Zurück   Trojaner-Board > Malware entfernen > Plagegeister aller Art und deren Bekämpfung

Plagegeister aller Art und deren Bekämpfung: Win 10: Seltsame Geräusche

Windows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen.

Antwort
Alt 29.12.2015, 20:20   #1
CLamantius
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Hallo,

vor ein paar Tagen habe ich bemerkt, dass mein PC ab und zu ein recht seltsames Ding-Geräusch macht.

Keines das ich schon einmal von Windows gehört hätte wie zum Beispiel das Gebimmel wenn man etwas als Admin ausführt o. Ä. Es hört sich wie die man früher an einer Hotelrezeption hätte, auf die man draufschlagen konnte wenn niemand da war. Es fängt langsam an tierisch zu nerven.

Ich habe schon Avira und Malwarebytes drüberlaufen lassen. Leider ohne Erfolg.

Dieses Forum ist das Einzige, dass mir jetzt noch helfen kann. Ich sage schon einmal danke im Voraus für die Hilfe die ich hoffentlich hier bekommen werde.

Alt 29.12.2015, 21:56   #2
Deathkid535
/// Malwareteam
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche





Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen.

Bitte beachte, dass es ein paar Regeln gibt:
  • Bitte lies meine Posts komplett durch bevor du sie abarbeitest
  • Wenn ein Problem auftauchen sollte, unterbreche deine Arbeit, poste die entstandenen Logs und schildere dieses so genau wie möglich.
  • Bitte kein Crossposting
  • Installiere oder Deinstalliere keine Software ohne Aufforderung
  • Bitte verwende nur die Tools welche hier im Thread erwähnt werden
  • Antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
  • Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen

Ich bin mir nicht sicher, ob das von Malware stammt aber wir können mal schauen. Haten MBAM/Avira Funde? Wenn ja bitte die Logs auch noch posten.

Wir benötigen für eine sinnvolle Analyse zuerst ein FRST-Log.

Schritt # 1: FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Schritt # 2: Bitte Posten
  • Die FRST.txt
  • Die Addition.txt
__________________

__________________

Alt 29.12.2015, 23:29   #3
CLamantius
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Ja, Malware hatte Funde. Das ist die Log-Datei vom Suchlauf.

Code:
ATTFilter
 Malwarebytes Anti-Malware 
www.malwarebytes.org

Suchlaufdatum: 28.12.2015
Suchlaufzeit: 19:17
Protokolldatei: AMWB suchlog.txt
Administrator: Ja

Version: 2.1.8.1057
Malware-Datenbank: v2015.12.28.06
Rootkit-Datenbank: v2015.12.26.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: Ismael

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 418315
Abgelaufene Zeit: 5 Min., 18 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 0
(keine bösartigen Elemente erkannt)

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 6
PUP.Optional.CloudScout, HKLM\SOFTWARE\5da059a482fd494db3f252126fbc3d5b, In Quarantäne, [78fe426874176cca243e5584d72cf40c], 
PUP.Optional.SteamClient, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TREE\SteamClient, Löschen bei Neustart, [e78fefbb6f1ca88eee71dfd77d8501ff], 
PUP.Optional.CloudScout, HKLM\SOFTWARE\WOW6432NODE\5da059a482fd494db3f252126fbc3d5b, In Quarantäne, [14625e4ca8e368ce6200fddcb44ff40c], 
PUP.Optional.TweakBit, HKLM\SOFTWARE\WOW6432NODE\TWEAKBIT\ATUpdaters, In Quarantäne, [ed89b7f3048737ff114b4388a55ed729], 
PUP.Optional.TweakBit, HKLM\SOFTWARE\WOW6432NODE\TWEAKBIT\Google Analytics Package, In Quarantäne, [b2c49317ec9fae88c29c4a819a6957a9], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\{E1527582-8509-4011-B922-29E3FB548882}_is1, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 

Registrierungswerte: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 48
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 

Dateien: 67
PUP.Optional.SteamClient, C:\Users\Ismael\AppData\Roaming\Steam\SteamHelper.exe, In Quarantäne, [581ec7e30a81e74fa7b5fabcf80a629e], 
PUP.Optional.SteamClient, C:\Windows\System32\Tasks\SteamClient, In Quarantäne, [1b5b1e8c6f1c4de9233a06b09e64f010], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\config.ini, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\DNSGERMANIA.cer, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\Info.rtf, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\License.rtf, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\LogoBlack.ico, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\LogoGreen.ico, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\LogoYellow.ico, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\Microsoft.Win32.TaskScheduler.dll, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\unins000.dat, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\unins000.exe, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.DNSUnlocker.BrwsrFlsh, C:\Program Files (x86)\DNS Unlocker\ZonaTools.XPlorerBar.dll, In Quarantäne, [a8ce5a50a3e8af873db6d6b03ac88080], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\manifest.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_background.js, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\craw_window.js, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\css\craw_window.css, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\html\craw_window.html, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\flapper.gif, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_128.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\icon_16.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_close.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_hover.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_maximize.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\images\topbar_floating_button_pressed.png, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\bg\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ca\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\cs\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\da\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\de\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\el\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\en_GB\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\es_419\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\et\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fi\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fil\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\fr\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hi\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hr\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\hu\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\id\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\it\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ja\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ko\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lt\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\lv\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nb\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\nl\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pl\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_BR\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\pt_PT\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ro\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\ru\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sk\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sl\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sr\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\sv\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\th\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\tr\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\uk\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\vi\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_CN\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_locales\zh_TW\messages.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 
PUP.Optional.HijackModifiedExtension, C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\0.1.1.0_0\_metadata\verified_contents.json, In Quarantäne, [294d3971395260d6ed2641802fd58d73], 

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)
         
__________________

Alt 29.12.2015, 23:29   #4
CLamantius
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



FRST.txt

Code:
ATTFilter
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:29-12-2015
durchgeführt von Ismael (Administrator) auf ISMAEL-PC (29-12-2015 23:26:58)
Gestartet von C:\Users\Ismael\Downloads
Geladene Profile: Ismael &  (Verfügbare Profile: Ismael & DefaultAppPool)
Platform: Windows 10 Home Version 1511 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avguard.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\ClientX64\officeclicktorun.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(MICRO-STAR INTERNATIONAL CO., LTD.) C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe
(Microsoft Corporation) C:\Program Files\Microsoft LifeCam\MSCamS64.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
() C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA) C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneCmd.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\SettingSyncHost.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
() C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe
(Valve Corporation) D:\steam\Steam.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.exe
() C:\Program Files (x86)\Drakonia Configurator\hid.exe
(Dropbox, Inc.) C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Dropbox.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Antivirus\avgnt.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe
() C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(GOG.com) C:\Program Files (x86)\GalaxyClient\GalaxyClient Helper.exe
(GamersFirst) C:\Users\Ismael\AppData\Local\GamersFirst\LIVE!\Live.exe
(Microsoft Corporation) C:\Program Files\Windows Sidebar\sidebar.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Microsoft Corporation) C:\Windows\System32\Taskmgr.exe
(Valve Corporation) D:\steam\bin\steamwebhelper.exe
(Microsoft Corporation) C:\Windows\System32\DataExchangeHost.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\AAM Updates Notifier.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsDVDPlayer_3.6.13291.0_x64__8wekyb3d8bbwe\DvdPlayer.UI.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.ZuneVideo_3.6.15731.0_x64__8wekyb3d8bbwe\Video.UI.exe
() C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
() C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1512.47020.0_x64__8wekyb3d8bbwe\Calculator.exe
(Microsoft Corporation) C:\Windows\System32\WWAHost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Program Files\Microsoft Office 15\root\office15\EXCEL.EXE
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(TeamSpeak Systems GmbH) C:\Program Files\TeamSpeak 3 Client\ts3client_win64.exe
(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsAlarms_10.1512.58020.0_x64__8wekyb3d8bbwe\Time.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) D:\steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8492800 2015-06-24] (Realtek Semiconductor)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [444904 2012-09-20] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2771576 2015-12-09] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\WINDOWS\system32\rundll32.exe C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [292848 2014-02-21] (Intel Corporation)
HKLM-x32\...\Run: [LifeCam] => C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe [119152 2010-05-20] (Microsoft Corporation)
HKLM-x32\...\Run: [RoccatIsku] => C:\Program Files (x86)\ROCCAT\Isku Keyboard\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)
HKLM-x32\...\Run: [GamingMouse] => C:\Program Files (x86)\Drakonia Configurator\hid.exe [246784 2012-06-07] ()
HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\Antivirus\avgnt.exe [803200 2015-12-01] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66320 2015-11-23] (Avira Operations GmbH & Co. KG)
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\Run: [NvLedServiceHost] => C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe [87160 2015-12-09] ()
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\Run: [Steam] => D:\steam\steam.exe [3013712 2015-12-14] (Valve Corporation)
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\Run: [GalaxyClient] => C:\Program Files (x86)\GalaxyClient\GalaxyClient.exe [7744568 2015-10-16] (GOG.com)
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\Run: [Dropbox Update] => C:\Users\Ismael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [134512 2015-06-22] (Dropbox, Inc.)
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\Run: [CyberGhost] => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\RunOnce: [Uninstall C:\Users\Ismael\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64] => C:\WINDOWS\system32\cmd.exe /q /c rmdir /s /q "C:\Users\Ismael\AppData\Local\Microsoft\OneDrive\17.3.6201.1019_1\amd64"
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\...\RunOnce: [WAB Migrate] => C:\Program Files\Windows Mail\wab.exe [517632 2015-10-30] (Microsoft Corporation)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll [2015-12-08] (Dropbox, Inc.)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro1 (ErrorConflict)] -> {8BA85C75-763B-4103-94EB-9470F12FE0F7} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro2 (SyncInProgress)] -> {CD55129A-B1A1-438E-A425-CEBC7DC684EE} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-18] (Microsoft Corporation)
ShellIconOverlayIdentifiers-x32: [ SkyDrivePro3 (InSync)] -> {E768CD3B-BDDC-436D-9C13-E1B39CA257B1} => C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-18] (Microsoft Corporation)
Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\CurseClientStartup.ccip [2015-08-15] ()
Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-12-12]
ShortcutTarget: Dropbox.lnk -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GamersFirst LIVE!.lnk [2015-04-10]
ShortcutTarget: GamersFirst LIVE!.lnk -> C:\Users\Ismael\AppData\Local\GamersFirst\LIVE!\Live.exe (GamersFirst)
Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Samsung Magician.lnk [2014-11-21]
ShortcutTarget: Samsung Magician.lnk -> C:\Program Files (x86)\Samsung Magician\Samsung Magician.exe (Samsung Electronics.)
Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Sidebar701.lnk [2015-12-28]
ShortcutTarget: Sidebar701.lnk -> C:\Program Files\Windows Sidebar\sidebar.exe (Microsoft Corporation)
Startup: C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk [2015-12-28]
ShortcutTarget: Tintenwarnungen überwachen - HP Deskjet 2050 J510 series.lnk -> C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\HPStatusBL.dll (Hewlett-Packard Co.)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.1.1
Tcpip\..\Interfaces\{2148e83d-7292-4934-90e5-8a62b6ebabb7}: [DhcpNameServer] 192.168.1.1

Internet Explorer:
==================
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.msn.com/?pc=MSSE
HKU\S-1-5-21-831993325-2952530161-2944430335-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://localoem.msn.com
SearchScopes: HKU\S-1-5-21-831993325-2952530161-2944430335-1000 -> DefaultScope {2C7B6F72-58C2-4A6D-89A3-EAAFC8D0922B} URL = 
SearchScopes: HKU\S-1-5-21-831993325-2952530161-2944430335-1000 -> {2C7B6F72-58C2-4A6D-89A3-EAAFC8D0922B} URL = 
BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\OCHelper.dll [2015-12-18] (Microsoft Corporation)
BHO: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX64\Microsoft Office\Office15\GROOVEEX.DLL [2015-12-18] (Microsoft Corporation)
BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office 15\root\Office15\OCHelper.dll [2015-12-18] (Microsoft Corporation)
BHO-x32: AviraBrowserSafety.BrowserSafety -> {c3c77255-42c0-499f-b664-6e981a0b1647} -> C:\Windows\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
BHO-x32: Microsoft SkyDrive Pro Browser Helper -> {D0498E0A-45B7-42AE-A9AA-ABA463DBD3BF} -> C:\Program Files\Microsoft Office 15\root\Office15\GROOVEEX.DLL [2015-12-18] (Microsoft Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxps://fpdownload.macromedia.com/get/shockwave/cabs/flash/swflash.cab
Handler-x32: abs - {E00957BD-D0E1-4eb9-A025-7743FDC8B27B} - C:\Windows\SysWOW64\mscoree.dll [2015-10-30] (Microsoft Corporation)
Handler-x32: osf - {D924BDC6-C83A-4BD5-90D0-095128A113D1} - C:\Program Files\Microsoft Office 15\root\Office15\MSOSB.DLL [2015-02-03] (Microsoft Corporation)

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_20_0_0_267.dll [2015-12-29] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect64.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_267.dll [2015-12-29] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-02-19] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-10] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-10] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2015-11-03] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL [2014-12-02] (Microsoft Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-12-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.1\npGoogleUpdate3.dll [2015-12-02] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll [2015-09-27] (Adobe Systems Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll [2012-09-20] (Adobe Systems)
FF Plugin-x32: adobe.com/AdobeExManDetect -> C:\Program Files (x86)\Adobe\Adobe Extension Manager CS6\npAdobeExManDetectX86.dll [Keine Datei]

