR/Witkinat.A.30', 'TR/Spy.Insain.HP' usw.
    Log-Analyse und Auswertung - 16.03.2010 (2)
  10. Malware Defense Befall
    Plagegeister aller Art und deren Bekämpfung - 23.01.2010 (10)
  11. malware defense befall
    Plagegeister aller Art und deren Bekämpfung - 21.01.2010 (9)
  12. Frühzeitige Symptome auf Trojaner/Malware-befall
    Plagegeister aller Art und deren Bekämpfung - 07.11.2009 (20)
  13. Win 98 SE - Ständige Browserabstürze mit HaFlash 9 - Malware-Befall?
    Log-Analyse und Auswertung - 28.02.2009 (6)
  14. Malware-Befall. TR/RKIT/BDS
    Plagegeister aller Art und deren Bekämpfung - 05.12.2008 (4)
  15. backdoor und malware befall
    Plagegeister aller Art und deren Bekämpfung - 04.12.2008 (65)
  16. Trojaner und Malware-Befall
    Log-Analyse und Auswertung - 01.11.2008 (16)
  17. Hilfe!!!! Malware Befall und HT nicht möglich
    Plagegeister aller Art und deren Bekämpfung - 09.06.2005 (1)

Zum Thema Malware Befall? - Hallo liebes Trojaner-Board Team, mein Pc ist seit einiger Zeit langsamer geworden, vor allem Firefox macht Probleme. Videos werden teilweise unglaublich langsam geladen und wenn ich von einem Tab zum - Malware Befall?...
Archiv
Du betrachtest: Malware Befall? auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.