Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung
Windows 10: Programme deinstallieren sich

Windows 10: Programme deinstallieren sich


Log-Analyse und Auswertung: Windows 10: Programme deinstallieren sich

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Vorheriger Beitrag Vorheriger Beitrag   Nächster Beitrag Nächster Beitrag
Alt 08.07.2016, 12:37   #16
Hoasti
 
Windows 10: Programme deinstallieren sich - Standard

Windows 10: Programme deinstallieren sich


Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-07-2016
durchgeführt von Saturn (2016-07-08 13:35:12)
Gestartet von C:\Users\Saturn\Downloads
Windows 10 Home Version 1511 (X64) (2015-12-12 15:24:43)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1502492809-711759855-3734638970-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1502492809-711759855-3734638970-503 - Limited - Disabled)
Gast (S-1-5-21-1502492809-711759855-3734638970-501 - Limited - Disabled)
Saturn (S-1-5-21-1502492809-711759855-3734638970-1002 - Administrator - Enabled) => C:\Users\Saturn
UpdatusUser (S-1-5-21-1502492809-711759855-3734638970-1001 - Limited - Enabled) => C:\Users\UpdatusUser

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 15.12 (x64) (HKLM\...\7-Zip) (Version: 15.12 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20045 - Adobe Systems Incorporated)
Adobe Flash Player 22 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 22.0.0.192 - Adobe Systems Incorporated)
Alcor Micro USB Card Reader (HKLM-x32\...\AmUStor) (Version: 20.2.1245.53580 - Alcor Micro Corp.)
Alcor Micro USB Card Reader (x32 Version: 20.2.1245.53580 - Alcor Micro Corp.) Hidden
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version:  - Ubisoft)
Assassin's Creed® III (HKLM-x32\...\Steam App 208480) (Version:  - Ubisoft Montreal)
Benutzerhandbücher (x32 Version: 3.0.0.3 - Lenovo) Hidden
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Cisco AnyConnect Secure Mobility Client  (HKLM-x32\...\Cisco AnyConnect Secure Mobility Client) (Version: 3.1.04063 - Cisco Systems, Inc.)
Cisco AnyConnect Secure Mobility Client (x32 Version: 3.1.04063 - Cisco Systems, Inc.) Hidden
CyberLink MediaStory (HKLM-x32\...\InstallShield_{55762F9A-FCE3-45d5-817B-051218658423}) (Version: 1.0.1314 - CyberLink Corp.)
CyberLink PhotoDirector 3 (HKLM-x32\...\InstallShield_{39337565-330E-4ab6-A9AE-AC81E0720B10}) (Version: 3.0.1.4107 - CyberLink Corp.)
CyberLink PowerDirector 10 (HKLM-x32\...\InstallShield_{B0B4F6D2-F2AE-451A-9496-6F2F6A897B32}) (Version: 10.0.0.2810 - CyberLink Corp.)
CyberLink PowerDirector 10 (Version: 10.0.0.2810 - CyberLink Corp.) Hidden
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Schlacht um Mittelerde(tm) (HKLM-x32\...\{3F290582-3F4E-4B96-009C-E0BABAA40C42}) (Version:  - )
Die Sims™ 3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.69.43.024017 - Electronic Arts Inc.)
Die Sims™ 4 Erstelle einen Sim-Demo (HKLM-x32\...\{6908ED99-F02B-4E99-A202-3FAC99C510ED}) (Version: 1.0.293.1110 - Electronic Arts Inc.)
Dolby Digital Plus Home Theater (HKLM\...\{7E3D8FA1-6092-469A-955B-68FC4A2C67CA}) (Version: 7.3.2.2 - Dolby Laboratories Inc)
Dota 2 (HKLM-x32\...\Steam App 570) (Version:  - Valve)
Dropbox (HKU\S-1-5-21-1502492809-711759855-3734638970-1002\...\Dropbox) (Version: 5.4.24 - Dropbox, Inc.)
Efficient Elements for presentations - IPA Edition (HKLM-x32\...\{D12B73A5-21D9-4A70-A01F-CB50BF96F8A4}) (Version: 2.0.44500.107 - Efficient Elements GmbH)
Energy Manager (HKLM-x32\...\InstallShield_{AC768037-7079-4658-AC24-2897650E0ABE}) (Version: 1.0.0.35 - Lenovo)
Energy Manager (x32 Version: 1.0.0.35 - Lenovo) Hidden
FIFA 16 (HKLM-x32\...\{28FA2805-7992-4A28-844B-040C57204718}) (Version: 1.42.13482.16 - Electronic Arts)
FormatFactory 3.7.0.0 (HKLM-x32\...\FormatFactory) (Version: 3.7.0.0 - Format Factory)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
FUSSBALL MANAGER 13 (HKLM-x32\...\{80AF0300-866F-400F-A350-D53E3C3E34E0}) (Version: 1.0.4.0 - Electronic Arts)
Grand Theft Auto IV (HKLM-x32\...\Steam App 12210) (Version:  - Rockstar North)
IDT Audio (HKLM-x32\...\{E3A5A8AB-58F6-45FF-AFCB-C9AE18C05001}) (Version: 1.0.6490.0 - IDT)
Intel Collaborative Processor Performance Control (HKLM-x32\...\0E7DAF70-FB54-4B91-B192-7E771C25AEEB) (Version: 1.0.0.1013 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 9.5.14.1724 - Intel Corporation)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 20.19.15.4331 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 12.8.5.1000 - Intel Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Lenovo EasyCamera (HKLM-x32\...\{E0A7ED39-8CD6-4351-93C3-69CCA00D12B4}) (Version: 6.2.9200.10245 - Realtek Semiconductor Corp.)
Lenovo OneKey Recovery (HKLM-x32\...\InstallShield_{46F4D124-20E5-4D12-BE52-EC177A7A4B42}) (Version: 8.0.0.2105 - CyberLink Corp.)
Lenovo OneKey Recovery (Version: 8.0.0.2105 - CyberLink Corp.) Hidden
Lenovo Photos (HKLM-x32\...\Lenovo Photos) (Version: 4.8.7 - CEWE COLOR AG u Co. OHG)
Lenovo PowerDVD10 (HKLM-x32\...\InstallShield_{DEC235ED-58A4-4517-A278-C41E8DAEAB3B}) (Version: 10.0.5630.52 - CyberLink Corp.)
Lenovo PowerDVD10 (x32 Version: 10.0.5630.52 - CyberLink Corp.) Hidden
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Office 365 ProPlus - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 15.0.4833.1001 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50428.0 - Microsoft Corporation)
Microsoft SQL Server 2005 (HKLM-x32\...\Microsoft SQL Server 2005) (Version:  - Microsoft Corporation)
Microsoft SQL Server 2005 Backward compatibility (HKLM\...\{C92556F2-4950-48CF-ABA3-F0026B05BCE8}) (Version: 8.05.1054 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft SQL Server Native Client (HKLM\...\{F90F5A11-53E6-4045-ACB1-BC03D71FB06C}) (Version: 9.00.4035.00 - Microsoft Corporation)
Microsoft SQL Server VSS Writer (HKLM\...\{F68310EC-B615-4044-B7D7-1A6349758D42}) (Version: 9.00.4035.00 - Microsoft Corporation)
Microsoft Visio Professional 2013 (HKLM\...\Office15.VISPROR) (Version: 15.0.4569.1506 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729 (HKLM-x32\...\{6AFCA4E1-9B78-3640-8F72-A7BF33448200}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual Studio 2010 Tools for Office Runtime (x64) (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64)) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Visual Studio 2010-Tools für Office-Laufzeit (x64) Language Pack - DEU (HKLM\...\Microsoft Visual Studio 2010 Tools for Office Runtime (x64) Language Pack - DEU) (Version: 10.0.50903 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 47.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0 (x86 de)) (Version: 47.0 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 47.0.0.5999 - Mozilla)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Nitro Pro 9 (HKLM\...\{4C32F7E8-A65F-4D3C-9153-9F3B57CB6872}) (Version: 9.0.5.9 - Nitro)
NVIDIA GeForce Experience 1.7 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 1.7 - NVIDIA Corporation)
NVIDIA Grafiktreiber 327.62 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 327.62 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.13.0725 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.13.0725 - NVIDIA Corporation)
Office 15 Click-to-Run Extensibility Component (Version: 15.0.4833.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Licensing Component (Version: 15.0.4833.1001 - Microsoft Corporation) Hidden
Office 15 Click-to-Run Localization Component (Version: 15.0.4833.1001 - Microsoft Corporation) Hidden
Onekey Theater (HKLM-x32\...\{91CC5BAE-A098-40D3-A43B-C0DC7CE263FE}) (Version: 3.0.1.2 - Lenovo)
Origin (HKLM-x32\...\Origin) (Version: 9.12.1.43352 - Electronic Arts, Inc.)
Outils de vérification linguistique 2013 de Microsoft Office*- Français (Version: 15.0.4569.1506 - Microsoft Corporation) Hidden
PDFill PDF Editor with FREE Writer and FREE Tools (HKLM\...\{D1399216-81B2-457C-A0F7-73B9A2EF6902}) (Version: 11.0 - PlotSoft LLC)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
Power2Go (HKLM-x32\...\{40BF1E83-20EB-11D8-97C5-0009C5020658}) (Version: 5.6.0.10525 - CyberLink Corp.)
Process Modeling (Aspen Plus) (HKLM-x32\...\{FA3B0638-95E8-4B5E-B618-329DC021BA14}) (Version: 25.0 - AspenTech)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
Qualcomm Atheros Bluetooth Suite (64) (HKLM\...\{A84A4FB1-D703-48DB-89E0-68B6499D2801}) (Version: 8.0.1.305 - Qualcomm Atheros Communications)
Qualcomm Atheros Client Installation Program (HKLM-x32\...\{28006915-2739-4EBE-B5E8-49B25D32EB33}) (Version: 10.0 - Qualcomm Atheros)
Qualcomm Atheros Inc.(R) AR81Family Gigabit/Fast Ethernet Driver (HKLM-x32\...\{3108C217-BE83-42E4-AE9E-A56A2A92E549}) (Version: 2.1.0.21 - Qualcomm Atheros Inc.)
Samsung Kies3 (HKLM-x32\...\InstallShield_{88547073-C566-4895-9005-EBE98EA3F7C7}) (Version: 3.2.16044.2 - Samsung Electronics Co., Ltd.)
Samsung Kies3 (x32 Version: 3.2.16044.2 - Samsung Electronics Co., Ltd.) Hidden
Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.5.59.0 - Samsung Electronics Co., Ltd.)
SecureW2 Enterprise Client 3.5.12 (HKLM-x32\...\SecureW2 Enterprise Client) (Version:  - )
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.3.0.9150 - Microsoft Corporation)
Skype™ 7.3 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.3.101 - Skype Technologies S.A.)
Spotify (HKU\S-1-5-21-1502492809-711759855-3734638970-1002\...\Spotify) (Version: 1.0.18.60.g5fe0413d - Spotify AB)