Chrome: 
=======
CHR Plugin: (Widevine Content Decryption Module) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\WidevineCDM\1.4.6.703\_platform_specific\win_x86\widevinecdmadapter.dll => Keine Datei
CHR Plugin: (Shockwave Flash) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\PepperFlash\18.0.0.209\pepflashplayer.dll => Keine Datei
CHR Plugin: (Chrome PDF Viewer) - C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\pdf.dll => Keine Datei
CHR Plugin: (EA Battlefield Heroes Updater) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh\5.0.203.0_0\npBFHUpdater.dll (EA Digital Illusions CE AB)
CHR Plugin: (Adobe Acrobat) - C:\Program Files (x86)\Adobe\Reader 11.0\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)
CHR Plugin: (Battlelog Game Launcher) - C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll (EA Digital Illusions CE AB)
CHR Plugin: (AdobeAAMDetect) - C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\CCM\Utilities\npAdobeAAMDetect32.dll (Adobe Systems)
CHR Plugin: (Google Update) - C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll => Keine Datei
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll (Intel Corporation)
CHR Plugin: (Intel® Identity Protection Technology) - C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll (Intel Corporation)
CHR Plugin: (Java Deployment Toolkit 8.0.310.13) - C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)
CHR Plugin: (Java(TM) Platform SE 8 U31) - C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll (Oracle Corporation)
CHR Plugin: (NVIDIA 3D Vision) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll (NVIDIA Corporation)
CHR Plugin: (NVIDIA 3D VISION) - C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll (NVIDIA Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\Office15\NPSPWRAP.DLL (Microsoft Corporation)
CHR Plugin: (Microsoft Office 2013) - C:\Program Files\Microsoft Office 15\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)
CHR Plugin: (Shockwave Flash) - C:\Windows\SysWOW64\Macromed\Flash\NPSWF32.dll => Keine Datei
CHR Profile: C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Easy Auto Refresh) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aabcgdmkeabbnleenpncegpcngjpnjkc [2015-12-28]
CHR Extension: (BetterTTV) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ajopnjidmegmdimjlfnijceegpefgped [2015-09-05]
CHR Extension: (Battlefield Heroes) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\cehdakiococlfmjcbebbkjkfjhbieknh [2015-03-13]
CHR Extension: (Adblock Plus) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2015-11-24]
CHR Extension: (FrankerFaceZ) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\fadndhdgpmmaapbmfcknlfgcflmmmieb [2015-08-13]
CHR Extension: (LoungeDestroyer) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghahcnmfjfckcedfajbhekgknjdplfcl [2015-12-28]
CHR Extension: (Bing Ban) - C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\Default\Extensions\lojpoaiocmhpagpedbodjlkhncgaacie [2015-08-19]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\Antivirus\avmailc7.exe [948392 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\Antivirus\sched.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\Antivirus\avguard.exe [466408 2015-12-01] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\Antivirus\avwebg7.exe [1418560 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [249624 2015-11-23] (Avira Operations GmbH & Co. KG)
R2 ClickToRunSvc; C:\Program Files\Microsoft Office 15\ClientX64\OfficeClickToRun.exe [2802360 2015-11-24] (Microsoft Corporation)
S3 GalaxyClientService; C:\Program Files (x86)\GalaxyClient\GalaxyClientService.exe [1616440 2015-10-16] (GOG.com)
S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [7184440 2015-12-10] (GOG.com)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1156216 2015-12-09] (NVIDIA Corporation)
R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2015-11-03] (Hi-Rez Studios) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-02-19] (Intel Corporation)
S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1133880 2015-06-18] (Malwarebytes Corporation)
R2 MSI_Trigger_Service; C:\Program Files (x86)\MSI\MSITrigger\MSI_Trigger_Service.exe [30240 2013-09-26] (MICRO-STAR INTERNATIONAL CO., LTD.)
R2 nTuneService; C:\Program Files (x86)\NVIDIA Corporation\nTune\nTuneService.exe [278336 2011-09-19] (NVIDIA)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1872504 2015-12-09] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [8185464 2015-12-09] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [6477432 2015-12-09] (NVIDIA Corporation)
S3 Origin Client Service; D:\origin\OriginClientService.exe [2099720 2015-11-20] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76152 2015-11-01] ()
S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Adobe Systems Incorporated) [Datei ist nicht signiert]
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [364464 2015-10-30] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [24864 2015-10-30] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [135880 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [146696 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [35488 2015-12-01] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [73032 2015-12-01] (Avira Operations GmbH & Co. KG)
R3 ikbevent; C:\Windows\System32\DRIVERS\ikbevent.sys [22216 2014-02-03] ()
R3 imsevent; C:\Windows\System32\DRIVERS\imsevent.sys [22728 2014-02-03] ()
R3 ISCT; C:\Windows\System32\drivers\ISCTD.sys [44744 2014-02-03] ()
R3 MBAMProtector; C:\WINDOWS\system32\drivers\mbam.sys [25816 2015-06-18] (Malwarebytes Corporation)
S3 MBAMWebAccessControl; C:\WINDOWS\system32\drivers\mwac.sys [64216 2015-06-18] (Malwarebytes Corporation)
R3 MEIx64; C:\Windows\system32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)
R3 nvoclk64; C:\Windows\system32\DRIVERS\nvoclk64.sys [42088 2009-09-15] (NVIDIA Corp.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19576 2015-12-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [50472 2015-08-11] (NVIDIA Corporation)
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [589824 2015-10-30] (Realtek                                            )
S3 WdBoot; C:\Windows\system32\drivers\WdBoot.sys [44568 2015-10-30] (Microsoft Corporation)
S3 WdFilter; C:\Windows\system32\drivers\WdFilter.sys [293216 2015-10-30] (Microsoft Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [118112 2015-10-30] (Microsoft Corporation)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-29 23:26 - 2015-12-29 23:27 - 00029544 _____ C:\Users\Ismael\Downloads\FRST.txt
2015-12-29 23:26 - 2015-12-29 23:26 - 02370560 _____ (Farbar) C:\Users\Ismael\Downloads\FRST64.exe
2015-12-29 11:59 - 2015-12-29 12:44 - 00008566 _____ C:\Users\Ismael\Desktop\trade up.xlsx
2015-12-29 11:59 - 2015-12-29 11:59 - 00000165 ____H C:\Users\Ismael\Desktop\~$trade up.xlsx
2015-12-28 21:12 - 2015-12-28 21:12 - 00000946 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Champions.lnk
2015-12-28 21:00 - 2015-12-28 21:00 - 00230925 _____ C:\Users\Ismael\Downloads\FU1D2GPH9XPXL635617DBQ26CB535Y.pdf
2015-12-28 20:52 - 2015-12-28 20:52 - 00000812 _____ C:\Users\Ismael\Downloads\Bravery_DIE CANCER_Orianna_28.12.2015.json
2015-12-26 16:02 - 2015-12-26 16:02 - 00000202 _____ C:\Users\Ismael\Desktop\Apotheon.url
2015-12-23 17:16 - 2015-12-23 17:16 - 00002212 _____ C:\Users\Public\Desktop\3D Vision Photo Viewer.lnk
2015-12-23 17:16 - 2015-12-16 15:19 - 00103216 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2015-12-23 17:15 - 2015-12-23 17:15 - 00000000 ____D C:\WINDOWS\LastGood.Tmp
2015-12-23 17:15 - 2015-12-16 17:59 - 42976888 _____ C:\WINDOWS\system32\nvcompiler.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 37608568 _____ C:\WINDOWS\SysWOW64\nvcompiler.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 31098488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglv64.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 24923768 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglv32.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 21131424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvopencl.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 20672376 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 17568432 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvopencl.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 17164160 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 17104016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvd3dumx.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 02560816 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 02214192 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 01915512 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436143.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 01564976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436143.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00938104 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00872056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00786688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFTH264.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00784640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncMFThevc.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00735024 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00681592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00632336 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFTH264.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00630592 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncMFThevc.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00601936 _____ C:\WINDOWS\system32\nvmcumd.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00541000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvumdshimx.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00445728 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvumdshim.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00416560 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00378784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00376440 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvDecMFTMjpeg.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00370992 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00339760 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvDecMFTMjpeg.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00316960 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00206968 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00194680 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00175368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvinitx.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00153208 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvinit.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00151184 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvoglshim64.dll
2015-12-23 17:15 - 2015-12-16 17:59 - 00128696 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvoglshim32.dll
2015-12-23 17:15 - 2015-12-16 15:54 - 00523384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshext.dll
2015-12-23 17:15 - 2015-12-16 15:54 - 00075056 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nv3dappshextr.dll
2015-12-23 17:08 - 2015-12-09 02:51 - 00111520 _____ C:\WINDOWS\system32\NvRtmpStreamer64.dll
2015-12-22 21:07 - 2015-12-25 19:49 - 00000410 _____ C:\Users\Ismael\Desktop\gedanenspeile.txt
2015-12-19 14:32 - 2015-12-19 14:32 - 00078522 _____ C:\Users\Ismael\Desktop\Fragebogenauswertungv7.xlsx
2015-12-19 14:06 - 2015-12-19 14:06 - 00077881 _____ C:\Users\Ismael\Desktop\Fragebogenauswertungv6.xlsx
2015-12-19 13:17 - 2015-12-19 13:17 - 00071256 _____ C:\Users\Ismael\Desktop\Fragebogenauswertungv5.xlsx
2015-12-19 10:53 - 2015-12-19 10:53 - 00069455 _____ C:\Users\Ismael\Desktop\Fragebogenauswertungv4.xlsx
2015-12-18 23:58 - 2015-12-18 23:58 - 00068366 _____ C:\Users\Ismael\Desktop\Fragebogenauswertungv3.xlsx
2015-12-18 20:25 - 2015-12-18 20:25 - 00062439 _____ C:\Users\Ismael\Desktop\Fragebogenauswertungv2.xlsx
2015-12-18 17:42 - 2015-12-07 05:57 - 00973664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LicenseManager.dll
2015-12-18 17:42 - 2015-12-07 05:55 - 01281376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LicenseManager.dll
2015-12-18 17:42 - 2015-12-07 05:49 - 00412512 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifitask.exe
2015-12-18 17:42 - 2015-12-07 05:48 - 02544256 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 02180136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 01299504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 01155944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 01118208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 01092456 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfplat.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 01065080 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 01020096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfsrcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00983464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00884256 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00823264 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00794888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfds.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00696160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupEngine.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00670928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfds.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00526856 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfreadwrite.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00502112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupEngine.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00498448 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFCaptureEngine.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00462760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfreadwrite.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00450904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFCaptureEngine.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00337840 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFPlay.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00289248 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFPlay.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00245848 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfps.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00115040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupApi.dll
2015-12-18 17:42 - 2015-12-07 05:48 - 00084832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NetSetupApi.dll
2015-12-18 17:42 - 2015-12-07 05:47 - 00925064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfplat.dll
2015-12-18 17:42 - 2015-12-07 05:47 - 00898184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfsrcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:47 - 00716928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2015-12-18 17:42 - 2015-12-07 05:47 - 00116720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfps.dll
2015-12-18 17:42 - 2015-12-07 05:46 - 03671888 _____ (Microsoft Corporation) C:\WINDOWS\system32\iertutil.dll
2015-12-18 17:42 - 2015-12-07 05:46 - 02919320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iertutil.dll
2015-12-18 17:42 - 2015-12-07 05:45 - 00264544 _____ (Microsoft Corporation) C:\WINDOWS\system32\ContentDeliveryManager.Utilities.dll
2015-12-18 17:42 - 2015-12-07 05:15 - 01035776 _____ (Microsoft Corporation) C:\WINDOWS\system32\XboxNetApiSvc.dll
2015-12-18 17:42 - 2015-12-07 05:15 - 00075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.XboxLive.ProxyStub.dll
2015-12-18 17:42 - 2015-12-07 05:10 - 00824320 _____ (Microsoft Corporation) C:\WINDOWS\system32\WpcWebFilter.dll
2015-12-18 17:42 - 2015-12-07 05:09 - 00133120 _____ (Microsoft Corporation) C:\WINDOWS\system32\flvprophandler.dll
2015-12-18 17:42 - 2015-12-07 05:09 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanagerprecheck.dll
2015-12-18 17:42 - 2015-12-07 05:09 - 00030208 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorageUsage.dll
2015-12-18 17:42 - 2015-12-07 05:07 - 16984064 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2015-12-18 17:42 - 2015-12-07 05:07 - 00134656 _____ (Microsoft Corporation) C:\WINDOWS\system32\wificonnapi.dll
2015-12-18 17:42 - 2015-12-07 05:07 - 00077312 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2015-12-18 17:42 - 2015-12-07 05:06 - 00572928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WpcWebFilter.dll
2015-12-18 17:42 - 2015-12-07 05:06 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2015-12-18 17:42 - 2015-12-07 05:06 - 00199168 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2015-12-18 17:42 - 2015-12-07 05:05 - 00192000 _____ (Microsoft Corporation) C:\WINDOWS\system32\provisioningcsp.dll
2015-12-18 17:42 - 2015-12-07 05:05 - 00036864 _____ (Microsoft Corporation) C:\WINDOWS\system32\BackgroundTransferHost.exe
2015-12-18 17:42 - 2015-12-07 05:04 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshost.dll
2015-12-18 17:42 - 2015-12-07 05:04 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\provtool.exe
2015-12-18 17:42 - 2015-12-07 05:03 - 13017600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2015-12-18 17:42 - 2015-12-07 05:02 - 00269824 _____ (Microsoft Corporation) C:\WINDOWS\system32\moshostcore.dll
2015-12-18 17:42 - 2015-12-07 05:02 - 00161280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2015-12-18 17:42 - 2015-12-07 05:01 - 00543232 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2015-12-18 17:42 - 2015-12-07 05:01 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BackgroundTransferHost.exe
2015-12-18 17:42 - 2015-12-07 05:00 - 00618496 _____ (Microsoft Corporation) C:\WINDOWS\system32\StorSvc.dll
2015-12-18 17:42 - 2015-12-07 05:00 - 00323072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSFlacDecoder.dll
2015-12-18 17:42 - 2015-12-07 05:00 - 00210432 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmcsp.dll
2015-12-18 17:42 - 2015-12-07 05:00 - 00203776 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetSetupSvc.dll
2015-12-18 17:42 - 2015-12-07 04:59 - 00558080 _____ (Microsoft Corporation) C:\WINDOWS\system32\MBMediaManager.dll
2015-12-18 17:42 - 2015-12-07 04:59 - 00292352 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2015-12-18 17:42 - 2015-12-07 04:59 - 00286208 _____ (Microsoft Corporation) C:\WINDOWS\system32\provhandlers.dll
2015-12-18 17:42 - 2015-12-07 04:59 - 00165376 _____ (Microsoft Corporation) C:\WINDOWS\system32\provdatastore.dll
2015-12-18 17:42 - 2015-12-07 04:58 - 24601600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2015-12-18 17:42 - 2015-12-07 04:58 - 00459776 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapConfiguration.dll
2015-12-18 17:42 - 2015-12-07 04:57 - 00409088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2015-12-18 17:42 - 2015-12-07 04:57 - 00387072 _____ (Microsoft Corporation) C:\WINDOWS\system32\qdvd.dll
2015-12-18 17:42 - 2015-12-07 04:57 - 00270848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSFlacDecoder.dll
2015-12-18 17:42 - 2015-12-07 04:56 - 00607232 _____ (Microsoft Corporation) C:\WINDOWS\system32\wcmsvc.dll
2015-12-18 17:42 - 2015-12-07 04:56 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmkvsrcsnk.dll
2015-12-18 17:42 - 2015-12-07 04:55 - 07979008 _____ (Microsoft Corporation) C:\WINDOWS\system32\mos.dll
2015-12-18 17:42 - 2015-12-07 04:55 - 00346112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapConfiguration.dll
2015-12-18 17:42 - 2015-12-07 04:54 - 00850432 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsStore.dll
2015-12-18 17:42 - 2015-12-07 04:54 - 00569856 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\qdvd.dll
2015-12-18 17:42 - 2015-12-07 04:53 - 19339264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2015-12-18 17:42 - 2015-12-07 04:53 - 00381952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmkvsrcsnk.dll
2015-12-18 17:42 - 2015-12-07 04:51 - 01318912 _____ (Microsoft Corporation) C:\WINDOWS\system32\wifinetworkmanager.dll
2015-12-18 17:42 - 2015-12-07 04:51 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapibase.dll
2015-12-18 17:42 - 2015-12-07 04:50 - 01131520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.Audio.dll
2015-12-18 17:42 - 2015-12-07 04:49 - 01105920 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.Audio.dll
2015-12-18 17:42 - 2015-12-07 04:48 - 06297088 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mos.dll
2015-12-18 17:42 - 2015-12-07 04:47 - 03428864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2015-12-18 17:42 - 2015-12-07 04:45 - 02582016 _____ (Microsoft Corporation) C:\WINDOWS\system32\MFMediaEngine.dll
2015-12-18 17:42 - 2015-12-07 04:45 - 00900608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Networking.BackgroundTransfer.dll
2015-12-18 17:42 - 2015-12-07 04:45 - 00683008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Networking.BackgroundTransfer.dll
2015-12-18 17:42 - 2015-12-07 04:44 - 02796032 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2015-12-18 17:42 - 2015-12-07 04:43 - 02598400 _____ (Microsoft Corporation) C:\WINDOWS\system32\NetworkMobileSettings.dll
2015-12-18 17:42 - 2015-12-07 04:43 - 00931328 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSMPEG2ENC.DLL
2015-12-18 17:42 - 2015-12-07 04:41 - 02061824 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MFMediaEngine.dll
2015-12-18 17:42 - 2015-12-07 04:40 - 03593216 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2015-12-18 17:42 - 2015-12-07 04:40 - 01995776 _____ (Microsoft Corporation) C:\WINDOWS\system32\ActiveSyncProvider.dll
2015-12-18 17:42 - 2015-12-07 04:40 - 01706496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ActiveSyncProvider.dll
2015-12-18 17:42 - 2015-12-07 04:39 - 00764928 _____ (Microsoft Corporation) C:\WINDOWS\system32\fveapi.dll
2015-12-18 17:42 - 2015-12-07 04:38 - 00871936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSMPEG2ENC.DLL
2015-12-18 17:42 - 2015-12-07 04:33 - 00375296 _____ (Microsoft Corporation) C:\WINDOWS\system32\MDEServer.exe
2015-12-18 17:42 - 2015-12-07 04:32 - 00126464 _____ (Microsoft Corporation) C:\WINDOWS\system32\dialserver.dll
2015-12-18 16:02 - 2015-12-20 16:35 - 00206056 _____ C:\Users\Ismael\Desktop\Fragebogenauswertung.xlsx
2015-12-16 02:00 - 2015-12-16 02:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Witcher® 3 - Wild Hunt [GOG.com]
2015-12-13 21:30 - 2015-12-13 21:30 - 00000202 _____ C:\Users\Ismael\Desktop\Devilian.url
2015-12-12 17:06 - 2015-12-12 17:06 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2015-12-09 13:20 - 2015-12-01 08:12 - 02152800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ntfs.sys
2015-12-09 13:20 - 2015-11-24 13:07 - 01817160 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntdll.dll
2015-12-09 13:20 - 2015-11-24 12:06 - 01540768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ntdll.dll
2015-12-09 13:20 - 2015-11-24 11:26 - 01399224 _____ (Microsoft Corporation) C:\WINDOWS\system32\user32.dll
2015-12-09 13:20 - 2015-11-24 11:01 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.tlb
2015-12-09 13:20 - 2015-11-24 10:54 - 00007680 _____ (Microsoft Corporation) C:\WINDOWS\system32\readingviewresources.dll
2015-12-09 13:20 - 2015-11-24 10:53 - 00115200 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2015-12-09 13:20 - 2015-11-24 10:45 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\wshrm.dll
2015-12-09 13:20 - 2015-11-24 10:37 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\rmcast.sys
2015-12-09 13:20 - 2015-11-24 10:26 - 01337240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\user32.dll
2015-12-09 13:20 - 2015-11-24 10:19 - 00182784 _____ (Microsoft Corporation) C:\WINDOWS\system32\shutdownux.dll
2015-12-09 13:20 - 2015-11-24 10:12 - 00523776 _____ (Microsoft Corporation) C:\WINDOWS\system32\catsrvut.dll
2015-12-09 13:20 - 2015-11-24 09:58 - 00604672 _____ (Microsoft Corporation) C:\WINDOWS\system32\vbscript.dll
2015-12-09 13:20 - 2015-11-24 09:55 - 01393664 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2015-12-09 13:20 - 2015-11-24 09:54 - 02756096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.tlb
2015-12-09 13:20 - 2015-11-24 09:52 - 01717248 _____ (Microsoft Corporation) C:\WINDOWS\system32\GdiPlus.dll
2015-12-09 13:20 - 2015-11-24 09:49 - 01648640 _____ (Microsoft Corporation) C:\WINDOWS\system32\comsvcs.dll
2015-12-09 13:20 - 2015-11-24 09:14 - 00415744 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\catsrvut.dll
2015-12-09 13:20 - 2015-11-24 09:03 - 00503296 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\vbscript.dll
2015-12-09 13:20 - 2015-11-24 08:59 - 01467392 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\GdiPlus.dll
2015-12-09 13:20 - 2015-11-24 08:57 - 01328128 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\comsvcs.dll
2015-12-09 13:20 - 2015-11-24 08:35 - 22393856 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2015-12-09 13:20 - 2015-11-24 08:29 - 02352128 _____ (Microsoft Corporation) C:\WINDOWS\system32\authui.dll
2015-12-09 13:20 - 2015-11-24 08:23 - 13381120 _____ (Microsoft Corporation) C:\WINDOWS\system32\ieframe.dll
2015-12-09 13:20 - 2015-11-24 08:11 - 18678272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2015-12-09 13:20 - 2015-11-24 08:08 - 12125184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ieframe.dll
2015-12-09 13:20 - 2015-11-24 08:04 - 02155008 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\authui.dll
2015-12-08 13:14 - 2015-12-08 13:14 - 00000161 _____ C:\Users\Ismael\Desktop\Neues Textdokument.txt
2015-12-08 11:52 - 2015-12-08 11:52 - 01005697 _____ C:\Users\Ismael\Desktop\IMG-20151101-WA0003.jpeg
2015-12-08 11:52 - 2015-12-08 11:51 - 00989731 _____ C:\Users\Ismael\Desktop\IMG-20151101-WA0005.jpeg
2015-12-08 11:52 - 2015-12-08 11:50 - 00925859 _____ C:\Users\Ismael\Desktop\IMG-20151101-WA0001.jpeg
2015-12-05 19:52 - 2015-12-05 19:52 - 00000202 _____ C:\Users\Ismael\Desktop\Just Cause 3.url
2015-12-04 07:30 - 2015-12-04 07:30 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2015-12-03 14:37 - 2015-12-03 14:37 - 00000092 _____ C:\Users\Ismael\AppData\Roaming\Control System_Settings.ini
2015-12-03 14:35 - 2015-12-04 06:47 - 00000000 ____D C:\Users\Ismael\AppData\Local\Sidebar7
2015-12-03 14:35 - 2015-12-03 14:35 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\8GadgetPack
2015-12-03 14:24 - 2015-12-03 14:24 - 00034328 _____ (Sysinternals - www.sysinternals.com) C:\WINDOWS\system32\Drivers\PROCEXP152.SYS
2015-12-03 13:25 - 2015-11-22 11:47 - 07476576 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2015-12-03 13:25 - 2015-11-22 11:47 - 02653816 _____ C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-03 13:25 - 2015-11-22 11:41 - 01859448 _____ C:\WINDOWS\SysWOW64\CoreUIComponents.dll
2015-12-03 13:25 - 2015-11-22 11:41 - 00026408 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuauclt.exe
2015-12-03 13:25 - 2015-11-22 11:35 - 00538632 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWanAPI.dll
2015-12-03 13:25 - 2015-11-22 11:34 - 00080600 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwapi.dll
2015-12-03 13:25 - 2015-11-22 11:33 - 00095072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\sdstor.sys
2015-12-03 13:25 - 2015-11-22 11:33 - 00058408 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.dll
2015-12-03 13:25 - 2015-11-22 11:33 - 00051680 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsUtilsV2.dll
2015-12-03 13:25 - 2015-11-22 11:30 - 00604928 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2015-12-03 13:25 - 2015-11-22 11:30 - 00161632 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\ksecpkg.sys
2015-12-03 13:25 - 2015-11-22 11:26 - 00431232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWanAPI.dll
2015-12-03 13:25 - 2015-11-22 11:25 - 00063528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wwapi.dll
2015-12-03 13:25 - 2015-11-22 11:24 - 02772584 _____ (Microsoft Corporation) C:\WINDOWS\system32\d3d11.dll
2015-12-03 13:25 - 2015-11-22 11:20 - 00795840 _____ (Microsoft Corporation) C:\WINDOWS\system32\generaltel.dll
2015-12-03 13:25 - 2015-11-22 11:19 - 00440160 _____ (Microsoft Corporation) C:\WINDOWS\system32\services.exe
2015-12-03 13:25 - 2015-11-22 11:14 - 02185840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d3d11.dll
2015-12-03 13:25 - 2015-11-22 11:00 - 00089088 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsCSP.dll
2015-12-03 13:25 - 2015-11-22 11:00 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosResource.dll
2015-12-03 13:25 - 2015-11-22 10:57 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MapControls.dll
2015-12-03 13:25 - 2015-11-22 10:57 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCoreRes.dll
2015-12-03 13:25 - 2015-11-22 10:57 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosTrace.dll
2015-12-03 13:25 - 2015-11-22 10:57 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-MosHost.dll
2015-12-03 13:25 - 2015-11-22 10:56 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2015-12-03 13:25 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosHostClient.dll
2015-12-03 13:25 - 2015-11-22 10:56 - 00064000 _____ (Microsoft Corporation) C:\WINDOWS\system32\ihvrilproxy.dll
2015-12-03 13:25 - 2015-11-22 10:56 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\rilproxy.dll
2015-12-03 13:25 - 2015-11-22 10:55 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManagerProxy.dll
2015-12-03 13:25 - 2015-11-22 10:55 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvcProxy.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\system32\ETWCoreUIComponentsResources.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00117248 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\capimg.sys
2015-12-03 13:25 - 2015-11-22 10:54 - 00092160 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorsNativeApi.V2.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanprotdim.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00044032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wsplib.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00032256 _____ (Microsoft Corporation) C:\WINDOWS\system32\wups2.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\WordBreakers.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\nativemap.dll
2015-12-03 13:25 - 2015-11-22 10:54 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlStringsRes.dll
2015-12-03 13:25 - 2015-11-22 10:52 - 00069632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininetlui.dll
2015-12-03 13:25 - 2015-11-22 10:52 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthTokenBrokerExt.dll
2015-12-03 13:25 - 2015-11-22 10:52 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\jsproxy.dll
2015-12-03 13:25 - 2015-11-22 10:52 - 00028672 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapsupdatetask.dll
2015-12-03 13:25 - 2015-11-22 10:51 - 00157184 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmcertinst.exe
2015-12-03 13:25 - 2015-11-22 10:51 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapsBtSvc.dll
2015-12-03 13:25 - 2015-11-22 10:51 - 00072704 _____ (Microsoft Corporation) C:\WINDOWS\system32\MosStorage.dll
2015-12-03 13:25 - 2015-11-22 10:51 - 00042496 _____ (Microsoft Corporation) C:\WINDOWS\system32\mapstoasttask.dll
2015-12-03 13:25 - 2015-11-22 10:51 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\system32\iernonce.dll
2015-12-03 13:25 - 2015-11-22 10:50 - 00074240 _____ (Microsoft Corporation) C:\WINDOWS\system32\mssign32.dll
2015-12-03 13:25 - 2015-11-22 10:49 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeviceCensus.exe
2015-12-03 13:25 - 2015-11-22 10:49 - 00066560 _____ (Microsoft Corporation) C:\WINDOWS\system32\iesetup.dll
2015-12-03 13:25 - 2015-11-22 10:49 - 00052224 _____ (Microsoft Corporation) C:\WINDOWS\system32\Wwanpref.dll
2015-12-03 13:25 - 2015-11-22 10:48 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosResource.dll
2015-12-03 13:25 - 2015-11-22 10:46 - 00248832 _____ (Microsoft Corporation) C:\WINDOWS\system32\UserMgrProxy.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 06572032 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanmm.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00638464 _____ (Microsoft Corporation) C:\WINDOWS\system32\enterprisecsps.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00264192 _____ (Nokia) C:\WINDOWS\system32\NmaDirect.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00220672 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2015-12-03 13:25 - 2015-11-22 10:45 - 00110592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MapControls.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00073728 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwancfg.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00036352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCoreRes.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosTrace.dll
2015-12-03 13:25 - 2015-11-22 10:45 - 00009728 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Microsoft-Windows-MosHost.dll
2015-12-03 13:25 - 2015-11-22 10:44 - 01268736 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2015-12-03 13:25 - 2015-11-22 10:44 - 00048640 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosHostClient.dll
2015-12-03 13:25 - 2015-11-22 10:43 - 00704000 _____ (Microsoft Corporation) C:\WINDOWS\system32\CellularAPI.dll
2015-12-03 13:25 - 2015-11-22 10:43 - 00382464 _____ (Microsoft Corporation) C:\WINDOWS\system32\iedkcs32.dll
2015-12-03 13:25 - 2015-11-22 10:43 - 00342016 _____ (Microsoft Corporation) C:\WINDOWS\system32\SensorService.dll
2015-12-03 13:25 - 2015-11-22 10:43 - 00041984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthManagerProxy.dll
2015-12-03 13:25 - 2015-11-22 10:42 - 00589312 _____ (Microsoft Corporation) C:\WINDOWS\system32\MbaeApi.dll
2015-12-03 13:25 - 2015-11-22 10:42 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\system32\mdmmigrator.dll
2015-12-03 13:25 - 2015-11-22 10:42 - 00138240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ETWCoreUIComponentsResources.dll
2015-12-03 13:25 - 2015-11-22 10:42 - 00024064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WordBreakers.dll
2015-12-03 13:25 - 2015-11-22 10:42 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlStringsRes.dll
2015-12-03 13:25 - 2015-11-22 10:41 - 01814528 _____ (Microsoft Corporation) C:\WINDOWS\system32\pnidui.dll
2015-12-03 13:25 - 2015-11-22 10:41 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\system32\XblAuthManager.dll
2015-12-03 13:25 - 2015-11-22 10:40 - 01056256 _____ (Microsoft Corporation) C:\WINDOWS\system32\JpMapControl.dll
2015-12-03 13:25 - 2015-11-22 10:40 - 00465920 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwanconn.dll
2015-12-03 13:25 - 2015-11-22 10:40 - 00065536 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininetlui.dll
2015-12-03 13:25 - 2015-11-22 10:40 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\XblAuthTokenBrokerExt.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 02126848 _____ (Microsoft Corporation) C:\WINDOWS\system32\inetcpl.cpl
2015-12-03 13:25 - 2015-11-22 10:39 - 01713664 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00988160 _____ (Microsoft Corporation) C:\WINDOWS\system32\NMAA.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00957440 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00938496 _____ (Microsoft Corporation) C:\WINDOWS\system32\MapControlCore.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\modernexecserver.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00783360 _____ (Microsoft Corporation) C:\WINDOWS\system32\msfeeds.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00114688 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinelsa.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapsBtSvc.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00058368 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MosStorage.dll
2015-12-03 13:25 - 2015-11-22 10:39 - 00045568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jsproxy.dll
2015-12-03 13:25 - 2015-11-22 10:38 - 01223168 _____ (Microsoft Corporation) C:\WINDOWS\system32\Unistore.dll
2015-12-03 13:25 - 2015-11-22 10:38 - 01212928 _____ (Microsoft Corporation) C:\WINDOWS\system32\wwansvc.dll
2015-12-03 13:25 - 2015-11-22 10:38 - 00912384 _____ (Microsoft Corporation) C:\WINDOWS\system32\usermgr.dll
2015-12-03 13:25 - 2015-11-22 10:38 - 00320000 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptngc.dll
2015-12-03 13:25 - 2015-11-22 10:38 - 00060928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mssign32.dll
2015-12-03 13:25 - 2015-11-22 10:37 - 02624512 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputService.dll
2015-12-03 13:25 - 2015-11-22 10:37 - 01395200 _____ (Microsoft Corporation) C:\WINDOWS\system32\UIAutomationCore.dll
2015-12-03 13:25 - 2015-11-22 10:37 - 00515584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2015-12-03 13:25 - 2015-11-22 10:36 - 01042432 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingOnlineServices.dll
2015-12-03 13:25 - 2015-11-22 10:34 - 02843136 _____ (Microsoft Corporation) C:\WINDOWS\system32\cdp.dll
2015-12-03 13:25 - 2015-11-22 10:34 - 00345600 _____ (Microsoft Corporation) C:\WINDOWS\system32\TextInputFramework.dll
2015-12-03 13:25 - 2015-11-22 10:34 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Core.TextInput.dll
2015-12-03 13:25 - 2015-11-22 10:34 - 00166912 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UserMgrProxy.dll
2015-12-03 13:25 - 2015-11-22 10:34 - 00108544 _____ (Microsoft Corporation) C:\WINDOWS\system32\InputLocaleManager.dll
2015-12-03 13:25 - 2015-11-22 10:34 - 00075264 _____ (Microsoft Corporation) C:\WINDOWS\system32\EditBufferTestHook.dll
2015-12-03 13:25 - 2015-11-22 10:33 - 00205824 _____ (Nokia) C:\WINDOWS\SysWOW64\NmaDirect.dll
2015-12-03 13:25 - 2015-11-22 10:32 - 00340480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToDevice.dll
2015-12-03 13:25 - 2015-11-22 10:32 - 00334848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iedkcs32.dll
2015-12-03 13:25 - 2015-11-22 10:31 - 07199232 _____ (Microsoft Corporation) C:\WINDOWS\system32\BingMaps.dll
2015-12-03 13:25 - 2015-11-22 10:31 - 00470528 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MbaeApi.dll
2015-12-03 13:25 - 2015-11-22 10:31 - 00416768 _____ (Microsoft Corporation) C:\WINDOWS\system32\dmenrollengine.dll
2015-12-03 13:25 - 2015-11-22 10:29 - 00800768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\JpMapControl.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 01734656 _____ (Microsoft Corporation) C:\WINDOWS\system32\urlmon.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 01443328 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRHInproc.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 01387008 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 00948224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Unistore.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 00870400 _____ (Microsoft Corporation) C:\WINDOWS\system32\wpncore.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 00793600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SRH.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 00784896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NMAA.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 00686592 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msfeeds.dll
2015-12-03 13:25 - 2015-11-22 10:28 - 00100864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinelsa.dll
2015-12-03 13:25 - 2015-11-22 10:27 - 03993600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2015-12-03 13:25 - 2015-11-22 10:27 - 02049024 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\inetcpl.cpl
2015-12-03 13:25 - 2015-11-22 10:27 - 01944576 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputService.dll
2015-12-03 13:25 - 2015-11-22 10:27 - 00711680 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MapControlCore.dll
2015-12-03 13:25 - 2015-11-22 10:27 - 00241664 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptngc.dll
2015-12-03 13:25 - 2015-11-22 10:27 - 00160768 _____ (Microsoft Corporation) C:\WINDOWS\system32\enrollmentapi.dll
2015-12-03 13:25 - 2015-11-22 10:26 - 03355136 _____ (Microsoft Corporation) C:\WINDOWS\system32\msftedit.dll
2015-12-03 13:25 - 2015-11-22 10:26 - 01139200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\UIAutomationCore.dll
2015-12-03 13:25 - 2015-11-22 10:26 - 00709120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingOnlineServices.dll
2015-12-03 13:25 - 2015-11-22 10:26 - 00421888 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2015-12-03 13:25 - 2015-11-22 10:25 - 02280448 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2015-12-03 13:25 - 2015-11-22 10:25 - 00133632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Core.TextInput.dll
2015-12-03 13:25 - 2015-11-22 10:24 - 02647552 _____ (Microsoft Corporation) C:\WINDOWS\system32\wininet.dll
2015-12-03 13:25 - 2015-11-22 10:24 - 00245760 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TextInputFramework.dll
2015-12-03 13:25 - 2015-11-22 10:24 - 00083456 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InputLocaleManager.dll
2015-12-03 13:25 - 2015-11-22 10:24 - 00059904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\EditBufferTestHook.dll
2015-12-03 13:25 - 2015-11-22 10:23 - 05202944 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\BingMaps.dll
2015-12-03 13:25 - 2015-11-22 10:20 - 01860096 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cdp.dll
2015-12-03 13:25 - 2015-11-22 10:18 - 01505280 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\urlmon.dll
2015-12-03 13:25 - 2015-11-22 10:18 - 00697856 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToManager.dll
2015-12-03 13:25 - 2015-11-22 10:18 - 00458752 _____ (Microsoft Corporation) C:\WINDOWS\system32\PlayToDevice.dll
2015-12-03 13:25 - 2015-11-22 10:17 - 02680320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msftedit.dll
2015-12-03 13:25 - 2015-11-22 10:17 - 02121216 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wininet.dll
2015-12-03 13:25 - 2015-11-22 10:11 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PlayToManager.dll
2015-12-03 06:36 - 2015-12-03 06:36 - 00000000 ____D C:\Users\Ismael\AppData\Local\ActiveSync
2015-12-03 06:32 - 2015-12-03 06:32 - 00000020 ___SH C:\Users\Ismael\ntuser.ini
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Vorlagen
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Startmenü
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Netzwerkumgebung
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Lokale Einstellungen
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Eigene Dateien
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Druckumgebung
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Videos
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Musik
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Documents\Eigene Bilder
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Verlauf
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\AppData\Local\Anwendungsdaten
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default\Anwendungsdaten
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Videos
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Musik
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default User\Documents\Eigene Bilder
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default User\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Verlauf
2015-12-03 03:54 - 2015-12-03 03:54 - 00000000 _SHDL C:\Users\Default User\AppData\Local\Anwendungsdaten
2015-12-03 03:53 - 2015-12-28 19:24 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2015-12-03 03:51 - 2015-12-03 03:51 - 00001519 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2015-12-03 03:51 - 2015-12-03 03:51 - 00000000 ____D C:\Users\Default\AppData\Roaming\Media Center Programs
2015-12-03 03:51 - 2015-12-03 03:51 - 00000000 ____D C:\Users\Default\AppData\Roaming\Macromedia
2015-12-03 03:51 - 2015-12-03 03:51 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Media Center Programs
2015-12-03 03:51 - 2015-12-03 03:51 - 00000000 ____D C:\Users\Default User\AppData\Roaming\Macromedia
2015-12-03 03:49 - 2015-12-03 03:51 - 00000000 ____D C:\WINDOWS\system32\config\bbimigrate
2015-12-03 03:49 - 2015-12-03 03:49 - 00000000 ____D C:\Program Files\Common Files\SpeechEngines
2015-12-03 03:49 - 2015-10-30 08:17 - 02718208 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
2015-12-03 03:48 - 2015-12-28 19:30 - 02086168 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2015-12-03 03:48 - 2015-12-28 19:24 - 00000000 ____D C:\Users\Ismael
2015-12-03 03:48 - 2015-12-03 03:52 - 00000000 ____D C:\Users\DefaultAppPool
2015-12-03 03:48 - 2015-12-03 03:48 - 01989310 _____ C:\WINDOWS\SysWOW64\PerfStringBackup.INI
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Vorlagen
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Startmenü
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Netzwerkumgebung
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Lokale Einstellungen
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Eigene Dateien
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Druckumgebung
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Documents\Eigene Videos
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Documents\Eigene Musik
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Documents\Eigene Bilder
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\AppData\Local\Verlauf
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\AppData\Local\Anwendungsdaten
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\Ismael\Anwendungsdaten
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Vorlagen
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Startmenü
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Netzwerkumgebung
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Lokale Einstellungen
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Eigene Dateien
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Druckumgebung
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Videos
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Musik
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Documents\Eigene Bilder
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Roaming\Microsoft\Windows\Start Menu\Programme
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Verlauf
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\AppData\Local\Anwendungsdaten
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 _SHDL C:\Users\DefaultAppPool\Anwendungsdaten
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 ____H C:\WINDOWS\system32\Drivers\Msft_Kernel_TeeDriverx64_01011.Wdf
2015-12-03 03:48 - 2015-12-03 03:48 - 00000000 ____H C:\ProgramData\DP45977C.lfl
2015-12-03 03:47 - 2015-12-28 19:24 - 00000000 ____D C:\ProgramData\NVIDIA
2015-12-03 03:47 - 2015-12-23 17:16 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2015-12-03 03:47 - 2015-12-16 15:54 - 06359672 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcpl.dll
2015-12-03 03:47 - 2015-12-16 15:54 - 02985264 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvc64.dll
2015-12-03 03:47 - 2015-12-16 15:54 - 02554488 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvsvcr.dll
2015-12-03 03:47 - 2015-12-16 15:54 - 01256240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvvsvc.exe
2015-12-03 03:47 - 2015-12-16 15:54 - 00385328 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmctray.dll
2015-12-03 03:47 - 2015-12-16 15:54 - 00062768 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvshext.dll
2015-12-03 03:47 - 2015-12-16 15:49 - 06090019 _____ C:\WINDOWS\system32\nvcoproc.bin
2015-12-03 03:47 - 2015-12-10 04:45 - 04964808 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2015-12-03 03:47 - 2015-12-03 03:49 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2015-12-03 03:47 - 2015-12-03 03:49 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2015-12-03 03:47 - 2015-12-03 03:47 - 00000000 ____D C:\WINDOWS\SysWOW64\RTCOM
2015-12-03 03:47 - 2015-12-03 03:47 - 00000000 ____D C:\WINDOWS\system32\DAX2
2015-12-03 03:47 - 2015-12-03 03:47 - 00000000 ____D C:\Program Files\Realtek
2015-12-03 03:44 - 2015-12-03 03:44 - 22572632 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 21125408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 11545088 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 09918976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 02444288 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.appcore.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 02001408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.appcore.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 01063424 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00969728 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00911648 _____ (Microsoft Corporation) C:\WINDOWS\system32\dcomp.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00809312 _____ (Microsoft Corporation) C:\WINDOWS\system32\WWAHost.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00803840 _____ (Microsoft Corporation) C:\WINDOWS\system32\jscript.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00791552 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00704352 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WWAHost.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00698208 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimgapi.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00675064 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dcomp.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00674816 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00647168 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\jscript.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00630632 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontdrvhost.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00623616 _____ (Microsoft Corporation) C:\WINDOWS\system32\PhoneProviders.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00586208 _____ (Microsoft Corporation) C:\WINDOWS\system32\mf.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00586080 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wimgapi.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00578912 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\afd.sys
2015-12-03 03:44 - 2015-12-03 03:44 - 00540752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontdrvhost.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00536768 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00523616 _____ (Microsoft Corporation) C:\WINDOWS\system32\wimserv.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00517632 _____ (Microsoft Corporation) C:\WINDOWS\system32\winspool.drv
2015-12-03 03:44 - 2015-12-03 03:44 - 00516544 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00511320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mf.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00490496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00454056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioEng.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00450560 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.Bluetooth.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00414720 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00408128 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00405048 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00400896 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winspool.drv
2015-12-03 03:44 - 2015-12-03 03:44 - 00369912 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiodg.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00366224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00365568 _____ (Adobe Systems Incorporated) C:\WINDOWS\system32\atmfd.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00334736 _____ (Microsoft Corporation) C:\WINDOWS\system32\policymanager.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00334336 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00315904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.Bluetooth.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00303104 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\atmfd.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00296488 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\policymanager.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00286720 _____ (Microsoft Corporation) C:\WINDOWS\system32\deviceaccess.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00275456 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00227840 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\deviceaccess.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00204800 _____ (Microsoft Corporation) C:\WINDOWS\system32\Microsoft-Windows-AppModelExecEvents.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00163328 _____ (Microsoft Corporation) C:\WINDOWS\system32\provops.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00162304 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringservice.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00122368 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00118624 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\tdx.sys
2015-12-03 03:44 - 2015-12-03 03:44 - 00118272 _____ (Microsoft Corporation) C:\WINDOWS\system32\fontsub.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00110032 _____ (Microsoft Corporation) C:\WINDOWS\system32\EncDump.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00093696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\fontsub.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00092352 _____ (Microsoft Corporation) C:\WINDOWS\system32\acmigration.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00089600 _____ (Microsoft Corporation) C:\WINDOWS\system32\NFCProvisioningPlugin.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00088392 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00087040 _____ (Microsoft Corporation) C:\WINDOWS\system32\tzautoupdate.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00086528 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppCapture.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00078336 _____ (Microsoft Corporation) C:\WINDOWS\system32\BarcodeProvisioningPlugin.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00073360 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00070656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AppCapture.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringclient.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\RemovableMediaProvisioningPlugin.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00045568 _____ (Adobe Systems) C:\WINDOWS\system32\atmlib.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00043520 _____ (Microsoft Corporation) C:\WINDOWS\system32\bcastdvr.proxy.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00037376 _____ (Adobe Systems) C:\WINDOWS\SysWOW64\atmlib.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00035680 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\wimmount.sys
2015-12-03 03:44 - 2015-12-03 03:44 - 00035656 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfpmp.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00032040 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfpmp.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00030720 _____ (Microsoft Corporation) C:\WINDOWS\system32\tetheringconfigsp.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00029696 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00028160 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Management.Provisioning.ProxyStub.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00027136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\bcastdvr.proxy.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\system32\IcsEntitlementHost.exe
2015-12-03 03:44 - 2015-12-03 03:44 - 00014336 _____ (Microsoft Corporation) C:\WINDOWS\system32\dciman32.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00011776 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\dciman32.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\lpk.dll
2015-12-03 03:44 - 2015-12-03 03:44 - 00003072 _____ (Microsoft Corporation) C:\WINDOWS\system32\lpk.dll
2015-12-03 03:43 - 2015-12-03 03:43 - 00008192 _____ C:\WINDOWS\system32\config\userdiff
2015-12-03 03:43 - 2015-10-29 19:43 - 05739520 _____ (Microsoft Corporation) C:\WINDOWS\system32\prm0009.dll
2015-12-03 03:43 - 2015-10-29 19:43 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsLexicons0009.dll
2015-12-03 03:43 - 2015-10-29 19:41 - 02629632 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsLexicons0009.dll
2015-12-03 03:43 - 2015-10-29 19:25 - 06359040 _____ (Microsoft Corporation) C:\WINDOWS\system32\NlsData0009.dll
2015-12-03 03:43 - 2015-10-29 19:24 - 04847616 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\NlsData0009.dll
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\WINDOWS\SysWOW64\XPSViewer
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\WINDOWS\SysWOW64\BestPractices
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\WINDOWS\system32\msmq
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\WINDOWS\system32\BestPractices
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\Program Files\Reference Assemblies
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\Program Files\MSBuild
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\Program Files (x86)\Reference Assemblies
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\Program Files (x86)\MSBuild
2015-12-03 03:42 - 2015-12-03 03:42 - 00000000 ____D C:\inetpub
2015-12-03 03:41 - 2015-10-23 17:47 - 00778936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationNative_v0300.dll
2015-12-03 03:41 - 2015-10-23 17:47 - 00103120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-12-03 03:41 - 2015-10-23 17:47 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\TsWpfWrp.exe
2015-12-03 03:41 - 2015-10-23 17:46 - 01166520 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationNative_v0300.dll
2015-12-03 03:41 - 2015-10-23 17:46 - 00035480 _____ (Microsoft Corporation) C:\WINDOWS\system32\TsWpfWrp.exe
2015-12-03 03:41 - 2015-10-23 17:45 - 00124624 _____ (Microsoft Corporation) C:\WINDOWS\system32\PresentationCFFRasterizerNative_v0300.dll
2015-12-03 03:38 - 2015-12-03 03:38 - 00000000 ____H C:\$WINRE_BACKUP_PARTITION.MARKER
2015-12-01 23:31 - 2015-12-18 09:48 - 12426896 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2015-12-01 23:31 - 2015-12-16 17:59 - 19727624 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2015-12-01 23:31 - 2015-12-16 17:59 - 17123736 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvwgf2um.dll
2015-12-01 23:31 - 2015-12-16 17:59 - 14103608 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2015-12-01 23:31 - 2015-12-16 17:59 - 03603368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll
2015-12-01 23:31 - 2015-12-16 17:59 - 03184152 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll
2015-12-01 23:31 - 2015-12-16 17:59 - 00035775 _____ C:\WINDOWS\system32\nvinfo.pb
2015-12-01 23:31 - 2015-11-25 00:07 - 01905272 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6435906.dll
2015-12-01 23:31 - 2015-11-25 00:07 - 01572496 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdagenco6420103.dll
2015-12-01 23:31 - 2015-11-25 00:07 - 01564792 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6435906.dll
2015-12-01 23:31 - 2015-11-25 00:07 - 00205456 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys
2015-12-01 23:31 - 2015-11-25 00:07 - 00039240 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvhdap64.dll
2015-12-01 13:55 - 2015-12-03 03:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Guitar Pro 6
2015-12-01 13:55 - 2015-12-01 13:55 - 00001115 _____ C:\Users\Public\Desktop\Guitar Pro 6.lnk
2015-12-01 13:55 - 2015-12-01 13:55 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Guitar Pro 6
2015-12-01 13:55 - 2015-12-01 13:55 - 00000000 ____D C:\ProgramData\Guitar Pro 6
2015-12-01 13:55 - 2015-12-01 13:55 - 00000000 ____D C:\Program Files (x86)\Guitar Pro 6
2015-12-01 10:38 - 2015-12-23 17:21 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\dvdcss

