NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen.

Ingo123 · 02.02.2017, 20:20

Guten Tag,

Mein Name ist Ingo und ich poste heute das erste und hoffentlich letzte Mal auf diesem Forum.

Ich habe mir auf mir auf meinem PC NetUtils2016 eingefangen und bekomme es, auch mit Programmen wie AdwCleaner, nicht von meiner Festplatte. Es wird zwar vom AdwCleaner erkannt, bleibt aber nach dem Neustart auf der Festplatte bestehen. Das Programm öffnet dauernd Werbung wann immer ich einen Link anklicke und fügt auch selbst in Texte auf bestimmte Schlagwörter, wie z.B. Windows, eigene Links ein, die einen auf Werbeseiten bringen.

Ich hoffe mir kann geholfen werden und möchte mich schon im Voraus für Hilfe jeder Art bedanken.

Grüße Ingo

P.S.: Denn Addition Ordner vom FRST habe ich in zwei einzelne Ordner aufgeteilt, da er zu groß war, der zweite beginnt dabei genau wo der erste aufhört.

Hier die Scans die ich bereits durchgeführt habe.

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
durchgeführt von Jonathan (Administrator) auf DESKTOP-M3N38S4 (02-02-2017 19:20:44)
Gestartet von C:\Users\Jonathan\Downloads
Geladene Profile: Jonathan (Verfügbare Profile: Jonathan)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
() C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe
(Hi-Rez Studios) E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(MY.COM B.V.) C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Valve Corporation) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
() C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\System32\InstallAgent.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8783616 2015-12-31] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-25] (Microsoft Corporation)
HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [263112 2016-03-23] (Razer Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2013-12-17] (AVM Berlin)
HKLM-x32\...\RunOnce: [Tabamapelo] => C:\WINDOWS\SysWoW64\wscript.exe /E:vbscript /B "C:\Users\Jonathan\AppData\Roaming\Taperap"
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Steam] => E:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Discord] => C:\Users\Jonathan\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [MyComGames] => C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe [5014928 2017-02-02] (MY.COM B.V.)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\MountPoints2: {1c168c84-6096-11e6-858a-806e6f6e6963} - "G:\pushinst.exe" 
HKU\S-1-5-18\...\Run: [script_fcbd] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat [351 2016-11-10] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\fcbd.bat [2016-11-10] ()
GroupPolicy: Beschränkung <======= ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{26d0c356-7015-4c04-a5b9-6da47962995c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
DPF: HKLM-x32 {69069B2A-3E5E-4907-A43B-7B98812C4F7D} hxxps://api.koggames.com/auth/KOGHWActiveX.CAB
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge: 
======
Edge Session Restore: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> ist aktiviert.

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-30] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-3104372971-824348289-1990348516-1001: @my.com/Games -> C:\Users\Jonathan\AppData\Local\MyComGames\NPMyComDetector.dll [2017-02-02] (MY.COM B.V.)

Chrome: 
=======
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default [2017-02-02]
CHR Extension: (Google Präsentationen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-11]
CHR Extension: (Google Docs) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-11]
CHR Extension: (Google Drive) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-11]
CHR Extension: (YouTube) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-11]
CHR Extension: (Google Tabellen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-11]
CHR Extension: (Google Docs Offline) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-30]
CHR Extension: (Google Mail) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-11]
CHR Extension: (Chrome Media Router) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-11]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1456136 2017-01-10] ()
S3 DAUpdaterSvc; E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2017-01-31] (BioWare)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395536 2016-12-21] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
U2 HiPatchService; E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-10-16] (Intel Corporation)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-07] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-07] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-12-05] ()
R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [107832 2016-12-05] ()
R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [376272 2016-03-23] (Razer Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 fwlanusb6; C:\WINDOWS\system32\DRIVERS\fwlanusb6.sys [1327744 2014-03-27] (AVM GmbH)
R3 iaLPSS2_UART2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [281896 2015-07-20] (Intel Corporation)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
U1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [909944 2017-01-30] () <==== ACHTUNG
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_bf2d88c4ea749bb8\nvlddmkm.sys [14242880 2016-09-23] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-10-10] (Realtek                                            )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U0 aswVmm; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-02-02 19:20 - 2017-02-02 19:20 - 00016159 _____ C:\Users\Jonathan\Downloads\FRST.txt
2017-02-02 19:20 - 2017-02-02 19:20 - 00000000 ____D C:\FRST
2017-02-02 19:19 - 2017-02-02 19:20 - 02420736 _____ (Farbar) C:\Users\Jonathan\Downloads\FRST64.exe
2017-02-02 18:33 - 2017-02-02 19:00 - 00000000 ____D C:\AdwCleaner
2017-02-02 18:33 - 2017-02-02 18:33 - 04015056 _____ C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe
2017-02-02 13:11 - 2017-02-02 13:11 - 00002145 _____ C:\Users\Jonathan\Desktop\My.com Game Center.lnk
2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\MyGames
2017-02-02 13:02 - 2017-02-02 19:00 - 00000000 ____D C:\Users\Jonathan\AppData\Local\MyComGames
2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ___HD C:\OneDriveTemp
2017-01-31 18:38 - 2017-01-31 18:38 - 00000000 ____D C:\Users\Jonathan\Documents\BioWare
2017-01-31 15:10 - 2017-01-31 15:57 - 908814467 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.2.zip
2017-01-31 14:48 - 2017-01-31 14:48 - 00000044 _____ C:\Users\Jonathan\AppData\Roaming\WB.CFG
2017-01-30 23:40 - 2017-01-30 23:42 - 00000221 _____ C:\Users\Jonathan\Desktop\Dragon Age Origins - Ultimate Edition.url
2017-01-30 23:25 - 2017-02-02 18:59 - 00625272 _____ C:\WINDOWS\system32\NetUtils2016.dll
2017-01-30 23:25 - 2017-01-30 23:25 - 00909944 _____ C:\WINDOWS\system32\Drivers\NetUtils2016.sys
2017-01-30 23:25 - 2017-01-30 23:25 - 00000000 ____D C:\WINDOWS\system32\sstmp
2017-01-30 21:35 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\AVAST Software
2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-30 21:33 - 2017-02-01 17:27 - 00000292 _____ C:\WINDOWS\Tasks\{17A7D685-C21F-7B30-9651-7282E03A2C11}.job
2017-01-30 21:33 - 2017-01-30 21:33 - 00018726 _____ C:\Users\Jonathan\AppData\Roaming\Taperap
2017-01-30 21:33 - 2017-01-30 21:33 - 00004256 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1485808408
2017-01-30 21:33 - 2017-01-30 21:33 - 00002832 _____ C:\WINDOWS\System32\Tasks\{17A7D685-C21F-7B30-9651-7282E03A2C11}
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Opera Software
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Opera Software
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-30 21:32 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Local\{DA3BEC67-FE93-80DF-930B-A537B76359AF}
2017-01-30 21:32 - 2017-01-30 21:32 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-30 21:24 - 2017-02-01 17:27 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-30 21:24 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Adobe
2017-01-30 21:24 - 2017-01-30 21:24 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-01-30 21:08 - 2017-01-30 21:08 - 00522074 _____ C:\Users\Jonathan\Downloads\GangsnWhores+-+2014-12-13.swf
2017-01-29 20:43 - 2017-01-29 20:43 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win
2017-01-29 20:42 - 2017-01-29 20:42 - 165992048 _____ C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win.zip
2017-01-29 20:42 - 2017-01-29 20:42 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win
2017-01-29 20:36 - 2017-01-29 20:39 - 77801774 _____ C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win.zip
2017-01-29 19:33 - 2017-01-29 19:40 - 00000000 ____D C:\Users\Jonathan\Documents\Joyimpact
2017-01-29 19:11 - 2017-01-29 19:11 - 00000222 _____ C:\Users\Jonathan\Desktop\Crush Online.url
2017-01-27 21:18 - 2017-01-27 21:18 - 00000000 ____D C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win
2017-01-27 21:17 - 2017-01-27 21:17 - 339321033 _____ C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win.zip
2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Mozilla
2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\.swt
2017-01-26 18:31 - 2017-01-26 18:31 - 00013311 _____ C:\Users\Jonathan\AppData\Localtransition_49097ac42189f504b1bf4241f359cbe6.ini
2017-01-26 18:31 - 2017-01-26 18:31 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ankama
2017-01-26 18:25 - 2017-01-26 18:25 - 00000222 _____ C:\Users\Jonathan\Desktop\WAKFU.url
2017-01-25 16:29 - 2017-01-25 17:09 - 930168991 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.0.zip
2017-01-25 15:36 - 2017-01-25 15:36 - 00000221 _____ C:\Users\Jonathan\Desktop\Warhammer 40,000 Dawn of War II.url
2017-01-25 13:19 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 13:19 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-22 05:20 - 2017-01-22 05:20 - 00000222 _____ C:\Users\Jonathan\Desktop\Valkyria Chronicles.url
2017-01-21 00:43 - 2017-01-21 00:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Zombie Army Trilogy
2017-01-20 22:00 - 2017-01-20 22:00 - 00000000 ____D C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win
2017-01-20 21:56 - 2017-01-20 22:00 - 170578526 _____ C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win.zip
2017-01-20 18:53 - 2017-01-20 18:53 - 00000000 ____D C:\Users\Jonathan\AppData\LocalLow\GameScience
2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslaunchershell
2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslauncher
2017-01-20 18:35 - 2017-01-20 18:35 - 00000222 _____ C:\Users\Jonathan\Desktop\Art of War Red Tides.url
2017-01-19 12:57 - 2017-01-19 12:57 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-19 12:57 - 2016-09-16 23:36 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-01-19 12:57 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-01-19 12:57 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-01-19 12:57 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-01-19 12:57 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-01-18 17:53 - 2017-01-18 17:53 - 00169681 _____ C:\Users\Jonathan\Downloads\FNV Sexual Innuendo 007 DEUTSCH Plus-58670-0-991.zip
2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4ng.dll
2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4.dll
2017-01-17 19:52 - 2015-06-17 00:39 - 00363520 _____ C:\Users\Jonathan\Desktop\nvse_editor_1_4.dll
2017-01-17 19:52 - 2015-05-27 21:07 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_loader.exe
2017-01-17 19:52 - 2015-05-27 21:04 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_steam_loader.dll
2017-01-17 17:04 - 2017-01-17 17:04 - 00000000 ____D C:\Users\Jonathan\Desktop\nvse_5_0_beta2
2017-01-17 17:03 - 2017-01-17 17:03 - 00693929 _____ C:\Users\Jonathan\Downloads\nvse_5_0_beta2 (1).7z
2017-01-17 13:29 - 2017-01-17 16:42 - 00000000 ____D C:\Users\Jonathan\Documents\Nexus Mod Manager
2017-01-17 13:29 - 2017-01-17 13:29 - 00000931 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2017-01-17 13:22 - 2017-01-17 13:22 - 00000221 _____ C:\Users\Jonathan\Desktop\Fallout New Vegas.url
2017-01-17 08:46 - 2016-07-18 07:55 - 13675584 ____N (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2017-01-17 08:46 - 2016-07-11 03:34 - 20417200 ____N (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2017-01-17 08:46 - 2016-07-11 03:34 - 14487768 ____N (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2017-01-17 08:46 - 2016-07-11 03:34 - 01939000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436881.dll
2017-01-17 08:46 - 2016-07-11 03:34 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436881.dll
2017-01-17 08:40 - 2017-01-17 08:45 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql (1).exe
2017-01-17 08:25 - 2017-01-17 08:30 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql.exe
2017-01-17 08:14 - 2016-09-23 23:20 - 00222664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-01-17 08:14 - 2016-09-23 23:20 - 00210376 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-01-17 06:06 - 2017-01-17 06:07 - 00000000 ____D C:\Users\Jonathan\AppData\Local\FalloutNV
2017-01-16 17:06 - 2017-01-17 13:29 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Black_Tree_Gaming
2017-01-16 17:04 - 2017-01-16 17:05 - 06441432 _____ (Black Tree Gaming ) C:\Users\Jonathan\Downloads\Nexus Mod Manager-0.63.12.exe
2017-01-16 16:42 - 2017-01-16 17:03 - 56484838 _____ C:\Users\Jonathan\Downloads\Required Files 1.1 UPDATED-57249-1-1.zip
2017-01-16 16:42 - 2017-01-16 17:03 - 255841686 _____ C:\Users\Jonathan\Downloads\Pornout Originals-57249-.zip
2017-01-15 06:17 - 2017-01-15 06:17 - 00000000 ____D C:\Users\Jonathan\Documents\Lara Croft and the Temple of Osiris
2017-01-14 19:08 - 2017-01-14 19:08 - 00000222 _____ C:\Users\Jonathan\Desktop\Lara Croft and the Temple of Osiris.url
2017-01-11 04:53 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-11 04:53 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-11 04:53 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-11 04:53 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-11 04:53 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-11 04:53 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-11 04:53 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 04:53 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-11 04:53 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-11 04:53 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-11 04:53 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-11 04:53 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-11 04:53 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 04:53 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-11 04:53 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-11 04:53 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-11 04:53 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-11 04:53 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-11 04:53 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-11 04:53 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-11 04:53 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-11 04:53 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-11 04:53 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-11 04:53 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-11 04:53 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-11 04:53 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-11 04:53 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-11 04:53 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-11 04:53 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-11 04:53 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-11 04:53 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-11 04:53 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-11 04:53 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-11 04:53 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-11 04:53 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-11 04:53 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-11 04:53 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-11 04:53 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-11 04:53 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-11 04:53 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-11 04:53 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-11 04:53 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-11 04:53 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-11 04:53 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-11 04:53 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-11 04:53 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-11 04:53 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-11 04:53 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-11 04:53 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-11 04:53 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-11 04:53 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-11 04:53 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-11 04:53 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-11 04:53 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-11 04:53 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-11 04:53 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-11 04:53 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-11 04:53 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-11 04:53 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-11 04:53 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-11 04:53 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-11 04:53 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-11 04:53 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-11 04:53 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-11 04:53 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-11 04:53 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-11 04:53 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-11 04:53 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-11 04:52 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-11 04:52 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-11 04:52 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-11 04:52 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-11 04:52 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-11 04:52 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 04:52 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-11 04:52 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-11 04:52 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-11 04:52 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-11 04:52 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-11 04:52 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-11 04:52 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-11 04:52 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-11 04:52 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-11 04:52 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-11 04:52 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-11 04:52 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-11 04:52 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-11 04:52 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-11 04:52 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-11 04:52 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-11 04:52 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-11 04:52 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-11 04:52 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-11 04:52 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-11 04:52 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-11 04:52 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-11 04:52 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-11 04:52 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-11 04:52 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-11 04:52 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-11 04:52 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-11 04:52 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-11 04:52 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-11 04:52 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-11 04:52 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-11 04:52 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-11 04:52 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-11 04:52 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-11 04:52 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-11 04:52 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-11 04:52 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-11 04:52 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-11 04:52 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-11 04:52 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-11 04:52 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-11 04:52 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-11 04:52 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-11 04:52 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-11 04:52 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-11 04:52 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-11 04:52 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-11 04:52 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-11 04:52 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-11 04:52 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-11 04:52 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 04:52 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-11 04:52 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-11 04:52 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-11 04:52 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-11 04:52 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 04:52 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-11 04:52 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-11 04:52 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-11 04:52 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-11 04:52 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-11 04:52 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-11 04:52 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-11 04:52 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-11 04:52 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-11 04:52 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-11 04:52 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-11 04:52 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-11 04:52 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-11 04:52 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-11 04:52 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-11 04:52 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-11 04:52 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-11 04:52 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 13:45 - 2017-01-10 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-01-10 04:17 - 2017-01-10 04:17 - 00000222 _____ C:\Users\Jonathan\Desktop\Day of Infamy.url
2017-01-05 22:35 - 2017-01-05 22:35 - 00000000 ____D C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all
2017-01-05 22:33 - 2017-01-05 22:33 - 400404903 _____ C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-02-02 19:18 - 2016-08-12 12:28 - 00000000 ____D C:\Users\Jonathan\AppData\Local\CrashDumps
2017-02-02 19:06 - 2016-08-12 11:22 - 02606462 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-02 19:06 - 2016-07-16 23:51 - 01108300 _____ C:\WINDOWS\system32\perfh007.dat
2017-02-02 19:06 - 2016-07-16 23:51 - 00264632 _____ C:\WINDOWS\system32\perfc007.dat
2017-02-02 18:59 - 2016-09-25 22:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-02 18:59 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-02 18:59 - 2016-08-12 11:27 - 00000000 ___RD C:\Users\Jonathan\OneDrive
2017-02-02 18:58 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-02-02 18:49 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-02 18:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-02 18:35 - 2016-09-25 22:06 - 00000000 ____D C:\Users\Jonathan
2017-02-02 18:23 - 2016-09-25 22:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-01-31 16:40 - 2016-08-19 11:52 - 00000000 ____D C:\Users\Jonathan\Documents\Mount&Blade Warband Savegames
2017-01-31 00:08 - 2016-09-24 14:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\vlc
2017-01-30 21:34 - 2016-10-15 20:14 - 00000000 ____D C:\Program Files (x86)\OpenDungeons
2017-01-30 21:34 - 2016-08-17 11:11 - 00000000 ____D C:\Program Files (x86)\Origin Games
2017-01-30 21:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy
2017-01-30 21:32 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy
2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-30 21:19 - 2016-08-12 11:26 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Packages
2017-01-29 20:43 - 2016-08-17 10:32 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\RenPy
2017-01-25 20:38 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-01-25 17:30 - 2016-08-16 22:21 - 00000000 ____D C:\Users\Jonathan\Documents\My Games
2017-01-25 13:23 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-22 06:24 - 2016-09-24 14:34 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\dvdcss
2017-01-20 08:42 - 2016-08-16 21:45 - 00000000 ____D C:\ProgramData\Origin
2017-01-19 15:43 - 2016-12-13 15:47 - 00003296 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-19 15:43 - 2016-08-12 11:27 - 00002437 _____ C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-19 13:47 - 2016-08-12 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-19 12:57 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-19 12:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-18 10:46 - 2016-09-14 15:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ubisoft Game Launcher
2017-01-14 14:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-12 13:07 - 2016-08-13 10:08 - 00000000 ____D C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics
2017-01-11 18:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-01-11 12:57 - 2016-08-12 11:26 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-11 12:56 - 2016-09-25 22:05 - 00224392 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-11 07:46 - 2016-08-12 12:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-11 07:45 - 2016-08-12 12:34 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-10 16:00 - 2016-08-16 22:05 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Origin