Steam (HKLM-x32\...\{048298C9-A4D3-490B-9FF9-AB023A9238F3}) (Version: 1.0.0.0 - Valve Corporation)
Synaptics Pointing Device Driver (HKLM\...\SynTPDeinstKey) (Version: 19.0.9.5 - Synaptics Incorporated)
System Requirements Lab Detection (HKLM-x32\...\{28A689A0-B5D8-4F8E-B79A-FF470CC71716}) (Version: 6.1.6.0 - Husdawg, LLC)
Tom Clancy's Splinter Cell® Blacklist™ (HKLM-x32\...\{A6356F2F-D3E1-4D83-9AA2-72871DD0C298}) (Version: 1.00 - Ubisoft)
Unravel™ (HKLM-x32\...\{5105E605-9EE7-4050-9CC0-005093BBF89A}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Unterstützungsdateien für das Microsoft SQL Server-Setup (Englisch) (HKLM-x32\...\{07629207-FAA0-4F1A-8092-BF5085BE511F}) (Version: 9.00.4035.00 - Microsoft Corporation)
Update for Skype for Business 2015 (KB3115033) 64-Bit Edition (HKLM\...\{90150000-00C1-0000-1000-0000000FF1CE}_Office15.VISPROR_{F258B6E3-BF41-4FEE-BE45-D7518C3B7FC1}) (Version:  - Microsoft)
Uplay (HKLM-x32\...\Uplay) (Version: 4.3 - Ubisoft)
User Manuals (HKLM-x32\...\InstallShield_{F07C2CF8-4C53-4EC3-8162-A6221E36EB88}) (Version: 3.0.0.3 - Lenovo)
VirtualCloneDrive (HKLM-x32\...\VirtualCloneDrive) (Version: 5.4.7.0 - Elaborate Bytes)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
Windows-Treiberpaket - Lenovo (ACPIVPC) System  (02/17/2013 9.52.0.776) (HKLM\...\35DD26BE48DAF4A9F35F969F3CB1E3E1435E661E) (Version: 02/17/2013 9.52.0.776 - Lenovo)
Windows-Treiberpaket - Lenovo (WUDFRd) LenovoVhid  (07/25/2013 10.30.0.288) (HKLM\...\6BCA401E9CBEED970D75F55FA5320F60D11984E9) (Version: 07/25/2013 10.30.0.288 - Lenovo)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{71DCE5D6-4B57-496B-AC21-CD5B54EB93FD}\localserver32 -> C:\Users\Saturn\AppData\Local\Microsoft\OneDrive\17.3.6281.1202_1\FileCoAuth.exe (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-1502492809-711759855-3734638970-1002_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Saturn\AppData\Roaming\Dropbox\bin\DropboxExt64.34.dll (Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0CB6DFBB-51B4-4247-BD94-E27C33CAF9CD} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-04-12] (Microsoft Corporation)
Task: {31051A5E-99AB-47A9-B306-FC5CEBF6A2DC} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe [2016-06-15] (Microsoft Corporation)
Task: {42FD2A90-2390-4D76-A079-E76368595EA9} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4E2F816C-DDCF-47AB-88CC-4516D9127B12} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-04-12] (Microsoft Corporation)
Task: {6A7417BD-4493-4609-B4EC-B8E738BB96FB} - System32\Tasks\Microsoft\Office\Office 15 Subscription Heartbeat => C:\Program Files\Common Files\Microsoft Shared\Office15\OLicenseHeartbeat.exe [2014-01-23] (Microsoft Corporation)
Task: {7086EFDF-DDF1-4126-8306-BCEBCF9A9E1A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {711044D1-BC11-4589-8F77-04F79B0AF4B3} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)
Task: {7296EC33-BD6A-4327-9B16-4BE726715FEB} - System32\Tasks\SecureW2 Task => C:\Program Files (x86)\SecureW2\sw2_tray.exe [2014-03-24] (SecureW2 B.V.)
Task: {7598D505-97AE-4323-95A1-A53D14833034} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {7A0D0E25-1FA9-460F-9B15-1989D80974A6} - System32\Tasks\Microsoft\Office\Office Subscription Maintenance => C:\Program Files\Microsoft Office 15\root\vfs\ProgramFilesCommonx64\Microsoft Shared\OFFICE15\OLicenseHeartbeat.exe [2016-04-12] (Microsoft Corporation)
Task: {7A511B96-22AE-4471-B4ED-A44AADEB5DD9} - System32\Tasks\PDVDServ Task => C:\Program Files (x86)\Lenovo\PowerDVD10\PDVD10Serv.EXE [2013-03-08] (CyberLink Corp.)
Task: {7B5B7ED5-9AF2-429E-90FA-AE4927448E18} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {82E3EDF8-3933-48E5-9562-894FF9EA12F4} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Microsoft Office 15\ClientX64\OfficeC2RClient.exe [2016-04-12] (Microsoft Corporation)
Task: {88027FE9-260D-4EED-976F-8902F42831A5} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {91832525-48FF-4E01-A639-1B113A036DFF} - System32\Tasks\Abelssoft\Updater scan => C:\Program Files (x86)\CHIP Updater\CHIPUpdater.exe
Task: {918A4A00-1FD5-4B33-BFF6-93490C414F8E} - System32\Tasks\CCleanerSkipUAC => C:\Program Files (x86)\Software\ccleaner\CCleaner.exe
Task: {9275152F-AC77-4250-9E42-B8DFC86F5C98} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn => C:\Program Files\Microsoft Office 15\root\Office15\msoia.exe [2016-04-12] (Microsoft Corporation)
Task: {A1237189-8B90-4CEB-BCD2-55645CE60706} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {A3E37510-5B1C-40B7-BF20-8DE1B0EF844F} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {BA962C41-4F44-4A79-BB07-B3EBF79E855A} - System32\Tasks\{C3F0E813-A3BF-4DE0-9B55-A9D1554D368F} => pcalua.exe -a "C:\Program Files\e6e51de3716f8f1fbed5d24a1b0c6958\fbd1644260264a525bf9aab8c14a3207.exe"
Task: {C0022422-C36A-47FB-8488-3DB5AE32D868} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {C48497BC-AC38-427D-94AC-F2B19CC693C6} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1502492809-711759855-3734638970-1002Core => C:\Users\Saturn\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-13] (Dropbox, Inc.)
Task: {D62DD28F-578F-446A-9F15-87A622A78159} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-1502492809-711759855-3734638970-1002UA => C:\Users\Saturn\AppData\Local\Dropbox\Update\DropboxUpdate.exe [2015-06-13] (Dropbox, Inc.)
Task: {E0D97102-3573-4529-9FD5-4869B9F57CC0} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {F8E6A205-C738-464C-ABC2-45B24B8D2B50} - System32\Tasks\{2A8CC815-E23B-4767-8689-4964796AD545} => pcalua.exe -a E:\AutoRun.exe -d E:\
Task: {FC7204AA-A7FB-424F-9B99-6DB7794245EE} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {FD88D8A1-D84D-4089-BA75-2B345A1ADE59} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1502492809-711759855-3734638970-1002Core.job => C:\Users\Saturn\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\WINDOWS\Tasks\DropboxUpdateTaskUserS-1-5-21-1502492809-711759855-3734638970-1002UA.job => C:\Users\Saturn\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-06-22 00:07 - 2012-04-24 12:43 - 00390632 ____N () C:\Program Files\CyberLink\Shared files\RichVideo64.exe
2014-11-04 15:31 - 2016-04-19 19:26 - 00114888 _____ () C:\Program Files\Microsoft Office 15\ClientX64\ApiClient.dll
2014-10-28 10:49 - 2014-10-30 21:33 - 00076888 _____ () C:\WINDOWS\SysWOW64\PnkBstrA.exe
2015-10-30 09:18 - 2015-10-30 09:18 - 00185856 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-04-12 23:43 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-04-12 23:43 - 2016-03-29 12:20 - 02656952 _____ () C:\WINDOWS\System32\CoreUIComponents.dll
2015-12-18 13:43 - 2015-12-07 06:14 - 00093696 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\Windows.UI.Shell.SharedUtilities.dll
2016-05-11 15:28 - 2016-04-23 06:25 - 00472064 _____ () C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\QuickActions.dll
2016-06-15 19:34 - 2016-05-28 05:59 - 07992832 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2016-06-15 19:34 - 2016-05-28 05:53 - 00591360 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2016-06-15 19:35 - 2016-05-28 05:54 - 02483200 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2016-06-15 19:35 - 2016-05-28 05:56 - 04089856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2016-04-19 07:52 - 2016-04-19 10:54 - 00144384 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeHost.exe
2013-07-19 17:30 - 2013-07-19 17:30 - 00063376 _____ () C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\zlib1.dll
2014-06-21 23:20 - 2013-09-04 01:53 - 01242584 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
2015-12-10 13:56 - 2016-05-25 19:03 - 00034768 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_multiprocessing.pyd
2016-06-25 09:52 - 2016-05-25 19:03 - 00134088 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\pyexpat.pyd
2016-06-25 09:52 - 2016-05-25 19:04 - 00019408 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\faulthandler.pyd
2016-06-25 09:52 - 2016-05-25 19:03 - 00116688 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\pywintypes27.dll
2015-12-10 13:56 - 2016-05-25 19:03 - 00093640 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_ctypes.pyd
2015-12-10 13:56 - 2016-05-25 19:03 - 00018376 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\select.pyd
2015-12-10 13:56 - 2016-06-13 22:13 - 00019760 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\tornado.speedups.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00105928 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32api.pyd
2016-06-25 09:52 - 2016-05-25 19:03 - 00392144 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\pythoncom27.dll
2015-12-10 13:56 - 2016-06-13 22:13 - 00381752 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32com.shell.shell.pyd
2015-12-10 13:56 - 2016-05-25 19:03 - 00692688 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\unicodedata.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00020816 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._constant_time.pyd
2015-12-10 13:56 - 2016-05-25 19:04 - 00123856 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_cffi_backend.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 01682760 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._openssl.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00020808 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\cryptography.hazmat.bindings._padding.pyd