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2015-12-29 23:26 - 2015-09-04 19:49 - 00000000 ____D C:\FRST
2015-12-29 23:25 - 2015-09-05 18:49 - 00113880 _____ (Malwarebytes Corporation) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2015-12-29 23:16 - 2015-08-13 19:56 - 00001138 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job
2015-12-29 22:59 - 2015-06-22 11:48 - 00001228 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000UA.job
2015-12-29 22:35 - 2015-07-16 09:00 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2015-12-29 18:14 - 2015-08-13 19:56 - 00004160 _____ C:\WINDOWS\System32\Tasks\User_Feed_Synchronization-{02EF6015-06D8-4232-B524-5BCBD970FFEE}
2015-12-29 16:27 - 2015-10-30 08:24 - 00000000 ___HD C:\Program Files\WindowsApps
2015-12-29 16:27 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\AppReadiness
2015-12-29 04:16 - 2015-08-13 19:56 - 00001134 _____ C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job
2015-12-29 02:00 - 2014-11-22 10:42 - 00000000 ____D C:\Users\Ismael\AppData\Local\Adobe
2015-12-28 19:30 - 2015-10-30 19:35 - 00888008 _____ C:\WINDOWS\system32\perfh007.dat
2015-12-28 19:30 - 2015-10-30 19:35 - 00197092 _____ C:\WINDOWS\system32\perfc007.dat
2015-12-28 19:30 - 2015-10-30 08:21 - 00000000 ____D C:\WINDOWS\INF
2015-12-28 19:25 - 2014-11-21 18:25 - 00000000 ___RD C:\Users\Ismael\Dropbox
2015-12-28 19:25 - 2014-11-21 18:05 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Dropbox
2015-12-28 19:24 - 2015-10-30 07:28 - 05242880 ___SH C:\WINDOWS\system32\config\BBI
2015-12-28 19:24 - 2015-10-30 07:28 - 00000000 ____D C:\Windows
2015-12-28 19:23 - 2015-04-09 16:23 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Steam
2015-12-28 00:59 - 2015-06-22 11:48 - 00001176 _____ C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000Core.job
2015-12-27 21:35 - 2014-11-21 15:45 - 00007629 _____ C:\Users\Ismael\AppData\Local\Resmon.ResmonCfg
2015-12-27 21:31 - 2014-11-21 16:46 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\OBS
2015-12-25 17:07 - 2014-11-26 21:21 - 00000000 ____D C:\Users\Ismael\AppData\Local\Battle.net
2015-12-24 18:51 - 2015-03-23 12:51 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm
2015-12-23 19:52 - 2015-06-02 12:58 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\vlc
2015-12-23 17:16 - 2014-11-21 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2015-12-23 17:08 - 2015-09-24 11:55 - 00001456 _____ C:\Users\Public\Desktop\GeForce Experience.lnk
2015-12-21 19:11 - 2014-11-21 15:50 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Skype
2015-12-19 10:13 - 2015-08-13 15:38 - 00002433 _____ C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2015-12-19 10:13 - 2015-08-13 15:38 - 00000000 ___RD C:\Users\Ismael\OneDrive
2015-12-19 03:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\appraiser
2015-12-19 03:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Provisioning
2015-12-19 03:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\bcastdvr
2015-12-18 19:34 - 2015-10-30 08:11 - 00000000 ____D C:\WINDOWS\CbsTemp
2015-12-18 04:37 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2015-12-18 04:37 - 2014-12-02 14:30 - 00000000 ____D C:\Program Files\Microsoft Office 15
2015-12-17 19:43 - 2015-09-02 10:44 - 00001217 _____ C:\Users\Public\Desktop\Avira Launcher.lnk
2015-12-17 19:43 - 2015-07-16 09:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-12-17 19:43 - 2014-11-21 13:33 - 00000000 ____D C:\ProgramData\Package Cache
2015-12-17 16:17 - 2015-08-13 19:57 - 00002258 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2015-12-14 02:04 - 2015-08-14 00:39 - 00000000 ___RD C:\Users\Ismael\3D Objects
2015-12-11 06:46 - 2015-02-21 09:45 - 00000000 ____D C:\Users\Ismael\AppData\Local\Steam
2015-12-11 02:04 - 2015-08-13 15:36 - 00000000 ____D C:\Users\Ismael\AppData\Local\Packages
2015-12-10 04:45 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\oobe
2015-12-09 14:35 - 2015-07-16 09:00 - 00003858 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2015-12-09 13:57 - 2014-11-22 09:28 - 00000000 ____D C:\WINDOWS\system32\MRT
2015-12-09 13:55 - 2014-11-22 09:28 - 140158008 _____ (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2015-12-09 02:51 - 2015-09-24 11:55 - 01846016 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspcap64.dll
2015-12-09 02:51 - 2015-09-24 11:55 - 01756424 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvspbridge64.dll
2015-12-09 02:51 - 2015-09-24 11:55 - 01530240 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspcap.dll
2015-12-09 02:51 - 2015-09-24 11:55 - 01316184 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvspbridge.dll
2015-12-06 11:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\rescache
2015-12-06 08:54 - 2015-03-31 21:32 - 00000000 ____D C:\Users\Ismael\Documents\Square Enix
2015-12-05 03:30 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\SystemResetPlatform
2015-12-04 04:02 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\appcompat
2015-12-03 14:35 - 2015-10-30 08:24 - 00000000 ___SD C:\Program Files\Windows Sidebar
2015-12-03 14:35 - 2015-10-30 08:24 - 00000000 ___SD C:\Program Files (x86)\Windows Sidebar
2015-12-03 14:18 - 2015-08-15 22:36 - 00003266 _____ C:\WINDOWS\System32\Tasks\SidebarExecute
2015-12-03 06:48 - 2015-04-13 18:50 - 00011155 _____ C:\Users\Ismael\Desktop\ZEILZÄUGNISS.xlsx
2015-12-03 06:35 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\DevicesFlow
2015-12-03 06:32 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PrintDialog
2015-12-03 06:32 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\MiracastView
2015-12-03 06:32 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2015-12-03 06:32 - 2015-08-13 15:36 - 00000000 __RHD C:\Users\Public\AccountPictures
2015-12-03 03:54 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Registration
2015-12-03 03:54 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Windows NT
2015-12-03 03:53 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioDatabase
2015-12-03 03:53 - 2015-08-13 21:50 - 00002336 _____ C:\WINDOWS\System32\Tasks\{D37590F8-3DD1-4721-B1DA-D567A6D71455}
2015-12-03 03:53 - 2015-08-13 19:56 - 00003650 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineUA
2015-12-03 03:53 - 2015-08-13 19:56 - 00003426 _____ C:\WINDOWS\System32\Tasks\GoogleUpdateTaskMachineCore
2015-12-03 03:53 - 2015-08-13 15:19 - 00023056 _____ C:\WINDOWS\system32\emptyregdb.dat
2015-12-03 03:53 - 2015-08-13 10:55 - 00026610 _____ C:\WINDOWS\diagerr.xml
2015-12-03 03:53 - 2015-08-13 10:55 - 00024768 _____ C:\WINDOWS\diagwrn.xml
2015-12-03 03:53 - 2015-07-16 09:38 - 00002506 _____ C:\WINDOWS\System32\Tasks\Avira Browser Safety Updater Task
2015-12-03 03:53 - 2015-06-22 11:48 - 00003842 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000UA
2015-12-03 03:53 - 2015-06-22 11:48 - 00003570 _____ C:\WINDOWS\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000Core
2015-12-03 03:53 - 2015-01-06 21:07 - 00002954 _____ C:\WINDOWS\System32\Tasks\Adobe Acrobat Update Task
2015-12-03 03:53 - 2014-12-30 00:24 - 00002764 _____ C:\WINDOWS\System32\Tasks\AdobeAAMUpdater-1.0-Ismael-PC-Ismael
2015-12-03 03:52 - 2015-10-30 08:24 - 00000000 __RSD C:\WINDOWS\Media
2015-12-03 03:52 - 2015-10-30 08:24 - 00000000 __RHD C:\Users\Public\Libraries
2015-12-03 03:51 - 2015-11-20 06:48 - 00000000 ____D C:\WINDOWS\de
2015-12-03 03:51 - 2015-10-30 08:24 - 00000000 ___SD C:\WINDOWS\Downloaded Program Files
2015-12-03 03:51 - 2015-10-30 07:28 - 00008192 ___SH C:\WINDOWS\system32\config\ELAM
2015-12-03 03:51 - 2015-10-26 18:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOOT
2015-12-03 03:51 - 2015-10-26 12:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2015-12-03 03:51 - 2015-09-17 16:15 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Möbius 2
2015-12-03 03:51 - 2015-09-06 18:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\REAPER (x64)
2015-12-03 03:51 - 2015-09-05 18:49 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ Malwarebytes Anti-Malware 
2015-12-03 03:51 - 2015-09-04 19:54 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2015-12-03 03:51 - 2015-08-15 12:43 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Curse
2015-12-03 03:51 - 2015-08-13 19:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome
2015-12-03 03:51 - 2015-08-13 09:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Diablo III
2015-12-03 03:51 - 2015-07-10 10:05 - 00000000 ____D C:\Users\Default.migrated
2015-12-03 03:51 - 2015-06-02 12:58 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\VideoLAN
2015-12-03 03:51 - 2015-05-23 12:33 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XAMPP
2015-12-03 03:51 - 2015-05-13 22:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\World of Warcraft
2015-12-03 03:51 - 2015-04-19 18:41 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Fantasy Grounds
2015-12-03 03:51 - 2015-04-01 10:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Tele2
2015-12-03 03:51 - 2015-03-23 13:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Heroes of the Storm
2015-12-03 03:51 - 2015-03-13 14:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DVDVideoSoft
2015-12-03 03:51 - 2015-03-10 07:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Intel Driver Update Utility
2015-12-03 03:51 - 2015-03-06 16:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live
2015-12-03 03:51 - 2015-03-01 17:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Mount&Blade With Fire and Sword
2015-12-03 03:51 - 2015-02-25 21:10 - 00000000 ____D C:\ProgramData\regid.1995-08.com.techsmith
2015-12-03 03:51 - 2015-02-25 21:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TechSmith
2015-12-03 03:51 - 2015-02-22 16:37 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2015-12-03 03:51 - 2015-01-28 16:54 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 6.4
2015-12-03 03:51 - 2015-01-25 11:37 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Midimaster
2015-12-03 03:51 - 2015-01-25 11:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Midimaster
2015-12-03 03:51 - 2015-01-06 23:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Hi-Rez Studios
2015-12-03 03:51 - 2014-12-30 00:24 - 00000000 ____D C:\ProgramData\regid.1986-12.com.adobe
2015-12-03 03:51 - 2014-12-21 21:22 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-03 03:51 - 2014-12-21 21:22 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WinRAR
2015-12-03 03:51 - 2014-12-02 14:36 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Office 2013
2015-12-03 03:51 - 2014-11-28 06:48 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\SHARKOON Drakonia
2015-12-03 03:51 - 2014-11-26 21:21 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Battle.net
2015-12-03 03:51 - 2014-11-22 08:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com
2015-12-03 03:51 - 2014-11-21 16:46 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Open Broadcaster Software
2015-12-03 03:51 - 2014-11-21 14:30 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Steam
2015-12-03 03:51 - 2014-11-21 14:28 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft LifeCam
2015-12-03 03:51 - 2014-11-21 13:51 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Java
2015-12-03 03:51 - 2014-11-21 13:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung Magician
2015-12-03 03:51 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2015-12-03 03:50 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\SysWOW64\sysprep
2015-12-03 03:50 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\migwiz
2015-12-03 03:49 - 2015-10-30 19:36 - 00000000 ____D C:\WINDOWS\OCR
2015-12-03 03:49 - 2015-10-30 19:35 - 00000000 ____D C:\WINDOWS\DigitalLocker
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ___RD C:\WINDOWS\PurchaseDialog
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\IME
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\spool
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\NDF
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\IME
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\schemas
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\ProgramData\USOPrivate
2015-12-03 03:49 - 2015-10-30 08:24 - 00000000 ____D C:\Program Files\Common Files\microsoft shared
2015-12-03 03:49 - 2015-10-07 17:26 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2015-12-03 03:49 - 2015-07-02 15:23 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\JoWood
2015-12-03 03:49 - 2015-04-10 14:28 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\GamersFirst
2015-12-03 03:49 - 2015-03-13 18:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EA Games
2015-12-03 03:49 - 2014-12-03 08:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\HP
2015-12-03 03:49 - 2014-11-28 06:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ROCCAT
2015-12-03 03:49 - 2014-11-22 14:45 - 00000000 ____D C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Ubisoft
2015-12-03 03:49 - 2014-11-21 13:41 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Samsung
2015-12-03 03:49 - 2014-11-21 13:33 - 00000000 ____D C:\Program Files\Intel
2015-12-03 03:49 - 2011-04-12 08:54 - 00000000 ___RD C:\Users\Public\Recorded TV
2015-12-03 03:49 - 2009-07-14 06:32 - 00000000 ____D C:\Program Files\Microsoft Games
2015-12-03 03:48 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Sysprep
2015-12-03 03:47 - 2015-10-30 19:55 - 00000000 ____D C:\WINDOWS\ServiceProfiles
2015-12-03 03:47 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\Help
2015-12-03 03:46 - 2015-10-30 08:24 - 00028672 _____ C:\WINDOWS\system32\config\BCD-Template
2015-12-03 03:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\SysWOW64\Dism
2015-12-03 03:44 - 2015-10-30 07:28 - 00000000 ____D C:\WINDOWS\system32\Dism
2015-12-03 03:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\MUI
2015-12-03 03:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\SysWOW64\inetsrv
2015-12-03 03:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\MUI
2015-12-03 03:42 - 2015-10-30 08:24 - 00000000 ____D C:\WINDOWS\system32\inetsrv
2015-12-03 03:42 - 2015-10-30 08:19 - 00635904 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqsnap.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00562176 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqutil.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00266240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00168960 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisRtl.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00161792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqrt.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa.tlb
2015-12-03 03:42 - 2015-10-30 08:19 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa30.tlb
2015-12-03 03:42 - 2015-10-30 08:19 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa20.tlb
2015-12-03 03:42 - 2015-10-30 08:19 - 00051200 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\admwprox.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqoa10.tlb
2015-12-03 03:42 - 2015-10-30 08:19 - 00026112 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\ahadmin.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00017408 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisreset.exe
2015-12-03 03:42 - 2015-10-30 08:19 - 00014848 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mqcertui.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00011264 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wamregps.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00010240 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\iisrstap.dll
2015-12-03 03:42 - 2015-10-30 08:19 - 00009096 _____ C:\WINDOWS\SysWOW64\msmqtrc.mof
2015-12-03 03:42 - 2015-10-30 08:18 - 01417728 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqqm.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00813056 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsnap.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00564224 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqutil.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00317440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00229888 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqrt.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00202240 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisRtl.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00175616 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\mqac.sys
2015-12-03 03:42 - 2015-10-30 08:18 - 00130048 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqlogmgr.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00096768 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa.tlb
2015-12-03 03:42 - 2015-10-30 08:18 - 00091136 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa30.tlb
2015-12-03 03:42 - 2015-10-30 08:18 - 00056320 _____ (Microsoft Corporation) C:\WINDOWS\system32\admwprox.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00055808 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa20.tlb
2015-12-03 03:42 - 2015-10-30 08:18 - 00053248 _____ (Microsoft Corporation) C:\WINDOWS\system32\ahadmin.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00052736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqbkup.exe
2015-12-03 03:42 - 2015-10-30 08:18 - 00037376 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqoa10.tlb
2015-12-03 03:42 - 2015-10-30 08:18 - 00026624 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqsvc.exe
2015-12-03 03:42 - 2015-10-30 08:18 - 00019456 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisreset.exe
2015-12-03 03:42 - 2015-10-30 08:18 - 00018944 _____ (Microsoft Corporation) C:\WINDOWS\system32\mqcertui.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00015360 _____ (Microsoft Corporation) C:\WINDOWS\system32\wamregps.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00013312 _____ (Microsoft Corporation) C:\WINDOWS\system32\iisrstap.dll
2015-12-03 03:42 - 2015-10-30 08:18 - 00009096 _____ C:\WINDOWS\system32\msmqtrc.mof
2015-12-03 03:37 - 2014-11-21 13:22 - 00008192 __RSH C:\BOOTSECT.BAK
2015-12-01 16:25 - 2015-05-23 19:37 - 00000000 ____D C:\Users\Ismael\AppData\LocalLow\Heroes and Generals
2015-12-01 13:04 - 2015-07-16 09:38 - 00146696 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avipbb.sys
2015-12-01 13:04 - 2015-07-16 09:38 - 00135880 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avgntflt.sys
2015-12-01 13:04 - 2015-07-16 09:38 - 00073032 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avnetflt.sys
2015-12-01 13:04 - 2015-07-16 09:38 - 00035488 _____ (Avira Operations GmbH & Co. KG) C:\WINDOWS\system32\Drivers\avkmgr.sys
2015-12-01 01:33 - 2015-10-30 08:26 - 00826872 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerApp.exe
2015-12-01 01:33 - 2015-10-30 08:26 - 00176632 _____ (Adobe Systems Incorporated) C:\WINDOWS\SysWOW64\FlashPlayerCPLApp.cpl