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-30 21:33 - 2017-01-30 21:33 - 0018726 _____ () C:\Users\Jonathan\AppData\Roaming\Taperap
2017-01-31 14:48 - 2017-01-31 14:48 - 0000044 _____ () C:\Users\Jonathan\AppData\Roaming\WB.CFG
2016-09-25 22:06 - 2016-09-25 22:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-21 05:50 - 2016-08-21 05:50 - 0000016 _____ () C:\ProgramData\mntemp

Dateien, die verschoben oder gelöscht werden sollten:
====================
C:\Windows\Tasks\{17A7D685-C21F-7B30-9651-7282E03A2C11}.job


Einige Dateien in TEMP:
====================
2016-11-06 17:43 - 2003-08-13 19:05 - 0040960 _____ () C:\Users\Jonathan\AppData\Local\Temp\comver.dll
2016-10-18 20:29 - 2016-09-15 15:41 - 0037376 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
2016-10-18 20:29 - 2016-09-15 15:14 - 0020992 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiRezLauncherControls.dll
2017-01-17 08:14 - 2016-09-16 23:36 - 0860960 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvSCPAPI64.dll
2017-01-17 08:46 - 2016-09-16 23:36 - 0346680 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-29 02:25

==================== Ende von FRST.txt ============================

burningice · 03.02.2017, 04:42

Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen.

Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:

Bitte lies meine Posts komplett durch bevor du sie abarbeitest
Wenn ein Problem auftauchen sollte oder dir etwas unklar ist, unterbreche deine Arbeit und beschreibe es so genau wie möglich.
Bitte kein Crossposting
Installiere oder Deinstalliere keine Software ohne Aufforderung
Bitte verwende nur die Tools, welche hier im Thread erwähnt werden und führe sie nur gemäß Anweisung aus
Bitte antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen
Wichtig: Nur weil dein Problem mit einem Schritt plötzlich behoben ist, bedeutet das nicht, dass dein PC auch sauber ist. Mache solange weiter, bis ich dir sage, dass dein PC "clean" ist
Wir machen unsere Arbeit freiwillig und ehrenamtlich neben unserer normalen Beschäftigung im Leben. Dennoch, wenn ich dir nicht binnen 36h antworte, sende mir bitte eine persönliche Nachricht!

Los geht's

Schritt 0
Lade Dir bitte von hier

Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.

Installiere und starte das Programm. (Bebilderte Anleitung zu Revo Uninstaller)
Klicke auf Optionen und wähle als Sprache Deutsch.
Suche im Uninstallerfeld nach den Programmen:

Yahoo! Powered
Wähle die Programme nacheinander aus und klicke jedes Mal auf Uninstall.
Wähle anschließend den Modus "Moderat" aus.
Reste löschen:
Klicke auf dann auf und dann auf .

Hinweis: Falls bei der Deinstallation zu Beginn ein Fehler auftritt oder du den aufgerufenen Uninstaller nicht bedienen kannst, breche dieses Setup einfach ab und fahre mit der Entfernung durch Revo wie oben beschrieben fort.

Schritt 1
Lade dir folgendes Programm herunter und installiere es:

Malwarebytes Anti-Malware

Starte Malwarebytes' Anti-Malware (MBAM).
Klicke links auf Einstellungen und wechsle zum Tab Schutz.
Unter Scan-Optionen aktiviere die Option Nach Rootkits suchen
Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM nach dem Neustart, klicke auf Berichte.
Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Schritt 2
Downloade Dir bitte AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser.
Starte die adwcleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Werkzeuge > Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel
- "Prefetch" Dateien
- Proxy
- Winsock
- Internet Explorer Richtlinien
- Chrome Richtlinien
Bestätige die Auswahl mit Ok.
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen (auch dann wenn AdwCleaner sagt, dass nichts gefunden wurde) und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

Schritt 3
Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen.

Bitte poste in deiner nächsten Antwort also:

Logfile von AdwCleaner
Logfile von Malwarebytes
Frst.txt
Addition.txt

Bitte poste dein Ergebnis zwischen Code-Tags
Wenn ein Log zu lange ist, teile ihn bitte auf mehrere Antworten.

Code-Tags?

Drücke einfach die # in Antwortfenster und füge den Log dazwischen ein

Ingo123 · 03.02.2017, 16:34

Vielen Dank für die schnelle Antwort,

ich hätte gar nicht erwartet, dass mir schon am nächsten Tag geholfen wird.
Die Schritte konnte ich ohne Probleme ausführen (waren ja auch so detailliert geschildert, dass selbst ich das hinkriege).

Hier die mbam Datei:

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 03.02.17
Scan-Zeit: 15:59
Protokolldatei: mbam.txt
Administrator: Ja

-Softwaredaten-
Version: 3.0.6.1469
Komponentenversion: 1.0.50
Version des Aktualisierungspakets: 1.0.1064
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10
CPU: x64
Dateisystem: NTFS
Benutzer: DESKTOP-M3N38S4\Jonathan

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Ergebnis: Abgeschlossen
Gescannte Objekte: 293016
Abgelaufene Zeit: 2 Min., 19 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Aktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.StartGo123, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NetUtils2016, In Quarantäne, [862], [318109],1.0.1064

Registrierungswert: 0
(keine bösartigen Elemente erkannt)

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 1
PUP.Optional.WinYahoo.Generic, C:\PROGRAMDATA\{B379761A-393B-FCDC-BFFD-629E25BFE950}, In Quarantäne, [2048], [341897],1.0.1064

Datei: 8
PUP.Optional.StartGo123, C:\WINDOWS\System32\drivers\NetUtils2016.sys, In Quarantäne, [863], [325509],0.0.0
PUP.Optional.WinYahoo.Generic, C:\PROGRAMDATA\{B379761A-393B-FCDC-BFFD-629E25BFE950}\NESE.TXT, In Quarantäne, [2048], [341897],1.0.1064
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\aowLC, In Quarantäne, [2048], [341897],1.0.1064
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\hdat1, In Quarantäne, [2048], [341897],1.0.1064
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\hdat2, In Quarantäne, [2048], [341897],1.0.1064
PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\tadori, In Quarantäne, [2048], [341897],1.0.1064
PUP.Optional.StartGo123, C:\WINDOWS\SYSTEM32\NETUTILS2016.DLL, In Quarantäne, [862], [318108],1.0.1064
PUP.Optional.StartGo123, C:\WINDOWS\SYSTEM32\DRIVERS\NETUTILS2016.SYS, In Quarantäne, [862], [318109],1.0.1064

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)


(end)

Und die AdwCleaner Datei:

Code:

ATTFilter

# AdwCleaner v6.043 - Bericht erstellt am 03/02/2017 um 16:09:36
# Aktualisiert am 27/01/2017 von Malwarebytes
# Datenbank : 2017-02-03.1 [Server]
# Betriebssystem : Windows 10 Home  (X64)
# Benutzername : Jonathan - DESKTOP-M3N38S4
# Gestartet von : C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe
# Modus: Löschen
# Unterstützung : https://www.malwarebytes.com/support



***** [ Dienste ] *****



***** [ Ordner ] *****



***** [ Dateien ] *****



***** [ DLL ] *****



***** [ WMI ] *****



***** [ Verknüpfungen ] *****



***** [ Aufgabenplanung ] *****



***** [ Registrierungsdatenbank ] *****

[-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\HDWallpaper
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ad.coupontime00.coupontime.co
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\coupontime.co
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.coupontime00.coupontime.co
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ad.coupontime00.coupontime.co
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\coupontime.co
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
[-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.coupontime00.coupontime.co
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ad.coupontime00.coupontime.co
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\coupontime.co
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.coupontime00.coupontime.co
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ad.coupontime00.coupontime.co
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\coupontime.co
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com
[#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.coupontime00.coupontime.co


***** [ Browser ] *****



*************************

:: "Tracing" Schlüssel gelöscht
:: Winsock Einstellungen zurückgesetzt
:: "Prefetch" Dateien gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\AdwCleaner\AdwCleaner[C0].txt - [15963 Bytes] - [02/02/2017 18:35:05]
C:\AdwCleaner\AdwCleaner[C2].txt - [5180 Bytes] - [02/02/2017 18:40:15]
C:\AdwCleaner\AdwCleaner[C3].txt - [1566 Bytes] - [02/02/2017 18:42:22]
C:\AdwCleaner\AdwCleaner[C4].txt - [1617 Bytes] - [02/02/2017 18:56:29]
C:\AdwCleaner\AdwCleaner[C5].txt - [5654 Bytes] - [02/02/2017 18:58:45]
C:\AdwCleaner\AdwCleaner[C6].txt - [6143 Bytes] - [03/02/2017 16:09:36]
C:\AdwCleaner\AdwCleaner[S0].txt - [15294 Bytes] - [02/02/2017 18:34:22]
C:\AdwCleaner\AdwCleaner[S1].txt - [5113 Bytes] - [02/02/2017 18:40:08]
C:\AdwCleaner\AdwCleaner[S2].txt - [1704 Bytes] - [02/02/2017 18:42:03]
C:\AdwCleaner\AdwCleaner[S3].txt - [1873 Bytes] - [02/02/2017 18:44:44]
C:\AdwCleaner\AdwCleaner[S4].txt - [5544 Bytes] - [02/02/2017 18:58:30]
C:\AdwCleaner\AdwCleaner[S5].txt - [2149 Bytes] - [02/02/2017 19:00:39]
C:\AdwCleaner\AdwCleaner[S6].txt - [6591 Bytes] - [03/02/2017 16:09:14]

########## EOF - C:\AdwCleaner\AdwCleaner[C6].txt - [6728 Bytes] ##########

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017
durchgeführt von Jonathan (Administrator) auf DESKTOP-M3N38S4 (03-02-2017 16:14:42)
Gestartet von C:\Users\Jonathan\Downloads
Geladene Profile: Jonathan (Verfügbare Profile: Jonathan)
Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
() C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
() C:\Windows\SysWOW64\PnkBstrB.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
(Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe
(Hi-Rez Studios) E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe
(Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe
(MY.COM B.V.) C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe
(Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe
(AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe
(Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe
(Valve Corporation) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
() C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe

==================== Registry (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8783616 2015-12-31] (Realtek Semiconductor)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-25] (Microsoft Corporation)
HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes)
HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [263112 2016-03-23] (Razer Inc.)
HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2013-12-17] (AVM Berlin)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Steam] => E:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Discord] => C:\Users\Jonathan\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [MyComGames] => C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe [5014928 2017-02-02] (MY.COM B.V.)
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\MountPoints2: {1c168c84-6096-11e6-858a-806e6f6e6963} - "G:\pushinst.exe" 
HKU\S-1-5-18\...\Run: [script_fcbd] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat [351 2016-11-10] ()
ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\fcbd.bat [2016-11-10] ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{26d0c356-7015-4c04-a5b9-6da47962995c}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = 
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = 
HKU\S-1-5-21-3104372971-824348289-1990348516-1001\Software\Microsoft\Internet Explorer\Main,Start Page = 
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
DPF: HKLM-x32 {69069B2A-3E5E-4907-A43B-7B98812C4F7D} hxxps://api.koggames.com/auth/KOGHWActiveX.CAB
StartMenuInternet: IEXPLORE.EXE - iexplore.exe

Edge: 
======
Edge Session Restore: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> ist aktiviert.

FireFox:
========
FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-30] ()
FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-30] ()
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.)
FF Plugin HKU\S-1-5-21-3104372971-824348289-1990348516-1001: @my.com/Games -> C:\Users\Jonathan\AppData\Local\MyComGames\NPMyComDetector.dll [2017-02-02] (MY.COM B.V.)

Chrome: 
=======
CHR Session Restore: Default -> ist aktiviert.
CHR Profile: C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default [2017-02-03]
CHR Extension: (Google Präsentationen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-11]
CHR Extension: (Google Docs) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-11]
CHR Extension: (Google Drive) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-11]
CHR Extension: (YouTube) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-11]
CHR Extension: (Google Tabellen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-11]
CHR Extension: (Google Docs Offline) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-11]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-30]
CHR Extension: (Google Mail) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-11]
CHR Extension: (Chrome Media Router) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-11]