2015-12-10 13:56 - 2016-06-13 22:13 - 00021840 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_cffi_unicode_environ_win32_x8bf8e68bx9968e850.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00052024 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\psutil._psutil_windows.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00038696 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\fastpath.pyd
2016-06-25 09:52 - 2016-05-25 19:05 - 00020936 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\mmapfile.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00024528 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32event.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00114640 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32security.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00124880 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32file.pyd
2016-02-12 17:14 - 2016-06-13 22:13 - 00021832 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_cffi_pywin_kernel32_x64d8f881xc8c369be.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00024016 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32clipboard.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00175560 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32gui.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00030160 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32pipe.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00043472 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32process.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00048592 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32service.pyd
2016-02-12 17:14 - 2016-06-13 22:13 - 00023872 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winffi.kernel32._winffi_kernel32.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00026456 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\dropbox.infinite.win.compiled._driverinstallation.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00057808 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32evtlog.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00024016 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32profile.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00246592 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\breakpad.client.windows.handler.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00028616 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32ts.pyd
2016-02-12 17:14 - 2016-06-13 22:13 - 00020800 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winffi.iphlpapi._winffi_iphlpapi.pyd
2016-02-12 17:14 - 2016-06-13 22:13 - 00019776 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winffi.winerror._winffi_winerror.pyd
2016-02-12 17:14 - 2016-06-13 22:13 - 00020800 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winffi.wininet._winffi_wininet.pyd
2015-12-10 13:56 - 2016-05-25 19:03 - 00134608 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_elementtree.pyd
2016-06-25 09:52 - 2016-05-25 19:04 - 00240584 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\jpegtran.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00020280 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\cpuid.compiled._cpuid.pyd
2015-12-10 13:56 - 2016-06-13 22:13 - 00023376 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winscreenshot.compiled._CaptureScreenshot.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00350152 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winxpgui.pyd
2016-02-12 17:14 - 2016-06-13 22:13 - 00022352 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\winverifysignature.compiled._VerifySignature.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00024392 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\librsyncffi.compiled._librsyncffi.pyd
2016-06-25 09:52 - 2016-05-25 19:05 - 00036296 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\librsync.dll
2016-06-25 09:52 - 2016-06-13 22:13 - 00031568 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\enterprise_data.compiled._enterprise_data.pyd
2016-06-25 09:52 - 2016-03-12 02:46 - 00293392 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\EnterpriseDataAdapter.dll
2016-06-25 09:52 - 2016-06-13 22:13 - 00084280 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\dropbox_sqlite_ext.DLL
2016-06-25 09:52 - 2016-06-13 22:13 - 01826096 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtCore.pyd
2015-12-10 13:56 - 2016-05-25 19:04 - 00083912 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\sip.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 03928880 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtWidgets.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 01971504 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtGui.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00531248 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtNetwork.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00132912 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKit.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00223544 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtWebKitWidgets.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00207672 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtPrintSupport.pyd
2015-12-10 13:56 - 2016-05-25 19:05 - 00060880 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\win32print.pyd
2016-04-15 09:24 - 2016-06-13 22:13 - 00025928 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\windisplaytoast.compiled._DisplayToast.pyd
2015-12-10 13:56 - 2016-06-13 22:13 - 00024904 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\_cffi_wpad_proxy_win_x752e3d61xdcfdcc84.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00546096 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtQuick.pyd
2016-06-25 09:52 - 2016-06-13 22:13 - 00357680 _____ () C:\Users\Saturn\AppData\Roaming\Dropbox\bin\PyQt5.QtQml.pyd
2016-04-19 07:52 - 2016-04-19 10:54 - 00141312 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkypeBackgroundTasks.dll
2016-04-19 07:52 - 2016-04-19 07:53 - 02941440 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\MessagingNativeCore.dll
2016-04-19 07:52 - 2016-04-19 07:53 - 00583168 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\MessagingEntityExtractionProxy.dll
2016-04-19 07:52 - 2016-04-19 07:53 - 01300992 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\MessagingNativeBase.dll
2016-04-19 07:52 - 2016-04-19 10:55 - 22284800 _____ () C:\Program Files\WindowsApps\Microsoft.Messaging_2.15.20002.0_x86__8wekyb3d8bbwe\SkyWrap.dll
2016-06-30 13:51 - 2016-06-30 13:51 - 01016832 _____ () C:\Program Files (x86)\Origin\platforms\qwindows.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00028160 _____ () C:\Program Files (x86)\Origin\imageformats\qgif.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00029696 _____ () C:\Program Files (x86)\Origin\imageformats\qico.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00256000 _____ () C:\Program Files (x86)\Origin\imageformats\qjpeg.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00266240 _____ () C:\Program Files (x86)\Origin\imageformats\qmng.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qtga.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00346112 _____ () C:\Program Files (x86)\Origin\imageformats\qtiff.dll
2016-06-30 13:51 - 2016-06-30 13:50 - 00023552 _____ () C:\Program Files (x86)\Origin\imageformats\qwbmp.dll
2016-06-30 13:51 - 2016-06-30 13:51 - 00243200 _____ () C:\Program Files (x86)\Origin\mediaservice\wmfengine.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\WINDOWS\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1502492809-711759855-3734638970-1001\Control Panel\Desktop\\Wallpaper -> 
HKU\S-1-5-21-1502492809-711759855-3734638970-1002\Control Panel\Desktop\\Wallpaper -> C:\Users\Saturn\Grissl Dateien\Eigene Bilder\Vroni\2014 Irland\101CANON\IMG_0195.JPG
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\...\StartupApproved\Run: => "SysTrayApp"
HKLM\...\StartupApproved\Run: => "IgfxTray"
HKLM\...\StartupApproved\Run: => "OnekeyStudio"
HKLM\...\StartupApproved\Run: => "SynTPEnh"
HKLM\...\StartupApproved\Run: => "XboxStat"
HKLM\...\StartupApproved\Run32: => "mcpltui_exe"
HKLM\...\StartupApproved\Run32: => "SecureW2 Tray"
HKLM\...\StartupApproved\Run32: => "PDFPrint"
HKLM\...\StartupApproved\Run32: => "Cisco AnyConnect Secure Mobility Agent for Windows"
HKLM\...\StartupApproved\Run32: => "VirtualCloneDrive"
HKU\S-1-5-21-1502492809-711759855-3734638970-1002\...\StartupApproved\Run: => "Steam"
HKU\S-1-5-21-1502492809-711759855-3734638970-1002\...\StartupApproved\Run: => "CCleaner Monitoring"
HKU\S-1-5-21-1502492809-711759855-3734638970-1002\...\StartupApproved\Run: => "Spotify"
HKU\S-1-5-21-1502492809-711759855-3734638970-1002\...\StartupApproved\Run: => "Spotify Web Helper"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{17156741-BDB8-4AF9-8135-3300A8D9A637}] => (Allow) C:\Program Files (x86)\Spiele\Schlacht um Mittelerde\game.dat
FirewallRules: [{519A2261-9A1A-47CB-B6F6-4642CD2FA669}] => (Allow) C:\Program Files (x86)\Spiele\Schlacht um Mittelerde\game.dat
FirewallRules: [{B978374E-96DE-4008-91B6-83D5A80D2D87}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{977E7D37-B3F5-44A4-A2A5-0CA9034722FB}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Assassin's Creed Rogue\ACC.exe