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2015-12-03 14:37 - 2015-12-03 14:37 - 0000092 _____ () C:\Users\Ismael\AppData\Roaming\Control System_Settings.ini
2015-04-12 13:33 - 2015-04-12 13:33 - 0003584 _____ () C:\Users\Ismael\AppData\Local\DCBC2A71-70D8-4DAN-EHR8-E0D61DEA3FDF.ini
2014-11-21 15:45 - 2015-12-27 21:35 - 0007629 _____ () C:\Users\Ismael\AppData\Local\Resmon.ResmonCfg
2015-07-02 06:25 - 2015-07-02 06:25 - 0000000 _____ () C:\Users\Ismael\AppData\Local\Temp.dat
2014-12-03 08:13 - 2014-12-03 08:13 - 0000057 _____ () C:\ProgramData\Ament.ini
2015-12-03 03:48 - 2015-12-03 03:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Einige Dateien in TEMP:
====================
C:\Users\Ismael\AppData\Local\Temp\avgnt.exe
C:\Users\Ismael\AppData\Local\Temp\dropbox_sqlite_ext.{5f3e3153-5bce-5766-8f84-3e3e7ecf0d81}.tmpy5ucmi.dll
C:\Users\Ismael\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Ismael\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Ismael\AppData\Local\Temp\nvStInst.exe
C:\Users\Ismael\AppData\Local\Temp\SkypeSetup.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2015-12-25 10:31

==================== Ende von FRST.txt ============================
         

Alt 29.12.2015, 23:31   #5
CLamantius
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Nochmal danke für die Hilfe.

Adition.txt

Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:29-12-2015
durchgeführt von Ismael (2015-12-29 23:27:18)
Gestartet von C:\Users\Ismael\Downloads
Windows 10 Home (X64) (2015-12-03 02:54:19)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-831993325-2952530161-2944430335-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-831993325-2952530161-2944430335-503 - Limited - Disabled)
Gast (S-1-5-21-831993325-2952530161-2944430335-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-831993325-2952530161-2944430335-1002 - Limited - Enabled)
Ismael (S-1-5-21-831993325-2952530161-2944430335-1000 - Administrator - Enabled) => C:\Users\Ismael