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1456136 2017-01-10] ()
S3 DAUpdaterSvc; E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2017-01-31] (BioWare)
S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395536 2016-12-21] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation)
U2 HiPatchService; E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [Datei ist nicht signiert]
S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation)
S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert]
R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-10-16] (Intel Corporation)
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-07] (Electronic Arts)
R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-07] (Electronic Arts)
R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-12-05] ()
R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [107832 2016-12-05] ()
R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [376272 2016-03-23] (Razer Inc.)
R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation)
R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] ()
R3 fwlanusb6; C:\WINDOWS\system32\DRIVERS\fwlanusb6.sys [1327744 2014-03-27] (AVM GmbH)
R3 iaLPSS2_UART2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [281896 2015-07-20] (Intel Corporation)
R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-03] (Malwarebytes)
R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-03] (Malwarebytes)
R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-03] (Malwarebytes)
R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-03] (Malwarebytes)
R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-03] (Malwarebytes)
S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] ()
R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_bf2d88c4ea749bb8\nvlddmkm.sys [14242880 2016-09-23] (NVIDIA Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation)
R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-10-10] (Realtek                                            )
S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation)
R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation)
R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation)
U0 aswVmm; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-02-03 16:12 - 2017-02-03 16:12 - 00006854 _____ C:\Users\Jonathan\Desktop\AdwCleaner[C6].txt
2017-02-03 16:09 - 2017-02-03 16:09 - 00000008 __RSH C:\ProgramData\ntuser.pol
2017-02-03 16:06 - 2017-02-03 16:06 - 00002384 _____ C:\Users\Jonathan\Desktop\mbam.txt
2017-02-03 16:03 - 2017-02-03 16:03 - 00000000 ___HD C:\OneDriveTemp
2017-02-03 15:58 - 2017-02-03 16:10 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys
2017-02-03 15:58 - 2017-02-03 16:10 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys
2017-02-03 15:58 - 2017-02-03 16:10 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys
2017-02-03 15:58 - 2017-02-03 15:58 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys
2017-02-03 15:57 - 2017-02-03 16:10 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys
2017-02-03 15:57 - 2017-02-03 15:57 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk
2017-02-03 15:57 - 2017-02-03 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2017-02-03 15:57 - 2017-02-03 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes
2017-02-03 15:57 - 2017-02-03 15:57 - 00000000 ____D C:\Program Files\Malwarebytes
2017-02-03 15:57 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys
2017-02-03 15:56 - 2017-02-03 15:57 - 55566792 _____ (Malwarebytes ) C:\Users\Jonathan\Downloads\mb3-setup-consumer-3.0.6.1469.exe
2017-02-03 15:46 - 2017-02-03 15:46 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk
2017-02-03 15:46 - 2017-02-03 15:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller
2017-02-03 15:46 - 2017-02-03 15:46 - 00000000 ____D C:\Program Files\VS Revo Group
2017-02-03 15:44 - 2017-02-03 15:45 - 07097928 _____ (VS Revo Group ) C:\Users\Jonathan\Downloads\revo202setup.exe
2017-02-02 19:21 - 2017-02-02 19:21 - 00103369 _____ C:\Users\Jonathan\Downloads\Addition.txt
2017-02-02 19:20 - 2017-02-03 16:14 - 00016572 _____ C:\Users\Jonathan\Downloads\FRST.txt
2017-02-02 19:20 - 2017-02-03 16:14 - 00000000 ____D C:\FRST
2017-02-02 19:19 - 2017-02-02 19:20 - 02420736 _____ (Farbar) C:\Users\Jonathan\Downloads\FRST64.exe
2017-02-02 18:33 - 2017-02-03 16:09 - 00000000 ____D C:\AdwCleaner
2017-02-02 18:33 - 2017-02-02 18:33 - 04015056 _____ C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe
2017-02-02 13:11 - 2017-02-02 13:11 - 00002145 _____ C:\Users\Jonathan\Desktop\My.com Game Center.lnk
2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games
2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\MyGames
2017-02-02 13:02 - 2017-02-03 16:12 - 00000000 ____D C:\Users\Jonathan\AppData\Local\MyComGames
2017-01-31 18:38 - 2017-01-31 18:38 - 00000000 ____D C:\Users\Jonathan\Documents\BioWare
2017-01-31 15:10 - 2017-01-31 15:57 - 908814467 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.2.zip
2017-01-31 14:48 - 2017-01-31 14:48 - 00000044 _____ C:\Users\Jonathan\AppData\Roaming\WB.CFG
2017-01-30 23:40 - 2017-01-30 23:42 - 00000221 _____ C:\Users\Jonathan\Desktop\Dragon Age Origins - Ultimate Edition.url
2017-01-30 23:25 - 2017-01-30 23:25 - 00000000 ____D C:\WINDOWS\system32\sstmp
2017-01-30 21:35 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\AVAST Software
2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software
2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\Program Files\Common Files\AV
2017-01-30 21:33 - 2017-01-30 21:33 - 00004256 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1485808408
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Opera Software
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Opera Software
2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Program Files\AVAST Software
2017-01-30 21:32 - 2017-01-30 21:32 - 00000000 ____D C:\ProgramData\AVAST Software
2017-01-30 21:24 - 2017-02-01 17:27 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job
2017-01-30 21:24 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Adobe
2017-01-30 21:24 - 2017-01-30 21:24 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater
2017-01-30 21:08 - 2017-01-30 21:08 - 00522074 _____ C:\Users\Jonathan\Downloads\GangsnWhores+-+2014-12-13.swf
2017-01-29 20:43 - 2017-01-29 20:43 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win
2017-01-29 20:42 - 2017-01-29 20:42 - 165992048 _____ C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win.zip
2017-01-29 20:42 - 2017-01-29 20:42 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win
2017-01-29 20:36 - 2017-01-29 20:39 - 77801774 _____ C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win.zip
2017-01-29 19:33 - 2017-01-29 19:40 - 00000000 ____D C:\Users\Jonathan\Documents\Joyimpact
2017-01-29 19:11 - 2017-01-29 19:11 - 00000222 _____ C:\Users\Jonathan\Desktop\Crush Online.url
2017-01-27 21:18 - 2017-01-27 21:18 - 00000000 ____D C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win
2017-01-27 21:17 - 2017-01-27 21:17 - 339321033 _____ C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win.zip
2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Mozilla
2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\.swt
2017-01-26 18:31 - 2017-01-26 18:31 - 00013311 _____ C:\Users\Jonathan\AppData\Localtransition_49097ac42189f504b1bf4241f359cbe6.ini
2017-01-26 18:31 - 2017-01-26 18:31 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ankama
2017-01-26 18:25 - 2017-01-26 18:25 - 00000222 _____ C:\Users\Jonathan\Desktop\WAKFU.url
2017-01-25 16:29 - 2017-01-25 17:09 - 930168991 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.0.zip
2017-01-25 15:36 - 2017-01-25 15:36 - 00000221 _____ C:\Users\Jonathan\Desktop\Warhammer 40,000 Dawn of War II.url
2017-01-25 13:19 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe
2017-01-25 13:19 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe
2017-01-22 05:20 - 2017-01-22 05:20 - 00000222 _____ C:\Users\Jonathan\Desktop\Valkyria Chronicles.url
2017-01-21 00:43 - 2017-01-21 00:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Zombie Army Trilogy
2017-01-20 22:00 - 2017-01-20 22:00 - 00000000 ____D C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win
2017-01-20 21:56 - 2017-01-20 22:00 - 170578526 _____ C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win.zip
2017-01-20 18:53 - 2017-01-20 18:53 - 00000000 ____D C:\Users\Jonathan\AppData\LocalLow\GameScience
2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslaunchershell
2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslauncher
2017-01-20 18:35 - 2017-01-20 18:35 - 00000222 _____ C:\Users\Jonathan\Desktop\Art of War Red Tides.url
2017-01-19 12:57 - 2017-01-19 12:57 - 00000000 ____D C:\Program Files (x86)\VulkanRT
2017-01-19 12:57 - 2016-09-16 23:36 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe
2017-01-19 12:57 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll
2017-01-19 12:57 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll
2017-01-19 12:57 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe
2017-01-19 12:57 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe
2017-01-18 17:53 - 2017-01-18 17:53 - 00169681 _____ C:\Users\Jonathan\Downloads\FNV Sexual Innuendo 007 DEUTSCH Plus-58670-0-991.zip
2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4ng.dll
2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4.dll
2017-01-17 19:52 - 2015-06-17 00:39 - 00363520 _____ C:\Users\Jonathan\Desktop\nvse_editor_1_4.dll
2017-01-17 19:52 - 2015-05-27 21:07 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_loader.exe
2017-01-17 19:52 - 2015-05-27 21:04 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_steam_loader.dll
2017-01-17 17:04 - 2017-01-17 17:04 - 00000000 ____D C:\Users\Jonathan\Desktop\nvse_5_0_beta2
2017-01-17 17:03 - 2017-01-17 17:03 - 00693929 _____ C:\Users\Jonathan\Downloads\nvse_5_0_beta2 (1).7z
2017-01-17 13:29 - 2017-01-17 16:42 - 00000000 ____D C:\Users\Jonathan\Documents\Nexus Mod Manager
2017-01-17 13:29 - 2017-01-17 13:29 - 00000931 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk
2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager
2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\Program Files\Nexus Mod Manager
2017-01-17 13:22 - 2017-01-17 13:22 - 00000221 _____ C:\Users\Jonathan\Desktop\Fallout New Vegas.url
2017-01-17 08:46 - 2016-07-18 07:55 - 13675584 ____N (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys
2017-01-17 08:46 - 2016-07-11 03:34 - 20417200 ____N (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll
2017-01-17 08:46 - 2016-07-11 03:34 - 14487768 ____N (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll
2017-01-17 08:46 - 2016-07-11 03:34 - 01939000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436881.dll
2017-01-17 08:46 - 2016-07-11 03:34 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436881.dll
2017-01-17 08:40 - 2017-01-17 08:45 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql (1).exe
2017-01-17 08:25 - 2017-01-17 08:30 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql.exe
2017-01-17 08:14 - 2016-09-23 23:20 - 00222664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll
2017-01-17 08:14 - 2016-09-23 23:20 - 00210376 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll
2017-01-17 06:06 - 2017-01-17 06:07 - 00000000 ____D C:\Users\Jonathan\AppData\Local\FalloutNV
2017-01-16 17:06 - 2017-01-17 13:29 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Black_Tree_Gaming
2017-01-16 17:04 - 2017-01-16 17:05 - 06441432 _____ (Black Tree Gaming ) C:\Users\Jonathan\Downloads\Nexus Mod Manager-0.63.12.exe
2017-01-16 16:42 - 2017-01-16 17:03 - 56484838 _____ C:\Users\Jonathan\Downloads\Required Files 1.1 UPDATED-57249-1-1.zip
2017-01-16 16:42 - 2017-01-16 17:03 - 255841686 _____ C:\Users\Jonathan\Downloads\Pornout Originals-57249-.zip
2017-01-15 06:17 - 2017-01-15 06:17 - 00000000 ____D C:\Users\Jonathan\Documents\Lara Croft and the Temple of Osiris
2017-01-14 19:08 - 2017-01-14 19:08 - 00000222 _____ C:\Users\Jonathan\Desktop\Lara Croft and the Temple of Osiris.url
2017-01-11 04:53 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll
2017-01-11 04:53 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll
2017-01-11 04:53 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys
2017-01-11 04:53 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll
2017-01-11 04:53 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll
2017-01-11 04:53 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll
2017-01-11 04:53 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll
2017-01-11 04:53 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll
2017-01-11 04:53 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll
2017-01-11 04:53 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll
2017-01-11 04:53 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll
2017-01-11 04:53 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll
2017-01-11 04:53 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll
2017-01-11 04:53 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll
2017-01-11 04:53 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll
2017-01-11 04:53 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe
2017-01-11 04:53 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll
2017-01-11 04:53 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll
2017-01-11 04:53 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll
2017-01-11 04:53 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll
2017-01-11 04:53 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll
2017-01-11 04:53 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll
2017-01-11 04:53 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll
2017-01-11 04:53 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll
2017-01-11 04:53 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll
2017-01-11 04:53 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll
2017-01-11 04:53 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe
2017-01-11 04:53 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe
2017-01-11 04:53 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll
2017-01-11 04:53 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll
2017-01-11 04:53 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll
2017-01-11 04:53 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll
2017-01-11 04:53 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll
2017-01-11 04:53 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll
2017-01-11 04:53 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll
2017-01-11 04:53 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll
2017-01-11 04:53 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe
2017-01-11 04:53 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll
2017-01-11 04:53 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll
2017-01-11 04:53 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll
2017-01-11 04:53 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll
2017-01-11 04:53 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll
2017-01-11 04:53 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll
2017-01-11 04:53 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll
2017-01-11 04:53 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll
2017-01-11 04:53 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll
2017-01-11 04:53 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll
2017-01-11 04:53 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll
2017-01-11 04:53 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll
2017-01-11 04:53 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll
2017-01-11 04:53 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll
2017-01-11 04:53 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll
2017-01-11 04:53 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll
2017-01-11 04:53 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll
2017-01-11 04:53 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll
2017-01-11 04:53 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll
2017-01-11 04:53 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll
2017-01-11 04:53 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll
2017-01-11 04:53 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll
2017-01-11 04:53 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll
2017-01-11 04:53 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll
2017-01-11 04:53 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe
2017-01-11 04:53 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll
2017-01-11 04:53 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll
2017-01-11 04:53 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys
2017-01-11 04:53 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll
2017-01-11 04:53 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll
2017-01-11 04:53 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll
2017-01-11 04:53 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll
2017-01-11 04:52 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe
2017-01-11 04:52 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll
2017-01-11 04:52 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll
2017-01-11 04:52 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll
2017-01-11 04:52 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe
2017-01-11 04:52 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll
2017-01-11 04:52 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe
2017-01-11 04:52 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll
2017-01-11 04:52 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll
2017-01-11 04:52 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll
2017-01-11 04:52 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll
2017-01-11 04:52 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll
2017-01-11 04:52 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe
2017-01-11 04:52 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll
2017-01-11 04:52 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll
2017-01-11 04:52 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe
2017-01-11 04:52 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll
2017-01-11 04:52 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll
2017-01-11 04:52 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll
2017-01-11 04:52 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll
2017-01-11 04:52 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll
2017-01-11 04:52 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll
2017-01-11 04:52 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll
2017-01-11 04:52 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll
2017-01-11 04:52 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll
2017-01-11 04:52 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll
2017-01-11 04:52 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll
2017-01-11 04:52 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll
2017-01-11 04:52 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll
2017-01-11 04:52 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll
2017-01-11 04:52 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe
2017-01-11 04:52 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll
2017-01-11 04:52 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll
2017-01-11 04:52 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll
2017-01-11 04:52 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll
2017-01-11 04:52 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll
2017-01-11 04:52 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll
2017-01-11 04:52 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll
2017-01-11 04:52 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll
2017-01-11 04:52 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll
2017-01-11 04:52 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll
2017-01-11 04:52 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll
2017-01-11 04:52 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll
2017-01-11 04:52 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll
2017-01-11 04:52 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe
2017-01-11 04:52 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe
2017-01-11 04:52 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys
2017-01-11 04:52 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys
2017-01-11 04:52 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll
2017-01-11 04:52 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll
2017-01-11 04:52 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll
2017-01-11 04:52 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll
2017-01-11 04:52 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe
2017-01-11 04:52 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll
2017-01-11 04:52 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll
2017-01-11 04:52 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys
2017-01-11 04:52 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys
2017-01-11 04:52 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll
2017-01-11 04:52 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 04:52 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe
2017-01-11 04:52 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll
2017-01-11 04:52 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll
2017-01-11 04:52 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll
2017-01-11 04:52 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll
2017-01-11 04:52 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll
2017-01-11 04:52 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll
2017-01-11 04:52 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll
2017-01-11 04:52 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll
2017-01-11 04:52 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll
2017-01-11 04:52 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll
2017-01-11 04:52 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll
2017-01-11 04:52 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll
2017-01-11 04:52 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll
2017-01-11 04:52 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll
2017-01-11 04:52 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll
2017-01-11 04:52 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys
2017-01-11 04:52 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll
2017-01-11 04:52 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll
2017-01-11 04:52 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys
2017-01-11 04:52 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll
2017-01-11 04:52 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll
2017-01-11 04:52 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll
2017-01-10 13:45 - 2017-01-10 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2017-01-10 04:17 - 2017-01-10 04:17 - 00000222 _____ C:\Users\Jonathan\Desktop\Day of Infamy.url
2017-01-05 22:35 - 2017-01-05 22:35 - 00000000 ____D C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all
2017-01-05 22:33 - 2017-01-05 22:33 - 400404903 _____ C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all.zip

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2017-02-03 16:12 - 2016-08-12 11:27 - 00000000 ___RD C:\Users\Jonathan\OneDrive
2017-02-03 16:10 - 2016-09-25 22:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT
2017-02-03 16:10 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA
2017-02-03 16:09 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI
2017-02-03 15:34 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports
2017-02-02 21:54 - 2016-09-25 22:06 - 00000000 ____D C:\Users\Jonathan
2017-02-02 21:54 - 2016-09-25 22:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy
2017-02-02 20:34 - 2016-11-06 17:44 - 00000000 ____D C:\Users\Jonathan\Documents\SpellForce
2017-02-02 19:33 - 2016-08-12 11:26 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Packages
2017-02-02 19:33 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps
2017-02-02 19:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness
2017-02-02 19:18 - 2016-08-12 12:28 - 00000000 ____D C:\Users\Jonathan\AppData\Local\CrashDumps
2017-02-02 19:06 - 2016-08-12 11:22 - 02606462 _____ C:\WINDOWS\system32\PerfStringBackup.INI
2017-02-02 19:06 - 2016-07-16 23:51 - 01108300 _____ C:\WINDOWS\system32\perfh007.dat
2017-02-02 19:06 - 2016-07-16 23:51 - 00264632 _____ C:\WINDOWS\system32\perfc007.dat
2017-01-31 16:40 - 2016-08-19 11:52 - 00000000 ____D C:\Users\Jonathan\Documents\Mount&Blade Warband Savegames
2017-01-31 00:08 - 2016-09-24 14:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\vlc
2017-01-30 21:34 - 2016-10-15 20:14 - 00000000 ____D C:\Program Files (x86)\OpenDungeons
2017-01-30 21:34 - 2016-08-17 11:11 - 00000000 ____D C:\Program Files (x86)\Origin Games
2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed
2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed
2017-01-29 20:43 - 2016-08-17 10:32 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\RenPy
2017-01-25 17:30 - 2016-08-16 22:21 - 00000000 ____D C:\Users\Jonathan\Documents\My Games
2017-01-25 13:23 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp
2017-01-22 06:24 - 2016-09-24 14:34 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\dvdcss
2017-01-20 08:42 - 2016-08-16 21:45 - 00000000 ____D C:\ProgramData\Origin
2017-01-19 15:43 - 2016-12-13 15:47 - 00003296 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2
2017-01-19 15:43 - 2016-08-12 11:27 - 00002437 _____ C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk
2017-01-19 13:47 - 2016-08-12 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2017-01-19 12:57 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2017-01-19 12:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF
2017-01-18 10:46 - 2016-09-14 15:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ubisoft Game Launcher
2017-01-14 14:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF
2017-01-12 13:07 - 2016-08-13 10:08 - 00000000 ____D C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics
2017-01-11 18:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache
2017-01-11 12:57 - 2016-08-12 11:26 - 00000000 __RHD C:\Users\Public\AccountPictures
2017-01-11 12:56 - 2016-09-25 22:05 - 00224392 _____ C:\WINDOWS\system32\FNTCACHE.DAT
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences
2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning
2017-01-11 07:46 - 2016-08-12 12:34 - 00000000 ____D C:\WINDOWS\system32\MRT
2017-01-11 07:45 - 2016-08-12 12:34 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe
2017-01-10 16:00 - 2016-08-16 22:05 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Origin