FirewallRules: [{CC0CDFB0-774A-41A2-BF44-7910874E6B8F}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{F01399CB-D3BC-4A34-9F86-A3974A4C6423}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{2EC8E790-5162-4BD8-8DFD-6E2528ECF016}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{F0E8E7CF-53F5-4369-B430-A2E510C32DAA}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\UcMapi.exe
FirewallRules: [{A742B242-5D70-44E8-A2A7-66D32AECD2F8}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [{C1116DD2-117F-4140-88D9-D38B0CCFAC90}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\Lync.exe
FirewallRules: [UDP Query User{C42C9991-7013-4665-8805-0687648BC5DE}C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_node\fl_mpi1500.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_node\fl_mpi1500.exe
FirewallRules: [TCP Query User{65A70B3D-01A1-4117-A793-131A0155AAFD}C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_node\fl_mpi1500.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_node\fl_mpi1500.exe
FirewallRules: [UDP Query User{938803BB-ED96-46EE-B988-E213203B5189}C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpid.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpid.exe
FirewallRules: [TCP Query User{18A96A1C-5707-4874-816F-BB5F2001C394}C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpid.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpid.exe
FirewallRules: [UDP Query User{424C9737-405F-4DB2-9910-653B8D71197D}C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpirun.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpirun.exe
FirewallRules: [TCP Query User{3D4C612A-B534-4EAF-8C21-C3A267A7ED73}C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpirun.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\multiport\mpi\win64\pcmpi\bin\mpirun.exe
FirewallRules: [UDP Query User{91DEF576-A8BC-4240-B187-845D5F91E230}C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_host\fl1500.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_host\fl1500.exe
FirewallRules: [TCP Query User{F323CA60-C9D3-4C36-AA7F-60682F78DC85}C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_host\fl1500.exe] => (Allow) C:\program files\ansys inc\v150\fluent\fluent15.0.0\win64\3d_host\fl1500.exe
FirewallRules: [UDP Query User{D3057824-86EE-4CC9-8233-EE5130F5A839}C:\program files\ansys inc\v150\fluent\fluent15.0.0\cortex\win64\cx1500.exe] => (Block) C:\program files\ansys inc\v150\fluent\fluent15.0.0\cortex\win64\cx1500.exe
FirewallRules: [TCP Query User{101A0748-C443-4D12-843A-C6327E7A0C17}C:\program files\ansys inc\v150\fluent\fluent15.0.0\cortex\win64\cx1500.exe] => (Block) C:\program files\ansys inc\v150\fluent\fluent15.0.0\cortex\win64\cx1500.exe
FirewallRules: [{576E738B-355A-4316-9C5B-92D8EF16A3F8}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{150E3332-3220-42D8-9518-1F0F37F4488D}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [UDP Query User{669FEC11-B85F-485F-9E01-37E9BBC8EF9E}C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe] => (Allow) C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe
FirewallRules: [TCP Query User{D45E0C4C-F6F2-4F58-8DD3-F287ACE57D88}C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe] => (Allow) C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe
FirewallRules: [UDP Query User{76613E0B-E282-4F48-9F0D-3DD996D90BD9}C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe] => (Allow) C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe
FirewallRules: [TCP Query User{2B3311DD-9055-4B24-BB96-346B80A451F7}C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe] => (Allow) C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe
FirewallRules: [UDP Query User{29CFF326-B4A3-4AB7-B69B-C637BEA4575B}C:\program files (x86)\software\ubisoft game launcher\games\watch_dogs\bin\watch_dogs.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\watch_dogs\bin\watch_dogs.exe
FirewallRules: [TCP Query User{5B345EB3-3874-41FB-AA91-D59229D0B9A3}C:\program files (x86)\software\ubisoft game launcher\games\watch_dogs\bin\watch_dogs.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\watch_dogs\bin\watch_dogs.exe
FirewallRules: [{0275E210-A802-475C-8C3A-4DC4AF8FE0F7}] => (Block) C:\program files\ansys inc\v150\commonfiles\help\helpviewer\ansyshelpviewer.exe
FirewallRules: [{D272ED73-9C52-47C4-8270-180B24E1A197}] => (Block) C:\program files\ansys inc\v150\commonfiles\help\helpviewer\ansyshelpviewer.exe
FirewallRules: [UDP Query User{1FDC66E9-322A-4973-87D8-42F0DD99E8EB}C:\program files\ansys inc\v150\commonfiles\help\helpviewer\ansyshelpviewer.exe] => (Allow) C:\program files\ansys inc\v150\commonfiles\help\helpviewer\ansyshelpviewer.exe
FirewallRules: [TCP Query User{3E5BE8A5-EB8A-4F5E-BEBB-B4E0F12BB9CD}C:\program files\ansys inc\v150\commonfiles\help\helpviewer\ansyshelpviewer.exe] => (Allow) C:\program files\ansys inc\v150\commonfiles\help\helpviewer\ansyshelpviewer.exe
FirewallRules: [{42489C3E-43E5-452A-A78F-FC68D155AB4A}] => (Block) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpirun.exe
FirewallRules: [{0D65A2FF-4153-4ED2-9CA0-03C79D684061}] => (Block) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpirun.exe
FirewallRules: [{674B184D-B9E2-45A0-BACC-6A9F8FBBE739}] => (Block) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpid.exe
FirewallRules: [{AFBC0592-5E77-469A-9791-B28FF054FB2F}] => (Block) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpid.exe
FirewallRules: [{B5436157-232E-4992-BADD-D62969CB1D2E}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\solver-pcmpi.exe
FirewallRules: [{08390E69-9BBA-4356-B5B3-0B1290B9D9BB}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\solver-pcmpi.exe
FirewallRules: [UDP Query User{7313E1D5-F580-4041-9A3B-51806730D079}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\solver-pcmpi.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\solver-pcmpi.exe
FirewallRules: [TCP Query User{65915A2C-7CB7-49BF-B0B3-054FD98865B3}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\solver-pcmpi.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\solver-pcmpi.exe
FirewallRules: [UDP Query User{41A8509A-C51C-4336-84BC-F1130C7254AF}C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpid.exe] => (Allow) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpid.exe
FirewallRules: [TCP Query User{9A32BC84-27D5-4BAB-8A5C-4B853DACBF8F}C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpid.exe] => (Allow) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpid.exe
FirewallRules: [UDP Query User{E39D3214-F404-46D1-ABE9-7B4FB6770A30}C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpirun.exe] => (Allow) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpirun.exe
FirewallRules: [TCP Query User{9C4258CB-8868-48AF-B112-74005125F2A1}C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpirun.exe] => (Allow) C:\program files\ansys inc\v150\commonfiles\mpi\platform\9.1\winx64\bin\mpirun.exe
FirewallRules: [{7E57FE92-D692-4BE8-9AFD-447F26E24DB7}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\viewer_ogl.exe
FirewallRules: [{CBF8B17A-01C9-46BD-A72A-F7FFA05625A7}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\viewer_ogl.exe
FirewallRules: [UDP Query User{F49DE329-41A9-40D9-A098-2A0D4AC47D68}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\viewer_ogl.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\viewer_ogl.exe
FirewallRules: [TCP Query User{799BF5F4-BFA7-4896-8D91-7D45ADC92C06}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\viewer_ogl.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\viewer_ogl.exe
FirewallRules: [{6064A088-8AD5-48D1-A95F-AF00BDA872DA}] => (Block) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postgui_ogl.exe
FirewallRules: [{7CEBEE5E-39D6-4F99-B464-4DCCFF753E48}] => (Block) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postgui_ogl.exe
FirewallRules: [{77AFD40F-5CF7-4F6C-BA18-270E2766618F}] => (Block) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postengine.exe
FirewallRules: [{35FEBC34-43E3-4CB3-9855-3958632787FF}] => (Block) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postengine.exe
FirewallRules: [UDP Query User{13522F54-AFEE-4529-9A31-2A184DFC01C3}C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postengine.exe] => (Allow) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postengine.exe
FirewallRules: [TCP Query User{B35CB844-771F-45C7-B2A4-5970DCC48EBD}C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postengine.exe] => (Allow) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postengine.exe
FirewallRules: [UDP Query User{F1BB7309-ED08-4E59-A9E4-F746228E1CD7}C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postgui_ogl.exe] => (Allow) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postgui_ogl.exe
FirewallRules: [TCP Query User{27253079-8352-4B99-B811-7E0D5E9C7A41}C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postgui_ogl.exe] => (Allow) C:\program files\ansys inc\v150\cfd-post\bin\winnt-amd64\postgui_ogl.exe
FirewallRules: [{5678507B-C28F-4406-B21C-73093C3EBF16}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\pregui_ogl.exe
FirewallRules: [{D0E11444-D5D9-4ED9-9548-54883BC3A7D6}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\pregui_ogl.exe
FirewallRules: [{64461AB2-23DF-42D2-88BE-54C1CF05A325}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\preengine.exe
FirewallRules: [{969617E0-BB11-4944-B1B7-7D8C5E159F34}] => (Block) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\preengine.exe