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\uTorrent) (Version: 3.4.4.40911 - BitTorrent Inc.)
10,000,000 (HKLM-x32\...\Steam App 227580) (Version:  - EightyEightGames)
3DMark (HKLM-x32\...\Steam App 223850) (Version:  - Futuremark)
8GadgetPack (HKLM-x32\...\{57C14300-FD42-4D51-A9F1-9C1C84F93C36}) (Version: 16.0.0 - Helmut Buhler)
A Bastard's Tale Demo (HKLM-x32\...\Steam App 372730) (Version:  - )
Abyss Odyssey (HKLM-x32\...\Steam App 255070) (Version:  - ACE Team)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 3.1.0.4880 - Adobe Systems Incorporated)
Adobe Dreamweaver CS6 (HKLM-x32\...\{A4ED5E53-7AA0-11E1-BF04-B2D4D4A5360E}) (Version: 12 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.267 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)
Adobe Reader XI (11.0.13) - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AB0000000001}) (Version: 11.0.13 - Adobe Systems Incorporated)
Adobe Widget Browser (HKLM-x32\...\com.adobe.WidgetBrowser) (Version: 2.0 Build 348 - Adobe Systems Incorporated.)
Age of Empires® III: Complete Collection (HKLM-x32\...\Steam App 105450) (Version:  - Ensemble Studios)
Ampu-Tea (HKLM-x32\...\Steam App 289090) (Version:  - ProjectorGames)
ANNO 2070 (HKLM-x32\...\{B48E264C-C8CD-4617-B0BE-46E977BAD694}) (Version: 1.0.0.0 - Ubisoft)
Another Perspective (HKLM-x32\...\Steam App 305920) (Version:  - ShaunJS)
APB Reloaded (HKLM-x32\...\APB Reloaded) (Version: 1.6.7.672769 - )
APB Reloaded (HKLM-x32\...\Steam App 113400) (Version:  - Reloaded Productions)
Apotheon (HKLM-x32\...\Steam App 208750) (Version:  - Alientrap)
ArcheAge (HKLM-x32\...\Steam App 304030) (Version:  - XLGAMES)
Assassin's Creed IV Black Flag (HKLM-x32\...\Steam App 242050) (Version:  - Ubisoft Montreal)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.129 - Avira Operations GmbH & Co. KG)
Avira Browser Safety (HKLM-x32\...\{9E10EA90-5E97-43B7-A246-FC7B4F5E9493}) (Version: 1.4.5.509 - Avira Operations GmbH & Co KG)
Avira Launcher (HKLM-x32\...\{d0e166af-1634-4c0b-ae96-2180e61f9d38}) (Version: 1.1.52.15531 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.52.15531 - Avira Operations GmbH & Co. KG) Hidden
Banished (HKLM-x32\...\Steam App 242920) (Version:  - Shining Rock Software LLC)
Battle vs Chess (HKLM-x32\...\Steam App 211050) (Version:  - Targem Games)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield Heroes (HKLM-x32\...\{8DC910CD-8EE3-4ffc-A4EB-9B02701059C4}) (Version:  - EA Digital illusions)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB)
Blade Symphony (HKLM-x32\...\Steam App 225600) (Version:  - Puny Human)
BLOCKADE 3D (HKLM-x32\...\Steam App 302830) (Version:  - Shumkov Dmitriy)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version:  - 2K Australia)
Call of Juarez Gunslinger (HKLM-x32\...\Steam App 204450) (Version:  - Techland)
Camtasia Studio 8 (HKLM-x32\...\{474DFABF-E55B-4905-ABAA-40791A6AC77F}) (Version: 8.4.4.1859 - TechSmith Corporation)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)
Cities: Skylines (HKLM-x32\...\Steam App 255710) (Version:  - Colossal Order Ltd.)
Cloud Chamber (HKLM-x32\...\Steam App 290710) (Version:  - Investigate North)
Commander: Conquest of the Americas Gold (HKLM-x32\...\Steam App 254020) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version:  - Paradox Development Studio)
Curse Client (HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\101a9f93b8f0bb6f) (Version: 5.1.1.844 - Curse)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DARK SOULS™ II: Scholar of the First Sin (HKLM-x32\...\Steam App 335300) (Version:  - FromSoftware, Inc)
Darkest Dungeon (HKLM-x32\...\Steam App 262060) (Version:  - Red Hook Studios)
DeadCore (HKLM-x32\...\Steam App 284460) (Version:  - 5 Bits Games)
Deus Ex: Game of the Year Edition (HKLM-x32\...\Steam App 6910) (Version:  - Ion Storm)
Devilian (HKLM-x32\...\Steam App 407510) (Version:  - Bluehole Ginno Games)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version:  - Klei Entertainment)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.12 - Electronic Arts)
Drakonia Configurator (HKLM-x32\...\{A7B243AA-6D4C-4575-A873-6F01A1EFC5E2}}_is1) (Version:  - )
Dropbox (HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\Dropbox) (Version: 3.12.5 - Dropbox, Inc.)
Dungeon of the Endless (HKLM-x32\...\Steam App 249050) (Version:  - AMPLITUDE Studios)
Enclave (HKLM-x32\...\Steam App 253980) (Version:  - Topware)
Fallout 3 - Game of the Year Edition (HKLM-x32\...\Steam App 22370) (Version:  - Bethesda Game Studios)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free YouTube Download version 3.2.60.713 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.60.713 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.56.301 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.56.301 - DVDVideoSoft Ltd.)
Gameforge Live 2.0.6 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.6 - Gameforge)
GamersFirst LIVE! (HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\GamersFirst LIVE!) (Version:  - GamersFirst)
Gods Will Be Watching (HKLM-x32\...\Steam App 274290) (Version:  - Deconstructeam)
GOG Galaxy (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)
GOG.com Downloader version 3.6.0 (HKLM-x32\...\{456A5815-604D-4D72-94DF-346D2B978A59}_is1) (Version: 3.6.0 - GOG.com)
Gone Home (HKLM-x32\...\Steam App 232430) (Version:  - The Fullbright Company)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 47.0.2526.106 - Google Inc.)
Google Update Helper (x32 Version: 1.3.29.1 - Google Inc.) Hidden
Gothic 3 (HKLM-x32\...\{17BADF87-3597-46FE-8D74-69C4FA78883E}) (Version: 1.0.0 - JoWood)
Guitar Pro 6 Demo (HKLM-x32\...\{14A487F2-1259-4E6C-AE3C-3C888DDBCB60}_is1) (Version:  - Arobas Music)
Guns of Icarus Online (HKLM-x32\...\Steam App 209080) (Version:  - Muse Games)
Hacknet (HKLM-x32\...\Steam App 365450) (Version:  - Team Fractal Alligator)
Heroes & Generals (HKLM-x32\...\Steam App 227940) (Version:  - Reto-Moto)
Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Hitman: Absolution (HKLM-x32\...\Steam App 203140) (Version:  - IO Interactive)
Hitman: Sniper Challenge (HKLM-x32\...\Steam App 205930) (Version:  - IO Interactive)
HP Deskjet 2050 J510 series - Grundlegende Software für das Gerät (HKLM\...\{DF37555F-0259-43DA-B60C-47106FA14AA3}) (Version: 28.0.1313.0 - Hewlett-Packard Co.)
In Verbis Virtus (HKLM-x32\...\Steam App 242840) (Version:  - Indomitus Games)
Intel(R) Driver Update Utility 2.0 (x32 Version: 2.0.0.29 - Intel) Hidden
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1168 - Intel Corporation)
Intel(R) Smart Connect Technology (HKLM\...\{9A37ADB3-3D8D-4EDF-8F6D-B8A66F18087B}) (Version: 5.0.10.2793 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.0.16 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.13 - Intel(R) Corporation) Hidden
Intel® Driver Update Utility (HKLM-x32\...\{8409c4f7-2340-4933-a304-5d37db4fb48b}) (Version: 2.0.0.29 - Intel)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Just Cause 2 (HKLM-x32\...\Steam App 8190) (Version:  - Avalanche Studios)
Just Cause 3 (HKLM-x32\...\Steam App 225540) (Version:  - Avalanche Studios)
Knights of Pen and Paper +1 (HKLM-x32\...\Steam App 231740) (Version:  - Behold Studios)
Legend of Grimrock (HKLM-x32\...\Steam App 207170) (Version:  - Almost Human Games)
Life is Feudal: Your Own (HKLM-x32\...\Steam App 290080) (Version:  - Bitbox Ltd.)
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)
LOOT Version 0.8.1 (HKLM-x32\...\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.8.1 - LOOT Team)
Mad Max (HKLM-x32\...\Steam App 234140) (Version:  - Avalanche Studios)
Magic 2014  (HKLM-x32\...\Steam App 213850) (Version:  - Stainless Games)
Magicka (HKLM-x32\...\Steam App 42910) (Version:  - Arrowhead Game Studios)
Malwarebytes Anti-Malware Version 2.1.8.1057 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.8.1057 - Malwarebytes Corporation)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft LifeCam (HKLM\...\{6965A8D2-465D-4F98-9FAA-0E9E2348F329}) (Version: 3.22.270.0 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4779.1002 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mind: Path to Thalamus (HKLM-x32\...\Steam App 296070) (Version:  - Carlos Coronado)
Mount & Blade: Warband (HKLM-x32\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
Mount&Blade With Fire and Sword (HKLM-x32\...\Mount&Blade With Fire and Sword) (Version:  - )
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Thunderbird 31.6.0 (x86 de) (HKLM-x32\...\Mozilla Thunderbird 31.6.0 (x86 de)) (Version: 31.6.0 - Mozilla)
MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version:  - Airtight Games)
My Game Long Name (HKLM\...\UDK-de36c1cb-c70b-4c82-98b9-ca49f3d5934b) (Version:  - Epic Games, Inc.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.60.16 - Black Tree Gaming)
Nosgoth (HKLM-x32\...\Steam App 200110) (Version: 150724.114470 - Square Enix Ltd)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.43 - NVIDIA Corporation)
NVIDIA Drivers (HKLM\...\NVIDIA Drivers) (Version: 1.10 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.8.1.21 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.8.1.21 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.43 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.43 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA Performance (HKLM-x32\...\InstallShield_{7C7F30F4-94E7-4AA8-8941-90C4A80C68BF}) (Version: 6.5 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
NVIDIA System Monitor (HKLM-x32\...\InstallShield_{E9CFBE78-ED91-4FCF-9E6F-210E477E527D}) (Version: 6.5 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (x32 Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (x32 Version: 15.0.4779.1002 - Microsoft Corporation) Hidden
ONE PIECE PIRATE WARRIORS 3 (HKLM-x32\...\Steam App 331600) (Version:  - KOEI TECMO GAMES CO., LTD.)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Ori and the Blind Forest (HKLM-x32\...\Steam App 261570) (Version:  - Moon Studios GmbH)
Origin (HKLM-x32\...\Origin) (Version: 9.5.2.2829 - Electronic Arts, Inc.)
Out There: Ω Edition (HKLM-x32\...\Steam App 334420) (Version:  - Mi-Clos Studio)
PAC-MAN Championship Edition DX+ (HKLM-x32\...\Steam App 236450) (Version:  - Mine Loader Software Co., Ltd.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PDF Settings CS6 (x32 Version: 11.0 - Adobe Systems Incorporated) Hidden
Pillars of Eternity (HKLM-x32\...\Steam App 291650) (Version:  - Obsidian Entertainment)
PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version:  - Daybreak Games)
PlanetSide 2 (HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\SOE-PlanetSide 2) (Version:  - Sony Online Entertainment)
Platformines (HKLM-x32\...\Steam App 264540) (Version:  - Magiko Gaming)
Port of Call (HKLM-x32\...\Steam App 356520) (Version:  - Underdog Games)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Randal's Monday (HKLM-x32\...\Steam App 314810) (Version:  - Nexus Game Studios)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.77.1126.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7535 - Realtek Semiconductor Corp.)
REAPER (x64) (HKLM\...\REAPER) (Version:  - )
Reign Of Kings (HKLM-x32\...\Steam App 344760) (Version:  - Code}{atch)
Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)
Rhythmustrainer 3.0 (HKLM-x32\...\Rhythmustrainer_is1) (Version:  - Midimaster)
Risk of Rain (HKLM-x32\...\Steam App 248820) (Version:  - )
ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Samsung Data Migration (HKLM-x32\...\{D4DE3DB4-7734-47E5-8D92-B80146311406}) (Version: 2.7 - Samsung)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.1.0 - Samsung Electronics)
SHIELD Streaming (Version: 4.1.0250 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.8.1.21 - NVIDIA Corporation) Hidden
Sid Meier's Civilization V (HKLM-x32\...\Steam App 8930) (Version:  - 2K Games, Inc.)
Skype™ 7.12 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.12.101 - Skype Technologies S.A.)
Skyrim Script Extender (SKSE) (HKLM-x32\...\Steam App 365720) (Version:  - The SKSE Team)
Skyshine's BEDLAM (HKLM-x32\...\Steam App 367600) (Version:  - Skyshine Games)
Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 2.17.3072.0 - Hi-Rez Studios)
Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version:  - Rebellion)
Spoiler Alert (HKLM-x32\...\Steam App 283230) (Version:  - MEGAFUZZ)
Star Conflict (HKLM-x32\...\Steam App 212070) (Version:  - Star Gem Inc.)
STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.3.51560 - Electronic Arts)
Stealth Inc 2 (HKLM-x32\...\Steam App 329380) (Version:  - Carbon)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Styx: Master of Shadows (HKLM-x32\...\Steam App 242640) (Version:  - Cyanide Studio)
Swipecart (HKLM-x32\...\Steam App 295930) (Version:  - Micro Factory Games)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
Tele2 Internet (HKLM-x32\...\Tele2 Internet) (Version: 5.0.0.14 - Tele2 Telecommunication GmbH)
Tele2 Internet (x32 Version: 5.0.0.14 - Tele2 Telecommunication GmbH) Hidden
TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - )
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Escapists (HKLM-x32\...\1423221839_is1) (Version: 2.0.0.1 - GOG.com)
The Fall (HKLM-x32\...\Steam App 290770) (Version:  - Over The Moon)
The Night of the Rabbit (HKLM-x32\...\Steam App 230820) (Version:  - Daedalic Entertainment)
The Talos Principle (HKLM-x32\...\Steam App 257510) (Version:  - Croteam)
The Witcher 2 - Assassins of Kings Enhanced Edition (HKLM-x32\...\GOGPACKTHEWITCHER2EE_is1) (Version: 3.4.0.25 - GOG.com)
The Witcher 3 - Wild Hunt (HKLM-x32\...\1207664643_is1) (Version: 1.0.11.0 - GOG.com)
The Witcher 3: Wild Hunt - Free DLC program (16 DLC) (HKLM-x32\...\Free DLC program (16 DLC)_is1) (Version: 1.0.10.0 - GOG.com)
The Witcher 3: Wild Hunt - Hearts of Stone (HKLM-x32\...\Hearts of Stone_is1) (Version: 1.0.10.0 - GOG.com)
Titanfall™ (HKLM-x32\...\{347EE0C3-0690-48F6-A231-53853C2A80D6}) (Version: 1.0.10.1 - Electronic Arts)
Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)
Torchlight II (HKLM-x32\...\Steam App 200710) (Version:  - Runic Games)
Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)
Uplay (HKLM-x32\...\Uplay) (Version: 7.3 - Ubisoft)
VGA Boost (HKLM-x32\...\{809ACFAE-9A4D-4C60-9223-D8B615CD8CBA}}_is1) (Version: 1.0.0.7 - MSI)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.1 - VideoLAN)
Warface (HKLM-x32\...\Steam App 291480) (Version:  - Crytek)
Windows Desktop Gadgets (HKLM\...\Windows Desktop Gadgets_is1) (Version: 2.0 - hxxp://gadgetsrevived.com)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
XAMPP (HKLM-x32\...\xampp) (Version: 5.6.8-0 - Bitnami)
Year Walk (HKLM-x32\...\Steam App 269050) (Version:  - Simogo)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{0B7AD8D3-094A-44DE-A348-83C6C3FA347C}\InprocServer32 -> C:\Users\Ismael\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Clipboarder.gadget\Release\Clipboarder64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{0E7BE950-4ACC-47CB-834B-41A8B96BBFF9}\InprocServer32 -> C:\Users\Ismael\AppData\Local\Microsoft\Windows Sidebar\Gadgets\Sidebar7.gadget\Release\Sidebar7.64.dll (Helmut Buhler)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Ismael\AppData\Local\Microsoft\OneDrive\17.3.6281.1202\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-831993325-2952530161-2944430335-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Ismael\AppData\Roaming\Dropbox\bin\DropboxExt64.28.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0134CA48-4F85-4C1A-8A54-0CD36554AF0A} - System32\Tasks\Microsoft\Windows\Media Center\DispatchRecoveryTasks => C:\Windows\ehome\ehPrivJob.exe
Task: {0CFE2E40-6A97-48C5-9F38-DE82315CF1B0} - System32\Tasks\Microsoft\Windows\UPnP\UPnPHostConfig => config upnphost start= auto
Task: {13429E5A-D392-4222-99EC-2D4D52E6D39E} - System32\Tasks\Microsoft\Windows\Media Center\SqlLiteRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {179023BC-21F2-4749-BB84-2B34C653E837} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2012-05-19] (Microsoft Corporation)
Task: {17D0C484-3EC2-48C1-B38A-C5C8B60B27E7} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-10-28] (Adobe Systems Incorporated)
Task: {18AE2DE8-75F0-4FE9-94EC-A5DD3FECD124} - System32\Tasks\{D37590F8-3DD1-4721-B1DA-D567A6D71455} => pcalua.exe -a D:\battlenet\Battle.net\Battle.net.6075\Battle.net.exe -d D:\battlenet\Battle.net\Battle.net.6075
Task: {224FBF1D-C159-4455-A3C5-B57E4DDBBACE} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2015-12-09] (Microsoft Corporation)
Task: {226865E0-B17A-481A-A447-9FF78ECB31F6} - System32\Tasks\Microsoft\Windows\Media Center\RecordingRestart => C:\Windows\ehome\ehrec.exe
Task: {27D22B7E-C3C5-443B-BF84-0E895DDA48AF} - System32\Tasks\Microsoft\Windows\Media Center\ehDRMInit => C:\Windows\ehome\ehPrivJob.exe
Task: {3054CE97-A92E-4F9A-A239-AE924D9FF716} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate_scheduled => C:\Windows\ehome\mcupdate.exe
Task: {31E31F7E-3C62-4DAB-8367-EDA1D1689C8F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-30] (Microsoft Corporation)
Task: {33BABF43-C45F-4446-B192-ED64B9D804F4} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-13] (Google Inc.)
Task: {35FF3C12-D3AD-4C00-B71A-00EA49A3F3D4} - System32\Tasks\Microsoft\Windows\Media Center\OCURDiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {3661E786-AA82-4F65-A664-5762A6D6973F} - System32\Tasks\Microsoft\Windows\Media Center\ObjectStoreRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {3BCE1CB4-EA55-4A6A-A2FF-DB8665A74B2E} - System32\Tasks\Microsoft\Windows\Media Center\PvrRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {3F7F1E44-5E72-411F-B7D5-380DAD3DB02A} - \SteamClient -> Keine Datei <==== ACHTUNG
Task: {40F18A4B-6D03-4967-AF2D-BD60B42E1C2F} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {432B96D2-2A63-4FF1-BB2D-9946AB4B25CB} - System32\Tasks\Microsoft\Windows\Media Center\StartRecording => C:\Windows\ehome\ehrec.exe
Task: {46B99875-0479-4947-B3E4-EE815C5E9222} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {4AD117ED-280D-4034-A620-A3A82274A59B} - System32\Tasks\Microsoft\Windows\Media Center\OCURActivate => C:\Windows\ehome\ehPrivJob.exe
Task: {4ADDB448-7616-47B8-A671-A8192D266B6A} - System32\Tasks\Microsoft\Windows\Media Center\RegisterSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {58691AA0-93FB-456C-8D34-E110197ECA49} - System32\Tasks\Microsoft\Windows\Media Center\PvrScheduleTask => C:\Windows\ehome\mcupdate.exe
Task: {59E12B16-6968-4B87-8E52-39AA49371F27} - System32\Tasks\Microsoft\Windows\Media Center\ReindexSearchRoot => C:\Windows\ehome\ehPrivJob.exe
Task: {649F6CA4-EDBF-41A6-96B7-69A83AE4BA8B} - System32\Tasks\Microsoft\Windows\Media Center\mcupdate => C:\Windows\ehome\mcupdate.exe
Task: {6ACD892D-07D2-4B43-A1D2-356D0236915B} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {7CDA133D-FC93-40C1-B0CA-04BFE8C994DF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {81523A9D-712B-4C2B-B698-4BB9BD98B0D3} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW2 => C:\Windows\ehome\ehPrivJob.exe
Task: {81629C2B-E6D8-43F3-900A-B0420153FBB9} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {833D687F-A597-447D-B484-A33E78EDE878} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2015-10-30] (Microsoft Corporation)
Task: {87D266D3-1BBB-45C2-B14F-CE0B0B0A7608} - System32\Tasks\Microsoft\Windows\Media Center\UpdateRecordPath => C:\Windows\ehome\ehPrivJob.exe
Task: {89284FC3-DBDB-4444-BD44-266B63C4CB6A} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {8E449293-77C7-4D7C-A24B-C03E3E42D982} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000Core => C:\Users\Ismael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-22] (Dropbox, Inc.)
Task: {991A211D-49F6-4874-9ABE-62CC33305313} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {9C5522DA-0803-4B59-8395-E58125714D2F} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2015-10-13] (Microsoft Corporation)
Task: {A1F996AC-06C7-4B04-B5BF-4829CF413596} - System32\Tasks\Microsoft\Windows\Media Center\ActivateWindowsSearch => C:\Windows\ehome\ehPrivJob.exe
Task: {A23450D8-A59C-444A-8399-DE547DD1263E} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {A840C392-E401-4CF2-AEB2-E0707971017F} - System32\Tasks\Microsoft\Windows\Media Center\MediaCenterRecoveryTask => C:\Windows\ehome\mcupdate.exe
Task: {A8E18E51-4386-40A6-A9CF-B5ADDC2760E0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-12-29] (Adobe Systems Incorporated)
Task: {AD3253AE-2FAA-4D0B-9966-CB99CFA19439} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscoveryW1 => C:\Windows\ehome\ehPrivJob.exe
Task: {BD793107-B28F-4748-98A9-8BE0D468F20F} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-13] (Google Inc.)
Task: {BDE0500E-01EA-4E00-8F8A-57F12DB22F36} - System32\Tasks\Microsoft\Windows\Media Center\PBDADiscovery => C:\Windows\ehome\ehPrivJob.exe
Task: {BE8F7579-843A-48EA-A40C-ABE917C65DFF} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {CC7BB016-06B0-42DE-8FB0-8F1CDA6C96DF} - System32\Tasks\Avira Browser Safety Updater Task => C:\Program Files (x86)\Avira\Browser Safety\AviraBrowserSafetyUpdater.exe [2015-03-11] (Avira Operations GmbH & Co. KG)
Task: {D84505F8-297E-4781-A8EE-0E7A6E9D8342} - System32\Tasks\Microsoft\Windows\Media Center\PeriodicScanRetry => C:\Windows\ehome\MCUpdate.exe
Task: {DC8FD9F2-6513-49DA-89FA-C0C3D91F5AD4} - System32\Tasks\AdobeAAMUpdater-1.0-Ismael-PC-Ismael => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2012-09-20] (Adobe Systems Incorporated)
Task: {DDB4D29F-07AB-49CB-B1AD-7E58C83AB27D} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {DE322182-B179-44F8-BB67-16EBFA26C7B4} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {DED02443-615F-4703-8E41-D8337D8CE314} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx86\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2015-12-18] (Microsoft Corporation)
Task: {E30B7AEC-B87F-438D-9001-EA16E14B6125} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000UA => C:\Users\Ismael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-22] (Dropbox, Inc.)
Task: {EDD67556-119D-4090-B5E1-AD5B214C2F10} - System32\Tasks\Microsoft\Windows\Media Center\ConfigureInternetTimeService => C:\Windows\ehome\ehPrivJob.exe
Task: {F23A6A72-E271-4DA3-8F71-746CB614EEAD} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {F47C5156-D456-455D-9F1E-2761D2F4AA44} - System32\Tasks\Microsoft\Windows\Media Center\InstallPlayReady => C:\Windows\ehome\ehPrivJob.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000Core.job => C:\Users\Ismael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-831993325-2952530161-2944430335-1000UA.job => C:\Users\Ismael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\WINDOWS\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2015-12-03 03:47 - 2015-12-16 15:54 - 00126256 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-12-02 14:30 - 2015-10-13 04:34 - 00105640 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2015-12-23 17:08 - 2015-12-09 02:52 - 00217720 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-04-10 15:01 - 2015-11-01 15:36 - 00076152 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-12-03 13:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2015-12-17 06:28 - 2015-12-17 06:29 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2015-12-03 13:25 - 2015-11-22 11:47 - 02653816 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-18 17:42 - 2015-12-07 05:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2015-12-18 17:42 - 2015-12-07 05:00 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2015-09-24 11:55 - 2015-12-09 02:51 - 00087160 _____ () C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvLedServiceHost.exe
2014-11-28 06:48 - 2012-06-07 10:24 - 00246784 _____ () C:\Program Files (x86)\Drakonia Configurator\hid.exe
2014-11-28 06:48 - 2012-03-05 13:46 - 00240640 _____ () C:\Program Files (x86)\Drakonia Configurator\trayicon.exe
2015-10-30 08:18 - 2015-10-30 08:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2015-12-10 02:33 - 2015-12-10 02:33 - 00012800 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.exe
2015-12-10 02:33 - 2015-12-10 02:33 - 11542016 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\Microsoft.Photos.dll
2015-11-20 06:59 - 2015-11-20 06:59 - 00258560 _____ () C:\Program Files\WindowsApps\Microsoft.Windows.Photos_15.1208.10480.0_x64__8wekyb3d8bbwe\StoreRatingPromotion.dll
2015-12-18 03:57 - 2015-12-18 03:57 - 03682816 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsCalculator_10.1512.47020.0_x64__8wekyb3d8bbwe\Calculator.exe
2014-02-28 10:14 - 2015-10-23 13:27 - 00175080 _____ () C:\Program Files\TeamSpeak 3 Client\quazip.dll
2014-08-04 14:43 - 2015-10-23 13:27 - 00103400 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\directsound_win64.dll
2014-08-04 14:43 - 2015-10-23 13:27 - 00108008 _____ () C:\Program Files\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win64.dll
2014-08-04 14:46 - 2015-10-23 13:27 - 00312296 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\clientquery_plugin.dll
2014-08-04 14:46 - 2015-10-23 13:27 - 00483816 _____ () C:\Program Files\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll
2014-06-05 14:48 - 2015-09-27 10:19 - 00317440 _____ () C:\Program Files\TeamSpeak 3 Client\ssleay32.dll
2014-06-05 14:48 - 2015-09-27 10:19 - 01709056 _____ () C:\Program Files\TeamSpeak 3 Client\LIBEAY32.dll
2015-12-18 17:42 - 2015-12-07 04:37 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2015-12-18 17:42 - 2015-12-07 04:33 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2015-12-18 17:42 - 2015-12-07 04:34 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2015-12-18 17:42 - 2015-12-07 04:36 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2015-12-17 06:28 - 2015-12-17 06:29 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2015-12-17 06:28 - 2015-12-17 06:29 - 21845504 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.12.15004.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2015-09-24 11:55 - 2015-12-09 02:53 - 00011896 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-12-17 16:17 - 2015-12-11 04:54 - 01583432 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libglesv2.dll
2015-12-17 16:17 - 2015-12-11 04:54 - 00081224 _____ () C:\Program Files (x86)\Google\Chrome\Application\47.0.2526.106\libegl.dll
2015-09-24 11:55 - 2015-12-09 02:51 - 00621360 _____ () C:\Program Files (x86)\NVIDIA Corporation\LED Visualizer\NvGpuInterface.dll
2015-12-11 06:39 - 2015-11-10 20:55 - 00778752 _____ () D:\steam\SDL2.dll
2015-01-24 17:18 - 2015-07-03 17:12 - 04962816 _____ () D:\steam\v8.dll
2015-12-15 16:26 - 2015-12-14 21:01 - 02547280 _____ () D:\steam\video.dll
2015-10-12 19:56 - 2015-09-24 01:33 - 02549248 _____ () D:\steam\libavcodec-56.dll
2015-10-12 19:56 - 2015-09-24 01:33 - 00491008 _____ () D:\steam\libavformat-56.dll
2015-10-12 19:56 - 2015-09-24 01:33 - 00332800 _____ () D:\steam\libavresample-2.dll
2015-10-12 19:56 - 2015-09-24 01:33 - 00442880 _____ () D:\steam\libavutil-54.dll
2015-10-12 19:56 - 2015-09-24 01:33 - 00485888 _____ () D:\steam\libswscale-3.dll
2015-01-24 17:18 - 2015-07-03 17:12 - 01556992 _____ () D:\steam\icui18n.dll
2015-01-24 17:18 - 2015-07-03 17:12 - 01187840 _____ () D:\steam\icuuc.dll
2015-12-15 16:26 - 2015-12-14 21:01 - 00804432 _____ () D:\steam\bin\chromehtml.DLL
2015-11-09 20:38 - 2015-11-03 23:00 - 00201728 _____ () D:\steam\bin\openvr_api.dll
2014-11-28 06:47 - 2010-11-04 11:48 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku Keyboard\hiddriver.dll
2014-11-28 06:48 - 2011-11-22 14:18 - 00061440 _____ () C:\Program Files (x86)\Drakonia Configurator\HidDevice.dll
2015-12-12 17:06 - 2015-10-31 01:59 - 00034768 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00019408 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00022848 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Crypto.Random.OSRNG.winrandom.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00023352 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Crypto.Util._counter.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00042296 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Crypto.Cipher._AES.pyd
2015-12-12 17:06 - 2015-10-31 01:59 - 00116688 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-12 17:06 - 2015-10-31 01:59 - 00093640 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-12 17:06 - 2015-10-31 01:59 - 00018376 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00019760 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00105928 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32api.pyd
2015-12-12 17:06 - 2015-10-31 01:59 - 00392144 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2015-12-12 17:06 - 2015-12-08 22:36 - 00381752 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-12 17:06 - 2015-10-31 01:59 - 00692688 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00020816 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00109520 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 01737032 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00020808 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00020800 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_cffi_python_x66cf7a7cx17a72769.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00021840 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00038696 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\fastpath.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00024528 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00020936 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00114640 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00021320 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_xde9e4433x360333f0.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00124880 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32file.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00030160 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00043472 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00175560 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00028616 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32ts.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00024016 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00048592 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32service.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00024392 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00036296 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\librsync.dll
2015-12-12 17:06 - 2015-10-31 02:00 - 00024016 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\win32profile.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00117056 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00031568 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd
2015-10-02 03:00 - 2015-11-05 01:04 - 00293392 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll
2015-12-12 17:06 - 2015-12-08 22:36 - 00023376 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-12 17:06 - 2015-10-31 01:59 - 00134608 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2015-12-12 17:06 - 2015-10-31 01:59 - 00134088 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00240584 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00020280 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00052024 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00021304 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Crypto.Util.strxor.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00350152 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00084792 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2015-12-12 17:06 - 2015-12-08 22:36 - 01826608 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-12 17:06 - 2015-10-31 02:00 - 00083912 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\sip.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 03891504 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 01950000 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00519984 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00133936 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00225080 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00207672 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00024904 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00486704 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2015-12-12 17:06 - 2015-12-08 22:36 - 00357680 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2015-03-04 22:45 - 2015-10-31 02:01 - 00019920 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\QtQuick.2\qtquick2plugin.dll
2015-03-04 22:45 - 2015-10-31 02:00 - 00786904 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\QtQuick\Controls\qtquickcontrolsplugin.dll
2015-07-31 01:02 - 2015-10-31 02:00 - 00063448 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\QtQuick\Layouts\qquicklayoutsplugin.dll
2015-03-04 22:45 - 2015-10-31 02:00 - 00019408 _____ () C:\Users\Ismael\AppData\Roaming\Dropbox\bin\QtQuick\Window.2\windowplugin.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 45069312 _____ () C:\Program Files (x86)\GalaxyClient\libcef.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00566272 _____ () C:\Program Files (x86)\GalaxyClient\PocoUtil.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 01202176 _____ () C:\Program Files (x86)\GalaxyClient\PocoNet.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 02579456 _____ () C:\Program Files (x86)\GalaxyClient\PocoData.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00476672 _____ () C:\Program Files (x86)\GalaxyClient\PocoDataSQLite.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00515072 _____ () C:\Program Files (x86)\GalaxyClient\PocoXML.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00340480 _____ () C:\Program Files (x86)\GalaxyClient\PocoZip.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 01785344 _____ () C:\Program Files (x86)\GalaxyClient\PocoFoundation.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00332288 _____ () C:\Program Files (x86)\GalaxyClient\PocoNetSSL.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00414208 _____ () C:\Program Files (x86)\GalaxyClient\PocoJSON.dll
2015-05-18 18:06 - 2015-05-16 17:00 - 00139776 _____ () C:\Program Files (x86)\GalaxyClient\expat.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00666624 _____ () C:\Program Files (x86)\GalaxyClient\sqlite.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00412672 _____ () C:\Program Files (x86)\GalaxyClient\pcre.dll
2015-05-18 18:06 - 2015-05-16 17:01 - 00094208 _____ () C:\Program Files (x86)\GalaxyClient\zlib.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00172032 _____ () C:\Program Files (x86)\GalaxyClient\PocoCrypto.dll
2015-05-18 18:06 - 2015-05-16 17:01 - 00107520 _____ () C:\Program Files (x86)\GalaxyClient\ZLIB1.dll
2014-11-28 06:48 - 2011-11-22 14:18 - 00249856 _____ () C:\Program Files (x86)\Drakonia Configurator\language.dll
2015-12-11 06:39 - 2015-11-17 01:31 - 47846176 _____ () D:\steam\bin\libcef.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 01643008 _____ () C:\Program Files (x86)\GalaxyClient\libglesv2.dll
2015-05-18 18:06 - 2015-09-10 06:41 - 00074752 _____ () C:\Program Files (x86)\GalaxyClient\libegl.dll
2012-04-26 23:38 - 2012-04-26 23:38 - 20758016 _____ () C:\Users\Ismael\AppData\Local\GamersFirst\LIVE!\libcef.dll
2015-12-24 22:29 - 2015-12-24 07:46 - 16792256 _____ () C:\Users\Ismael\AppData\Local\Google\Chrome\User Data\PepperFlash\20.0.0.267\pepflashplayer.dll
2014-02-19 18:51 - 2014-02-19 18:51 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-10-12 19:56 - 2015-09-25 00:56 - 00119208 _____ () D:\steam\winh264.dll
2014-12-02 14:31 - 2014-12-02 14:31 - 00316576 _____ () C:\Program Files\Microsoft Office 15\Root\Office15\AppVIsvStream32.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\Ismael\Desktop\IMG-20151101-WA0001.jpeg:com.dropbox.attributes
AlternateDataStreams: C:\Users\Ismael\Desktop\IMG-20151101-WA0003.jpeg:com.dropbox.attributes
AlternateDataStreams: C:\Users\Ismael\Desktop\IMG-20151101-WA0005.jpeg:com.dropbox.attributes

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\clonewarsadventures.com -> clonewarsadventures.com
IE trusted site: HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\freerealms.com -> freerealms.com
IE trusted site: HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\soe.com -> soe.com
IE trusted site: HKU\S-1-5-21-831993325-2952530161-2944430335-1000\...\sony.com -> sony.com