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-31 14:48 - 2017-01-31 14:48 - 0000044 _____ () C:\Users\Jonathan\AppData\Roaming\WB.CFG
2016-09-25 22:06 - 2016-09-25 22:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
2016-08-21 05:50 - 2016-08-21 05:50 - 0000016 _____ () C:\ProgramData\mntemp

Einige Dateien in TEMP:
====================
2016-11-06 17:43 - 2003-08-13 19:05 - 0040960 _____ () C:\Users\Jonathan\AppData\Local\Temp\comver.dll
2016-10-18 20:29 - 2016-09-15 15:41 - 0037376 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe
2016-10-18 20:29 - 2016-09-15 15:14 - 0020992 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiRezLauncherControls.dll
2017-01-17 08:14 - 2016-09-16 23:36 - 0860960 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvSCPAPI64.dll
2017-01-17 08:46 - 2016-09-16 23:36 - 0346680 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvStInst.exe

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert
C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert
C:\WINDOWS\explorer.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert
C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert
C:\WINDOWS\system32\services.exe => Datei ist digital signiert
C:\WINDOWS\system32\User32.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert
C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert
C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert
C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert
C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert

LastRegBack: 2017-01-29 02:25

==================== Ende von FRST.txt ============================

Ingo123 · 03.02.2017, 19:52

FRST Addition:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 29-01-2017
durchgeführt von Jonathan (03-02-2017 16:15:05)
Gestartet von C:\Users\Jonathan\Downloads
Windows 10 Home Version 1607 (X64) (2016-09-25 21:09:58)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-3104372971-824348289-1990348516-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-3104372971-824348289-1990348516-503 - Limited - Disabled)
Gast (S-1-5-21-3104372971-824348289-1990348516-501 - Limited - Disabled)
Jonathan (S-1-5-21-3104372971-824348289-1990348516-1001 - Administrator - Enabled) => C:\Users\Jonathan

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov)
Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated)
AirMech (HKLM\...\Steam App 206500) (Version:  - Carbon Games)
Ansel (Version: 368.81 - NVIDIA Corporation) Hidden
Art of War: Red Tides (HKLM\...\Steam App 558100) (Version:  - Game Science)
Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.28.1 - Asmedia Technology)
Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version:  - Ubisoft)
Atlas Reactor (HKLM\...\Steam App 402570) (Version:  - Trion Worlds)
Atlas Reactor Live (HKLM-x32\...\Glyph Atlas Reactor Live) (Version:  - Trion Worlds, Inc.)
AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battleborn (HKLM\...\Steam App 394230) (Version:  - Gearbox Software)
Beyond Good and Evil (HKLM-x32\...\Uplay Install 232) (Version:  - Ubisoft)
Bloody Walls (HKLM\...\Steam App 531960) (Version:  - L. Stotch)
Bloons TD5 (HKLM\...\Steam App 306020) (Version:  - Ninja Kiwi)
Clicker Guild (HKLM\...\Steam App 557810) (Version:  - Fox Dawn)
CLIP STUDIO PAINT 1.5.4 (HKLM-x32\...\{88B5A062-DDA1-4F62-A4DD-95D0C4F19979}) (Version: 1.5.4 - CELSYS)
Company of Heroes 2 (HKLM\...\Steam App 231430) (Version:  - Relic Entertainment)
Counter-strike 1.6 (HKLM-x32\...\Counter-strike 1.6) (Version: 1.6 - Counter-strike)
Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version:  - Valve)
CrossCode Demo (HKLM\...\Steam App 370900) (Version:  - Radical Fish Games)
Crush Online (HKLM\...\Steam App 475630) (Version:  - JoyImpact)
Crypt of the NecroDancer (HKLM\...\Steam App 247080) (Version:  - Brace Yourself Games)
Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts)
Day of Infamy (HKLM\...\Steam App 447820) (Version:  - New World Interactive)
DayZ (HKLM\...\Steam App 221100) (Version:  - Bohemia Interactive)
Dead Age (HKLM\...\Steam App 363930) (Version:  - Silent Dreams)
Deadly 30 (HKLM\...\Steam App 264730) (Version:  - Ignatus Zuk and Gonzalo Villagomez)
Deus Ex GOTY (HKLM-x32\...\GOGPACKDEUSEX_is1) (Version: 2.0.0.11 - GOG.com)
Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)
Dirty Bomb (HKLM\...\Steam App 333930) (Version:  - Splash Damage®)
Discord (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Discord) (Version: 0.0.296 - Hammer & Chisel, Inc.)
Dogs of War Online - Beta (HKLM\...\Steam App 219700) (Version:  - Cyanide)
DOOM (HKLM\...\Steam App 379720) (Version:  - id Software)
Dota 2 (HKLM\...\Steam App 570) (Version:  - Valve)
Dragon Age: Origins - Ultimate Edition (HKLM\...\Steam App 47810) (Version:  - BioWare)
Duelyst (HKLM\...\Steam App 291410) (Version:  - Counterplay Games Inc.)
Dungeon Defenders II (HKLM\...\Steam App 236110) (Version:  - Trendy Entertainment)
Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts)
EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs)
Fallout: New Vegas (HKLM\...\Steam App 22380) (Version:  - Obsidian Entertainment)
Far Cry 3 Blood Dragon (HKLM-x32\...\Uplay Install 205) (Version:  - Ubisoft)
GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version:  - )
Garry's Mod (HKLM\...\Steam App 4000) (Version:  - Facepunch Studios)
Ghost 1.0 (HKLM\...\Steam App 463270) (Version:  - @unepic_fran)
Ghost in the Shell Stand Alone Complex First Assault Online (HKLM\...\Steam App 369200) (Version:  - Neople)
Glyph (HKLM-x32\...\Glyph) (Version:  - Trion Worlds, Inc.)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden
Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)
HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.6.4 - Hi-Rez Studios)
Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)
Hitman: Blood Money (HKLM\...\Steam App 6860) (Version:  - IO Interactive)
How to Survive 2 (HKLM\...\Steam App 360170) (Version:  - EKO Software)
Infinity Wars - Animated Trading Card Game (HKLM\...\Steam App 257730) (Version:  - Lightmare Studios)
Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation)
Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden
Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation)
Killing Floor 2 (HKLM\...\Steam App 232090) (Version:  - Tripwire Interactive)
Kingdom Wars 2: Battles (HKLM\...\Steam App 253190) (Version:  - Reverie World Studios, INC)
Krita (x64) 3.0 (HKLM\...\Krita_x64) (Version: 3.0.0.0 - Krita Foundation)
Lara Croft and the Temple of Osiris (HKLM\...\Steam App 289690) (Version:  - Crystal Dynamics)
League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games)
League of Legends (x32 Version: 4.1.2 - Riot Games) Hidden
Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes)
MCSetup_OneClick version 1.5 (HKLM-x32\...\{3D42651D-DCD5-40DB-8E20-D22F60E425C3}_is1) (Version: 1.5 - KOG Games)
Microsoft OneDrive (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version:  - TaleWorlds Entertainment)
My.com Game Center (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\MyComGames) (Version: 3.194 - My.com B.V.)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.12 - Black Tree Gaming)
NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation)
NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.)
Paladins (HKLM\...\Steam App 444090) (Version:  - Hi-Rez Studios)
Path of Exile (HKLM\...\Steam App 238960) (Version:  - Grinding Gear Games)
PAYDAY 2 (HKLM\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PlanetSide 2 (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\DG0-PlanetSide 2) (Version:  - Sony Online Entertainment)
Project Zomboid (HKLM\...\Steam App 108600) (Version:  - The Indie Stone)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.)
Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version:  - Ubisoft)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.6.1001.2015 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7708 - Realtek Semiconductor Corp.)
Rebel Galaxy (HKLM\...\Steam App 290300) (Version:  - Double Damage Games)
Revo Uninstaller 2.0.2 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.2 - VS Revo Group, Ltd.)
Rise of the Tomb Raider (HKLM\...\Steam App 391220) (Version:  - Crystal Dynamics)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics)
Sanctum 2 (HKLM\...\Steam App 210770) (Version:  - Coffee Stain Studios)
Savage Resurrection (HKLM\...\Steam App 366440) (Version:  - S2 Games, LLC)
Scorched3D 44 (HKLM-x32\...\Scorched3D) (Version: 44 - Scorched)
Shadowgrounds (HKLM\...\Steam App 2500) (Version:  - Frozenbyte)
Shadowgrounds: Survivor (HKLM\...\Steam App 11200) (Version:  - Frozenbyte)
Shadowrun: Dragonfall - Director's Cut (HKLM\...\Steam App 300550) (Version:  - Harebrained Schemes)
Shadowrun: Hong Kong - Extended Edition (HKLM\...\Steam App 346940) (Version:  - Harebrained Schemes)
Shadowverse (HKLM\...\Steam App 453480) (Version:  - Cygames, Inc.)
Shadwen (HKLM\...\Steam App 425210) (Version:  - Frozenbyte)
SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden
Source SDK (HKLM\...\Steam App 211) (Version:  - Valve)
SpellForce: Platinum Edition (HKLM\...\Steam App 39540) (Version:  - Phenomic)
STAR WARS™ Battlefront™ II (HKLM\...\Steam App 6060) (Version:  - Pandemic Studios)
STAR-BOX: RPG Adventures in Space! (HKLM\...\Steam App 363510) (Version:  - Michael Flynn)
StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Streamline (HKLM\...\Steam App 252850) (Version:  - Proletariat Inc.)
Sunrider: Mask of Arcadius (HKLM\...\Steam App 313730) (Version:  - Love in Space)
Team Fortress 2 (HKLM\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios)
The Elder Scrolls Online: Tamriel Unlimited (HKLM\...\Steam App 306130) (Version:  - Zenimax Online Studios)
Tom Clancy's Rainbow Six 3: Athena Sword (HKLM\...\Steam App 19840) (Version:  - Ubisoft)
Tom Clancy's Rainbow Six 3: Gold Edition (HKLM\...\Steam App 19830) (Version:  - Red Storm Entertainment)
Tom Clancy's Splinter Cell (HKLM-x32\...\Uplay Install 109) (Version:  - Ubisoft)
Total War: WARHAMMER (HKLM\...\Steam App 364360) (Version:  - Creative Assembly)
Trine (HKLM\...\Steam App 35700) (Version:  - Frozenbyte)
Trine 2 (HKLM\...\Steam App 35720) (Version:  - Frozenbyte)
Trine 3: The Artifacts of Power (HKLM\...\Steam App 319910) (Version:  - Frozenbyte)
Unreal Development Kit: 2015-01 (HKLM\...\UDK-6094d38d-44a8-4e1e-b513-fbfce8acf50f) (Version:  - Epic Games, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 22.2 - Ubisoft)
Valkyria Chronicles™ (HKLM\...\Steam App 294860) (Version:  - SEGA)
Vanguards (HKLM\...\Steam App 546600) (Version:  - BYU Games)
Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies)
Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
WAKFU (HKLM\...\Steam App 215080) (Version:  - Ankama Studio)
War of the Human Tanks (HKLM\...\Steam App 263400) (Version:  - Yakiniku Banzai)
Warface My.Com (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Warface My.Com) (Version: 1.13 - Оператор Warface)
Warhammer® 40,000™: Dawn of War® II (HKLM\...\Steam App 15620) (Version:  - Relic Entertainment)
World of Tanks Blitz (HKLM\...\Steam App 444200) (Version:  - Wargaming Group Limited)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)
World of Warships (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)
XCOM 2 (HKLM\...\Steam App 268500) (Version:  - Firaxis)
XCom Long War EW Mod version 1.0 (HKLM-x32\...\{860C3266-65B9-4BF2-937A-1778483046B5}_is1) (Version: 1.0 - JohnnyLump)
XCOM: Enemy Unknown (HKLM\...\Steam App 200510) (Version:  - Firaxis Games)
Yu-Gi-Oh! Legacy of the Duelist (HKLM\...\Steam App 480650) (Version:  - Other Ocean Interactive)
Zombie City Defense 2 (HKLM\...\Steam App 473970) (Version:  - Mozg Labs)
Zombie Night Terror (HKLM\...\Steam App 416680) (Version:  - NoClip)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {0D707953-1237-44B8-93E9-14559C3AED0F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {348C891F-A1F9-421F-9487-934AF596F60D} - System32\Tasks\Opera scheduled Autoupdate 1485808408 => C:\Users\Jonathan\AppData\Local\Programs\Opera\launcher.exe
Task: {59720B00-38BB-408B-BF42-A2DC0B5E1139} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-30] (AVAST Software)
Task: {5F7817E0-EFD1-426C-BBE1-10919720F0AB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {6885D363-0D69-4C86-B8FF-0F3DE351C6DC} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-30] (Adobe Systems Incorporated)
Task: {7201EFCA-BB18-43C6-AA83-F5C85BDACBA7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-11] (Google Inc.)
Task: {92F430B3-1E2C-4C76-B380-1F19BDECC969} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-11] (Google Inc.)
Task: {971FEEEB-1412-422E-B578-24DEBABC1941} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {BD27D714-D2A6-4CF1-9680-D15554B36195} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Jonathan\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe
Task: {D8B341BE-C446-49EB-A849-C204A595345A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation)
Task: {F7E922C4-ED99-4CA1-95AA-CBBA2310DB97} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.)

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

Shortcut: C:\Users\Jonathan\Desktop\Counter-strike 1.6.lnk -> C:\Program Files (x86)\Counter-strike\Counter-strike\Counter-Strike.bat ()

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll
2016-12-14 12:48 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll
2016-09-25 22:05 - 2016-09-16 23:54 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2015-05-19 08:11 - 2015-05-19 08:11 - 00007680 _____ () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe
2016-08-17 15:18 - 2016-12-05 21:29 - 00107832 _____ () C:\WINDOWS\SysWoW64\PnkBstrB.exe
2016-08-12 12:27 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-08-17 15:18 - 2016-12-05 21:29 - 00066872 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe
2017-02-03 15:57 - 2017-01-20 07:47 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll
2017-02-03 15:57 - 2017-01-20 07:47 - 02254800 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-02-03 15:57 - 2017-01-20 07:47 - 02829776 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll
2016-12-14 12:48 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll
2016-09-25 23:03 - 2016-09-25 23:03 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll
2017-01-11 04:52 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll
2017-01-11 04:52 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-01-11 04:52 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-01-11 04:52 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll
2017-01-11 04:52 - 2016-12-21 07:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll
2017-01-11 04:52 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll
2017-01-11 04:52 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll
2017-01-11 04:52 - 2016-12-21 07:47 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll
2017-01-11 04:52 - 2016-12-21 07:49 - 04046848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Signals.dll
2017-01-11 04:52 - 2016-12-21 07:47 - 01475584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll
2016-07-16 12:42 - 2016-07-16 12:42 - 01872384 _____ () C:\Windows\System32\speech_onecore\engines\tts\MSTTSEngine_OneCore.dll
2017-01-23 11:11 - 2017-01-23 11:12 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-01-23 11:11 - 2017-01-23 11:12 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-01-23 11:11 - 2017-01-23 11:12 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2016-12-14 09:18 - 2016-12-14 09:18 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\roottools.dll
2016-10-07 19:55 - 2016-12-07 22:00 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll
2016-08-12 12:27 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2017-01-19 22:51 - 2016-12-23 19:28 - 00657184 _____ () E:\Program Files (x86)\Steam\SDL2.dll
2016-12-12 20:11 - 2016-09-01 02:02 - 04969248 _____ () E:\Program Files (x86)\Steam\v8.dll
2017-01-19 22:51 - 2017-01-19 02:30 - 02327840 _____ () E:\Program Files (x86)\Steam\video.dll
2016-12-12 20:11 - 2016-09-01 02:02 - 01563936 _____ () E:\Program Files (x86)\Steam\icui18n.dll
2016-12-12 20:11 - 2016-09-01 02:02 - 01195296 _____ () E:\Program Files (x86)\Steam\icuuc.dll
2016-12-12 20:11 - 2016-01-27 08:49 - 02549760 _____ () E:\Program Files (x86)\Steam\libavcodec-56.dll
2016-12-12 20:11 - 2016-01-27 08:49 - 00491008 _____ () E:\Program Files (x86)\Steam\libavformat-56.dll
2016-12-12 20:11 - 2016-01-27 08:49 - 00332800 _____ () E:\Program Files (x86)\Steam\libavresample-2.dll
2016-12-12 20:11 - 2016-01-27 08:49 - 00442880 _____ () E:\Program Files (x86)\Steam\libavutil-54.dll
2016-12-12 20:11 - 2016-01-27 08:49 - 00485888 _____ () E:\Program Files (x86)\Steam\libswscale-3.dll
2017-01-19 22:51 - 2017-01-19 02:30 - 00838432 _____ () E:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-12-12 20:11 - 2016-07-04 23:17 - 00266560 _____ () E:\Program Files (x86)\Steam\openvr_api.dll
2017-02-02 13:02 - 2017-02-02 13:02 - 00144896 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\zlib1.dll
2017-02-02 13:02 - 2017-02-02 13:02 - 00076176 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\pxd.dll
2017-02-02 13:02 - 2017-02-02 13:02 - 00186256 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\LightUpdate.dll
2017-02-02 13:02 - 2017-02-02 13:02 - 02396560 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\BigUp2.dll
2016-05-23 19:36 - 2016-05-23 19:36 - 48962048 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\Chrome\3.2623.1401\libcef.dll
2016-08-12 11:46 - 2014-09-28 16:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll
2017-01-19 22:51 - 2017-01-05 04:12 - 68813088 _____ () E:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2015-10-16 05:14 - 2015-10-16 05:14 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)