FirewallRules: [UDP Query User{C20F88CA-5EEC-4F2E-AC64-C4849AF438B8}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\preengine.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\preengine.exe
FirewallRules: [TCP Query User{51EDF256-254F-4C89-A0D6-DA3A9D0DC6E6}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\preengine.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\preengine.exe
FirewallRules: [UDP Query User{E3E45666-8B57-4DDD-B678-4657305DB814}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\pregui_ogl.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\pregui_ogl.exe
FirewallRules: [TCP Query User{DCA4B62F-8B15-4330-86C9-A8C906BD1681}C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\pregui_ogl.exe] => (Allow) C:\program files\ansys inc\v150\cfx\bin\winnt-amd64\pregui_ogl.exe
FirewallRules: [UDP Query User{7F95A766-B24B-4321-826D-13EF15D43A04}C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe] => (Allow) C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe
FirewallRules: [TCP Query User{3B2CA305-01A7-4543-8769-345D9FC3A03D}C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe] => (Allow) C:\program files\ansys inc\v150\aisol\bin\winx64\ansyswbu.exe
FirewallRules: [{23DDE21A-3964-4C6C-9FFC-A455F96B5C61}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{66923C14-0C49-4989-8FF6-4576DB6D9F69}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{FE3BA644-0ED0-4627-BC1E-52BB2D966481}] => (Block) C:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [{0F92A5C8-69ED-4034-A88E-C1E584A6A908}] => (Block) C:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [UDP Query User{5EFD6F47-7632-43F5-8BD6-65D51A218FCB}C:\program files (x86)\origin games\fifa 16\fifa16.exe] => (Allow) C:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [TCP Query User{ABD836B8-682E-4C8B-AAAA-29E7248E14D7}C:\program files (x86)\origin games\fifa 16\fifa16.exe] => (Allow) C:\program files (x86)\origin games\fifa 16\fifa16.exe
FirewallRules: [UDP Query User{55F21478-D7FD-4BDA-A843-C098A9A38CAC}C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [TCP Query User{8EAD24D2-58B9-4D0E-9B97-BFE60089A162}C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe] => (Allow) C:\program files (x86)\origin games\fifa 16 demo\fifa16_demo.exe
FirewallRules: [{41A058CB-D30A-4C48-88B6-591BFD3A505F}] => (Block) C:\program files\ansys inc\v150\rsm\bin\ans.rsm.jmhost.exe
FirewallRules: [{F82A4718-F3D6-4566-8599-718A413157A4}] => (Block) C:\program files\ansys inc\v150\rsm\bin\ans.rsm.jmhost.exe
FirewallRules: [UDP Query User{F99B5CEA-22F0-4E80-AC18-4A74A8FE78C8}C:\program files\ansys inc\v150\rsm\bin\ans.rsm.jmhost.exe] => (Allow) C:\program files\ansys inc\v150\rsm\bin\ans.rsm.jmhost.exe
FirewallRules: [TCP Query User{7AD41FA7-B6F3-4F68-A3E4-0AA15A82E4D7}C:\program files\ansys inc\v150\rsm\bin\ans.rsm.jmhost.exe] => (Allow) C:\program files\ansys inc\v150\rsm\bin\ans.rsm.jmhost.exe
FirewallRules: [UDP Query User{467B4038-D046-4BA5-88F2-EB3EBB2476A1}C:\users\saturn\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\saturn\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [TCP Query User{F0314855-AE92-4D5F-B12F-7C848A1FA61D}C:\users\saturn\appdata\roaming\dropbox\bin\dropbox.exe] => (Block) C:\users\saturn\appdata\roaming\dropbox\bin\dropbox.exe
FirewallRules: [{3851790D-CCE1-48B0-894D-3160FA2AB346}] => (Block) C:\users\saturn\appdata\roaming\spotify\spotify.exe
FirewallRules: [{5F07E6F2-90F3-4203-A000-96BDFFC0F532}] => (Block) C:\users\saturn\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{F9942B35-07ED-42EF-87ED-D2226348AC61}C:\users\saturn\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\saturn\appdata\roaming\spotify\spotify.exe
FirewallRules: [TCP Query User{CBFDFE69-116B-476E-8772-7E176529BAC6}C:\users\saturn\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\saturn\appdata\roaming\spotify\spotify.exe
FirewallRules: [{48050189-9AD4-42FB-A84B-77F4A7C1D4E9}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{02BF6E44-FDF1-4022-8C16-EE900F09F53C}] => (Allow) LPort=1900
FirewallRules: [{D25B6E2A-6387-4A77-9A8C-35D270A1C4BD}] => (Allow) LPort=2869
FirewallRules: [{16761112-6231-4037-A308-8ABAD7C2B0AD}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{049F4F93-57E1-4C9B-A811-A84615B98E32}] => (Allow) C:\Users\Saturn\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{0920CD6F-1452-4D02-A05D-78E20EA7257F}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{41AC9D2E-79F1-4AC2-84A7-9FEB53C11F9B}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [UDP Query User{D4C7DFCB-401D-4516-9CB7-A90AF578C868}C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe] => (Allow) C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe
FirewallRules: [TCP Query User{49899482-1880-434D-B91F-51B11E90D927}C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe] => (Allow) C:\program files\ansys inc\v150\framework\bin\win64\ansysfww.exe
FirewallRules: [UDP Query User{C923122B-0420-4C2F-808C-1967853BEDA8}C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe] => (Allow) C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe
FirewallRules: [TCP Query User{0E07196B-B732-4E02-88EA-3C9B46BA6347}C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe] => (Allow) C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe
FirewallRules: [{C4563579-5CB1-424E-BE23-479D7952E59B}] => (Allow) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
FirewallRules: [{4FFFE5B3-30ED-4C01-8B64-31A51A2B2252}] => (Allow) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
FirewallRules: [{FCF8B774-6278-4BEE-BEB2-AC4D5B42E269}] => (Allow) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
FirewallRules: [{6C38BCE5-DBDC-42E0-8260-409343888923}] => (Allow) C:\Program Files (x86)\Cisco\Cisco AnyConnect Secure Mobility Client\vpnui.exe
FirewallRules: [{FE09A057-5C10-4058-9498-77ECA37BD149}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{879D3CC9-80C4-4475-9EFD-7B91D40E3A45}] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{57007B38-6D43-4A81-864C-2C25E837097B}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [TCP Query User{9B922F88-03FF-45D8-92DD-9375ACF53177}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{0D2BB2A6-05A5-42C5-A4D2-EB0A809E95A7}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [{239DC488-F73C-4114-9102-35D54115BC80}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe
FirewallRules: [UDP Query User{B996D28C-8298-47E8-B6F8-F2C59E3DD8ED}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [TCP Query User{0B1AB164-18C3-4AA2-9670-7E4A2C77D0E2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe
FirewallRules: [UDP Query User{71A7AF85-D02F-4C98-990F-6B6D85E97D10}C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Block) C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [TCP Query User{27153434-176E-4D04-9E1E-05EBABA7527A}C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Block) C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{EF592E0B-C47F-4848-B1F0-4DD8F819A086}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{E0C56400-7AEF-4CB4-9665-BFA3299C919D}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{DAA6BA57-F95A-465C-B800-E7613A3B64C6}] => (Allow) C:\Program Files (x86)\AspenTech\AMSystem V7.3\Bin\AspenModeler.exe
FirewallRules: [{0F3C3BB5-D90C-4483-BA65-794107017981}] => (Allow) C:\Program Files (x86)\AspenTech\AMSystem V7.3\Bin\AspenModeler.exe
FirewallRules: [UDP Query User{03E473FE-5075-4F86-96BD-4CBC0AB78478}C:\program files (x86)\aspentech\aspen remote simulation service v7.3\aspentech.aspencxs.remotingsvc.exe] => (Block) C:\program files (x86)\aspentech\aspen remote simulation service v7.3\aspentech.aspencxs.remotingsvc.exe
FirewallRules: [TCP Query User{632F4524-6FC9-4149-8A05-CBC61F9BA65F}C:\program files (x86)\aspentech\aspen remote simulation service v7.3\aspentech.aspencxs.remotingsvc.exe] => (Block) C:\program files (x86)\aspentech\aspen remote simulation service v7.3\aspentech.aspencxs.remotingsvc.exe
FirewallRules: [{35B238F2-FE0D-4767-AAF0-240C7CC2F019}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{6E9CE68E-ADBF-4E4D-A371-AAB91F4C4B24}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{CDEF63BC-CDCA-4928-B5B3-53D99228A64B}] => (Allow) C:\Program Files (x86)\EA GAMES\Die Schlacht um Mittelerde(tm)\game.dat
FirewallRules: [{D6C85AAE-719D-4C4C-9CE2-5D5CF8745B4E}] => (Allow) C:\Program Files (x86)\EA GAMES\Die Schlacht um Mittelerde(tm)\game.dat
FirewallRules: [UDP Query User{6B736A2D-95E6-43E3-881C-B8CA41B3831D}C:\program files (x86)\ea games\die schlacht um mittelerde(tm)\patchget.dat] => (Allow) C:\program files (x86)\ea games\die schlacht um mittelerde(tm)\patchget.dat
FirewallRules: [TCP Query User{F50FE471-43D2-451F-AC5D-D3D69DA33EBE}C:\program files (x86)\ea games\die schlacht um mittelerde(tm)\patchget.dat] => (Allow) C:\program files (x86)\ea games\die schlacht um mittelerde(tm)\patchget.dat
FirewallRules: [UDP Query User{EDF9E584-AD73-4399-8680-239DE5A2C4B6}C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed unity\acu.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed unity\acu.exe
FirewallRules: [TCP Query User{A8B2AB1F-138C-45F6-B5B8-507FDB5A2D8C}C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed unity\acu.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed unity\acu.exe
FirewallRules: [{241EBEC1-39B8-497F-A568-CB85CA355226}] => (Allow) C:\Users\Saturn\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{855CEA62-CA35-48A0-AE80-093B4E27B7B4}] => (Allow) C:\Users\Saturn\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{7F4C3EDF-D34A-4AC5-84BE-11BF286BD1C2}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe
FirewallRules: [{AEF9B433-4E59-4717-B861-0189DA7BB56E}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe
FirewallRules: [UDP Query User{5FD2CF1A-9C01-44B8-8C17-2D9E77D6D031}C:\program files (x86)\origin games\fifa manager 13\manager13.exe] => (Allow) C:\program files (x86)\origin games\fifa manager 13\manager13.exe
FirewallRules: [TCP Query User{66FF833A-F3A3-4803-A4F9-E2E12A6DB5B8}C:\program files (x86)\origin games\fifa manager 13\manager13.exe] => (Allow) C:\program files (x86)\origin games\fifa manager 13\manager13.exe
FirewallRules: [{16EFCCFE-60F2-4E84-A93C-F2EF94F550A6}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA Manager 13\Manager13.exe
FirewallRules: [{0831E6C4-98B4-4E5B-A17D-19C8ACEE9376}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA Manager 13\Manager13.exe
FirewallRules: [{EB94B930-47AC-4F1A-A4F1-DAFF1C37CE0E}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{9A0F25F6-3B08-4F7E-B46F-1EB7BF3722D2}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgemca.exe
FirewallRules: [{745E7EDD-224A-41A5-99F9-3F010774A99F}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{47000D79-EA01-4EDA-98B9-1E32680B09CA}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgdiagex.exe
FirewallRules: [{6DC67139-E16E-4ACB-A74B-03AC1A4BE343}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{55E6CD50-ED3A-424C-A482-CE2C83AED127}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgnsa.exe
FirewallRules: [{8BD5FE06-8924-46B0-B379-47488291BCDE}] => (Block) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{4FC57C00-2637-44E8-8DF0-8B27A967DAFD}] => (Block) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [UDP Query User{3F047C50-2A3E-4966-B335-7C0B495FDA81}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [TCP Query User{EBF6C839-61DB-40FE-8071-25740EF4915B}C:\program files (x86)\origin games\fifa 15\fifa15.exe] => (Allow) C:\program files (x86)\origin games\fifa 15\fifa15.exe
FirewallRules: [{55C8F4DF-E810-4BD2-B3F4-8931F00E4516}] => (Allow) C:\Program Files\Microsoft Office 15\root\Office15\outlook.exe
FirewallRules: [{C80F7F18-77C4-49B2-8DBC-5A0D5570D7B9}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{118093E5-A87A-4A6A-9885-FF8A598F18E0}] => (Allow) C:\Program Files (x86)\AVG\AVG2015\avgmfapx.exe
FirewallRules: [{9970E166-D143-4583-BAC9-5AC5DFF2C570}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{A0F6B7B9-6CA5-494A-A43B-FE550A58A854}] => (Allow) C:\Program Files (x86)\Origin Games\Plants vs. Zombies\PlantsVsZombies.exe
FirewallRules: [{FE121EEC-0D94-4D59-BE6D-8C747D3E7F96}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\gu.exe
FirewallRules: [{A2E54E5C-A993-445E-A3F7-6CF396586951}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\gu.exe
FirewallRules: [{536B71C4-1FA6-4349-BA9F-4EF459657946}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{10B76BD9-EB8E-4CF5-AC29-7B3E652B4302}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{C5F04FCD-2E39-45EA-BAFA-76F8CBAA5A84}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{429D026D-816E-4167-8526-1BAEE1081463}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{CB1E0F73-1C47-42CF-96A6-924D98DF3EA9}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\Blacklist_Launcher.exe
FirewallRules: [{C1F00218-87A4-4585-A1F3-4538A05D3365}] => (Allow) C:\Program Files (x86)\Ubisoft\Tom Clancy's Splinter Cell® Blacklist™\Blacklist_Launcher.exe
FirewallRules: [{3C792F1C-2229-4776-B0AB-95C55C9224C1}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{F103F364-11B3-4B51-B031-4F6F3F3AF30A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{CA9B96BE-6E1E-4205-B4B7-FD7EEE726DFE}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{DA268BB7-013B-48F8-B670-57E259C1AD29}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{0E3384F3-FEED-4BF3-AAEE-2D9C273A25CF}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Assassin's Creed 3\AC3MP.exe
FirewallRules: [{959A8199-F3FF-4D65-9270-6C74D19C7B56}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Assassin's Creed 3\AC3MP.exe
FirewallRules: [{A2DCE4F1-0D28-4A2D-B444-E9A2C3557A0F}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{6A23EFEC-1516-49FC-AC55-C52DC5AF83FC}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\Assassin's Creed 3\AC3SP.exe
FirewallRules: [{221436D8-53AC-44E9-B02C-0B76F9921903}] => (Allow) C:\Program Files (x86)\Software\Steam\bin\steamwebhelper.exe
FirewallRules: [{0254C8FA-A7B0-40DC-BE02-1B5361B712E0}] => (Allow) C:\Program Files (x86)\Software\Steam\bin\steamwebhelper.exe
FirewallRules: [{418BFBD8-FAC3-4319-B666-4AF8EAE445F7}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{13CEFD7F-3234-4F21-9DCC-7C71DCDAF162}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFMP.exe
FirewallRules: [{C0F6176A-692A-44B4-BF10-E952C226FE02}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{569D440A-E45C-43CA-AAE0-24D5851B7405}] => (Allow) C:\Program Files (x86)\Software\Ubisoft Game Launcher\games\Assassin's Creed IV Black Flag\AC4BFSP.exe
FirewallRules: [{E126E6E7-BA81-49C0-B811-0C20A007E715}] => (Allow) C:\Program Files (x86)\Software\Steam\Steam.exe
FirewallRules: [{68EC6FF1-970C-43D4-850E-D228FB212403}] => (Allow) C:\Program Files (x86)\Software\Steam\Steam.exe
FirewallRules: [{B717B526-265E-4F02-834F-8BB67ED1EE3A}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{149D53A4-ED38-4BE5-85C0-A1FA963E3DFA}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{B1FF11F7-0E28-41C2-A126-7020FE61B3AF}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD10.EXE
FirewallRules: [{94BD8E21-4753-4955-A9F0-F82F88EF193E}] => (Allow) C:\Program Files (x86)\Lenovo\PowerDVD10\PowerDVD Cinema\PowerDVDCinema10.exe
FirewallRules: [{E04869CA-0773-4689-830D-0EF3752720F2}] => (Allow) C:\Program Files\CyberLink\PowerDirector10\PDR10.EXE
FirewallRules: [{A8570B7F-CD6A-4665-B5D6-83D168E5DC3F}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{56FF7A13-C8C6-49A9-82DB-0408D216BB7D}] => (Allow) C:\Program Files\Common Files\mcafee\platform\McSvcHost\McSvHost.exe
FirewallRules: [{E010E265-4969-4239-8C1A-FE0CA40FA28A}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{D8A8BE1E-9DC0-4A31-993F-C1C357EF7B79}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{C3C2C853-DF48-45CE-A5DD-60E2F6C55102}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{ACF12603-8B1A-493A-8387-9B417D707128}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{25362380-9409-4C77-A9B2-10CAE89C2869}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [{4CF20C8C-3873-4784-B39E-1E8BB6049767}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA Update Core\daemonu.exe
FirewallRules: [TCP Query User{38D93411-19F0-44CF-B81B-76285586528A}C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe] => (Allow) C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe
FirewallRules: [UDP Query User{35478D6F-F815-403D-A20C-FE73BF2E01C0}C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe] => (Allow) C:\program files\ansys inc\shared files\licensing\winx64\ansysli_client.exe
FirewallRules: [TCP Query User{E0D0A53F-165C-489F-9122-143E3AE95E01}C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{6C297325-18C4-4A0B-83FB-F6BC85E3557B}C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\software\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [TCP Query User{4A898770-334D-4AB6-81F6-84905F31C6B8}C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed iv black flag\ac4bfsp.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed iv black flag\ac4bfsp.exe
FirewallRules: [UDP Query User{D94BF7E1-05CF-4553-A652-9E0D5C8280BA}C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed iv black flag\ac4bfsp.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed iv black flag\ac4bfsp.exe
FirewallRules: [TCP Query User{DF4B2CD7-BFEE-467B-B8CE-B495F0ED864B}C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed rogue\acc.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed rogue\acc.exe
FirewallRules: [UDP Query User{367C574F-E76F-4210-84B1-C78DC07819E4}C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed rogue\acc.exe] => (Allow) C:\program files (x86)\software\ubisoft game launcher\games\assassin's creed rogue\acc.exe
FirewallRules: [{D1B9C3CA-3224-4966-B67F-6BCEA7BCBB2E}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{B1EB0DF2-6771-43A3-BD1D-C9D11CF83730}] => (Allow) C:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{C3E81194-3A7A-41F9-AF80-DC0DD21E8E43}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe
FirewallRules: [{301D52CB-1BD1-4198-9AEB-E3CF5A58E860}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4 Create A Sim Demo\Game\Bin\TS4CAS.exe
FirewallRules: [{63AA25F9-41E2-4B5E-809B-AE82AC987E79}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D3B8A3B8-C9B5-4858-8C02-F343F34DBCF6}] => (Allow) C:\Program Files (x86)\Software\Steam\SteamApps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{91E4B332-8095-4218-AACB-86B6A299947D}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{9869C7DF-9CE5-4C5E-87FD-ECEFF2414E8E}] => (Allow) C:\Program Files (x86)\Origin Games\FIFA 16\fifasetup\fifaconfig.exe
FirewallRules: [{A276DB9A-8363-444C-8E36-E13899E124AB}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe
FirewallRules: [{7611EF2B-B90F-4C00-A43F-053E6980C792}] => (Allow) C:\Program Files (x86)\AVG\Av\avgmfapx.exe