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-831993325-2952530161-2944430335-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Ismael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
HKU\S-1-5-82-3006700770-424185619-1745488364-794895919-4004696415-{637FE20B-9A5B-4F51-B1BE-D10045625B40}-0\Control Panel\Desktop\\Wallpaper -> 
DNS Servers: 192.168.1.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [MSMQ-In-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-TCP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-In-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [MSMQ-Out-UDP] => (Allow) %systemroot%\system32\mqsvc.exe
FirewallRules: [WCF-NetTcpActivator-In-TCP-64bit] => (Allow) LPort=808
FirewallRules: [{2CB77025-398D-4CF3-B723-8A640F223C8F}] => (Allow) D:\steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{A576317D-353E-4F07-8745-97E0DDF5A57B}] => (Allow) D:\steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{4F66E917-92C7-4958-B4DA-AF6A37AB8704}] => (Allow) C:\_STEAM_\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{29031877-55F2-4E9B-9D50-9BFF1D256134}] => (Allow) C:\_STEAM_\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{7B08D1B5-D84B-4CDC-9C58-06C7A5F07C24}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{16161765-EA20-42D5-B6CD-F241021FBA62}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{3E4B9E90-AAD1-4E6E-B04F-DCA9AD327A8C}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{93A1325D-43BA-47D2-AABC-4925342C19E4}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{096DD7FD-C060-4A29-8A53-CE2B0A0C4616}] => (Allow) D:\steam\steamapps\common\Skyshine\win32\Skyshines BEDLAM.exe
FirewallRules: [{5ED5AE70-CAF8-4C22-A515-CB3D2509B755}] => (Allow) D:\steam\steamapps\common\Skyshine\win32\Skyshines BEDLAM.exe
FirewallRules: [UDP Query User{CFA82B7D-BFDC-4D86-94E8-ABFD3F73231D}D:\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) D:\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [TCP Query User{D92C4629-69F2-41CE-8CAF-BCE8A6421ADC}D:\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) D:\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{0DBE8A28-1AD4-4C3D-9466-390E065A2B00}] => (Allow) D:\steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{463DE533-5155-4926-BFFC-85B128BD555E}] => (Allow) D:\steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{5B76E535-4F64-471F-8CB8-7EBA0199D623}] => (Allow) D:\steam\steamapps\common\Life is Feudal Your Own\yo_cm_client.exe
FirewallRules: [{3277BA3C-42B5-4C23-B8F6-F766B60707EB}] => (Allow) D:\steam\steamapps\common\Life is Feudal Your Own\yo_cm_client.exe
FirewallRules: [{E45291E4-C0B9-4652-83F1-DDAF6F13DD34}] => (Allow) D:\steam\steamapps\common\Randal's Monday\Randals.exe
FirewallRules: [{FC0A5041-DFAC-43AA-94C0-13D275039226}] => (Allow) D:\steam\steamapps\common\Randal's Monday\Randals.exe
FirewallRules: [{0A084692-D474-46C3-ADFD-4DC95B9E7BFD}] => (Allow) D:\steam\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe
FirewallRules: [{87283522-AFB2-4313-A141-84E52D8F522A}] => (Allow) D:\steam\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe
FirewallRules: [{5981968D-03BF-4BEB-B47D-C1F47E1AD3CD}] => (Allow) D:\steam\steamapps\common\Blockade3d\main.exe
FirewallRules: [{2D19B468-6854-437C-AD3E-8453BD60BA2A}] => (Allow) D:\steam\steamapps\common\Blockade3d\main.exe
FirewallRules: [{231A7DFB-A2D1-4F17-99AD-A115D71F811F}] => (Allow) LPort=1900
FirewallRules: [{D685C1FE-7EB1-4341-9108-04F5C288FD4A}] => (Allow) LPort=2869
FirewallRules: [{B0442671-D353-496C-BD23-DF2045AF72AA}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [UDP Query User{F0EAD65C-101B-448A-BB98-AF4449AB3030}D:\wow mit miky\cataclysm 4.3.4\backgrounddownloader.exe] => (Allow) D:\wow mit miky\cataclysm 4.3.4\backgrounddownloader.exe
FirewallRules: [TCP Query User{157FA18F-2C8E-4BDA-999F-1E562768AC6A}D:\wow mit miky\cataclysm 4.3.4\backgrounddownloader.exe] => (Allow) D:\wow mit miky\cataclysm 4.3.4\backgrounddownloader.exe
FirewallRules: [{6E6E23BB-9D83-4AFE-8DCD-82DB4ED9AEDF}] => (Allow) D:\steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{60EEBC28-6CBD-4966-A82D-E98AF84572BE}] => (Allow) D:\steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{EB38A7F0-8C03-45A3-A7DE-40069755FF4A}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{9E6C1F52-CB42-4488-A8A9-0E1A31EF40B1}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{55EDB7B2-7B6A-4AA4-AF66-E9A60474EBAF}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos.exe
FirewallRules: [{5C8EAAF3-CA2B-4E61-BB46-AABD476E8746}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos.exe
FirewallRules: [{167F8E63-2ACC-41ED-AD24-6BA90B7E8BCB}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{7C303416-3F27-42C2-845C-CCDBF5FE8FD1}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{2BF78781-456B-40B0-8866-B60FB5CE18CF}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{E21C1B8A-FE64-4D50-9ED5-F217454A88C4}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{9609019F-38A5-41D5-AB6E-39EF1068D098}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Mind_Pathtothalamus\Binaries\Win64\Mind_Pathtothalamus.exe
FirewallRules: [{6E853E1D-FAB6-418F-8384-A80927FD7981}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Mind_Pathtothalamus\Binaries\Win64\Mind_Pathtothalamus.exe
FirewallRules: [UDP Query User{A0FAAAF3-43AD-476F-B622-CF43929EE748}F:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe] => (Block) F:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe
FirewallRules: [TCP Query User{2FE37631-9A04-4E6B-AFE5-4E3DB180F6E4}F:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe] => (Block) F:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe
FirewallRules: [{268841EE-A2C8-4F61-9279-FBA41968674A}] => (Allow) D:\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
FirewallRules: [{9114CB41-FEA8-44F4-B53B-5BB5CBCF96F6}] => (Allow) D:\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
FirewallRules: [{12955C69-FE1A-4104-AEC1-5C283317C567}] => (Allow) D:\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
FirewallRules: [{1402E6B2-7971-49F8-B966-5D86E1139A87}] => (Allow) D:\DVDVideoSoft\Free YouTube to MP3 Converter\FreeYouTubeToMP3Converter.exe
FirewallRules: [{5F5A427B-44CA-4B64-B4D1-0F7528388A5E}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Mind_Pathtothalamus\Binaries\Win32\Mind_Pathtothalamus.exe
FirewallRules: [{6F68E710-99FD-482A-9643-DA13BBBDE2C1}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Mind_Pathtothalamus\Binaries\Win32\Mind_Pathtothalamus.exe
FirewallRules: [{E4D5903A-0687-466C-8165-6C31F97CCC67}] => (Allow) D:\steam\steamapps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{F782E2AC-A0CC-495C-96DD-2CCC347014DF}] => (Allow) D:\steam\steamapps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{025FDDCA-8F86-4ECC-AE59-65F9B20C5962}] => (Allow) D:\steam\steamapps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{E119E98F-F593-413F-B89E-042B62158F15}] => (Allow) D:\steam\steamapps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{6B8A1213-61BC-48C4-9A8F-461A67236F96}] => (Allow) F:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{F57EB36A-238C-4678-97AB-7A4874062E23}] => (Allow) F:\Steam\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{51DE8E1D-9227-45E0-998B-BD140DF6BB90}] => (Allow) D:\steam\steamapps\common\Commander Conquest of the Americas Gold\Commander.exe
FirewallRules: [{99AF6DFB-63CC-4D52-9538-ED6311675B04}] => (Allow) D:\steam\steamapps\common\Commander Conquest of the Americas Gold\Commander.exe
FirewallRules: [{EB3766D6-E360-4EE4-A102-56DCF856E786}] => (Allow) D:\steam\steamapps\common\Battle vs Chess\battlevschess.exe
FirewallRules: [{29351FE6-0BC8-4817-8596-ED0262E83688}] => (Allow) D:\steam\steamapps\common\Battle vs Chess\battlevschess.exe
FirewallRules: [{F5C354F9-DF86-42F7-92B9-B578EE9B562B}] => (Allow) D:\steam\steamapps\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{DA859032-94C5-4B06-8BA9-F76B969E6F1A}] => (Allow) D:\steam\steamapps\common\Skyrim\skse_steam_boot.exe
FirewallRules: [{8523C4F0-D1DE-4EB2-832D-E479B0CC5076}] => (Allow) D:\steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{7C2C4989-A946-4BC2-84F4-B81E6AB0F335}] => (Allow) D:\steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{AD60B7CB-283A-4CD8-9660-33F0363FB581}] => (Allow) D:\steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{A2130D4B-3402-4386-A7B1-4901657E880D}] => (Allow) D:\steam\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{5AAE99B4-B87D-43B9-A162-797D6BBEE6DC}] => (Allow) C:\Users\Ismael\AppData\Roaming\Steam\SteamHelper.exe
FirewallRules: [{8F3C72DD-B82C-4DA1-AD5E-73E23408C5B0}] => (Allow) C:\Users\Ismael\AppData\Roaming\Steam\SteamHelper.exe
FirewallRules: [UDP Query User{FE14409C-6354-4717-AB50-614FF42EB406}C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{BBD74FE7-6227-4517-ADDE-BFE794EC593E}C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base38236\heroesofthestorm_x64.exe
FirewallRules: [{31B78C61-600B-49C3-B85C-3F6BD8D249F9}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{DB617531-C6B8-4818-AEA5-4BBB62CEC896}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{2CD73071-F95A-4359-B30E-CC7B94B68D45}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [{A796E6A0-997E-4705-96A7-FFA9E145BA61}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe
FirewallRules: [UDP Query User{4D746B32-8DBB-4D73-B435-B8AECE0C62F2}C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{8D960A37-6D22-4595-8749-FA7CB819C03F}C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37795\heroesofthestorm_x64.exe
FirewallRules: [{07A1D332-1A12-4261-B13D-2D71BFFA24CD}] => (Allow) F:\Steam\SteamApps\common\Monaco\MONACO.exe
FirewallRules: [{4CE491AD-EEFE-4734-9859-0ED9399911AB}] => (Allow) F:\Steam\SteamApps\common\Monaco\MONACO.exe
FirewallRules: [{BE6DA4A9-6526-4BCA-B853-D9ED8EDE2881}] => (Allow) D:\steam\steamapps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{9360EDD8-C3FB-48D0-9988-C78F2082114C}] => (Allow) D:\steam\steamapps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe
FirewallRules: [{E5D15CD8-7F7A-416D-943F-AE25E59CE605}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{FA9AD096-672E-47EB-8DEB-7165093F004B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{EE90239D-C249-4EA4-AAFF-13C6CD9EEE51}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{DF18E331-03C5-4503-A4AE-C3D6F7D0E49F}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{107E87D9-AEBE-4714-9785-7814C41A9922}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{8941B247-A219-48B1-97FA-4CECC015E3B1}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{3FAE2927-C254-496D-B93B-2B3C3FE57837}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{072EF151-F606-4C38-84CF-223E942D110B}] => (Allow) D:\steam\steamapps\common\Spoiler Alert\Spoiler Alert.exe
FirewallRules: [{8EDF6EFF-DCA6-4FC2-A302-01A136913541}] => (Allow) D:\steam\steamapps\common\Spoiler Alert\Spoiler Alert.exe
FirewallRules: [{94924FC8-5EB2-41E1-9D74-539D9A673236}] => (Allow) D:\steam\steamapps\common\AnotherPerspective\ap.exe
FirewallRules: [{1F91EEC9-B5D6-4768-BD1B-B95E9EE43417}] => (Allow) D:\steam\steamapps\common\AnotherPerspective\ap.exe
FirewallRules: [{98360D8A-5CAB-4F55-A380-C2E9566490A0}] => (Allow) F:\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{6657A41A-F54A-4B29-AE9F-252C62EA4A62}] => (Allow) F:\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe
FirewallRules: [{0E7D49B4-2141-4D13-920A-79D058F3014A}] => (Allow) D:\steam\steamapps\common\abyss_odyssey\Binaries\Win32\AO.exe
FirewallRules: [{8515506E-2942-4BF4-B08D-05B10450B22E}] => (Allow) D:\steam\steamapps\common\abyss_odyssey\Binaries\Win32\AO.exe
FirewallRules: [{DBC858FD-FF16-4E4F-A2CA-C3EDC7150F55}] => (Allow) D:\steam\steamapps\common\OPPW3\oppw3.exe
FirewallRules: [{0CD3D87A-B19B-4AE2-BE3A-8986ECDE5118}] => (Allow) D:\steam\steamapps\common\OPPW3\oppw3.exe
FirewallRules: [{5C323A19-1E36-4479-A661-34AB3CFA1FEA}] => (Allow) D:\steam\steamapps\common\Mad Max\MadMax.exe
FirewallRules: [{E55312AF-433D-4FE2-80E3-7EDBFDC3E26D}] => (Allow) D:\steam\steamapps\common\Mad Max\MadMax.exe
FirewallRules: [{48C94D1B-931D-4887-BF24-BCB42AA99C09}] => (Allow) D:\steam\steamapps\common\Port of Call\PortOfCall.exe
FirewallRules: [{A9C93D79-80A7-4212-B152-00CFD33E63CB}] => (Allow) D:\steam\steamapps\common\Port of Call\PortOfCall.exe
FirewallRules: [{07967037-9B07-458F-8F1C-176B4A7940E1}] => (Allow) D:\steam\steamapps\common\Stealth Inc 2\settings\settings.exe
FirewallRules: [{6642D315-DB39-447F-A084-A0D156D0CEF2}] => (Allow) D:\steam\steamapps\common\Stealth Inc 2\settings\settings.exe
FirewallRules: [{6B3DA6DC-39E3-491D-ADAA-F28263DC60AA}] => (Allow) D:\steam\steamapps\common\OutThereOmega\OutThereOmega.exe
FirewallRules: [{46CC17D0-B742-4583-86CD-45F114B5EB8C}] => (Allow) D:\steam\steamapps\common\OutThereOmega\OutThereOmega.exe
FirewallRules: [{F26D7FF8-16DA-4851-BC0C-07980792401C}] => (Allow) D:\steam\steamapps\common\Ampu-Tea\AmpuTea.exe
FirewallRules: [{C29C9FD9-F392-4E3D-9FB1-C98FEC9E17A8}] => (Allow) D:\steam\steamapps\common\Ampu-Tea\AmpuTea.exe
FirewallRules: [{322299E2-0AF7-4F88-AC87-CEF3E9F6E4C3}] => (Allow) D:\steam\steamapps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{69D1D155-FD15-41F8-9341-676BEF699BD8}] => (Allow) D:\steam\steamapps\common\Magic 2014\DotP_D14.exe
FirewallRules: [{D66338B1-9CF5-47A5-83D2-820E7B9B3EEF}] => (Allow) D:\steam\steamapps\common\Hacknet\Hacknet.exe
FirewallRules: [{2DDF3FCD-E5AC-4A53-B3EB-BA5905B8E411}] => (Allow) D:\steam\steamapps\common\Hacknet\Hacknet.exe
FirewallRules: [{515629A9-4DCA-4DE2-AD00-A6777C17BB89}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{AE22A33F-FE87-4A10-B1D7-4386D9DDE1A6}] => (Allow) F:\Steam\Steam.exe
FirewallRules: [{01E91BF6-FF38-4623-9537-2E5D09156D7E}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{4960FED2-6CAA-4A14-8DDB-F1AA07BF0969}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeCam.exe
FirewallRules: [{AB612FFF-33E3-462E-940E-A414AE6616B3}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{D3102383-004A-4471-A503-AE4927515ACD}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeEnC2.exe
FirewallRules: [{379DC712-4D10-4023-8A3D-10F0292943AC}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{3D275E81-1970-4C18-AF64-8DE39F05A64F}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeExp.exe
FirewallRules: [{BA545030-F767-4758-8195-6A94C62EE14F}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{17F7F6AC-92E4-4F0B-8632-879065B99E18}] => (Allow) C:\Program Files (x86)\Microsoft LifeCam\LifeTray.exe
FirewallRules: [{2588315F-D47B-4043-B76E-2AA809F45F69}] => (Allow) D:\steam\Steam.exe
FirewallRules: [{D08E5E4C-6B71-4531-9AAA-6598C3E6D3CB}] => (Allow) D:\steam\Steam.exe
FirewallRules: [{C2391B96-DEE9-49AD-8579-4FFED63546E5}] => (Allow) D:\steam\bin\steamwebhelper.exe
FirewallRules: [{F9EAF699-C27D-48C4-AC55-ACC80941990E}] => (Allow) D:\steam\bin\steamwebhelper.exe
FirewallRules: [{601189C5-1EC6-4734-95B7-48E92FFF0CCF}] => (Allow) F:\Steam\SteamApps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{E494F373-70C0-4759-9D18-70BB018DA638}] => (Allow) F:\Steam\SteamApps\common\SpeedRunners\SpeedRunners.exe
FirewallRules: [{01D5EC04-3D69-48BD-ADAB-45C0BF76A083}] => (Allow) F:\Steam\SteamApps\common\10000000\10000000.exe
FirewallRules: [{B2A4BE11-AE05-4087-A069-5F192334EF17}] => (Allow) F:\Steam\SteamApps\common\10000000\10000000.exe
FirewallRules: [{271501C2-4454-467E-A0D8-A0F7DED24CAD}] => (Allow) F:\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{C94D32A7-06B5-4B32-B031-048362ED8917}] => (Allow) F:\Steam\SteamApps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{B5A38A1D-0D64-4B87-84F2-34B04D4FA9CD}] => (Allow) F:\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{624945EF-75BA-4D53-B12D-95ABAC23890C}] => (Allow) F:\Steam\SteamApps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{E3CF1B2E-23A3-47E9-85A8-C32B33DE549E}] => (Allow) F:\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{F37F3894-51B5-4226-A126-1C426F28E66F}] => (Allow) F:\Steam\SteamApps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{8E318DE8-6B9E-412D-8078-985D3D407DEA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{E2251AB3-2122-4BA4-BD3D-A6D6E58691E9}F:\dragonsprophet\dragon's prophet\launcher.exe] => (Allow) F:\dragonsprophet\dragon's prophet\launcher.exe
FirewallRules: [UDP Query User{50FF52ED-EBDF-40F4-80C9-9D5677B44EA8}F:\dragonsprophet\dragon's prophet\launcher.exe] => (Allow) F:\dragonsprophet\dragon's prophet\launcher.exe
FirewallRules: [{8DE3A0D1-D3FD-407A-9957-F359F1295EE8}] => (Block) F:\dragonsprophet\dragon's prophet\launcher.exe
FirewallRules: [{1FDA609E-2D4F-4C78-BC53-3179DBD9A86B}] => (Block) F:\dragonsprophet\dragon's prophet\launcher.exe
FirewallRules: [{3C0E1C3F-4A39-4A55-84B3-AACAE46C4E96}] => (Allow) C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{9F68DFFB-266B-4B79-831F-2C98E9174684}] => (Allow) C:\Users\Ismael\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [TCP Query User{B17A6E8C-BFAB-43FB-B0B2-C1833B8D091A}F:\dragonsprophet\dragon's prophet\dp_x64.exe] => (Allow) F:\dragonsprophet\dragon's prophet\dp_x64.exe
FirewallRules: [UDP Query User{077485A2-6D98-4885-A07C-7EAC60FBDE2D}F:\dragonsprophet\dragon's prophet\dp_x64.exe] => (Allow) F:\dragonsprophet\dragon's prophet\dp_x64.exe
FirewallRules: [{94773C03-0F72-4018-AFD7-37C0940D1DDD}] => (Allow) F:\Steam\SteamApps\common\Cloudbuilt\CloudBuilt.exe
FirewallRules: [{499E730D-7F85-48E6-B331-BEF7ADF75D56}] => (Allow) F:\Steam\SteamApps\common\Cloudbuilt\CloudBuilt.exe
FirewallRules: [{228C7A9C-08D7-4951-AE91-02AD3C9F37F0}] => (Allow) F:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{DA234AFA-572B-45A1-8DEE-264C857D44A0}] => (Allow) F:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{57AE5C09-7D47-435A-9CD4-B0ED9A763AB3}] => (Allow) F:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{0145311C-87F1-469B-BE40-E2BFD190ACA5}] => (Allow) F:\Steam\SteamApps\common\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [TCP Query User{81532378-754F-4FA4-B915-A2F851A091D0}C:\gog games\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) C:\gog games\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [UDP Query User{F74C35F5-2957-4B10-AA89-A20578FC77FC}C:\gog games\the witcher 2 enhanced edition\bin\witcher2.exe] => (Allow) C:\gog games\the witcher 2 enhanced edition\bin\witcher2.exe
FirewallRules: [{2B42684F-77E8-41DE-ADBD-646E7CF9F233}] => (Allow) F:\Steam\SteamApps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [{A2D839A0-DE6B-4646-AA9B-C52376EACD2A}] => (Allow) F:\Steam\SteamApps\common\3DMark\3DMarkLauncher.exe
FirewallRules: [TCP Query User{BFEE0FF8-E6F3-4A09-8DD6-937D1E5C4ED3}C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno2070\initengine.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno2070\initengine.exe
FirewallRules: [UDP Query User{7703334A-6851-44F8-9349-04B6F70A58C0}C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno2070\initengine.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno2070\initengine.exe
FirewallRules: [{7A9439E5-FF73-469F-9055-7C81BC105BB8}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno5.exe
FirewallRules: [{22718752-216E-4377-AA0C-7C6E14637E08}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Anno5.exe
FirewallRules: [{9B5DD2CE-FA56-4422-AF43-E1101F4D5676}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\AutoPatcher.exe
FirewallRules: [{CB1759CB-2CD8-4330-9D01-7A16A37E5F90}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\AutoPatcher.exe
FirewallRules: [{FB9C57F7-D579-4949-B6D6-A53A5DB191B3}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\InitEngine.exe
FirewallRules: [{2C7399C0-A265-48B8-858F-781822CDF743}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\InitEngine.exe
FirewallRules: [{AFE02FF8-A3E3-4A3D-966B-75210EA1FF45}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{31F99FE5-A81D-4B36-A9A3-AA4158991C0B}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe
FirewallRules: [{BD45E96E-AB14-4535-813E-F3B9596548F7}] => (Allow) D:\battlenet\Battle.net\Battle.net.exe
FirewallRules: [{F6A2E040-06EB-4567-A999-D71B29009737}] => (Allow) D:\battlenet\Battle.net\Battle.net.exe
FirewallRules: [{941738BD-EAA0-4E19-B423-F1C35AD57F7D}] => (Allow) F:\Steam\SteamApps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{A854AF77-1DA6-4559-82D1-BF39304624D9}] => (Allow) F:\Steam\SteamApps\common\Prison Architect\Prison Architect.exe
FirewallRules: [{AECC3DEB-0A67-4361-891C-2C545402933D}] => (Allow) F:\Steam\SteamApps\common\Crypt of the NecroDancer\NecroDancer.exe
FirewallRules: [{43C53822-A734-41BB-B5E0-E5C0A0856E4B}] => (Allow) F:\Steam\SteamApps\common\Crypt of the NecroDancer\NecroDancer.exe
FirewallRules: [{C65765E9-6A64-4094-A6B5-856B9E68FF81}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{5387BAF1-038D-4181-81F4-3D5872AEE944}] => (Allow) C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\The Crew (Worldwide)\TheCrew.exe
FirewallRules: [{8307A5B6-40EE-4BCC-8983-022FC02C5059}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{5894782B-2D62-41C7-9D35-8B11EDDB360A}] => (Allow) C:\Program Files\HP\HP Deskjet 2050 J510 series\Bin\USBSetup.exe
FirewallRules: [{807F9C32-74A8-4ADE-9247-71858624C70E}] => (Allow) F:\Steam\SteamApps\common\Tower Wars\TW.exe
FirewallRules: [{300AEE93-8133-4BA4-A79F-F50974E9CD3D}] => (Allow) F:\Steam\SteamApps\common\Tower Wars\TW.exe
FirewallRules: [{773B5E96-77AA-4F8B-A460-6210A9DDB737}] => (Allow) F:\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{A3806247-2D59-4DD1-9303-3F21B11A118E}] => (Allow) F:\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [TCP Query User{C4488B72-AC3E-47A6-BF6A-81836CAB2930}F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [UDP Query User{F4D05547-5888-428A-843A-02B80120C0D2}F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe
FirewallRules: [TCP Query User{742742B3-B7C2-4E01-AB63-5107F7FA583A}F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [UDP Query User{AEC0B4D4-7D10-4DD2-9940-88E52FD58F8F}F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) F:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe
FirewallRules: [{DD44A12F-2E3B-4FC5-B0D8-D8A86B207743}] => (Allow) F:\Steam\SteamApps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{73EC5450-440D-45F7-B25E-4AE8DC2920F0}] => (Allow) F:\Steam\SteamApps\common\Lords Of The Fallen\bin\LordsOfTheFallen.exe
FirewallRules: [{1C76C335-2126-47C5-8CD9-B638D7319C73}] => (Allow) F:\Steam\SteamApps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{417FA7D5-8DEA-4169-83A1-DBBD5F0D8562}] => (Allow) F:\Steam\SteamApps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [TCP Query User{147E3ADE-3F5A-4BE8-86CB-FE983590B819}C:\users\ismael\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\ismael\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{E403CE7A-BD32-428D-82CA-2EB46D9A1FC2}C:\users\ismael\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\ismael\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{F4E4DCE3-0603-41E1-B6AD-8891BEC403AC}] => (Allow) F:\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{B86240C0-C032-4FBF-9F64-D56BE131B76D}] => (Allow) F:\Steam\SteamApps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{3B0F8096-FD90-4D08-8C01-9BF8A5C278DB}] => (Allow) C:\_STEAM_\steamapps\common\Knights of Pen and Paper\knightspp.exe
FirewallRules: [{1E3BC641-047B-4C40-BB50-2BC17F858C66}] => (Allow) C:\_STEAM_\steamapps\common\Knights of Pen and Paper\knightspp.exe
FirewallRules: [{7EF08759-33FA-4C2B-9F95-CAE6F77242BB}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Binaries\Win32\Mind.exe
FirewallRules: [{B1F06989-D13D-4212-83C8-20E664E1D2C8}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Binaries\Win32\Mind.exe
FirewallRules: [{5173723F-3303-4EAC-A491-04EC5A55FEB2}] => (Allow) D:\steam\steamapps\common\YearWalk\yearwalk.exe
FirewallRules: [{12088605-738F-4CEC-8B27-FD8404625F36}] => (Allow) D:\steam\steamapps\common\YearWalk\yearwalk.exe
FirewallRules: [{9AB938E3-1C15-4E61-897A-6233FBE558E9}] => (Allow) D:\steam\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{D07726BE-7FA4-48BC-B296-9672FA78F6FF}] => (Allow) D:\steam\steamapps\common\Crusader Kings II\CK2game.exe
FirewallRules: [{85F76C19-87E5-4B35-8DA7-C4BAEB354B8D}] => (Allow) D:\steam\steamapps\common\Gone Home\GoneHome.exe
FirewallRules: [{E0509A5B-EC37-4992-82FC-D1153AD4FCD0}] => (Allow) D:\steam\steamapps\common\Gone Home\GoneHome.exe
FirewallRules: [TCP Query User{F94B05AB-8DD8-4367-8E75-428402B468A9}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [UDP Query User{4CB20C89-5ACF-49C8-ABD1-0984E8D6E6E7}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe
FirewallRules: [{6B7ED683-D96E-4AA0-9E59-BD99C85F13D7}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{5C257D5B-492E-4E28-B54F-2AF7F0DE05BA}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{A87DA547-6371-444B-8302-D8160352CBA3}] => (Allow) F:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{AFBD6885-A2DC-44C6-A1C7-C8CC3871DF24}] => (Allow) F:\Steam\SteamApps\common\Dark Souls Prepare to Die Edition\DATA\DARKSOULS.exe
FirewallRules: [{E03AC328-3D22-4DD0-8C3D-4A1A7217DBD7}] => (Allow) D:\steam\steamapps\common\Legend of Grimrock\grimrock.exe
FirewallRules: [{A7E0D237-659C-41AF-B71E-6B23AF946278}] => (Allow) D:\steam\steamapps\common\Legend of Grimrock\grimrock.exe
FirewallRules: [{D03A2004-EEBF-433B-823C-716DBC573AFF}] => (Allow) C:\_STEAM_\steamapps\common\Styx\Binaries\Win64\StyxGame.exe
FirewallRules: [{22ECCCEC-A640-4630-B2AB-DA437A39872E}] => (Allow) C:\_STEAM_\steamapps\common\Styx\Binaries\Win64\StyxGame.exe
FirewallRules: [{7F94ABB3-DDEA-49A4-8404-19EB967946A9}] => (Allow) F:\Steam\SteamApps\common\audiosurf\engine\QuestViewer.exe
FirewallRules: [{DEC45A98-D3A0-4905-B5EE-8D780053E8AD}] => (Allow) F:\Steam\SteamApps\common\audiosurf\engine\QuestViewer.exe
FirewallRules: [{40F13119-B5B3-43F8-8932-99D08CFF00C4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [{F6FB7F3A-6CC6-4CDC-BDB5-4D35C5DA1356}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3715\Agent.exe
FirewallRules: [TCP Query User{82475B4D-57A3-47DC-9D85-82D72256B750}D:\battlenet\starcraft ii\starcraft ii\versions\base32283\sc2.exe] => (Allow) D:\battlenet\starcraft ii\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [UDP Query User{AC54A972-9D41-41DE-ADD1-D9AA951CF127}D:\battlenet\starcraft ii\starcraft ii\versions\base32283\sc2.exe] => (Allow) D:\battlenet\starcraft ii\starcraft ii\versions\base32283\sc2.exe
FirewallRules: [TCP Query User{A9826FFA-5FB2-4FCF-96F7-A0E56B76EFB4}D:\battlenet\d3\diii\diablo iii\diablo iii.exe] => (Allow) D:\battlenet\d3\diii\diablo iii\diablo iii.exe
FirewallRules: [UDP Query User{DCED1011-F215-4293-9513-24178E54B2D7}D:\battlenet\d3\diii\diablo iii\diablo iii.exe] => (Allow) D:\battlenet\d3\diii\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{1CA14154-2A53-4556-94AD-3B0C0DF93C46}D:\battlenet\hearthstone\hearthstone\hearthstone.exe] => (Allow) D:\battlenet\hearthstone\hearthstone\hearthstone.exe