==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2015-10-30 08:24 - 2017-02-01 17:27 - 00002024 ____A C:\WINDOWS\system32\Drivers\etc\hosts

0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly
0.0.0.0 tracking.opencandy.com.s3.amazonaws.com
0.0.0.0 media.opencandy.com
0.0.0.0 cdn.opencandy.com
0.0.0.0 tracking.opencandy.com
0.0.0.0 api.opencandy.com
0.0.0.0 api.recommendedsw.com
0.0.0.0 installer.betterinstaller.com
0.0.0.0 installer.filebulldog.com
0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net
0.0.0.0 inno.bisrv.com
0.0.0.0 nsis.bisrv.com
0.0.0.0 cdn.file2desktop.com
0.0.0.0 cdn.goateastcach.us
0.0.0.0 cdn.guttastatdk.us
0.0.0.0 cdn.inskinmedia.com
0.0.0.0 cdn.insta.oibundles2.com
0.0.0.0 cdn.insta.playbryte.com
0.0.0.0 cdn.llogetfastcach.us
0.0.0.0 cdn.montiera.com
0.0.0.0 cdn.msdwnld.com
0.0.0.0 cdn.mypcbackup.com
0.0.0.0 cdn.ppdownload.com
0.0.0.0 cdn.riceateastcach.us
0.0.0.0 cdn.shyapotato.us
0.0.0.0 cdn.solimba.com
0.0.0.0 cdn.tuto4pc.com
0.0.0.0 cdn.appround.biz
0.0.0.0 cdn.bigspeedpro.com
0.0.0.0 cdn.bispd.com

Da befinden sich 4 zusätzliche Einträge.