==================== Wiederherstellungspunkte =========================

06-07-2016 18:46:35 Removed AVG
07-07-2016 12:55:17 JRT Pre-Junkware Removal

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Description: Cisco AnyConnect Secure Mobility Client Virtual Miniport Adapter for Windows x64
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Cisco Systems
Service: vpnva
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (07/08/2016 10:45:28 AM) (Source: Perflib) (EventID: 1023) (User: )
Description: MSSQL$SQLEXPRESS8

Error: (07/08/2016 10:45:27 AM) (Source: Perflib) (EventID: 1008) (User: )
Description: BITSC:\Windows\System32\bitsperf.dll8

Error: (07/07/2016 12:55:35 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (07/07/2016 12:45:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.1.40.29239, Zeitstempel: 0x556dc85f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.306, Zeitstempel: 0x571afb9a
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bdae8
ID des fehlerhaften Prozesses: 0x109c
Startzeit der fehlerhaften Anwendung: 0xAvira.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.ServiceHost.exe2
Berichtskennung: Avira.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.ServiceHost.exe5

Error: (07/07/2016 12:45:59 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
   bei System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   bei System.Xml.XmlTextReaderImpl.Read()
   bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   bei System.Xml.XmlDocument.Load(System.String)
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
   bei Avira.OE.WinCore.OeProductInfo.get_Culture()
   bei Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/07/2016 12:45:48 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.1.40.29239, Zeitstempel: 0x556dc85f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.306, Zeitstempel: 0x571afb9a
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bdae8
ID des fehlerhaften Prozesses: 0x11e8
Startzeit der fehlerhaften Anwendung: 0xAvira.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.ServiceHost.exe2
Berichtskennung: Avira.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.ServiceHost.exe5

Error: (07/07/2016 12:45:48 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
   bei System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   bei System.Xml.XmlTextReaderImpl.Read()
   bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   bei System.Xml.XmlDocument.Load(System.String)
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
   bei Avira.OE.WinCore.OeProductInfo.get_Culture()
   bei Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/07/2016 12:45:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Avira.ServiceHost.exe, Version: 1.1.40.29239, Zeitstempel: 0x556dc85f
Name des fehlerhaften Moduls: KERNELBASE.dll, Version: 10.0.10586.306, Zeitstempel: 0x571afb9a
Ausnahmecode: 0xe0434352
Fehleroffset: 0x000bdae8
ID des fehlerhaften Prozesses: 0x9fc
Startzeit der fehlerhaften Anwendung: 0xAvira.ServiceHost.exe0
Pfad der fehlerhaften Anwendung: Avira.ServiceHost.exe1
Pfad des fehlerhaften Moduls: Avira.ServiceHost.exe2
Berichtskennung: Avira.ServiceHost.exe3
Vollständiger Name des fehlerhaften Pakets: Avira.ServiceHost.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: Avira.ServiceHost.exe5

Error: (07/07/2016 12:45:29 PM) (Source: .NET Runtime) (EventID: 1026) (User: )
Description: Anwendung: Avira.ServiceHost.exe
Frameworkversion: v4.0.30319
Beschreibung: Der Prozess wurde aufgrund einer unbehandelten Ausnahme beendet.
Ausnahmeinformationen: System.Xml.XmlException
   bei System.Xml.XmlTextReaderImpl.Throw(System.Exception)
   bei System.Xml.XmlTextReaderImpl.ParseDocumentContent()
   bei System.Xml.XmlTextReaderImpl.Read()
   bei System.Xml.XmlLoader.Load(System.Xml.XmlDocument, System.Xml.XmlReader, Boolean)
   bei System.Xml.XmlDocument.Load(System.Xml.XmlReader)
   bei System.Xml.XmlDocument.Load(System.String)
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.TryLoadXmlDocumentFromFile(Int32, System.TimeSpan)
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.LoadXmlDocumentFromFile()
   bei Avira.OE.WinCore.OeSharedSettingsAccessor.Get(System.String)
   bei Avira.OE.WinCore.OeProductInfo.get_Culture()
   bei Avira.OE.WinCore.Utility.CultureSetter.SetDefaultCultureDefinedInAppsettings()
   bei Avira.OE.ServiceHost.ServiceHost.SetDefaultCulture()
   bei Avira.OE.ServiceHost.ServiceHost.Initialize(System.Object)
   bei System.Threading.QueueUserWorkItemCallback.WaitCallback_Context(System.Object)
   bei System.Threading.ExecutionContext.RunInternal(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.ExecutionContext.Run(System.Threading.ExecutionContext, System.Threading.ContextCallback, System.Object, Boolean)
   bei System.Threading.QueueUserWorkItemCallback.System.Threading.IThreadPoolWorkItem.ExecuteWorkItem()
   bei System.Threading.ThreadPoolWorkQueue.Dispatch()
   bei System.Threading._ThreadPoolWaitCallback.PerformWaitCallback()

Error: (07/06/2016 08:55:29 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: dwm.exe, Version: 10.0.10586.0, Zeitstempel: 0x5632d756
Name des fehlerhaften Moduls: combase.dll, Version: 10.0.10586.103, Zeitstempel: 0x56a849ab
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0000000000067e3c
ID des fehlerhaften Prozesses: 0x2f4
Startzeit der fehlerhaften Anwendung: 0xdwm.exe0
Pfad der fehlerhaften Anwendung: dwm.exe1
Pfad des fehlerhaften Moduls: dwm.exe2
Berichtskennung: dwm.exe3
Vollständiger Name des fehlerhaften Pakets: dwm.exe4
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: dwm.exe5


Systemfehler:
=============
Error: (07/08/2016 10:26:51 AM) (Source: DCOM) (EventID: 10010) (User: GRISSL-LAPTOP)
Description: {D63B10C5-BB46-4990-A94F-E40B9D520160}

Error: (07/07/2016 05:28:50 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_2eb814" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/07/2016 05:28:50 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/07/2016 01:02:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenzugriff_6f30e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/07/2016 01:02:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Benutzerdatenspeicher _6f30e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/07/2016 01:02:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Kontaktdaten_6f30e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/07/2016 01:02:45 PM) (Source: Service Control Manager) (EventID: 7031) (User: )
Description: Der Dienst "Synchronisierungshost_6f30e" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 10000 Millisekunden durchgeführt: Neustart des Diensts.

Error: (07/07/2016 01:02:45 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: AnwendungsspezifischLokalAktivierung{D63B10C5-BB46-4990-A94F-E40B9D520160}{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}NT-AUTORITÄTSYSTEMS-1-5-18LocalHost (unter Verwendung von LRPC)Nicht verfügbarNicht verfügbar

Error: (07/07/2016 12:55:47 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.

Error: (07/07/2016 12:45:59 PM) (Source: Service Control Manager) (EventID: 7034) (User: )
Description: Dienst "Avira Service Host" wurde unerwartet beendet. Dies ist bereits 3 Mal passiert.


CodeIntegrity:
===================================
  Date: 2016-07-08 12:59:38.658
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 12:59:38.641
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 12:59:38.622
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 12:59:38.312
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 12:59:38.241
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 12:18:01.483
  Description: Code Integrity is unable to verify the image integrity of the file \Device\HarddiskVolume5\Windows\System32\efswrt.dll because the set of per-page image hashes could not be found on the system.

  Date: 2016-07-08 11:03:49.494
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 11:03:49.477
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 11:03:49.457
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

  Date: 2016-07-08 10:41:09.795
  Description: Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Windows Defender\MsMpEng.exe) attempted to load \Device\HarddiskVolume5\Windows\System32\nvinitx.dll that did not meet the Custom 3 / Antimalware signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-4700MQ CPU @ 2.40GHz
Prozentuale Nutzung des RAM: 35%
Installierter physikalischer RAM: 8116.27 MB
Verfügbarer physikalischer RAM: 5211.96 MB
Summe virtueller Speicher: 9396.27 MB
Verfügbarer virtueller Speicher: 6555.47 MB

==================== Laufwerke ================================

Drive c: (Windows8_OS) (Fixed) (Total:889.67 GB) (Free:301.81 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive d: (LENOVO) (Fixed) (Total:25 GB) (Free:22.74 GB) NTFS
Drive e: (LOTRBFME) (CDROM) (Total:4.01 GB) (Free:0 GB) UDF

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: 5884A014)

Partition: GPT.

==================== Ende von Addition.txt ============================

 

Themen zu Windows 10: Programme deinstallieren sich
administrator, antivir, avg, avira, cpu, defender, desktop, dnsapi.dll, explorer, fehler, firefox, mozilla, prozesse, realtek, registry, scan, services.exe, software, svchost.exe, system, temp, uplay, usb, virus, windows, windowsapps, winlogon.exe, wlan


« Windows 10: Versehentlich auf eMail-Anhang mit JS/Downloader.Agent geklickt. | Trojaner? CPU-Auslastung ungewöhnlich hoch »


Ähnliche Themen: Windows 10: Programme deinstallieren sich


  1. Windows 7: MPC Cleaner lässt sich nicht deinstallieren / entferne
    Log-Analyse und Auswertung - 22.03.2016 (20)
  2. Windows 7: Snap.Do lässt sich nicht aus Systemsteuerung deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 12.01.2016 (9)
  3. Windows 7/ DNSBlock lässt sich nicht deinstallieren (Teil 1)
    Log-Analyse und Auswertung - 17.10.2015 (4)
  4. Nach Download läuft alles sehr sehr langsam, Internet funktioniert nicht, Programme lassen sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 02.09.2015 (3)
  5. Programme auf einer Partition deinstallieren / löschen sich selbstständig
    Plagegeister aller Art und deren Bekämpfung - 08.03.2015 (5)
  6. Windows 7: Search Protect lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 14.09.2014 (13)
  7. Windows 7: FreeHDSport TV 6.0 lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 23.08.2014 (5)
  8. Snapdo lässt sich nicht deinstallieren windows 8.1
    Plagegeister aller Art und deren Bekämpfung - 03.05.2014 (13)
  9. Windows XP: Fragmente verschiedener Programme lassen sich nicht deinstallieren, Desktophintergrund verändert sich
    Log-Analyse und Auswertung - 18.02.2014 (12)
  10. Windows 7, Beamrise lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 12.02.2014 (9)
  11. Windows 7 – Schadware FreeHDSport TV lässt sich nicht deinstallieren
    Plagegeister aller Art und deren Bekämpfung - 03.01.2014 (9)
  12. Programme lassen sich nicht deinstallieren - Laptop total verseucht?
    Plagegeister aller Art und deren Bekämpfung - 22.10.2013 (13)
  13. Windows 8: Welche Programme darf ich gefahrlos deinstallieren?
    Alles rund um Windows - 05.10.2013 (26)
  14. Windows 7 : Yontoo 2.052 lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 10.09.2013 (9)
  15. Windows 8 32 Bit Werbeeinblendungen - Webcake 3.00 lässt sich nicht deinstallieren
    Log-Analyse und Auswertung - 31.07.2013 (4)
  16. Programme auf Windows 7 deinstallieren?
    Alles rund um Windows - 22.11.2011 (6)
  17. Lässt sich nicht deinstallieren C:\Programme\Instant Access\Dialer\780215672"
    Plagegeister aller Art und deren Bekämpfung - 04.10.2008 (2)
Anleitungen und Tipps

- Für alle Hilfesuchenden! Was beachten?

- Anleitung: MyStartSearch.com entfernen

- Anleitung: WebSearches löschen

- Hilfe: iStartSurf entfernen – so gehts!

- Anleitung: Omiga Plus richtig entfernen

- Browser Viren entfernen


Zum Thema Windows 10: Programme deinstallieren sich - Code: Alles auswählen Aufklappen ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 02-07-2016 durchgeführt von Saturn (2016-07-08 13:35:12) Gestartet von C:\Users\Saturn\Downloads Windows 10 Home Version 1511 (X64) (2015-12-12 - Windows 10: Programme deinstallieren sich...
Archiv
Du betrachtest: Windows 10: Programme deinstallieren sich auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131