FirewallRules: [UDP Query User{0C27B5AD-1808-4BF1-A65A-D446E949FA17}D:\battlenet\hearthstone\hearthstone\hearthstone.exe] => (Allow) D:\battlenet\hearthstone\hearthstone\hearthstone.exe
FirewallRules: [{0FF96908-7C81-4CC8-83E0-F4F61298F250}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{05A8F9BD-E1F1-48C9-B72F-C5F02B839295}] => (Allow) D:\Program Files (x86)\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [TCP Query User{8FE06C4E-12B0-4A0C-BA59-048172171055}D:\teso\launcher\bethesda.net_launcher.exe] => (Allow) D:\teso\launcher\bethesda.net_launcher.exe
FirewallRules: [UDP Query User{017E4516-8604-4AE5-9D7C-A842CDCD56C7}D:\teso\launcher\bethesda.net_launcher.exe] => (Allow) D:\teso\launcher\bethesda.net_launcher.exe
FirewallRules: [{736D159B-EDF0-46F8-87BF-078DDEC32436}] => (Allow) C:\_STEAM_\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{59A4B240-FB04-4938-8D45-EA48FCFC61C0}] => (Allow) C:\_STEAM_\steamapps\common\Tomb Raider\TombRaider.exe
FirewallRules: [{972C1B42-E70D-4DB0-BB7A-CEBC38CC6F44}] => (Allow) F:\Steam\SteamApps\common\The Incredible Adventures of Van Helsing II\VanHelsing.exe
FirewallRules: [{443498D4-ED25-411E-A27A-5DBE861C9BB0}] => (Allow) F:\Steam\SteamApps\common\The Incredible Adventures of Van Helsing II\VanHelsing.exe
FirewallRules: [TCP Query User{3570478F-70E4-48BF-91D8-6090CD979602}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{141F16D6-FF78-4464-A19F-D5A2746B131F}C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_25\bin\javaw.exe
FirewallRules: [{92BBD539-F060-4DE6-BE7A-81CC25F0A000}] => (Allow) C:\_STEAM_\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{4C3D41B9-BF5F-4BAE-9223-CA5D30D74F21}] => (Allow) C:\_STEAM_\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe
FirewallRules: [{78BDC3B9-C944-4F6F-A05E-8F14872E85AF}] => (Allow) F:\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{11E2365F-A3F0-40FA-ADFB-6852D8F39A54}] => (Allow) F:\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{7416EA8A-0390-4D62-9C83-E669145A33ED}] => (Allow) LPort=8317
FirewallRules: [{66B72BC4-CCC9-4ABC-BAA8-4AB220D86E88}] => (Allow) C:\_STEAM_\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{24F7B161-2EF6-4312-A217-57D709B28206}] => (Allow) C:\_STEAM_\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [TCP Query User{C3495698-9B60-40FB-A193-AD6493ED8E11}C:\_steam_\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) C:\_steam_\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [UDP Query User{34521A6D-E56B-4499-8BE3-DA3BAED513BE}C:\_steam_\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) C:\_steam_\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe
FirewallRules: [{6577E18B-00EB-41AB-B9F0-30DE8B1EB2DB}] => (Allow) D:\steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{CD670746-7C37-4629-9B68-CD4925B7EC7C}] => (Allow) D:\steam\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [TCP Query User{EB1E5DF9-01BD-44A6-B170-7C3F06C4C724}F:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) F:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe
FirewallRules: [UDP Query User{07FE56F1-2348-4868-B462-7BB0272AD6DC}F:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe] => (Allow) F:\steam\steamapps\common\orcs must die 2\build\game\orcsmustdie2.exe
FirewallRules: [{053B8444-F3C2-4330-8BA5-56932ECFB7F5}] => (Allow) D:\gameforge\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{B9F97050-BD8A-4063-BB69-D37647E2799E}D:\gameforge\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) D:\gameforge\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [UDP Query User{1A09CAF7-9402-4A6D-8DE5-85A0E5F3BF24}D:\gameforge\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) D:\gameforge\gameforgelive\games\deu_deu\tera\tera-launcher.exe
FirewallRules: [{D445D4D2-123E-46E8-97AA-674C24C80F63}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{C47E63A7-B714-47BF-84A2-067C26E9ADAB}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{3F3FEEA1-FA2E-45EB-BFB1-ECB529802CC4}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8975BF57-AC70-47BE-AB51-3A51264CD543}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{77465A37-F00A-4C6A-B351-63A53204A6DA}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe
FirewallRules: [UDP Query User{ACC457C2-C454-4D51-9833-9E29A47EB21C}C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe] => (Allow) C:\program files (x86)\ea games\battlefield heroes\bfheroes.exe
FirewallRules: [{9A175F8D-42FE-4746-A8F1-B4AAFA57021E}] => (Allow) C:\_STEAM_\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{E0469095-54D5-43A3-8E8B-5DB697479167}] => (Allow) C:\_STEAM_\steamapps\common\Cities_Skylines\Cities.exe
FirewallRules: [{564A701F-6C4C-4A80-B4EF-F62DD4B9CB00}] => (Allow) F:\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{79EC6E5A-9CD7-4E24-8CB7-F0A640EA25B7}] => (Allow) F:\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [TCP Query User{C95B1D00-0721-4F9A-A97E-435E6F276230}C:\users\ismael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\ismael\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [UDP Query User{43EFF0E8-AFAF-448C-B8EE-7EF7E9B0F704}C:\users\ismael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\ismael\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{4383000A-2EBF-4088-AB0A-B195399149B0}] => (Allow) F:\Steam\SteamApps\common\Cloudbuilt\CommunityLevelEditor.exe
FirewallRules: [{B089FB84-10B4-4D67-85AD-F37A3D1BF46C}] => (Allow) F:\Steam\SteamApps\common\Cloudbuilt\CommunityLevelEditor.exe
FirewallRules: [{5BEF85CA-73C9-4C9E-847B-83653704F62D}] => (Allow) D:\steam\steamapps\common\Ori\ori.exe
FirewallRules: [{6688BA6B-469B-48CB-ACAC-BACEA1B28CF1}] => (Allow) D:\steam\steamapps\common\Ori\ori.exe
FirewallRules: [TCP Query User{84025B79-8DEF-41DB-B93A-9FC48B31C7B4}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{335AA2E0-6D68-4FF3-BDC4-B06594D4F0A4}C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34190\heroesofthestorm_x64.exe
FirewallRules: [TCP Query User{E65FD010-4178-4E3D-A39E-BA240BB9C9C4}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{EDFF844B-4BC3-47ED-B7F8-79D3AD8E9B15}C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34659\heroesofthestorm_x64.exe
FirewallRules: [{A3985C50-2C43-4B0C-AEA5-A0A28D4B02B7}] => (Allow) D:\steam\steamapps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{858AAC8E-95D6-434F-B75B-E3F3D2B5B5EC}] => (Allow) D:\steam\steamapps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{AC22E318-3638-4A9A-BCC1-A0E8CEFF5A4C}] => (Allow) C:\Program Files (x86)\Tele2\SupportCenter\SupportCenter.exe
FirewallRules: [{890275CD-F035-4E3E-AC26-6262A295B702}] => (Allow) C:\Program Files (x86)\Tele2\SupportCenter\SupportCenter.exe
FirewallRules: [{68747C78-C16D-4474-B901-D1750156F1A7}] => (Allow) C:\Program Files (x86)\Tele2\Installer_COMPLETE\Installer_Complete.exe
FirewallRules: [{FF13A85E-AC5D-4C86-860B-ED055D943095}] => (Allow) C:\Program Files (x86)\Tele2\Installer_COMPLETE\Installer_Complete.exe
FirewallRules: [{D4CED8F4-CE6C-4297-84C1-439915337F27}] => (Allow) D:\steam\steamapps\common\Hitman Absolution\HMA.exe
FirewallRules: [{A0C347ED-1EE7-4850-B567-E5D56D13A9DA}] => (Allow) D:\steam\steamapps\common\Hitman Absolution\HMA.exe
FirewallRules: [{8ADF46A1-1F24-4632-832A-0AA9FAAF3730}] => (Allow) D:\steam\steamapps\common\Hitman Sniper Challenge\HMSC.exe
FirewallRules: [{1FF8AF3C-12B1-4CF5-92BB-99AAD9D8C6DF}] => (Allow) D:\steam\steamapps\common\Hitman Sniper Challenge\HMSC.exe
FirewallRules: [{999BD285-E61D-47D2-AE0B-24C856AF1EDC}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [{C817C891-A921-451C-A964-4C81108B0353}] => (Allow) D:\Program Files (x86)\Origin Games\Titanfall\Titanfall.exe
FirewallRules: [TCP Query User{85166EB3-AC06-45CA-9C0B-1219ADED916F}C:\users\ismael\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\ismael\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [UDP Query User{5EC90810-3B7E-4FEB-B69F-B614488D2056}C:\users\ismael\appdata\roaming\utorrent\utorrent.exe] => (Allow) C:\users\ismael\appdata\roaming\utorrent\utorrent.exe
FirewallRules: [{B2FF8DE9-BDEA-4186-BC15-6F06C3D6F607}] => (Allow) C:\_STEAM_\steamapps\common\In Verbis Virtus\Binaries\Win32\IVV.exe
FirewallRules: [{304F293E-0401-4D79-85EF-A9655B8C8F79}] => (Allow) C:\_STEAM_\steamapps\common\In Verbis Virtus\Binaries\Win32\IVV.exe
FirewallRules: [{3DA4F1A8-2348-4841-B219-8A7639F2FF1D}] => (Allow) C:\_STEAM_\steamapps\common\Reign Of Kings\ROK.exe
FirewallRules: [{45ADF016-A2BE-475A-B71F-AF716E5C8B24}] => (Allow) C:\_STEAM_\steamapps\common\Reign Of Kings\ROK.exe
FirewallRules: [{526C1EC8-042C-42BA-9C7D-013BED524D8B}] => (Allow) D:\steam\steamapps\common\Deus Ex\System\DeusEx.exe
FirewallRules: [{6A71E36E-5531-4C17-AE04-D92CACAC3376}] => (Allow) D:\steam\steamapps\common\Deus Ex\System\DeusEx.exe
FirewallRules: [{2B43CC22-F4C6-4385-988C-80569EBE737A}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{A09FFE26-E6BF-4F9C-88EF-BB72CFC02862}] => (Allow) D:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{93668018-24D8-42B1-A4F2-47F45FC67845}] => (Allow) C:\_STEAM_\steamapps\common\Reign Of Kings\Reign of Kings.exe
FirewallRules: [{5BF30AEB-A70A-413A-A598-6CA0644DFC38}] => (Allow) C:\_STEAM_\steamapps\common\Reign Of Kings\Reign of Kings.exe
FirewallRules: [{C0297A3A-CCD8-4D81-8CF9-2A248CAE47DE}] => (Allow) C:\Program Files (x86)\Tele2\Installer_COMPLETE\Installer_Complete.exe
FirewallRules: [{D5CF25FC-F22A-4F8C-8B17-299164787FFF}] => (Allow) C:\Program Files (x86)\Tele2\Installer_COMPLETE\Installer_Complete.exe
FirewallRules: [{38D985ED-9F76-426D-945D-F9784161A385}] => (Allow) D:\aPB\APB\APB Reloaded\Binaries\APB.exe
FirewallRules: [{119C5183-2A54-4EDB-B5E0-BD6C95C3DEE6}] => (Allow) D:\aPB\APB\APB Reloaded\Binaries\APB.exe
FirewallRules: [{278A6054-AB09-46E7-A13F-4A79DA7C576A}] => (Allow) D:\aPB\APB\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{A58618D8-9B0C-4D15-A676-623223ABE175}] => (Allow) D:\aPB\APB\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{3F2B7E1A-2004-4371-8A3D-661A66BB7A67}] => (Allow) D:\steam\steamapps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{D661BF32-EA62-4722-B19C-1A4E845A818A}] => (Allow) D:\steam\steamapps\common\APB Reloaded\Launcher\APBLauncher.exe
FirewallRules: [{775274A4-0FC4-4717-B39F-41007FE795F6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{80D01D3C-574C-4AC2-BABC-703C47703CC3}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{627A9B9A-72D7-4D75-9EE9-63982A028E60}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{098F5FDF-7576-4D62-A721-0E5A348EDC6A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{58C94454-C4B6-48BE-90C7-C0712D0DFFC5}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe
FirewallRules: [{9F2E7092-56B3-494E-9EDE-E1584E0398C8}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\Hammerwatch.exe
FirewallRules: [{4708E423-0ABB-4EB4-A32B-A343B00A611D}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{C813216F-24AA-4D88-9EA7-97D2D8367739}] => (Allow) F:\Steam\SteamApps\common\Hammerwatch\editor\HammerEditor.exe
FirewallRules: [{B26E06C2-FC2E-4172-A765-128CBFC88E99}] => (Allow) D:\steam\steamapps\common\Blade Symphony\berimbau.exe
FirewallRules: [{4CD5369F-9AAE-480B-9A41-997BEA9F443A}] => (Allow) D:\steam\steamapps\common\Blade Symphony\berimbau.exe
FirewallRules: [{538839A1-0137-4DC6-90DB-7F92FAD213B1}] => (Allow) D:\steam\steamapps\common\CloudChamber\CloudChamber.exe
FirewallRules: [{DC0F93AD-758A-41EE-940E-597279042F0E}] => (Allow) D:\steam\steamapps\common\CloudChamber\CloudChamber.exe
FirewallRules: [{3F369AE9-5135-44B0-B84C-8CA8034F8E63}] => (Allow) D:\steam\steamapps\common\Dungeon of the Endless\DungeonoftheEndless.exe
FirewallRules: [{CFFA7722-038A-4A8E-B232-51F792BFD55D}] => (Allow) D:\steam\steamapps\common\Dungeon of the Endless\DungeonoftheEndless.exe
FirewallRules: [{676CE17D-FC13-470E-9915-70D6A9907137}] => (Allow) F:\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{B538E0AA-1090-4EDD-8C4E-9A696DBB2735}] => (Allow) F:\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{8A314EE5-788C-42D7-9BF4-095AD04FE92D}] => (Allow) D:\steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{016F112E-9F79-4EEF-B4C3-0AA1B4A6F666}] => (Allow) D:\steam\steamapps\common\Torchlight II\ModLauncher.exe
FirewallRules: [{E4904EC7-DB99-477E-B0D6-04FF3A278BD2}] => (Allow) D:\steam\steamapps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{2A11D03B-529D-4E58-B954-97E4DD63AA49}] => (Allow) D:\steam\steamapps\common\CoJ Gunslinger\CoJGunslinger.exe
FirewallRules: [{36E57706-EDA5-4DA7-8F4A-478D213DE45B}] => (Allow) D:\steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{AA546906-CD31-4B2A-A648-F01A83A06DC4}] => (Allow) D:\steam\steamapps\common\Pillars of Eternity\PillarsOfEternity.exe
FirewallRules: [{591CA1A0-5CF6-4854-91C5-5CA84E201181}] => (Allow) F:\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{BFD6C29F-2456-4D01-8321-73AE6C3CD240}] => (Allow) F:\Steam\SteamApps\common\Dark Souls II\Game\DarkSoulsII.exe
FirewallRules: [{C617BBA9-7DB5-4D5E-8CFB-131FBEC32C75}] => (Allow) D:\steam\steamapps\common\TheFall\TheFall.exe
FirewallRules: [{AD450285-929D-41C0-BB69-03CAE2C269F1}] => (Allow) D:\steam\steamapps\common\TheFall\TheFall.exe
FirewallRules: [{1725C78E-EA46-4294-921A-01FBD201BC2A}] => (Allow) D:\steam\steamapps\common\Magicka\Magicka.exe
FirewallRules: [{106E9D61-A497-4E35-9704-9320AEE11C78}] => (Allow) D:\steam\steamapps\common\Magicka\Magicka.exe
FirewallRules: [{9D19AFFE-7574-4749-AE20-419D2E769229}] => (Allow) D:\steam\steamapps\common\Enclave\Enclave.exe
FirewallRules: [{2C37904A-BCAE-4626-AF23-5062D350BF61}] => (Allow) D:\steam\steamapps\common\Enclave\Enclave.exe
FirewallRules: [{9B6BB337-4CC4-464A-B915-7D0A5EEAD26A}] => (Allow) D:\steam\steamapps\common\Swipecart\game.exe
FirewallRules: [{106875AF-293C-4D08-874E-FDEF7DAC9BCF}] => (Allow) D:\steam\steamapps\common\Swipecart\game.exe
FirewallRules: [{B0DC4CED-9C8E-4EEE-920E-C12E8396C550}] => (Allow) D:\steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [{810DD6D4-475B-4BCD-A6FB-C51279CFF0CF}] => (Allow) D:\steam\steamapps\common\PlanetSide 2\LaunchPad.exe
FirewallRules: [TCP Query User{0A1D28F6-4C30-4AE6-A282-E784D9ADF114}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{CADEAD3D-1C90-468E-A4C5-BCC74386613A}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) D:\steam\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{D3B7EC67-8CE0-4E1D-B967-3E553D8E42BA}] => (Allow) F:\Steam\SteamApps\common\Gunpoint\Gunpoint.exe
FirewallRules: [{B90AF8F2-E057-43BD-8719-C73A335CB629}] => (Allow) F:\Steam\SteamApps\common\Gunpoint\Gunpoint.exe
FirewallRules: [TCP Query User{A641E7B3-FE1D-437D-BD3E-484D272F5026}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [UDP Query User{1F1246A1-A383-4A12-8BCA-BB6B364C9861}C:\xampp\apache\bin\httpd.exe] => (Allow) C:\xampp\apache\bin\httpd.exe
FirewallRules: [TCP Query User{51C81B76-A63B-4EFB-B2B0-6A9B56577DAD}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [UDP Query User{E9DAFC01-9530-4C5A-923E-879A04089FB2}C:\xampp\mysql\bin\mysqld.exe] => (Allow) C:\xampp\mysql\bin\mysqld.exe
FirewallRules: [TCP Query User{F5EE8F31-908B-4633-8E4D-97983BE0E28D}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [UDP Query User{80264794-C364-4112-AD3B-E560EFC9DDD0}C:\xampp\filezillaftp\filezillaserver.exe] => (Allow) C:\xampp\filezillaftp\filezillaserver.exe
FirewallRules: [TCP Query User{6DFC9E51-057C-4110-9298-4D032277A00E}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [UDP Query User{9AABC589-169C-4E57-A365-59D017B02475}C:\xampp\mercurymail\mercury.exe] => (Allow) C:\xampp\mercurymail\mercury.exe
FirewallRules: [TCP Query User{15289BE4-7663-44D7-B096-262E85C83054}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe
FirewallRules: [UDP Query User{D6A4B953-1CA5-4E51-9479-3AC1243C2C4F}C:\program files (x86)\java\jre1.8.0_31\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\java.exe
FirewallRules: [{9D1E62F5-57FE-4024-BC2E-5BB9CCCEDE4B}] => (Allow) D:\steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{75FEA397-7722-4485-A3E6-FF8EEBB8A4BD}] => (Allow) D:\steam\steamapps\common\Heroes & Generals\hngsteamlauncher.exe
FirewallRules: [{EC3A98D1-303E-4A06-884D-0D313ED2637D}] => (Allow) D:\steam\steamapps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe
FirewallRules: [{3FC5C3C3-9790-4FF7-B4E5-DD0D6C2E221B}] => (Allow) D:\steam\steamapps\common\Guns of Icarus Online\GunsOfIcarusOnline.exe
FirewallRules: [{4603E049-9186-4D88-9091-1083E966DAEB}] => (Allow) D:\steam\steamapps\common\star conflict\game.exe
FirewallRules: [{46A7DCB9-8E6D-4228-9D0C-F8778D69608E}] => (Allow) D:\steam\steamapps\common\star conflict\game.exe
FirewallRules: [{F1D6CE79-7E93-4B48-8C9C-C6A385F5C5FB}] => (Allow) D:\steam\steamapps\common\ArcheAge\GlyphClient.exe
FirewallRules: [{FC5F507C-4469-4C37-AA41-0EEB46FFCCE9}] => (Allow) D:\steam\steamapps\common\ArcheAge\GlyphClient.exe
FirewallRules: [{FC932273-96B7-4AC5-8D31-EAFC481B0D1B}] => (Allow) D:\steam\steamapps\common\A Bastard's Tale Demo\a_bastards_tale_demo.exe
FirewallRules: [{F5A943AF-F46D-407F-BA1F-6F4EFE66A07C}] => (Allow) D:\steam\steamapps\common\A Bastard's Tale Demo\a_bastards_tale_demo.exe
FirewallRules: [{CE0896C2-FEB3-49A7-9A8B-BA8522B55896}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{84BF6172-7196-4E20-BAE2-EE2E73DDD2FE}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x86\3DMark.exe
FirewallRules: [{C7A879CD-B773-45D4-A3CC-0B053E73D801}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [{D1F13457-15D9-4007-A301-9E3A01D2BB12}] => (Allow) F:\Steam\SteamApps\common\3DMark\bin\x64\3DMark.exe
FirewallRules: [TCP Query User{99C3621C-9135-475C-A667-65D0E2DFB1E8}F:\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) F:\steam\steamapps\common\counter-strike global offensive\csgo.exe
FirewallRules: [UDP Query User{54B8764F-FF4E-4F87-8665-CC2EF588E958}F:\steam\steamapps\common\counter-strike global offensive\csgo.exe] => (Allow) F:\steam\steamapps\common\counter-strike global offensive\csgo.exe
FirewallRules: [{1C590AD7-EED4-48EE-A463-7F821DD687E4}] => (Allow) F:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A6D5822B-4ACE-4048-A031-4BE7D6008596}] => (Allow) F:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{8F0FC67D-BE60-4002-BF52-BC9B0B3E567C}] => (Allow) F:\Steam\SteamApps\common\Windforge\Bin\Game.exe
FirewallRules: [{9960D66F-AF05-4B19-AA63-58A7A4B19B88}] => (Allow) F:\Steam\SteamApps\common\Windforge\Bin\Game.exe
FirewallRules: [{9521EF12-E380-4A45-9E05-AFE6CA460F15}] => (Allow) D:\steam\steamapps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{5300D42B-708D-4E71-B041-EDC48DEECA84}] => (Allow) D:\steam\steamapps\common\Risk of Rain\Risk of Rain.exe
FirewallRules: [{1BF6FAB0-F0A2-4B0C-B228-E7947AA829F9}] => (Allow) D:\steam\steamapps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{30E7B1E1-F197-466B-AD8B-206D28635F69}] => (Allow) D:\steam\steamapps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{E5B7E40F-30D1-45E5-9BAC-DC59EC394A70}] => (Allow) D:\steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{7AFC27E9-0811-4372-B1C7-CDE06CAC16F8}] => (Allow) D:\steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8C16D1EE-C284-463C-877B-8E1F32805740}] => (Allow) D:\steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{035D28DB-608C-410F-B833-4E7F90D5C1E4}] => (Allow) D:\steam\steamapps\common\Fallout 3 goty\FalloutLauncher.exe
FirewallRules: [{C1F2E188-9450-49EF-A7B8-6D876F8AC6D6}] => (Allow) C:\Users\Ismael\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{782D58AD-333D-4F7D-89C1-0F4AAA339299}] => (Allow) C:\Users\Ismael\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{D1182ADE-C004-49D8-BDA5-024B72A69196}D:\alien isolation\alien isolation\ai.exe] => (Block) D:\alien isolation\alien isolation\ai.exe
FirewallRules: [UDP Query User{189FA185-A760-44D0-8574-0F70DF5F3A06}D:\alien isolation\alien isolation\ai.exe] => (Block) D:\alien isolation\alien isolation\ai.exe
FirewallRules: [{1F076701-A36A-4451-B1BD-019E7D2A1318}] => (Allow) C:\Program Files (x86)\Tele2\SupportCenter\SupportCenter.exe
FirewallRules: [{7433F619-CACD-483C-B0D5-2A2F4CDE7971}] => (Allow) C:\Program Files (x86)\Tele2\SupportCenter\SupportCenter.exe
FirewallRules: [{232E53FE-6198-44CC-BD57-D3691729143E}] => (Allow) D:\steam\steamapps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{93D75233-E2AD-4518-9169-7784870EAEC9}] => (Allow) D:\steam\steamapps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe
FirewallRules: [{85AA591B-E57C-4292-8888-E5E17CB8B644}] => (Allow) C:\Users\Ismael\AppData\Local\Temp\Rar$EXa0.404\NetworkTrafficView.exe
FirewallRules: [{2868BEE3-4662-409A-B4C7-24C460C7D1AD}] => (Allow) C:\Users\Ismael\AppData\Local\Temp\Rar$EXa0.404\NetworkTrafficView.exe
FirewallRules: [TCP Query User{4FCDE864-1191-4D4D-B3D5-DE7361E7771A}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [UDP Query User{1F028E6F-64D7-44C3-B558-1C164C81396C}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe
FirewallRules: [{92C0D578-7E04-4D07-8D48-3BA5A3D9FC71}] => (Allow) D:\steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [{4CE85DDD-3898-4CB3-A55F-3E8B80EEBE7B}] => (Allow) D:\steam\steamapps\common\Banished\Application-steam-x64.exe
FirewallRules: [TCP Query User{D1E0B527-AE1D-4B65-982D-DC191A3C5FD1}C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno5.exe
FirewallRules: [UDP Query User{F6F00F58-D10E-4362-A14F-39663DEA57F5}C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno5.exe] => (Allow) C:\program files (x86)\ubisoft\ubisoft game launcher\games\anno5.exe
FirewallRules: [{096B0D0E-B2FA-43B8-950A-50A843989A77}] => (Allow) D:\steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{B38165DF-F42B-4346-AB13-7169740862D7}] => (Allow) D:\steam\steamapps\common\Unturned\Unturned.exe
FirewallRules: [{1332C4A5-DC62-4AD3-A2F0-1B328E0C116A}] => (Allow) D:\steam\steamapps\common\DeadCore\DeadCore.exe
FirewallRules: [{152241FB-8F3F-48F0-AEAB-8E285F7DF3EE}] => (Allow) D:\steam\steamapps\common\DeadCore\DeadCore.exe
FirewallRules: [{D2713FCE-ECCF-48A6-B275-014B9B1563DF}] => (Allow) D:\steam\steamapps\common\Platformines\Platformines.exe
FirewallRules: [{07C71891-9293-4365-9692-1E305FA2FBE6}] => (Allow) D:\steam\steamapps\common\Platformines\Platformines.exe
FirewallRules: [{F0D0BFC1-D6D5-4172-9FEC-B3FA9FEA3B68}] => (Allow) D:\steam\steamapps\common\PAC-MAN Championship Edition DX+\PAC-MAN.exe
FirewallRules: [{416D5774-DBAA-4B3A-8BBF-8093F195D64C}] => (Allow) D:\steam\steamapps\common\PAC-MAN Championship Edition DX+\PAC-MAN.exe
FirewallRules: [{3B382BBD-E813-4893-854F-6F2A8A8A1292}] => (Allow) F:\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{280496E8-45EC-49E3-B579-9FD0B09F04A3}] => (Allow) F:\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{2961AF7E-26F3-44ED-9FD2-310D9EC3F220}] => (Allow) C:\_STEAM_\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{E87425BD-049C-4E20-96A9-0483D6D950D5}] => (Allow) C:\_STEAM_\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{F44ECCEB-F9F2-4117-BD23-FE0A8FB8792E}] => (Allow) D:\steam\steamapps\common\Just Cause 3\JustCause3.exe
FirewallRules: [{BE3A9A53-D318-4D49-B06C-C696268F9550}] => (Allow) D:\steam\steamapps\common\Just Cause 3\JustCause3.exe
FirewallRules: [{B6B78AC7-E361-42D1-B07E-BAABA419A499}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos.exe
FirewallRules: [{B1420CE9-9A29-481F-92D2-E5C36E7CF432}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos.exe
FirewallRules: [{2BAD6DF0-4693-42C1-AB33-2DC2ACF3E520}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{DC1038AC-AE0A-47FF-8DD7-D8041CA612C9}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\Talos_Unrestricted.exe
FirewallRules: [{D35A6C88-103D-4C3D-A02C-379950B33658}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\x64\Talos.exe
FirewallRules: [{E740153C-06D2-4D35-91E0-66AE200E22E1}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\x64\Talos.exe
FirewallRules: [{3D08EEBC-9D8C-4E19-B033-BB73CB0262BB}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\x64\Talos_Unrestricted.exe
FirewallRules: [{D81A790C-8532-4A3D-9FA9-8B1A815C058C}] => (Allow) C:\_STEAM_\steamapps\common\The Talos Principle\Bin\x64\Talos_Unrestricted.exe
FirewallRules: [{E97B9BD7-2E80-4FCF-A1FC-0D5C03CB4004}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Engine\Binaries\Win64\Mind_pathtothalamus.exe
FirewallRules: [{885F7651-C104-4C98-B90E-A8E5AD174D1F}] => (Allow) D:\steam\steamapps\common\Mind_Path_to_Thalamus\Engine\Binaries\Win64\Mind_pathtothalamus.exe
FirewallRules: [{10D7797B-F744-43ED-BAA6-7CDB21BC9E45}] => (Allow) F:\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{A7E817FA-93C7-4816-8FAE-877E11FDE693}] => (Allow) F:\Steam\SteamApps\common\nosgoth\Binaries\Win32\Nosgoth.exe
FirewallRules: [{44DD7CC6-B4EC-486C-99ED-E213498C9994}] => (Allow) D:\steam\steamapps\common\Devilian\GlyphClient.exe
FirewallRules: [{DEB92A7F-6C01-4C99-96C6-2E0CF48FD10C}] => (Allow) D:\steam\steamapps\common\Devilian\GlyphClient.exe
FirewallRules: [{2253E373-D778-4CDB-94A4-F51C1F4355A5}] => (Allow) F:\Steam\SteamApps\common\nosgoth\NosgothLauncher.exe
FirewallRules: [{776A0875-55A2-4788-A2E6-6D8CFE6F4238}] => (Allow) F:\Steam\SteamApps\common\nosgoth\NosgothLauncher.exe
FirewallRules: [{DAFF1BC4-31C9-4C34-8D91-FCD684103A97}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{4DA2013E-BA9F-4C7F-AE63-C4E1C59138B5}] => (Allow) D:\steam\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe
FirewallRules: [{40D5A699-E9BC-436F-AEE3-60FA059BD898}] => (Allow) D:\steam\steamapps\common\Guns of Icarus Online\workshop\Workshop.exe
FirewallRules: [{C4CDFC5E-8C5A-4587-868F-47999ED1DF1D}] => (Allow) C:\_STEAM_\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{D4D27F82-F3DF-4B5E-AE92-1BE90CBF6B03}] => (Allow) C:\_STEAM_\steamapps\common\DarkestDungeon\_windows\Darkest.exe
FirewallRules: [{02FD882D-01EE-4F07-9849-31D0A42CC580}] => (Allow) D:\steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{FF9AE7F8-DC42-4378-B711-C36B4046D34A}] => (Allow) D:\steam\steamapps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{31306FBB-430F-4466-8807-D97AA6CA19F0}] => (Allow) D:\steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{E14CD5F4-65AB-4382-ADFC-962E20D25C8E}] => (Allow) D:\steam\steamapps\common\Warface\live\nw.exe
FirewallRules: [{D4EAB571-45CB-466C-BB29-F68C970B85B3}] => (Allow) D:\steam\steamapps\common\Skyshine\win32\Skyshines BEDLAM.exe
FirewallRules: [{552B3A26-8FFE-4685-BBB5-91F7FBC1A5A2}] => (Allow) D:\steam\steamapps\common\Skyshine\win32\Skyshines BEDLAM.exe
FirewallRules: [{2AEB3B64-B91B-480A-AB05-FF5F1910714D}] => (Allow) C:\_STEAM_\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{E7B28D2D-CF47-40F7-AAE3-C06C120E31AE}] => (Allow) C:\_STEAM_\steamapps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{FBB85FF2-E139-4AD2-A4AC-0B88B88DF2D4}] => (Allow) D:\steam\steamapps\common\Apotheon\Apotheon.exe
FirewallRules: [{80F6FD69-E503-4E74-9450-5DAC83E7AE9B}] => (Allow) D:\steam\steamapps\common\Apotheon\Apotheon.exe

==================== Wiederherstellungspunkte =========================

29-12-2015 02:03:44 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============


==================== Fehlereinträge in der Ereignisanzeige: =========================
         


Alt 29.12.2015, 23:32   #6
CLamantius
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Adition.txt Teil 2

Code:
ATTFilter
Applikationsfehler:
==================
Error: (12/29/2015 04:19:08 PM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ISMAEL-PC)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/29/2015 02:03:44 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (12/29/2015 01:59:57 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ISMAEL-PC)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/28/2015 09:54:03 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756
Name des fehlerhaften Moduls: dwmcore.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632d2f6
Ausnahmecode: 0xc0000602
Fehleroffset: 0x00000000000d07f5
ID des fehlerhaften Prozesses: 0x78
Startzeit der fehlerhaften Anwendung: 0xdwm.exe0
Pfad der fehlerhaften Anwendung: dwm.exe1
Pfad des fehlerhaften Moduls: dwm.exe2
Berichtskennung: dwm.exe3
Vollständiger Name des fehlerhaften Pakets: dwm.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dwm.exe5

Error: (12/28/2015 10:46:18 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (12/27/2015 03:37:08 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.1.52.15531, Zeitstempel: 0x5653189d
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.0, Zeitstempel: 0x5632da1c
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bd8a8
ID des fehlerhaften Prozesses: 0x97c
Startzeit der fehlerhaften Anwendung: 0xAvira.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.ServiceHost.exe2
Berichtskennung: Avira.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.ServiceHost.exe5

Error: (12/27/2015 03:37:08 AM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.OutOfMemoryException
   bei WebSocket4Net.WebSocket.OnError(SuperSocket.ClientEngine.ErrorEventArgs)
   bei WebSocket4Net.WebSocket.client_Error(System.Object, SuperSocket.ClientEngine.ErrorEventArgs)
   bei SuperSocket.ClientEngine.ClientSession.OnError(System.Exception)
   bei SuperSocket.ClientEngine.SslStreamTcpSession.OnAuthenticated(System.IAsyncResult)
   bei System.Net.LazyAsyncResult.Complete(IntPtr)
   bei System.Net.LazyAsyncResult.ProtectedInvokeCallback(System.Object, IntPtr)
   bei System.Net.Security.SslState.FinishHandshake(System.Exception, System.Net.AsyncProtocolRequest)
   bei System.Net.Security.SslState.ReadFrameCallback(System.Net.AsyncProtocolRequest)
   bei System.Net.AsyncProtocolRequest.CompleteRequest(Int32)
   bei System.Net.FixedSizeReader.CheckCompletionBeforeNextRead(Int32)
   bei System.Net.FixedSizeReader.ReadCallback(System.IAsyncResult)
   bei System.Net.LazyAsyncResult.Complete(IntPtr)
   bei System.Net.ContextAwareResult.CompleteCallback(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)

Error: (12/27/2015 02:00:11 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 2484) (User: ISMAEL-PC)
Description: Das Paket „Microsoft.WindowsDVDPlayer_3.6.13291.0_x64__8wekyb3d8bbwe+Microsoft.WindowsDVDPlayer“ wurde beendet, da das Anhalten zu lange dauerte.

Error: (12/27/2015 02:00:01 AM) (Source: Microsoft-Windows-Immersive-Shell) (EventID: 5973) (User: ISMAEL-PC)
Description: Bei der Aktivierung der App „Microsoft.XboxApp_8wekyb3d8bbwe!Microsoft.XboxApp“ ist folgender Fehler aufgetreten: -2144927148. Weitere Informationen finden Sie im Protokoll „Microsoft-Windows-TWinUI/Betriebsbereit“.

Error: (12/26/2015 07:36:18 PM) (Source: SideBySide) (EventID: 35) (User: )
Description: Fehler beim Generieren des Aktivierungskontextes für "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"1". Fehler in Manifest- oder Richtliniendatei "UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"2" in Zeile  UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0"3.
Die im Manifest gefundene Komponenten-ID stimmt nicht mit der ID der angeforderten Komponente überein.
Verweis: UccApi,processorArchitecture="AMD64",type="win32",version="15.0.0.0".
Definition: UccApi,processorArchitecture="x86",type="win32",version="15.0.0.0".
Verwenden Sie das Programm "sxstrace.exe" für eine detaillierte Diagnose.


Systemfehler:
=============
Error: (12/28/2015 07:24:49 PM) (Source: Service Control Manager) (EventID: 7001) (User: )
Description: Der Dienst "NetTcpActivator" ist vom Dienst "NetTcpPortSharing" abhängig, der aufgrund folgenden Fehlers nicht gestartet wurde: 
%%1058

Error: (12/28/2015 07:24:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_61a1f1ac" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 07:24:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _61a1f1ac" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 07:24:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_61a1f1ac" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 07:24:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_61a1f1ac" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 01:13:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_514f1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 01:13:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _514f1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 01:13:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_514f1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/28/2015 01:13:49 AM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_514f1" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (12/27/2015 09:35:15 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Druckwarteschlange" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 5000 Millisekunden durchgeführt: Neustart des Diensts.


CodeIntegrity:
===================================
  Date: 2015-12-19 03:30:59.720
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-10 16:45:09.155
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-10 04:46:04.687
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-09 16:45:09.225
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-06 03:02:30.961
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-05 03:31:06.277
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-04 16:45:08.883
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-03 06:35:45.336
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-03 03:53:01.133
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2015-12-03 03:52:21.193
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume1\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 39%
Installierter physikalischer RAM: 16328.23 MB
Verfügbarer physikalischer RAM: 9928.44 MB
Summe virtueller Speicher: 32712.23 MB
Verfügbarer virtueller Speicher: 22123.93 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:232.44 GB) (Free:80.53 GB) NTFS ==>[Laufwerk mit Startkomponenten (eingeholt von BCD)]
Drive d: (Data1) (Fixed) (Total:931.51 GB) (Free:164.77 GB) NTFS
Drive f: () (Fixed) (Total:465.76 GB) (Free:160.74 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 2989E734)
Partition 1: (Active) - (Size=232.4 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=449 MB) - (Type=27)

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: F369F369)
Partition 1: (Active) - (Size=465.8 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 2989E72F)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
         

Alt 30.12.2015, 21:14   #7
Deathkid535
/// Malwareteam
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Hi,

ja also Malware seh ich da eigentlich keine. Tritt das Problem im abgesicherten Modus auch auf?

Alt 30.12.2015, 22:08   #8
CLamantius
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Hi,

1. Gute Nachricht: Nein ich kann das Ding nicht hören. 2. Schlechte Nachricht: Ich hör es nicht weil mein Sound nicht funktioniert wenn ich im abgesicherten Modus starte. Hast du vlt. irgendeine Vermutung was es sein könnte?

MfG CLamantius

Alt 30.12.2015, 22:41   #9
Deathkid535
/// Malwareteam
 
Win 10: Seltsame Geräusche - Standard

Win 10: Seltsame Geräusche



Hi,

meine Vermutung ist, dass irgendein Programm da rumspinnt. Das herausfinden wird aber ein bisschen Zeit kosten, aber wir können es trotzdem versuchen.

Mach mal einen Clean Boot. Wenn das Problem dort nicht auftritt, einzeln die Dienste aktivieren, neu starten, schauen ob das Problem noch besteht.

Antwort

Themen zu Win 10: Seltsame Geräusche
admin, avira, danke, einzige, forum, fängt, geräusch, geräusche, hilfe, hoffe, konnte, langsam, malwarebytes, nerve, niemand, recht, seltsame, seltsames, tagen, win, win 10, windows



Ähnliche Themen: Win 10: Seltsame Geräusche


  1. Geräusche über das Headset/Kopfhörer
    Alles rund um Windows - 20.07.2015 (3)
  2. Geräusche und Werbung laufen im Hintergrund.
    Log-Analyse und Auswertung - 08.04.2015 (17)
  3. Geräusche im Hintergrund aus den Boxen bei eingeschalteten PC
    Plagegeister aller Art und deren Bekämpfung - 15.03.2014 (29)
  4. Porno geräusche im Hintergrund
    Plagegeister aller Art und deren Bekämpfung - 28.12.2013 (3)
  5. Windows 7 64-bit: seltsame Geräusche und Sounds aus meinem Labtop
    Log-Analyse und Auswertung - 20.08.2013 (14)
  6. Computer macht komische Geräusche.
    Netzwerk und Hardware - 28.07.2013 (2)
  7. Geräusche im Hintergrund
    Log-Analyse und Auswertung - 15.07.2013 (1)
  8. Pfeiff-Geräusche beim Einschalten
    Netzwerk und Hardware - 07.08.2011 (3)
  9. Computer macht Geräusche
    Log-Analyse und Auswertung - 22.03.2011 (8)
  10. Musik und Geräusche
    Plagegeister aller Art und deren Bekämpfung - 10.08.2010 (15)
  11. Tasten Töne / Pop ups / Hintergrund Geräusche
    Log-Analyse und Auswertung - 19.07.2010 (7)
  12. Mikrofon nimmt nur Geräusche vom PC wahr
    Alles rund um Windows - 20.02.2010 (42)
  13. Laufwerk macht komische Geräusche
    Netzwerk und Hardware - 11.07.2009 (4)
  14. Komische Geräusche
    Log-Analyse und Auswertung - 27.05.2005 (1)
  15. Komische geräusche..wahrscheinlich von der festplatte
    Netzwerk und Hardware - 18.12.2004 (4)
  16. Fenster Geräusche...
    Netzwerk und Hardware - 06.12.2004 (2)
  17. Geräusche
    Netzwerk und Hardware - 10.04.2003 (9)

Zum Thema Win 10: Seltsame Geräusche - Hallo, vor ein paar Tagen habe ich bemerkt, dass mein PC ab und zu ein recht seltsames Ding-Geräusch macht. Keines das ich schon einmal von Windows gehört hätte wie zum - Win 10: Seltsame Geräusche...
Archiv
Du betrachtest: Win 10: Seltsame Geräusche auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.