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-3104372971-824348289-1990348516-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\StartupApproved\Run: => "Discord"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [vm-monitoring-nb-session] => LPort=139
FirewallRules: [{35CFC276-7EBB-4470-95B5-125B28F38A4D}] => E:\SteamLibrary\steamapps\common\Savage Resurrection\Savage\Binaries\Win64\Savage-Win64-Shipping.exe
FirewallRules: [{9550AFDF-D23A-448A-937F-245C66B4F80A}] => E:\SteamLibrary\steamapps\common\Savage Resurrection\Savage\Binaries\Win64\Savage-Win64-Shipping.exe
FirewallRules: [UDP Query User{049BCCA7-A093-4436-9D2B-2F73FD78D0CF}E:\the crew (worldwide)\thecrew.exe] => E:\the crew (worldwide)\thecrew.exe
FirewallRules: [TCP Query User{07C3624D-41C9-4F7C-8937-DBAD173E048A}E:\the crew (worldwide)\thecrew.exe] => E:\the crew (worldwide)\thecrew.exe
FirewallRules: [UDP Query User{87F3A976-5E27-4AC3-92F4-B2B87B5B173A}E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [TCP Query User{6256CF9F-27D0-43E8-9B01-6B66DADC9115}E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe
FirewallRules: [{000B3A05-BF25-4404-97BF-7E257F1F8E22}] => E:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{C4393BC8-0A40-42BC-B28E-208A8C841069}] => E:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe
FirewallRules: [{50808387-28DA-45D8-86B9-5EB4D793886B}] => E:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{C5B36808-E166-4C11-B950-26C21C93D92A}] => E:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [UDP Query User{6D68BA73-3F8F-4857-A05B-40C7AAD68CB1}C:\program files (x86)\diablo iii\diablo iii.exe] => C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [TCP Query User{E482E63C-B3BB-4F3A-A96A-3E2344641C4A}C:\program files (x86)\diablo iii\diablo iii.exe] => C:\program files (x86)\diablo iii\diablo iii.exe
FirewallRules: [{8AABA668-0ABE-486C-9329-EC182DDD8D18}] => E:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe
FirewallRules: [{592BD28F-980F-498B-8487-B20C480089BD}] => E:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe
FirewallRules: [{949CE1C3-39A5-4EF8-B90C-8D91492B696F}] => E:\Program Files (x86)\Steam\steamapps\common\CrossCode Demo\crosscode-beta.exe
FirewallRules: [{1C193A6F-25B2-4CA7-B32C-5FEEAE5A73AE}] => E:\Program Files (x86)\Steam\steamapps\common\CrossCode Demo\crosscode-beta.exe
FirewallRules: [{1CA06D10-43C6-40F8-AB4E-37EBF1565F5A}] => E:\Program Files (x86)\Steam\steamapps\common\Spellforce Platinum Edition\SpellForce.exe
FirewallRules: [{AD8A16F2-6869-4C13-9CCE-EA144CE84AA3}] => E:\Program Files (x86)\Steam\steamapps\common\Spellforce Platinum Edition\SpellForce.exe
FirewallRules: [{0AABD25B-7260-44AF-894B-37D451DC1906}] => E:\Program Files (x86)\Steam\steamapps\common\Deadly30\Deadly30.exe
FirewallRules: [{538433C7-A520-429C-B8C1-764EEDEEF4EF}] => E:\Program Files (x86)\Steam\steamapps\common\Deadly30\Deadly30.exe
FirewallRules: [{98448D14-A5F0-4BA9-8E11-2547A0B90CA7}] => E:\Program Files (x86)\Steam\steamapps\common\Ghost\ghost.exe
FirewallRules: [{3C09B8A6-FC19-4888-9654-061D5EB8A37F}] => E:\Program Files (x86)\Steam\steamapps\common\Ghost\ghost.exe
FirewallRules: [{D4FFE01B-46E8-4E5B-8FFB-5CD964E215DC}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{EBB022C4-6EF9-4960-A61B-1B57ECF1A364}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe
FirewallRules: [{08D9D7A0-2A3B-437D-9F11-C060FD7FEE5C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6594AEAA-C574-4734-8DE0-E863858B3467}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8AF3AC56-877A-4435-AA6B-8996D6217EAB}] => E:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D51B8637-7350-4432-9CDD-25DAE4525CB2}] => E:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D26E5ECD-EDB0-4451-9EFF-C7DD956F8812}] => E:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{E23D9864-BD72-49BE-8CD8-CCED9237B1EC}] => E:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{443B9F80-48D4-4881-BA4E-B60990368BD4}] => E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{96A89632-7C76-4058-861B-9898B1911639}] => E:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{F66DDC78-384F-40F8-9368-9CA0F752D09B}] => E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{779CC018-27AF-4539-91AB-3020209CA25C}] => E:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [UDP Query User{414E480A-91FD-41B3-A287-10149DE3052B}E:\hearthstone\hearthstone.exe] => E:\hearthstone\hearthstone.exe
FirewallRules: [TCP Query User{8DD10473-311E-489A-BCA0-4E3331EE2676}E:\hearthstone\hearthstone.exe] => E:\hearthstone\hearthstone.exe
FirewallRules: [{EC04DBC7-77C2-4E43-9FA9-C49B55272FCB}] => E:\SteamLibrary\steamapps\common\Zombie City Defense 2\ZCD2.exe
FirewallRules: [{60B345B2-6911-485A-BD79-CE05A377B9E9}] => E:\SteamLibrary\steamapps\common\Zombie City Defense 2\ZCD2.exe
FirewallRules: [{B1D9550F-BCB4-4A7B-9CCB-BEEB7F8B274B}] => E:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{E88FE938-6C23-47C2-889F-ADA6E1369BF1}] => E:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{3D446137-FC16-4972-9FCA-BD94AAC9A501}] => E:\SteamLibrary\steamapps\common\War of the Human Tanks\War of the Human Tanks.exe
FirewallRules: [{6C3391E4-A748-45D2-808E-C6D270A9C357}] => E:\SteamLibrary\steamapps\common\War of the Human Tanks\War of the Human Tanks.exe
FirewallRules: [{6EB7A842-7DCA-4B23-B914-BA4568B436CA}] => E:\SteamLibrary\steamapps\common\Duelyst\Duelyst.exe
FirewallRules: [{4F721FAC-3A39-4BD2-A557-C9BE514E3D26}] => E:\SteamLibrary\steamapps\common\Duelyst\Duelyst.exe
FirewallRules: [{7E08E825-1CEF-4A21-9ED4-CFFBB2D7606A}] => E:\SteamLibrary\steamapps\common\Crypt of the NecroDancer\NecroDancer.exe
FirewallRules: [{657DF24C-74F9-48AE-8B3E-9345F784F1F9}] => E:\SteamLibrary\steamapps\common\Crypt of the NecroDancer\NecroDancer.exe
FirewallRules: [{9688742B-3CCF-4550-843B-97373E06FF97}] => E:\SteamLibrary\steamapps\common\AirMech\AirMech.exe
FirewallRules: [{FB1BDA12-7980-4E36-B98E-7AB89F10025F}] => E:\SteamLibrary\steamapps\common\AirMech\AirMech.exe
FirewallRules: [{7FEB1A90-348A-403D-A81B-8A90909B8046}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\GAME.exe
FirewallRules: [{4D4C2D8B-3548-4B2A-8E2C-FE620EDC232F}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\GAME.exe
FirewallRules: [{6AD43E65-4AAB-485A-A8EF-974A44126A59}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\configure.exe
FirewallRules: [{C063EEC5-F57B-47B9-B911-F779BC09A639}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\configure.exe
FirewallRules: [{FB25B13F-E480-4A9A-9C99-6CE3FFDD359A}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\HitmanBloodMoney.exe
FirewallRules: [{0536973D-1042-451D-AC2D-BD8D995754DA}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\HitmanBloodMoney.exe
FirewallRules: [{4AD7A1A2-1893-4807-ABDD-455E046C54F3}] => E:\SteamLibrary\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{8F004FE6-C2BC-4FF8-AD4D-04292A15AD82}] => E:\SteamLibrary\steamapps\common\MountBlade Warband\mb_warband.exe
FirewallRules: [{4CEB1096-CBD3-4068-AE01-09816F41BDC7}] => E:\SteamLibrary\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{B4B06926-3BF7-43DA-996D-91BECCDBA9F2}] => E:\SteamLibrary\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe
FirewallRules: [{41FC8989-8330-4970-9857-0E47BA14C2F5}] => E:\SteamLibrary\steamapps\common\InfinityWars\Infinity Wars TCG.exe
FirewallRules: [{A865BF50-DA62-426F-AEAD-52F3BEFE344D}] => E:\SteamLibrary\steamapps\common\InfinityWars\Infinity Wars TCG.exe
FirewallRules: [{4208F3F2-B530-4B58-8CAD-94EC99A209F8}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{E4F41827-7026-462F-9DA8-94ED4AC06EEF}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{97FB27A3-61E5-4059-86C2-D44273ED29E6}] => E:\Program Files (x86)\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{5EB34E52-2760-41C6-B72C-D88C1F13B8E2}] => E:\Program Files (x86)\Origin Games\Crysis 3\Bin32\Crysis3.exe
FirewallRules: [{6FCF9910-498F-4B17-B6E4-2F1821B2EA1E}] => C:\Program Files (x86)\Steam\steamapps\common\Contagion\contagion.exe
FirewallRules: [{D7E1D59B-7634-4832-9CC2-621B3E79D267}] => C:\Program Files (x86)\Steam\steamapps\common\Contagion\contagion.exe
FirewallRules: [{172EE065-3219-438B-AECD-6133CFDA7836}] => C:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe
FirewallRules: [{68DF5999-E979-4E4E-BC62-3B2C63E4618E}] => C:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe
FirewallRules: [{57F10B5A-5CC2-45CE-A3EB-D114A5670638}] => C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{A5C9C045-7ECB-4042-8AFB-86EC03390FDA}] => C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{B4B22AAE-D437-4588-BBA6-3C7B8BA6719B}] => C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{83E8E329-820A-4568-BC19-37FA2A9CC2D3}] => C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe
FirewallRules: [{CF200FFA-1026-4344-9EC4-DD6DF24C9084}] => C:\Program Files (x86)\Steam\steamapps\common\Shadwen\shadwen_launcher.exe
FirewallRules: [{46CD2E39-AB9F-4CA8-9089-794AB0763AE4}] => C:\Program Files (x86)\Steam\steamapps\common\Shadwen\shadwen_launcher.exe
FirewallRules: [{AC3A587A-2DEB-4B3F-ABB8-02E6D555070E}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 3\trine3_launcher.exe
FirewallRules: [{3684F3B6-B328-48DF-A3E8-6D1A0ECC36FE}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 3\trine3_launcher.exe
FirewallRules: [{93E95434-F6B6-4911-A053-186E31191A29}] => C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{37FADAF5-D0EB-4080-B204-AE4328B5AEA3}] => C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{60AF0DE6-73BD-4095-BB7D-74635D9BF9AC}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{12C69A7D-7BB1-487B-803F-D866B4EFB8B0}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 2\trine2_launcher.exe
FirewallRules: [{2225331B-5412-4835-98E8-D372923AD663}] => C:\Program Files (x86)\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe
FirewallRules: [{869C8FB6-170B-4F84-8237-24C9C9702475}] => C:\Program Files (x86)\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe
FirewallRules: [{0EC5E70A-0692-4BEF-8767-C1D848BAC811}] => C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{FA030ADE-519B-4743-B4B1-F3A40B70B052}] => C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2288DB85-27A4-4652-8663-F8BA64ADFBD3}] => C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{4D3BA0C0-5B87-4D59-97E9-DBD76DFA5D15}] => C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{6D7B8A76-02B6-435C-803A-F5F7AEAE4274}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{387D9AFD-0DD9-4391-8E52-DD14CBD8EC0E}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{F86059B0-CB5C-44EF-A75C-D91714A7F2FD}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{C3B5307F-DC4E-444C-8744-3AC03588F495}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{C9FF2619-5E20-4BB7-97F8-44150C368914}] => C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{40470BD7-29E4-454A-92A5-8BCFA1A54F9F}] => C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [UDP Query User{618B8E73-9DC7-4D7D-85A0-1F03AEF15C38}C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe
FirewallRules: [TCP Query User{83FA71AB-E6FF-42AC-8BFD-731291570644}C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe
FirewallRules: [{A93DE7BC-B877-4BF2-B026-E170F842E01C}] => C:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{D55F38D6-BEF9-4F15-97F5-226476F96F71}] => C:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{47ED4C95-5C04-47B7-92A2-D6C12BA04F74}] => C:\Program Files (x86)\Steam\steamapps\common\Sunrider\SunriderMaskofArcadius-Steam.exe
FirewallRules: [{1EFABF9D-DD25-498C-9884-3E683822754D}] => C:\Program Files (x86)\Steam\steamapps\common\Sunrider\SunriderMaskofArcadius-Steam.exe
FirewallRules: [{289DB92D-0409-42D5-BD87-E15B2C685B8F}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\Shadowgrounds Survivor Launcher.exe
FirewallRules: [{1F95774F-53A7-4D5A-ADF9-628E0E9CDAFC}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\Shadowgrounds Survivor Launcher.exe
FirewallRules: [{9E587941-C6D0-4173-8CCA-B9D22B8ADBE4}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\survivor.exe
FirewallRules: [{98004AB0-7797-4157-BCF0-F3F293D01662}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\survivor.exe
FirewallRules: [{1A3E147D-27F4-4CDB-858D-C80E562ECC78}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\ShadowgroundsLauncher.exe
FirewallRules: [{9C37A5D2-7F9D-491D-99FE-9AD0EE9F75E0}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\ShadowgroundsLauncher.exe
FirewallRules: [{536D1F57-6C23-4ED1-8870-1E185C3A147B}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\Shadowgrounds.exe
FirewallRules: [{9FBD63B2-BBC8-4F30-AA19-1E2E2AD9E98D}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\Shadowgrounds.exe
FirewallRules: [{70C2E79B-B871-4476-BB96-DD7C24EEF81C}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{33707207-71B3-4381-90DF-7498066DA8ED}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{37CD030F-122D-439F-AA1A-A7626616F7DA}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{750EFBA0-429B-41F2-88C9-3E70F7014B8B}] => C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{496A8DE4-B431-4E76-A8A8-C2891748CCFC}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F38248B1-F972-4BDD-81B7-00898EC35DF1}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{35BFB23E-B7F4-49AC-B99E-C62B473EA71B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{CA338693-B436-4A24-9FE1-B64F12447D97}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{6C97D52C-C498-4CE1-B76A-8622063AF913}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{E6DFEC20-EEDA-4C1B-9DC8-C5E2AA1E5A2C}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{82541839-9314-493D-A848-EBF5FA36EF94}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{56430841-5D55-4A6B-B414-33B879391082}] => E:\Program Files (x86)\Steam\steamapps\common\RebelGalaxy\SteamLauncher.exe
FirewallRules: [{A15CDE16-4694-44BB-9306-334695EE5DC7}] => E:\Program Files (x86)\Steam\steamapps\common\RebelGalaxy\SteamLauncher.exe
FirewallRules: [{0CD1EB9D-B9FC-47C5-8B7D-D360B3AAFC0B}] => E:\Program Files (x86)\Steam\steamapps\common\BloonsTD5\BTD5-Win.exe
FirewallRules: [{561BEC68-9D04-41DC-85DA-D83FE51DD124}] => E:\Program Files (x86)\Steam\steamapps\common\BloonsTD5\BTD5-Win.exe
FirewallRules: [{69FACE47-35B9-4201-99E0-F000D4CF940F}] => E:\Program Files (x86)\Steam\steamapps\common\Magic 2015\DotP_D15.exe
FirewallRules: [{E827CF6A-865E-4D56-81A1-49EB562CABBB}] => E:\Program Files (x86)\Steam\steamapps\common\Magic 2015\DotP_D15.exe
FirewallRules: [{8DCA107F-64C3-4DA7-862F-A17A5D7E8990}] => E:\Program Files (x86)\Steam\steamapps\common\Magic Duels\MagicDuels.exe
FirewallRules: [{30BEAD87-CE90-4E85-A336-AB1083402BE2}] => E:\Program Files (x86)\Steam\steamapps\common\Magic Duels\MagicDuels.exe
FirewallRules: [TCP Query User{80757309-357B-4794-875B-DDAE76F62FE9}E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe
FirewallRules: [UDP Query User{F2B825F6-6E75-4C11-B63C-40A0A5ACD661}E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe
FirewallRules: [{199AF2D9-EBBF-4D3A-A82A-C7650080ABB1}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe
FirewallRules: [{CBBBBF5A-3079-49E5-AC3B-E30F2C0002BC}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe
FirewallRules: [{A96D90D8-F474-4136-BA57-A09F62C8C2DB}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe
FirewallRules: [{C03D7565-C82A-4128-ACB0-5696CBDAF74C}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe
FirewallRules: [{2A459017-A1DB-4B5A-9B28-47280332E19A}] => E:\Program Files (x86)\Steam\steamapps\common\STAR-BOX\Game.exe
FirewallRules: [{C631CBA4-1DE8-4FD8-AECB-AADE2A56D236}] => E:\Program Files (x86)\Steam\steamapps\common\STAR-BOX\Game.exe
FirewallRules: [{BEE8546F-170A-4F8E-8CEB-908EEE9A9C5E}] => E:\Program Files (x86)\Steam\steamapps\common\Atlas Reactor\GlyphClient.exe
FirewallRules: [{5B52F912-398C-4EE0-B13E-F12E230F0324}] => E:\Program Files (x86)\Steam\steamapps\common\Atlas Reactor\GlyphClient.exe
FirewallRules: [{986A4965-EAF0-4AB0-8A07-288B1C882F40}] => E:\Program Files (x86)\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe
FirewallRules: [{35A46A55-8736-4883-95C4-36F7D8C76F83}] => E:\Program Files (x86)\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe
FirewallRules: [{569A2D39-360D-4245-9430-E01BE3E8F186}] => E:\Program Files (x86)\Steam\steamapps\common\Bloody Walls\game.exe
FirewallRules: [{400E1FBF-A5C4-4544-B8D3-9CF7087CAF03}] => E:\Program Files (x86)\Steam\steamapps\common\Bloody Walls\game.exe
FirewallRules: [{03B94802-9F4B-4433-859B-C8EB321A5898}] => E:\Program Files (x86)\Steam\steamapps\common\Star Wars Battlefront II\GameData\BattlefrontII.exe
FirewallRules: [{EF1DC6C2-B39B-4F68-ABFA-C2A42A77E80E}] => E:\Program Files (x86)\Steam\steamapps\common\Star Wars Battlefront II\GameData\BattlefrontII.exe
FirewallRules: [{0B41EF7B-C85C-4C3A-9ED2-C46C26C07541}] => C:\Program Files (x86)\Origin Games\Dungeon Keeper\DATA\DOSBox\DOSBox.exe
FirewallRules: [{F3CFCA1F-51E7-4974-ACB6-080EEE311C57}] => C:\Program Files (x86)\Origin Games\Dungeon Keeper\DATA\DOSBox\DOSBox.exe
FirewallRules: [{EDD1C830-6B8A-47F6-8675-00C8B5132FA2}] => E:\SteamLibrary\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{CA740004-5D83-4C26-BA14-55A1071502E3}] => E:\SteamLibrary\steamapps\common\Rise of the Tomb Raider\ROTTR.exe
FirewallRules: [{4C396A49-F701-4D0C-845E-6E8383D2C304}] => E:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe
FirewallRules: [{DC7EAC97-08CD-4B20-8188-C39A43A0FBEC}] => E:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe
FirewallRules: [{D48116AA-1FAD-40A7-90EA-D021E9F13871}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{D39CA1D0-1576-4356-924A-DA8456ABE150}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe
FirewallRules: [{8E83A21A-19B1-4FB3-B72C-81A98AE06561}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7BECF0BF-053E-47A9-9351-C48F2DCA9533}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2227327B-D596-4C1B-A946-7379EDE9DDA3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{181189AB-0637-4C26-8502-398540E4CAE9}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F74AEE0B-BE9A-41BC-9B0A-026589307B74}] => C:\Games\World_of_Warships\WoWSLauncher.exe
FirewallRules: [{3E2B74E4-2EA1-4691-BC7E-7EE706763717}] => C:\Games\World_of_Warships\WoWSLauncher.exe
FirewallRules: [{5B03C3D5-BF27-4BBE-82D6-D31F65C543BD}] => C:\Games\World_of_Warships\worldofwarships.exe
FirewallRules: [{D3978088-67E8-45AD-95BA-C392E1976D35}] => C:\Games\World_of_Warships\worldofwarships.exe
FirewallRules: [TCP Query User{C814BC18-6A63-4291-9B24-D4690178072D}C:\program files (x86)\opendungeons\opendungeons.exe] => C:\program files (x86)\opendungeons\opendungeons.exe
FirewallRules: [UDP Query User{EC3B3B9A-5E00-418D-AFE3-39A5231BD5D6}C:\program files (x86)\opendungeons\opendungeons.exe] => C:\program files (x86)\opendungeons\opendungeons.exe
FirewallRules: [{EC29E49B-2A9A-46BF-A707-900905923441}] => E:\SteamLibrary\steamapps\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{8282779F-C5D6-4A60-951C-CD5D4B5EB5DE}] => E:\SteamLibrary\steamapps\common\SourceSDK\bin\SDKLauncher.exe
FirewallRules: [{9C079AA2-29C4-4016-88D3-387158393EB2}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A774DAFF-81E0-4933-A332-7BABD10CF7EA}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6AF60BD8-912E-4B13-8F2D-131106B25C60}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3A7D8B35-7580-4263-9C42-DD4CA96D5B8A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{0CE12F12-54BE-43DC-A8BA-352795BE2B1A}C:\users\jonathan\desktop\xonotic\xonotic.exe] => C:\users\jonathan\desktop\xonotic\xonotic.exe
FirewallRules: [UDP Query User{78050057-A131-470F-8DA6-EAECEC44CA10}C:\users\jonathan\desktop\xonotic\xonotic.exe] => C:\users\jonathan\desktop\xonotic\xonotic.exe
FirewallRules: [TCP Query User{4762C647-9415-43D5-B97F-133291EEF2D9}C:\program files (x86)\counter-strike\counter-strike\hl.exe] => C:\program files (x86)\counter-strike\counter-strike\hl.exe
FirewallRules: [UDP Query User{E66B53C2-D284-46D5-8CE1-9E7C5724A74B}C:\program files (x86)\counter-strike\counter-strike\hl.exe] => C:\program files (x86)\counter-strike\counter-strike\hl.exe
FirewallRules: [{FA3FCC26-FA12-4D5A-A82E-9724BEB02BC7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{FC4D66CE-519E-47B5-ACC3-D485A68590A3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F06345DA-A94D-4614-9268-C04E06BE3854}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7FBF94CD-61A1-4EB7-99B6-CE6822954D66}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D97EABFB-D56F-4C1E-9C26-73E392686D72}] => E:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{DD43D6C6-2CB4-483C-861F-7FA4C46A714D}] => E:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe
FirewallRules: [{C29E5567-E54F-490E-A409-853B138452CE}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{95C2D103-6E9D-435B-AF8D-9E00F3F90EC8}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{67CF0793-EF9E-4D2A-917F-C22F7769DADB}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{73E6B78C-B6FA-47E6-89E9-E2AB874395EB}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{19AD245B-0F79-45D4-AD8F-F117662AB2BF}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1B04A0EE-4892-4809-95A5-191AC5741A25}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B6B5E469-7895-456F-93E1-836745BB4723}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{36010AAB-A4A9-429C-BD5B-D51DF2764967}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{20C93A02-11F3-4487-9A9A-1A79059C736A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{604F5C85-1615-4B27-9FC6-CD39A7BBED10}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D457FDD6-9AD4-458B-AEDD-52F53B3BA055}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0A6181D7-45B6-454F-9D62-7F440F63A97D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{079F2E0F-EA9A-4291-924D-192336641517}] => E:\SteamLibrary\steamapps\common\Dungeon Defenders 2\DunDefLauncher.exe
FirewallRules: [{0C8C25D9-B71B-403F-BD12-6D9BBE0C12E9}] => E:\SteamLibrary\steamapps\common\Dungeon Defenders 2\DunDefLauncher.exe
FirewallRules: [TCP Query User{78904BE1-1822-4B6C-BDFB-6635A0DEDCA6}E:\starcraft ii\versions\base47185\sc2_x64.exe] => E:\starcraft ii\versions\base47185\sc2_x64.exe
FirewallRules: [UDP Query User{08E40D5A-1D7A-4E8F-A6B9-3392A5262D63}E:\starcraft ii\versions\base47185\sc2_x64.exe] => E:\starcraft ii\versions\base47185\sc2_x64.exe
FirewallRules: [{AFC91C9E-418A-497F-AB80-306F2305C642}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C3AD879F-3AD3-41A1-9AE8-A6A12038B033}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{64940C6D-7D09-4ED6-931A-D891AE3F1535}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DF67E8C8-295D-4596-BB66-BF715B92ED01}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{21942EED-2CB2-46C6-AC59-8F890555AC9A}] => E:\SteamLibrary\steamapps\common\Shadowverse\Shadowverse.exe
FirewallRules: [{D44DD015-9549-4E12-91CC-783CF5DA2DD2}] => E:\SteamLibrary\steamapps\common\Shadowverse\Shadowverse.exe
FirewallRules: [{16336BE0-7A31-42F0-ACDF-9C11EBFB49B1}] => E:\SteamLibrary\steamapps\common\Dead Age\DeadAge.exe
FirewallRules: [{44D978E4-D5E5-41ED-9481-A5B5AE18BF37}] => E:\SteamLibrary\steamapps\common\Dead Age\DeadAge.exe
FirewallRules: [TCP Query User{146208BD-A42E-480B-9207-1D574897632A}E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe] => E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe
FirewallRules: [UDP Query User{E2F21297-1CC0-4541-8A2A-EE74339B0C72}E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe] => E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe
FirewallRules: [{FD0C0E17-97A9-435C-900B-C499DDD5E130}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{925D6974-70BF-48D9-8B0D-F78B0DC964DA}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2344D580-30EE-4A5E-AAD9-2EC874DD3664}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{276DF986-C7ED-4BAA-8CB9-D72BB8CCD509}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5B056765-B473-45E5-A5F1-CB878C71173A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6626EDD2-A4D7-4988-9D7C-116FAFFC4849}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A2C3D1F6-BAC7-451B-A7DB-5D0196F981FA}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{23025E19-C03C-4735-8E6C-998304ACA079}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe
FirewallRules: [{BE7F97B2-C5A7-4F66-BDEA-5B5C32585013}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{2B990431-AD07-4B16-9074-AE57A6062D67}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe
FirewallRules: [{367C9E23-E8B6-4671-AB6C-9BD88D8D312F}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{B99ACD93-FB43-4DEA-97CB-D009B4901566}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe
FirewallRules: [{5BF403DA-455A-4D23-9CC2-595E63B88C69}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11_b.exe
FirewallRules: [{5025BD80-BD10-42B7-BEA4-9476F0206F2C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11_b.exe
FirewallRules: [{57BE5A68-2194-471D-A6A0-52CA775B49ED}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{43E025C1-D1DC-4072-881C-78DB9AC0D8FF}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe
FirewallRules: [{78E770CE-C50C-4417-A124-630A7F6A4874}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{82FC6CE6-9951-4B92-BC4B-825F4F272E56}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{183BA5AD-63A3-4367-9CD7-A490D984DF66}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{03CC1667-AA67-4D7C-A8B0-7518B63196F9}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6EC45C86-D11A-48AF-90DA-4CA88779F074}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B0864AB7-68B1-4437-A43E-8D80D70BC69E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BC78EB61-AF5F-4C55-863B-5FEACA69B878}] => E:\SteamLibrary\steamapps\common\Vanguards\Vanguards.exe
FirewallRules: [{FD41667D-A35D-42E0-890F-7AB511E446B5}] => E:\SteamLibrary\steamapps\common\Vanguards\Vanguards.exe
FirewallRules: [TCP Query User{0AF4F6F3-255C-47DC-9247-B3633C2AB448}E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe] => E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe
FirewallRules: [UDP Query User{801AB3F8-ADA7-4A0B-B97E-15F247FFA9B4}E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe] => E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe
FirewallRules: [{87D7FF36-3511-43A4-9855-2411F9837180}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9AB988F0-5080-4068-AAE9-B721B1BB304A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C218FCC6-D23A-4D11-993C-1A9C8E94F490}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExile_x64Steam.exe
FirewallRules: [{B04703B3-D67B-483A-8A2F-B9F77635C02E}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExile_x64Steam.exe
FirewallRules: [{C66EE641-8582-45E8-AFB0-44C34E665EBD}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3D951F78-AD43-4F3B-BAD3-91BAF19D4595}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{144C1408-F048-43A7-AF3D-031E791A60DC}E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe
FirewallRules: [UDP Query User{1B576111-9C5C-4A47-8249-B17208565F86}E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe
FirewallRules: [{7AB1CD2E-E5E9-4E20-8BC7-51A66EAADABC}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3BAF439E-EFA4-4A00-B962-66D7C591CD68}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E1544905-CF14-40A5-BCFA-19A510276362}] => E:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{81AB704C-B2A1-49D3-9C19-504291B07096}] => E:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe
FirewallRules: [{33004F66-EAC7-4673-9273-D6E3D105BD73}] => E:\SteamLibrary\steamapps\common\Warface\live\nw.exe
FirewallRules: [{9373B8B7-72C2-4459-A1B2-8918E24D922D}] => E:\SteamLibrary\steamapps\common\Warface\live\nw.exe
FirewallRules: [TCP Query User{7753D235-C6CC-4764-A9DB-CB5B545E4375}E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [UDP Query User{55D823E1-738E-422D-BE94-3C641B54BDB7}E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe
FirewallRules: [{B779BDC1-CA18-4DC0-ABBC-DC44BA8DE893}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3EC8EAD9-B671-46F7-8E7A-B747DE74C3F6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{06C8B61D-D552-4351-B695-31729527368F}] => E:\SteamLibrary\steamapps\common\Zenimax Online\zosSteamStarter.exe
FirewallRules: [{53ADC676-645F-49A0-B1FC-CC7F2B6F07C2}] => E:\SteamLibrary\steamapps\common\Zenimax Online\zosSteamStarter.exe
FirewallRules: [TCP Query User{D7166135-2ADF-4301-9537-AC56AF5F2893}C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe] => C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe
FirewallRules: [UDP Query User{AC8AB07A-90F0-40FB-9B35-3C80C4FF9522}C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe] => C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe
FirewallRules: [{AD83F36E-4E54-478F-944C-81EFFD2067A7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4D33EDD7-10DA-4573-9759-5298E1BD1C8E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5C096371-959F-4ABD-8E46-489C4AE44D19}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{1F5AD116-705A-4F81-AE6A-696B88AFD905}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DC41437D-85D4-4CEF-8ECE-3EA67BB5619A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B91604CA-9F0B-422A-8367-DDBD1DD00C30}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5787AB14-8E9B-4AA6-8903-1E3C11E0E455}] => E:\SteamLibrary\steamapps\common\World of Tanks Blitz\wotblitz.exe
FirewallRules: [{D3C00FEB-BC9F-455C-A53E-52DD1380142B}] => E:\SteamLibrary\steamapps\common\World of Tanks Blitz\wotblitz.exe
FirewallRules: [{BAD7980C-367C-4FFB-B845-0267EB367F2F}] => E:\SteamLibrary\steamapps\common\Dogs of War Online\DogsOfWar.exe
FirewallRules: [{C2630CF0-D815-403C-9C9B-3E50AE7890C6}] => E:\SteamLibrary\steamapps\common\Dogs of War Online\DogsOfWar.exe
FirewallRules: [{5A7666D7-5303-44AF-BA36-AEBF045A46B9}] => E:\SteamLibrary\steamapps\common\Rainbow Six 3 Gold\system\RavenShield.exe
FirewallRules: [{37FB7901-9723-4972-946D-83AF6DDC8066}] => E:\SteamLibrary\steamapps\common\Rainbow Six 3 Gold\system\RavenShield.exe
FirewallRules: [{58A13735-AC1D-4B55-A22B-EE9C2866D44D}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{37B3B72D-D93B-4AB2-8729-56644057D41E}] => C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{657CA939-8AD5-4BEA-991A-B7D700879809}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{0C24EC0C-5D96-4987-B897-0E4730EE3D51}] => C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{08FA3C0A-D959-41C3-89C7-84D8B54F8E54}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DED94182-4110-4450-B312-78E70DAC3464}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2CFDBF8C-44B8-4AEB-8E74-E07BFB81A417}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{25D7FF3A-576E-48B7-B325-9FD66AAE4160}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4507A2E2-CD3C-45BC-A43A-66479512A379}] => E:\Assassin's Creed III\AC3SP.exe
FirewallRules: [{0DDBE1B8-8141-4750-A5E4-D50E3541B49B}] => E:\Assassin's Creed III\AC3SP.exe
FirewallRules: [{45E61523-726B-4A7E-A94F-15FC8F7E4CD8}] => E:\Assassin's Creed III\AC3MP.exe
FirewallRules: [{C6B60FB5-07A8-41DF-869B-7368E681753C}] => E:\Assassin's Creed III\AC3MP.exe
FirewallRules: [{AC8B050D-ACC5-480F-981D-8F68E51B7F3B}] => E:\SteamLibrary\steamapps\common\KW2 Battles\kw2b.exe
FirewallRules: [{964C5C38-B9D4-4EF6-837C-D5068BDB2706}] => E:\SteamLibrary\steamapps\common\KW2 Battles\kw2b.exe
FirewallRules: [{D7E7AF90-D6E7-4BFF-A8EC-A6D907299B75}] => E:\SteamLibrary\steamapps\common\KW2 Battles\options.exe
FirewallRules: [{487691AD-5D0E-427A-B589-18E2BB7145A6}] => E:\SteamLibrary\steamapps\common\KW2 Battles\options.exe
FirewallRules: [{7022FD56-06F5-4AC4-980F-F15EDC6B72D9}] => E:\SteamLibrary\steamapps\common\KW2 Battles\Editor.exe
FirewallRules: [{F73E9D72-C6C2-4C78-85DB-E704505AD6B8}] => E:\SteamLibrary\steamapps\common\KW2 Battles\Editor.exe
FirewallRules: [{E530A3C2-D73A-4FA8-A8A9-C11AECD433A5}] => E:\Program Files (x86)\Steam\steamapps\common\TOXIKK\Binaries\ToxikkLauncher.exe
FirewallRules: [{5096E01C-F0CE-42D8-8E7C-9B32F56C64C8}] => E:\Program Files (x86)\Steam\steamapps\common\TOXIKK\Binaries\ToxikkLauncher.exe
FirewallRules: [{C139A161-2CDC-4D73-8174-9203B3652737}] => E:\SteamLibrary\steamapps\common\Yu-Gi-Oh! Legacy of the Duelist\YuGiOh.exe
FirewallRules: [{EDAFBAA4-226A-4BD0-BFCA-EE62DE20D3D4}] => E:\SteamLibrary\steamapps\common\Yu-Gi-Oh! Legacy of the Duelist\YuGiOh.exe
FirewallRules: [{3799C63B-E6AA-42F1-A6CF-6E7EC51CDC61}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{910DAC5C-B1CA-4030-87D2-050BD72F5329}] => E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{00D15FE2-75EE-4AC0-B0C0-34BFC17FA426}] => E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{101B7593-30BF-4E48-85F5-06585D0CAE07}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F25D5661-519D-49D1-93DF-8B88F0148D79}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E120725A-3891-4FE0-95AE-86095250550F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{07E0FEFC-2089-497C-A15F-650F7B532710}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F5278708-7965-4E38-941A-C88AE05C7C04}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9A370F1B-0102-405B-B1F8-20B25140B4A3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2E3FE981-3CC9-4C46-A5EA-11F50CAF7BBC}] => E:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{8523E2AE-45BA-4375-B825-F46775464F35}] => E:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe
FirewallRules: [{69826E1B-5DDE-42BA-8EC1-02D5D58CC287}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4F58F1D0-316B-4084-956E-F0AFDB123626}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{38A7A6C2-567E-4A65-B23B-5EE45F2C8B30}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8810CCA9-49F0-4B55-8AD9-C26C493AA27C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9B3BFFF5-61CE-4C6F-AF91-2C646057919B}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9C71EB6E-BFAB-4068-864B-09A8941A1E18}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{6EC7084D-3D4A-4FD5-9B72-0DE54E2F80F3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{606C01FF-6E17-40D0-8DD9-F7E6F8609AEF}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D9AD3C07-CD29-447E-98DD-F4771F16E487}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9C2C2100-2017-419F-B639-21EFC0600E3C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{FF466FB2-F01C-406E-9D5D-238DF441D034}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{62F21467-A958-4005-8F18-92D6949E54F1}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4A3A91BB-0A4E-4DD2-8F94-D1B5A5870BF1}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4631817F-A02C-41C6-9D9B-C8FBC30FCB24}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{8039B86F-F00D-4D03-B912-A7842DFF84FE}] => E:\SteamLibrary\steamapps\common\Clicker Guild\guild.exe
FirewallRules: [{C7AA08B1-A68A-4D11-A8A9-F116EE426112}] => E:\SteamLibrary\steamapps\common\Clicker Guild\guild.exe
FirewallRules: [{B0E0A758-5953-4D7E-A50E-3F42CACCC271}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{64DB0CED-B025-4478-A1E9-FB88E32FFCCE}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C5B22E33-4E24-4120-81C1-52EA13318382}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{3C17C797-D16D-4086-9F52-8CF9D0C2EFA0}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{17E406A6-BA06-4C1B-92B1-444A8AB961D2}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C16D7FC2-AD99-4DAB-8148-51039216C161}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C225F83B-EC43-4717-B087-36D4563062AC}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\gu.exe
FirewallRules: [{ECB715E5-F5DE-4D37-A3FC-CF674A73228B}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\gu.exe
FirewallRules: [{4C9E03CD-CF92-4133-95BA-B5048B32BAEE}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe
FirewallRules: [{338502D0-BE1F-400A-906E-CC19AD7437D6}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe
FirewallRules: [{615A1FDE-E409-44E7-BAED-BFEFF06E3E56}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C513C93E-A013-48C4-B9CE-6BEF60AA19C9}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A0AB4FB2-DBE5-4725-90A7-A74EA01B5006}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B7D2B899-7BD9-4C19-8B39-E7F2F5E6D18D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{1BEB1BEC-4CE3-405F-8CA2-D2809A6F8F94}E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe] => E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [UDP Query User{78306F49-6554-41F2-95F3-245B34C65A37}E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe] => E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe
FirewallRules: [{A30B53FB-5007-460D-9D67-5438424D2042}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{77075431-0224-4FE1-B082-06E13FCBDD9D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2B0BC843-4221-4C10-8057-5643882533F4}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{41D62EA2-0F7F-48C2-B31F-51ACEB922B2E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{36034C75-C05E-46FC-B28F-6D09A9AD9C06}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{06079D9B-0ED6-419A-9532-E14997A5C663}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{20E7BA12-766B-43F9-A7C2-F72AA4D56B3E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A1E507CF-B59C-438F-A401-4FAF5706349E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F47C6E31-A8CE-4E22-88D7-D77286719FAA}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Splinter Cell\system\SplinterCell.exe
FirewallRules: [{DE168F08-49D4-42BB-8688-A25239CDE2F3}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Splinter Cell\system\SplinterCell.exe
FirewallRules: [{A1B24D8F-D2F3-4E30-9116-EB8B6A88BDEB}] => E:\SteamLibrary\steamapps\common\XCOM 2\Binaries\Win64\Launcher\ModLauncherWPF.exe
FirewallRules: [{00ADEFDD-5BAE-4CCE-8D5E-3E6D215F8550}] => E:\SteamLibrary\steamapps\common\XCOM 2\Binaries\Win64\Launcher\ModLauncherWPF.exe
FirewallRules: [TCP Query User{03D822D2-1311-4240-91B8-3D9D211576EB}E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe
FirewallRules: [UDP Query User{165CAD4B-9CDF-46F8-B3EC-58FF16E3A31B}E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe
FirewallRules: [{29BEA22D-142B-4385-B725-F57B0F74DDBB}] => E:\SteamLibrary\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{453C2F9C-594F-4EC9-A523-5ED118BC1BA7}] => E:\SteamLibrary\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{D9D748E2-6D17-4310-9E82-FEAD0EADCD6B}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{28BDC0A8-A653-4C89-95D7-090E1E4C1C42}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2A8BB6D3-8735-40AC-9F14-C7A509816B74}] => E:\SteamLibrary\steamapps\common\DOOM\DOOMx64.exe
FirewallRules: [{8668CD0F-2FB1-4489-868B-398616D98BCE}] => E:\SteamLibrary\steamapps\common\DOOM\DOOMx64.exe
FirewallRules: [{9167161A-4A3A-4625-B6D3-B56E22EE375D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C2F4B930-D4B8-4C7C-9B3B-1411AF490974}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{82879BB6-B9C4-42BC-B4F4-E8FDC160F633}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{474F2B3C-61E0-4996-A90D-D6448F6D7338}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7264E46B-8D0C-40C0-84D3-7F7F77CD6FBA}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe
FirewallRules: [{8D440DE0-A8B3-471A-8DD4-58EFAA0CD707}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe
FirewallRules: [{A0F3ED4A-CC3E-4C8B-B87A-7F02556DAB74}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9F0E8A5A-969A-4994-998F-28404EF1D075}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{763675A8-C1A4-4ECF-A202-F918971DC8B6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C62D56BC-5475-477E-85F4-89AA9CDC3186}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{43047CB5-BDDD-4D27-8DF8-54AA40A79B30}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{AE71CB23-8653-494C-9AF9-7C2CDF42F853}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BDD17484-2D85-4605-85FC-80F69F8EECA4}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4E9A2213-7718-444D-B789-1C01D3D06374}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{43FD9C83-6401-419B-A79F-15CE68BB281C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E3C814F4-1D23-4BA0-AFD5-DEF527E48F4F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A071D0C6-FF59-4C43-9435-7E5598320E74}] => E:\SteamLibrary\steamapps\common\dayofinfamy\dayofinfamy_BE.exe
FirewallRules: [{13A36D8A-FEF8-4794-B7FA-93BAFEEF3BE0}] => E:\SteamLibrary\steamapps\common\dayofinfamy\dayofinfamy_BE.exe
FirewallRules: [TCP Query User{8AD72A2B-09A2-484C-8E83-848D04E6FDE9}E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe] => E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe
FirewallRules: [UDP Query User{149119E5-D1CB-4630-A1C9-78C31AC799FC}E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe] => E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe
FirewallRules: [{85CD8216-91DC-489A-AB91-EC141251403B}] => E:\SteamLibrary\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{45743051-A919-41A0-894A-6FE479254C20}] => E:\SteamLibrary\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe
FirewallRules: [{91B7897C-C3A7-4BB7-951E-BBDB069D0535}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{9509BE3E-8D86-4E57-A60E-F6C1463B4795}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7C002E0C-8D72-4AB4-9F23-CADD25F69A9A}] => E:\SteamLibrary\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{3D772758-3862-480B-B56F-8592F9A76A90}] => E:\SteamLibrary\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe
FirewallRules: [{29C1DB2B-5B0E-4D06-9E65-C7AB96C3D074}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2802D209-E0E4-4F8B-8373-59B5059C0434}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{F0D5908E-8916-4B38-88FB-990C30940522}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{D75BC329-5AE0-40BB-AD93-85A4D5A0D870}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B9AE77B0-7387-4FDA-89FC-3CBBE3C3285F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{414FA066-28FD-4CD8-BD3A-E3511188DCC8}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B54D3AA6-35BD-45D2-A55E-CDD34DEA905A}] => E:\SteamLibrary\steamapps\common\Lara Croft and the Temple of Osiris\LC2.exe
FirewallRules: [{86776E02-BEFB-441A-86B7-6DB850838AB9}] => E:\SteamLibrary\steamapps\common\Lara Croft and the Temple of Osiris\LC2.exe
FirewallRules: [{7E97110C-C22B-47B4-A0C2-4440DD5F6E0F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2C08DEA8-EE95-4628-97BA-B306FCB18CC7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{17F779A3-A50B-412A-ABB6-77D37A37BF74}] => E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{6275FC03-FA31-44E2-A092-ECE82947AFA6}] => E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe
FirewallRules: [{E67926FD-1C65-44F0-B7CE-AEB533956894}] => E:\SteamLibrary\steamapps\common\Streamline\hns\Binaries\Win64\Streamline.exe
FirewallRules: [{917759DE-197C-4779-AE08-6E7F344DA019}] => E:\SteamLibrary\steamapps\common\Streamline\hns\Binaries\Win64\Streamline.exe
FirewallRules: [{DE9DFB76-C40E-43CE-9C3A-B89F1BAA4288}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CF6C377C-52AA-4FC2-9FB4-E6628D7EC5A7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{A813D4A1-841A-4BE6-905D-BDD5689A4260}] => E:\SteamLibrary\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{5E44F375-45D8-401D-8EF8-C878A25FA240}] => E:\SteamLibrary\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe
FirewallRules: [{162F6D7B-2387-4D67-B8D1-57A9387E2965}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{89D7CE2D-BD2A-4145-8E61-DE98073C24ED}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7C099077-88F1-45A7-A9DE-13ECB6EEBE7A}] => E:\Program Files (x86)\Steam\steamapps\common\ArtOfWar\gslaunchershell.exe
FirewallRules: [{A10EA1AD-CA22-4619-A997-17954D74CB09}] => E:\Program Files (x86)\Steam\steamapps\common\ArtOfWar\gslaunchershell.exe
FirewallRules: [TCP Query User{F765E58F-CCA3-455C-8D0A-4C51D1CA02D4}E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe] => E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe
FirewallRules: [UDP Query User{DBA83BE7-FCD6-47A8-9CB6-C525CB0259FB}E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe] => E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe
FirewallRules: [{8A35A286-990D-4B58-848A-B99B7A6C7C86}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2739D995-0953-40A1-B1D5-06A8735C3C2D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C027819E-F8D7-409B-8994-1CA751B9DDD1}] => E:\Program Files (x86)\Steam\steamapps\common\Valkyria Chronicles\Launcher.exe
FirewallRules: [{4B9F8E18-549A-4A16-825D-4621621B1A6B}] => E:\Program Files (x86)\Steam\steamapps\common\Valkyria Chronicles\Launcher.exe
FirewallRules: [{7A5F9DF4-860F-4623-8DA1-261C156773C6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{C163A5E0-397A-4C5A-99FB-70BF19775C7A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{4CC4F98F-21C9-44C1-AFA9-365FFD5BEBAB}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\HowToSurvive2.exe
FirewallRules: [{7B5FE50C-F3AD-4C4B-AC29-FA472D6EC7DC}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\HowToSurvive2.exe
FirewallRules: [{E45BF50E-9EF8-413B-8F13-9D7BB23D84D8}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\Detect.exe
FirewallRules: [{E0033378-A97F-4462-BED8-30C98CB23FE0}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\Detect.exe
FirewallRules: [{9ED5FC74-97E9-4773-B5AC-258966917800}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DA10939F-BFAD-45CB-B942-769C1C8950C5}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{BAB83D42-98AB-4736-B4CE-A5B5C1B6AB84}] => E:\Program Files (x86)\Steam\steamapps\common\Dawn of War 2\DOW2.exe
FirewallRules: [{C680C25F-14A9-4926-9A31-56FAF62E6996}] => E:\Program Files (x86)\Steam\steamapps\common\Dawn of War 2\DOW2.exe
FirewallRules: [{4FFB2A9E-D623-46E5-92C8-CA9DACF098F0}] => E:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe
FirewallRules: [{BC87634C-7D0C-4DD1-A45A-E7B97E6F3337}] => E:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe
FirewallRules: [{92C62AD9-24EC-419E-B984-AB262D1B3C8D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{85360E78-95C2-40D5-88C2-E4F090396C27}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{DD99D4D0-2B11-4140-9F3A-28BC50A2672D}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\nxsteam.exe
FirewallRules: [{5D014F74-4646-4CBA-A7DD-DD73A1C98775}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\nxsteam.exe
FirewallRules: [{A7CDBA28-CC81-4F7B-9E34-B20ABDAC53E6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{7E0BA7CE-BCCE-413A-AFC5-39F4FBEE2D3D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{5E921C38-BA8A-468A-8E94-733B4D1B215A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{031A315C-6727-4A63-9F76-908BD086F5D8}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E73CD73C-3B03-4895-917F-66323A5182D0}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{614911A7-DD8F-4494-AC94-E864EB8E9AC1}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{CFA1F93D-D76D-4423-93BB-FCD918FF2B35}] => E:\Program Files (x86)\Steam\steamapps\common\Crush Online\Launcher.exe
FirewallRules: [{7CB44B32-C1D4-4AB7-A7CE-0C370F37A274}] => E:\Program Files (x86)\Steam\steamapps\common\Crush Online\Launcher.exe
FirewallRules: [{633A1F16-780C-4C97-993C-BEBCB76FE74A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B78A7D58-8520-400D-A251-F6822E02DF34}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B459EB9F-A33D-4203-B46B-16CBB3BC5253}] => C:\Users\Jonathan\AppData\Local\Programs\Opera\42.0.2393.517\opera.exe
FirewallRules: [{47A306FB-3CAF-4E62-B54B-20E5DC47659D}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\DAOriginsLauncher.exe
FirewallRules: [{2FF23F76-5019-4EFF-92FE-6B8C2A618504}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\DAOriginsLauncher.exe
FirewallRules: [{1C36D524-CDD9-461F-AE93-193AD79CCF3D}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe
FirewallRules: [{4D33D4ED-7DDF-4C84-9EB5-DC6C84E893DE}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe
FirewallRules: [TCP Query User{2596ECDE-F23C-41F2-B645-E5943F25F523}E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe] => E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe
FirewallRules: [UDP Query User{A33A3F03-BFE7-4B8F-8375-24FBF0A9B3FE}E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe] => E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe
FirewallRules: [{F962CD5A-B887-4D71-AE71-C3417EBBFF2D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{2189C6A1-D218-4C63-9174-FBE4E7AF6D62}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [TCP Query User{D281ECF0-CA02-47C9-BDCA-1DE895BA99E8}C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe] => C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [UDP Query User{24C18AB9-156A-4AF0-92D5-DCAB6101CD30}C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe] => C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe
FirewallRules: [{70DED392-DD42-415E-8831-09A7339D4DED}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{99DA8E7D-95F7-45B7-A4C7-220C199A500B}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{59A18C07-E5BD-4A62-9B44-7D959FB4679D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{E3479C7A-46D9-4166-88AD-EB3316BDFA42}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{0D2B1CC2-4CB9-46B3-B69C-AF1DBDF9F389}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe
FirewallRules: [{B24E99C8-6A1B-422B-9BC4-DF618B279A5F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe

==================== Wiederherstellungspunkte =========================

25-01-2017 13:23:16 Windows Update
31-01-2017 18:37:09 DirectX wurde installiert
03-02-2017 15:49:17 Revo Uninstaller's restore point - Yahoo! Powered

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: PS/2-Standardtastatur
Description: PS/2-Standardtastatur
Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318}
Manufacturer: (Standardtastaturen)
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.

Name: Microsoft PS/2-Maus
Description: Microsoft PS/2-Maus
Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: i8042prt
Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)
Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.
Devices stay in this state if they have been prepared for removal.
After you remove the device, this error disappears.Remove the device, and this error should be resolved.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/03/2017 03:49:18 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: )
Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer".

Details:
AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll.

System Error:
Zugriff verweigert
.

Error: (02/03/2017 03:49:17 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {e4e4c228-091e-442e-b25e-a1fc590382fb}

Error: (02/03/2017 03:43:46 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm MicrosoftEdgeCP.exe, Version 11.0.14393.82 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 2f70

Startzeit: 01d27e2bced45c93

Beendigungszeit: 7

Anwendungspfad: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe

Berichts-ID: 284766ae-ea1f-11e6-85b8-4ccc6a2c5fa5

Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe

Auf das fehlerhafte Paket bezogene Anwendungs-ID: MicrosoftEdge

Error: (02/02/2017 07:17:59 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: edgehtml.dll, Version: 11.0.14393.693, Zeitstempel: 0x585a2bf0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000017e2c2
ID des fehlerhaften Prozesses: 0x17c
Startzeit der fehlerhaften Anwendung: 0x01d27d7e463ce73c
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\edgehtml.dll
Berichtskennung: c5a4322b-5160-4d18-a84f-79f482016635
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (02/02/2017 07:13:36 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786
Name des fehlerhaften Moduls: edgehtml.dll, Version: 11.0.14393.693, Zeitstempel: 0x585a2bf0
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000000000017e2c2
ID des fehlerhaften Prozesses: 0x92c
Startzeit der fehlerhaften Anwendung: 0x01d27d7e4635125a
Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe
Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\edgehtml.dll
Berichtskennung: 8e87e751-618f-4f28-aaa4-d490a68d29ab
Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe
Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge

Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)

Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: )
Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools.

Details:
	(HRESULT : 0x80040210) (0x80040210)


Systemfehler:
=============
Error: (02/03/2017 04:12:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{8D8F4F83-3594-4F07-8369-FC3C3CAE4919}
 und der APPID 
{F72671A9-012C-4725-9D2F-2A4D32D65169}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "7" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "5" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "3" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "1" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "6" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "4" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "2" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT)
Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "0" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten.

Error: (02/03/2017 04:09:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden.


CodeIntegrity:
===================================
  Date: 2017-02-03 15:58:03.901
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.901
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.900
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.900
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.900
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.900
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.900
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.899
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.897
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-02-03 15:58:03.897
  Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 19%
Installierter physikalischer RAM: 16343.77 MB
Verfügbarer physikalischer RAM: 13227.11 MB
Summe virtueller Speicher: 18775.77 MB
Verfügbarer virtueller Speicher: 15021.2 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:232.4 GB) (Free:91.48 GB) NTFS
Drive d: (DVDVolume) (CDROM) (Total:7.35 GB) (Free:0 GB) UDF
Drive e: (Volume) (Fixed) (Total:931.51 GB) (Free:47.69 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 3688486E)
Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=232.4 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 06588525)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

Mein Problem scheint sich jetzt schon behoben zu haben, es werden auf jeden fall keine Werbeseiten mehr geöffnet oder nicht zu den Seiten gehörende Werbung angezeigt. Falls die Dateien die ich gepostet habe doch noch sagen, dass ich immer noch Viren auf meinem Computer habe, dann merke ich nichts mehr von ihnen.
Die Quarantäne von Malwarebytes hat, glaube ich, mein Hauptproblem, nämlich NetUtils schon behoben.

Falls du in den Dateien natürlich noch etwas entdeckst will ich nichts gesagt haben, aber ich glaube mein PC ist fürs erste clean.

Vielen herzlichsten Dank für deine Hilfe Rafael,

Grüße Ingo.

burningice · 03.02.2017, 21:51

warte noch etwas bis ich dir das clean gebe:

Schritt 1

ESET Online Scanner

Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
Lade und starte Eset Online Scanner
Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
Klicke auf Starten.
Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
Klicke am Ende des Suchlaufs auf Fertig stellen.
Schließe das Fenster von ESET.
Explorer öffnen.
C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
Logfile hier posten.
Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset

Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...

Ingo123 · 04.02.2017, 16:11

Hier der ESET-Logfile:

Code:

ATTFilter

ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=812f8000217f434894f4beefa1a6d637
# end=init
# utc_time=2017-02-04 10:05:35
# local_time=2017-02-04 11:05:35 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
Update Init
Update Download
Update Finalize
Updated modules version: 32294
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=812f8000217f434894f4beefa1a6d637
# end=updated
# utc_time=2017-02-04 10:12:47
# local_time=2017-02-04 11:12:47 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=812f8000217f434894f4beefa1a6d637
# end=restart
# utc_time=2017-02-04 10:17:57
# local_time=2017-02-04 11:17:57 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.2.9200 NT 
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 72703 17534093 0 0
# scanned=11695
# found=0
# cleaned=0
# scan_time=309
Update Init
Update Download
Update Finalize
Updated modules version: 32296

burningice · 05.02.2017, 18:54

Die Logs von deinem Rechner sehen jetzt für mich sauber aus: Herzlichen Glückwunsch - du bist Clean

Zum Schluss müssen wir noch etwas aufräumen und ich gebe dir ein paar Hinweise mit auf den Weg:

Wichtig: Entfernen der verwendeten Tools
Die Reihenfolge ist hier entscheidend.

Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
- Windowstaste + R > Combofix /Uninstall (eingeben) > OK
- Alternative: Combofix.exe in uninstall.exe umbenennen und starten
- Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
Downloade Dir bitte auf jeden Fall DelFix auf deinen Desktop:
- Schließe alle offenen Programme.
- Starte die delfix.exe mit einem Doppelklick.
- Setze vor jede Funktion ein Häkchen.
- Klicke auf Start.
- Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
- Starte deinen Rechner abschließend neu.
Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.

Malwarebytes Anti-Malware und

ESET kannst du als Ergänzung zu deiner bestehenden Antivirus-Lösung auf dem Computer belassen und deinen Computer damit regelmäßig scannen.

Persönliche Empfehlungen
Das wichtigste zu erst:

Aktiviere unbedingt die automatischen Updates von Windows und stelle auch sicher, dass diese regelmäßig installiert werden.
Aktiviere immer eine Firewall - die in Windows integrierte reicht dazu vollkommen aus.
Verwende immer ein Antivirenprogramm und stelle sicher, dass es sich regelmäßig aktualisiert.

Wenn du kein Geld ausgeben möchtest, empfehle ich dir auf Windows 8.1 bzw. Windows 10 einfach den Defender zu benutzen. Solltest du noch Windows 7 verwenden, verwende als kostenlose Lösung die Microsoft Security Essentials.

Wenn dir etwas besserer Schutz mit Verhaltenserkennung etwas wert ist, um so auch optimalerweise ganz neue Schadsoftware zu erkennen, empfehle ich dir eine der beiden folgenden Lösungen:
- Emsisoft (25% Rabatt für Trojaner Board Mitglieder)
- ESET Antivirus

Schutz vor unerwünschter Software
Adware ist zu einer Art permanenten Bedrohung geworden, weil immer mehr Programme versuchen, einem beim Installieren noch was anderes unterzujubeln - und wie schnell hat man da ein Häkchen übersehen?

Darum: pass auf, wenn du dir Software aus dem Internet herunterlädst! Viele Portale im Internet wie Chip, Softonic und Sourceforge versuchen häufig, dir Adware oder sonstige Downloader mit unerwünschten Programmen unterzujubeln. Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal, wie von FilePony.de.
Lese dir dazu auch folgenden Artikel durch: CHIP-Installer - was ist das? - Anleitungen

Selbst wenn du ein Programm von einer seriösen Quelle heruntergeladen hast, ist das keine Garantie, dass dein Programm nicht doch versucht, unerwünschte Änderungen an deinem Computer vorzunehmen. So versuchen immer mehr Programme, durch modifizierte Installationsroutinen unerwünschte Programme mit auf deinen PC zu schleusen. Das klappt leider auch häufig, weil viele Anwender nicht lesen, was auf dem Bildschirm steht und stattdessen schnell durchklicken.
Deshalb: Wenn du ein Programm installierst, wähle immer die benutzerdefinierte Installation und schaue, was du da gerade eigentlich alles mit einem Klick auf "Ok" oder "Weiter" abnickst - entferne entsprechend die Haken bei Dingen, die du nicht möchtest. Wer lesen kann, ist klar im Vorteil!

Benutze keine Optimizer, Cleaner oder sonstige SpeedUp Wunder, da diese Tools fast nie einen auch nur messbaren Performancegewinn bringen.
Du kannst jedoch regelmäßig auf deinem PC die Datenträgerbereinigung ausführen, so gewinnst du belegten Speicherplatz zurück.

Aktiviere in deiner Virenschutzlösungen den "Schutz vor potentiell unerwünschter Software", um dich bestmöglich zu schützen.

Guter Trick: Wenn du den kostenlosen Windows Defender benutzt (ab Windows 8), kannst du einen vergleichbaren Schutz durch einen kleinen Trick auch nutzen! Lese dazu folgenden Artikel um dich mehr zu informieren: Windows mit verstecktem Adware-Killer
Zum aktivieren dieses "Tricks" lade einfach nur diese Datei und führe sie aus: MpEnablePlus.reg

Tipps, um dein System sicherer zu machen
Halte immer deine Plug-ins und Software, insbesondere deinen Browser aktuell. Deinstalliere wenn möglich Java und den Adobe Flashplayer von deinem Computer. Neuerdings benötigt man sie fast nie mehr und stellen darum nur mehr eine unnötige Sicherheitslücke auf deinem Computer dar. Wenn du sie doch unbedingt benötigst, halte sie aber unbedingt aktuell.

Passwörter
Ändere regelmäßig deine Passwörter! Zudem musst du sichere Passwörter benutzen, das bedeutet: mindestens 8 Zeichen, Groß- und Kleinbuchstaben und Sonderzeichen.
Ganz wichtig: benutze pro Account ein anderes Passwort!
Tipp: Benutze einen Spruch, den du dir leicht merken kannst, als Hilfe für ein Passwort! Zum Beispiel: Der Himmel ist blau und wenn es regnet?-grau ==> DHibuwer?-grau

Unterstütze uns und empfiehl uns weiter

Du kennst Freunde und Bekannte, die Probleme mit ihrem Computer haben? Schick sie doch zu uns auf das Trojaner Board, wir helfen gerne

Wenn du uns mit einer Spende unterstützen möchtest, freuen wir uns sehr und dies kannst du hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html Herzlichen Dank dafür

Wir machen diese Tätigkeit hier freiwillig, darum freue ich mich besonders über ein kurzes Danke, wenn du mit mir zufrieden warest oder sonst über Verbesserungsvorschläge - das kannst du gerne hier machen

Besuche und like unsere Facebook-Seite!

Danke für deine Mitarbeit und alles Gute!

Bitte gib mir Bescheid, wenn du das alles gelesen hast und du keine weiteren Fragen mehr hast.

Ingo123 · 05.02.2017, 19:58

Vielen Dank für die professionelle Hilfe Rafael, du hast mir verdammt viel Ärger und wahrscheinlich ne Stange Geld erspart.
Ich werde das Forum auf jeden fall weiter empfehlen und wer weiß, vielleicht lass ich auch mal ne Spende da.

Nochmals vielen Dank,

Ingo

P.s.: Ich habe natürlich alles gelesen, ausgeführt und verstanden.

burningice · 05.02.2017, 20:02

passt, herzlichen Dank dafür!

05.02.2017, 20:02	#9
burningice /// Malwareteam	NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. passt, herzlichen Dank dafür! __________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook ..........

NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen.

Log-Analyse und Auswertung: NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen.