|
Log-Analyse und Auswertung: NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen.Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML. |
02.02.2017, 20:20 | #1 |
| NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. Guten Tag, Mein Name ist Ingo und ich poste heute das erste und hoffentlich letzte Mal auf diesem Forum. Ich habe mir auf mir auf meinem PC NetUtils2016 eingefangen und bekomme es, auch mit Programmen wie AdwCleaner, nicht von meiner Festplatte. Es wird zwar vom AdwCleaner erkannt, bleibt aber nach dem Neustart auf der Festplatte bestehen. Das Programm öffnet dauernd Werbung wann immer ich einen Link anklicke und fügt auch selbst in Texte auf bestimmte Schlagwörter, wie z.B. Windows, eigene Links ein, die einen auf Werbeseiten bringen. Ich hoffe mir kann geholfen werden und möchte mich schon im Voraus für Hilfe jeder Art bedanken. Grüße Ingo P.S.: Denn Addition Ordner vom FRST habe ich in zwei einzelne Ordner aufgeteilt, da er zu groß war, der zweite beginnt dabei genau wo der erste aufhört. Hier die Scans die ich bereits durchgeführt habe. Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017 durchgeführt von Jonathan (Administrator) auf DESKTOP-M3N38S4 (02-02-2017 19:20:44) Gestartet von C:\Users\Jonathan\Downloads Geladene Profile: Jonathan (Verfügbare Profile: Jonathan) Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe () C:\Windows\SysWOW64\PnkBstrA.exe () C:\Windows\SysWOW64\PnkBstrB.exe (Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe (Hi-Rez Studios) E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe (MY.COM B.V.) C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe (Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe (Valve Corporation) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe () C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\System32\InstallAgent.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8783616 2015-12-31] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-25] (Microsoft Corporation) HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [263112 2016-03-23] (Razer Inc.) HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2013-12-17] (AVM Berlin) HKLM-x32\...\RunOnce: [Tabamapelo] => C:\WINDOWS\SysWoW64\wscript.exe /E:vbscript /B "C:\Users\Jonathan\AppData\Roaming\Taperap" HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Steam] => E:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Discord] => C:\Users\Jonathan\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [MyComGames] => C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe [5014928 2017-02-02] (MY.COM B.V.) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\MountPoints2: {1c168c84-6096-11e6-858a-806e6f6e6963} - "G:\pushinst.exe" HKU\S-1-5-18\...\Run: [script_fcbd] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat [351 2016-11-10] () ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\fcbd.bat [2016-11-10] () GroupPolicy: Beschränkung <======= ACHTUNG ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{26d0c356-7015-4c04-a5b9-6da47962995c}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKU\S-1-5-21-3104372971-824348289-1990348516-1001\Software\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = DPF: HKLM-x32 {69069B2A-3E5E-4907-A43B-7B98812C4F7D} hxxps://api.koggames.com/auth/KOGHWActiveX.CAB StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge Session Restore: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> ist aktiviert. FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-30] () FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-30] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin HKU\S-1-5-21-3104372971-824348289-1990348516-1001: @my.com/Games -> C:\Users\Jonathan\AppData\Local\MyComGames\NPMyComDetector.dll [2017-02-02] (MY.COM B.V.) Chrome: ======= CHR Session Restore: Default -> ist aktiviert. CHR Profile: C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default [2017-02-02] CHR Extension: (Google Präsentationen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-11] CHR Extension: (Google Docs) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-11] CHR Extension: (Google Drive) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-11] CHR Extension: (YouTube) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-11] CHR Extension: (Google Tabellen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-11] CHR Extension: (Google Docs Offline) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-11] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-30] CHR Extension: (Google Mail) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-11] CHR Extension: (Chrome Media Router) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-11] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1456136 2017-01-10] () S3 DAUpdaterSvc; E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2017-01-31] (BioWare) S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395536 2016-12-21] (EasyAntiCheat Ltd) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation) U2 HiPatchService; E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert] R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-10-16] (Intel Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-07] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-07] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-12-05] () R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [107832 2016-12-05] () R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [376272 2016-03-23] (Razer Inc.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R3 fwlanusb6; C:\WINDOWS\system32\DRIVERS\fwlanusb6.sys [1327744 2014-03-27] (AVM GmbH) R3 iaLPSS2_UART2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [281896 2015-07-20] (Intel Corporation) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () U1 NetUtils2016; C:\WINDOWS\system32\drivers\NetUtils2016.sys [909944 2017-01-30] () <==== ACHTUNG R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_bf2d88c4ea749bb8\nvlddmkm.sys [14242880 2016-09-23] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-10-10] (Realtek ) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) U0 aswVmm; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-02 19:20 - 2017-02-02 19:20 - 00016159 _____ C:\Users\Jonathan\Downloads\FRST.txt 2017-02-02 19:20 - 2017-02-02 19:20 - 00000000 ____D C:\FRST 2017-02-02 19:19 - 2017-02-02 19:20 - 02420736 _____ (Farbar) C:\Users\Jonathan\Downloads\FRST64.exe 2017-02-02 18:33 - 2017-02-02 19:00 - 00000000 ____D C:\AdwCleaner 2017-02-02 18:33 - 2017-02-02 18:33 - 04015056 _____ C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe 2017-02-02 13:11 - 2017-02-02 13:11 - 00002145 _____ C:\Users\Jonathan\Desktop\My.com Game Center.lnk 2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games 2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\MyGames 2017-02-02 13:02 - 2017-02-02 19:00 - 00000000 ____D C:\Users\Jonathan\AppData\Local\MyComGames 2017-02-01 17:27 - 2017-02-01 17:27 - 00000000 ___HD C:\OneDriveTemp 2017-01-31 18:38 - 2017-01-31 18:38 - 00000000 ____D C:\Users\Jonathan\Documents\BioWare 2017-01-31 15:10 - 2017-01-31 15:57 - 908814467 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.2.zip 2017-01-31 14:48 - 2017-01-31 14:48 - 00000044 _____ C:\Users\Jonathan\AppData\Roaming\WB.CFG 2017-01-30 23:40 - 2017-01-30 23:42 - 00000221 _____ C:\Users\Jonathan\Desktop\Dragon Age Origins - Ultimate Edition.url 2017-01-30 23:25 - 2017-02-02 18:59 - 00625272 _____ C:\WINDOWS\system32\NetUtils2016.dll 2017-01-30 23:25 - 2017-01-30 23:25 - 00909944 _____ C:\WINDOWS\system32\Drivers\NetUtils2016.sys 2017-01-30 23:25 - 2017-01-30 23:25 - 00000000 ____D C:\WINDOWS\system32\sstmp 2017-01-30 21:35 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\AVAST Software 2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\Program Files\Common Files\AV 2017-01-30 21:33 - 2017-02-01 17:27 - 00000292 _____ C:\WINDOWS\Tasks\{17A7D685-C21F-7B30-9651-7282E03A2C11}.job 2017-01-30 21:33 - 2017-01-30 21:33 - 00018726 _____ C:\Users\Jonathan\AppData\Roaming\Taperap 2017-01-30 21:33 - 2017-01-30 21:33 - 00004256 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1485808408 2017-01-30 21:33 - 2017-01-30 21:33 - 00002832 _____ C:\WINDOWS\System32\Tasks\{17A7D685-C21F-7B30-9651-7282E03A2C11} 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Opera Software 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Opera Software 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950} 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Program Files\AVAST Software 2017-01-30 21:32 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Local\{DA3BEC67-FE93-80DF-930B-A537B76359AF} 2017-01-30 21:32 - 2017-01-30 21:32 - 00000000 ____D C:\ProgramData\AVAST Software 2017-01-30 21:24 - 2017-02-01 17:27 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-01-30 21:24 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Adobe 2017-01-30 21:24 - 2017-01-30 21:24 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-01-30 21:08 - 2017-01-30 21:08 - 00522074 _____ C:\Users\Jonathan\Downloads\GangsnWhores+-+2014-12-13.swf 2017-01-29 20:43 - 2017-01-29 20:43 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win 2017-01-29 20:42 - 2017-01-29 20:42 - 165992048 _____ C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win.zip 2017-01-29 20:42 - 2017-01-29 20:42 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win 2017-01-29 20:36 - 2017-01-29 20:39 - 77801774 _____ C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win.zip 2017-01-29 19:33 - 2017-01-29 19:40 - 00000000 ____D C:\Users\Jonathan\Documents\Joyimpact 2017-01-29 19:11 - 2017-01-29 19:11 - 00000222 _____ C:\Users\Jonathan\Desktop\Crush Online.url 2017-01-27 21:18 - 2017-01-27 21:18 - 00000000 ____D C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win 2017-01-27 21:17 - 2017-01-27 21:17 - 339321033 _____ C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win.zip 2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Mozilla 2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\.swt 2017-01-26 18:31 - 2017-01-26 18:31 - 00013311 _____ C:\Users\Jonathan\AppData\Localtransition_49097ac42189f504b1bf4241f359cbe6.ini 2017-01-26 18:31 - 2017-01-26 18:31 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ankama 2017-01-26 18:25 - 2017-01-26 18:25 - 00000222 _____ C:\Users\Jonathan\Desktop\WAKFU.url 2017-01-25 16:29 - 2017-01-25 17:09 - 930168991 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.0.zip 2017-01-25 15:36 - 2017-01-25 15:36 - 00000221 _____ C:\Users\Jonathan\Desktop\Warhammer 40,000 Dawn of War II.url 2017-01-25 13:19 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-25 13:19 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-22 05:20 - 2017-01-22 05:20 - 00000222 _____ C:\Users\Jonathan\Desktop\Valkyria Chronicles.url 2017-01-21 00:43 - 2017-01-21 00:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Zombie Army Trilogy 2017-01-20 22:00 - 2017-01-20 22:00 - 00000000 ____D C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win 2017-01-20 21:56 - 2017-01-20 22:00 - 170578526 _____ C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win.zip 2017-01-20 18:53 - 2017-01-20 18:53 - 00000000 ____D C:\Users\Jonathan\AppData\LocalLow\GameScience 2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslaunchershell 2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslauncher 2017-01-20 18:35 - 2017-01-20 18:35 - 00000222 _____ C:\Users\Jonathan\Desktop\Art of War Red Tides.url 2017-01-19 12:57 - 2017-01-19 12:57 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-01-19 12:57 - 2016-09-16 23:36 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-01-19 12:57 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-01-19 12:57 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-01-19 12:57 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-01-19 12:57 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-01-18 17:53 - 2017-01-18 17:53 - 00169681 _____ C:\Users\Jonathan\Downloads\FNV Sexual Innuendo 007 DEUTSCH Plus-58670-0-991.zip 2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4ng.dll 2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4.dll 2017-01-17 19:52 - 2015-06-17 00:39 - 00363520 _____ C:\Users\Jonathan\Desktop\nvse_editor_1_4.dll 2017-01-17 19:52 - 2015-05-27 21:07 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_loader.exe 2017-01-17 19:52 - 2015-05-27 21:04 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_steam_loader.dll 2017-01-17 17:04 - 2017-01-17 17:04 - 00000000 ____D C:\Users\Jonathan\Desktop\nvse_5_0_beta2 2017-01-17 17:03 - 2017-01-17 17:03 - 00693929 _____ C:\Users\Jonathan\Downloads\nvse_5_0_beta2 (1).7z 2017-01-17 13:29 - 2017-01-17 16:42 - 00000000 ____D C:\Users\Jonathan\Documents\Nexus Mod Manager 2017-01-17 13:29 - 2017-01-17 13:29 - 00000931 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk 2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2017-01-17 13:22 - 2017-01-17 13:22 - 00000221 _____ C:\Users\Jonathan\Desktop\Fallout New Vegas.url 2017-01-17 08:46 - 2016-07-18 07:55 - 13675584 ____N (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2017-01-17 08:46 - 2016-07-11 03:34 - 20417200 ____N (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2017-01-17 08:46 - 2016-07-11 03:34 - 14487768 ____N (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2017-01-17 08:46 - 2016-07-11 03:34 - 01939000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436881.dll 2017-01-17 08:46 - 2016-07-11 03:34 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436881.dll 2017-01-17 08:40 - 2017-01-17 08:45 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql (1).exe 2017-01-17 08:25 - 2017-01-17 08:30 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql.exe 2017-01-17 08:14 - 2016-09-23 23:20 - 00222664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2017-01-17 08:14 - 2016-09-23 23:20 - 00210376 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2017-01-17 06:06 - 2017-01-17 06:07 - 00000000 ____D C:\Users\Jonathan\AppData\Local\FalloutNV 2017-01-16 17:06 - 2017-01-17 13:29 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Black_Tree_Gaming 2017-01-16 17:04 - 2017-01-16 17:05 - 06441432 _____ (Black Tree Gaming ) C:\Users\Jonathan\Downloads\Nexus Mod Manager-0.63.12.exe 2017-01-16 16:42 - 2017-01-16 17:03 - 56484838 _____ C:\Users\Jonathan\Downloads\Required Files 1.1 UPDATED-57249-1-1.zip 2017-01-16 16:42 - 2017-01-16 17:03 - 255841686 _____ C:\Users\Jonathan\Downloads\Pornout Originals-57249-.zip 2017-01-15 06:17 - 2017-01-15 06:17 - 00000000 ____D C:\Users\Jonathan\Documents\Lara Croft and the Temple of Osiris 2017-01-14 19:08 - 2017-01-14 19:08 - 00000222 _____ C:\Users\Jonathan\Desktop\Lara Croft and the Temple of Osiris.url 2017-01-11 04:53 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-01-11 04:53 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-01-11 04:53 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-11 04:53 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-11 04:53 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-11 04:53 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-01-11 04:53 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-01-11 04:53 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-01-11 04:53 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-01-11 04:53 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-01-11 04:53 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-11 04:53 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-01-11 04:53 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-01-11 04:53 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-01-11 04:53 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-01-11 04:53 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-01-11 04:53 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-01-11 04:53 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-01-11 04:53 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-11 04:53 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-01-11 04:53 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-01-11 04:53 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-11 04:53 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-01-11 04:53 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-01-11 04:53 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-01-11 04:53 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-01-11 04:53 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-01-11 04:53 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-01-11 04:53 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-01-11 04:53 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-01-11 04:53 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-01-11 04:53 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-11 04:53 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-01-11 04:53 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-01-11 04:53 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-01-11 04:53 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-01-11 04:53 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-01-11 04:53 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-01-11 04:53 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-11 04:53 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-11 04:53 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-01-11 04:53 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-01-11 04:53 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-01-11 04:53 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-01-11 04:53 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-01-11 04:53 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-01-11 04:53 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-01-11 04:53 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-01-11 04:53 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-01-11 04:53 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-01-11 04:53 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-01-11 04:53 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-01-11 04:53 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-01-11 04:53 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-01-11 04:53 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-11 04:53 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-01-11 04:53 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-01-11 04:53 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-11 04:53 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-11 04:53 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-01-11 04:53 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-01-11 04:53 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-01-11 04:53 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-11 04:53 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-01-11 04:53 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-01-11 04:53 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-01-11 04:53 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-11 04:53 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-01-11 04:52 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-11 04:52 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-01-11 04:52 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-11 04:52 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-01-11 04:52 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-01-11 04:52 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-01-11 04:52 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-01-11 04:52 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-01-11 04:52 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-01-11 04:52 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-01-11 04:52 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-01-11 04:52 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-01-11 04:52 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-01-11 04:52 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-01-11 04:52 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-01-11 04:52 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-01-11 04:52 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-01-11 04:52 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-01-11 04:52 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-01-11 04:52 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-01-11 04:52 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-01-11 04:52 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-11 04:52 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-01-11 04:52 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-01-11 04:52 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-01-11 04:52 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-01-11 04:52 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-01-11 04:52 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-11 04:52 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-01-11 04:52 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-11 04:52 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-01-11 04:52 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-01-11 04:52 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-01-11 04:52 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-01-11 04:52 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-01-11 04:52 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-01-11 04:52 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-01-11 04:52 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-01-11 04:52 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-01-11 04:52 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-01-11 04:52 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-01-11 04:52 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-01-11 04:52 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-01-11 04:52 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-01-11 04:52 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-01-11 04:52 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-01-11 04:52 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-01-11 04:52 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-01-11 04:52 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-01-11 04:52 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-11 04:52 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-01-11 04:52 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-01-11 04:52 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-01-11 04:52 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-11 04:52 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-01-11 04:52 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-01-11 04:52 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-11 04:52 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-11 04:52 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-01-11 04:52 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-01-11 04:52 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-01-11 04:52 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-11 04:52 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-01-11 04:52 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-01-11 04:52 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-01-11 04:52 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-01-11 04:52 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-01-11 04:52 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-01-11 04:52 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-11 04:52 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2017-01-11 04:52 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-01-11 04:52 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-01-11 04:52 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-01-11 04:52 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-01-11 04:52 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-01-11 04:52 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-01-11 04:52 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-01-11 04:52 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-01-11 04:52 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-11 04:52 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-10 13:45 - 2017-01-10 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-01-10 04:17 - 2017-01-10 04:17 - 00000222 _____ C:\Users\Jonathan\Desktop\Day of Infamy.url 2017-01-05 22:35 - 2017-01-05 22:35 - 00000000 ____D C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all 2017-01-05 22:33 - 2017-01-05 22:33 - 400404903 _____ C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all.zip ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-02 19:18 - 2016-08-12 12:28 - 00000000 ____D C:\Users\Jonathan\AppData\Local\CrashDumps 2017-02-02 19:06 - 2016-08-12 11:22 - 02606462 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-02 19:06 - 2016-07-16 23:51 - 01108300 _____ C:\WINDOWS\system32\perfh007.dat 2017-02-02 19:06 - 2016-07-16 23:51 - 00264632 _____ C:\WINDOWS\system32\perfc007.dat 2017-02-02 18:59 - 2016-09-25 22:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-02-02 18:59 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA 2017-02-02 18:59 - 2016-08-12 11:27 - 00000000 ___RD C:\Users\Jonathan\OneDrive 2017-02-02 18:58 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-02-02 18:49 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-02 18:49 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-02 18:35 - 2016-09-25 22:06 - 00000000 ____D C:\Users\Jonathan 2017-02-02 18:23 - 2016-09-25 22:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-01-31 16:40 - 2016-08-19 11:52 - 00000000 ____D C:\Users\Jonathan\Documents\Mount&Blade Warband Savegames 2017-01-31 00:08 - 2016-09-24 14:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\vlc 2017-01-30 21:34 - 2016-10-15 20:14 - 00000000 ____D C:\Program Files (x86)\OpenDungeons 2017-01-30 21:34 - 2016-08-17 11:11 - 00000000 ____D C:\Program Files (x86)\Origin Games 2017-01-30 21:32 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\GroupPolicy 2017-01-30 21:32 - 2015-10-30 08:24 - 00000000 ___HD C:\WINDOWS\system32\GroupPolicy 2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-01-30 21:19 - 2016-08-12 11:26 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Packages 2017-01-29 20:43 - 2016-08-17 10:32 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\RenPy 2017-01-25 20:38 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-01-25 17:30 - 2016-08-16 22:21 - 00000000 ____D C:\Users\Jonathan\Documents\My Games 2017-01-25 13:23 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-22 06:24 - 2016-09-24 14:34 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\dvdcss 2017-01-20 08:42 - 2016-08-16 21:45 - 00000000 ____D C:\ProgramData\Origin 2017-01-19 15:43 - 2016-12-13 15:47 - 00003296 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-19 15:43 - 2016-08-12 11:27 - 00002437 _____ C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-19 13:47 - 2016-08-12 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-01-19 12:57 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-01-19 12:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-01-18 10:46 - 2016-09-14 15:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ubisoft Game Launcher 2017-01-14 14:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-01-12 13:07 - 2016-08-13 10:08 - 00000000 ____D C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics 2017-01-11 18:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-11 12:57 - 2016-08-12 11:26 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-01-11 12:56 - 2016-09-25 22:05 - 00224392 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-11 07:46 - 2016-08-12 12:34 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-11 07:45 - 2016-08-12 12:34 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-01-10 16:00 - 2016-08-16 22:05 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Origin ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-01-30 21:33 - 2017-01-30 21:33 - 0018726 _____ () C:\Users\Jonathan\AppData\Roaming\Taperap 2017-01-31 14:48 - 2017-01-31 14:48 - 0000044 _____ () C:\Users\Jonathan\AppData\Roaming\WB.CFG 2016-09-25 22:06 - 2016-09-25 22:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2016-08-21 05:50 - 2016-08-21 05:50 - 0000016 _____ () C:\ProgramData\mntemp Dateien, die verschoben oder gelöscht werden sollten: ==================== C:\Windows\Tasks\{17A7D685-C21F-7B30-9651-7282E03A2C11}.job Einige Dateien in TEMP: ==================== 2016-11-06 17:43 - 2003-08-13 19:05 - 0040960 _____ () C:\Users\Jonathan\AppData\Local\Temp\comver.dll 2016-10-18 20:29 - 2016-09-15 15:41 - 0037376 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe 2016-10-18 20:29 - 2016-09-15 15:14 - 0020992 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiRezLauncherControls.dll 2017-01-17 08:14 - 2016-09-16 23:36 - 0860960 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvSCPAPI64.dll 2017-01-17 08:46 - 2016-09-16 23:36 - 0346680 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-01-29 02:25 ==================== Ende von FRST.txt ============================ |
03.02.2017, 04:42 | #2 |
/// Malwareteam | NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen.Mein Name ist Rafael und ich werde dir bei der Bereinigung helfen. Damit ich dir optimal helfen kann, halte dich bitte an folgende Regeln:
Schritt 0 Lade Dir bitte von hier Revo Uninstaller (alternativ portable Revo Uninstaller) herunter.
Hinweis: Falls bei der Deinstallation zu Beginn ein Fehler auftritt oder du den aufgerufenen Uninstaller nicht bedienen kannst, breche dieses Setup einfach ab und fahre mit der Entfernung durch Revo wie oben beschrieben fort. Schritt 1 Lade dir folgendes Programm herunter und installiere es: Malwarebytes Anti-Malware
Schritt 2 Downloade Dir bitte AdwCleaner auf deinen Desktop.
Schritt 3 Bitte starte wieder FRST, setze den Haken bei Addition und drücke auf Untersuchen. Poste bitte wieder die beiden Textdateien, die so entstehen. Bitte poste in deiner nächsten Antwort also:
Bitte poste dein Ergebnis zwischen Code-Tags Wenn ein Log zu lange ist, teile ihn bitte auf mehrere Antworten. Code-Tags? Drücke einfach die # in Antwortfenster und füge den Log dazwischen ein
__________________ |
03.02.2017, 16:34 | #3 |
| NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. Vielen Dank für die schnelle Antwort,
__________________ich hätte gar nicht erwartet, dass mir schon am nächsten Tag geholfen wird. Die Schritte konnte ich ohne Probleme ausführen (waren ja auch so detailliert geschildert, dass selbst ich das hinkriege). Hier die mbam Datei: Code:
ATTFilter Malwarebytes www.malwarebytes.com -Protokolldetails- Scan-Datum: 03.02.17 Scan-Zeit: 15:59 Protokolldatei: mbam.txt Administrator: Ja -Softwaredaten- Version: 3.0.6.1469 Komponentenversion: 1.0.50 Version des Aktualisierungspakets: 1.0.1064 Lizenz: Testversion -Systemdaten- Betriebssystem: Windows 10 CPU: x64 Dateisystem: NTFS Benutzer: DESKTOP-M3N38S4\Jonathan -Scan-Übersicht- Scan-Typ: Bedrohungs-Scan Ergebnis: Abgeschlossen Gescannte Objekte: 293016 Abgelaufene Zeit: 2 Min., 19 Sek. -Scan-Optionen- Speicher: Aktiviert Start: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Aktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert -Scan-Details- Prozess: 0 (keine bösartigen Elemente erkannt) Modul: 0 (keine bösartigen Elemente erkannt) Registrierungsschlüssel: 1 PUP.Optional.StartGo123, HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\NetUtils2016, In Quarantäne, [862], [318109],1.0.1064 Registrierungswert: 0 (keine bösartigen Elemente erkannt) Registrierungsdaten: 0 (keine bösartigen Elemente erkannt) Daten-Stream: 0 (keine bösartigen Elemente erkannt) Ordner: 1 PUP.Optional.WinYahoo.Generic, C:\PROGRAMDATA\{B379761A-393B-FCDC-BFFD-629E25BFE950}, In Quarantäne, [2048], [341897],1.0.1064 Datei: 8 PUP.Optional.StartGo123, C:\WINDOWS\System32\drivers\NetUtils2016.sys, In Quarantäne, [863], [325509],0.0.0 PUP.Optional.WinYahoo.Generic, C:\PROGRAMDATA\{B379761A-393B-FCDC-BFFD-629E25BFE950}\NESE.TXT, In Quarantäne, [2048], [341897],1.0.1064 PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\aowLC, In Quarantäne, [2048], [341897],1.0.1064 PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\hdat1, In Quarantäne, [2048], [341897],1.0.1064 PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\hdat2, In Quarantäne, [2048], [341897],1.0.1064 PUP.Optional.WinYahoo.Generic, C:\ProgramData\{B379761A-393B-FCDC-BFFD-629E25BFE950}\tadori, In Quarantäne, [2048], [341897],1.0.1064 PUP.Optional.StartGo123, C:\WINDOWS\SYSTEM32\NETUTILS2016.DLL, In Quarantäne, [862], [318108],1.0.1064 PUP.Optional.StartGo123, C:\WINDOWS\SYSTEM32\DRIVERS\NETUTILS2016.SYS, In Quarantäne, [862], [318109],1.0.1064 Physischer Sektor: 0 (keine bösartigen Elemente erkannt) (end) Code:
ATTFilter # AdwCleaner v6.043 - Bericht erstellt am 03/02/2017 um 16:09:36 # Aktualisiert am 27/01/2017 von Malwarebytes # Datenbank : 2017-02-03.1 [Server] # Betriebssystem : Windows 10 Home (X64) # Benutzername : Jonathan - DESKTOP-M3N38S4 # Gestartet von : C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe # Modus: Löschen # Unterstützung : https://www.malwarebytes.com/support ***** [ Dienste ] ***** ***** [ Ordner ] ***** ***** [ Dateien ] ***** ***** [ DLL ] ***** ***** [ WMI ] ***** ***** [ Verknüpfungen ] ***** ***** [ Aufgabenplanung ] ***** ***** [ Registrierungsdatenbank ] ***** [-] Schlüssel gelöscht: [x64] HKLM\SOFTWARE\HDWallpaper [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ad.coupontime00.coupontime.co [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\coupontime.co [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.coupontime00.coupontime.co [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ad.coupontime00.coupontime.co [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\coupontime.co [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com [-] Schlüssel gelöscht: HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.coupontime00.coupontime.co [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\ad.coupontime00.coupontime.co [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\cmptch.com [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\coupontime.co [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.cmptch.com [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\EdpDomStorage\static.coupontime00.coupontime.co [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\ad.coupontime00.coupontime.co [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\cmptch.com [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\coupontime.co [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.cmptch.com [#] Schlüssel mit Neustart gelöscht: [x64] HKCU\Software\Classes\Local Settings\Software\Microsoft\Windows\CurrentVersion\AppContainer\Storage\microsoft.microsoftedge_8wekyb3d8bbwe\Children\001\Internet Explorer\DOMStorage\static.coupontime00.coupontime.co ***** [ Browser ] ***** ************************* :: "Tracing" Schlüssel gelöscht :: Winsock Einstellungen zurückgesetzt :: "Prefetch" Dateien gelöscht :: Proxy Einstellungen zurückgesetzt :: Internet Explorer Richtlinien gelöscht :: Chrome Richtlinien gelöscht ************************* C:\AdwCleaner\AdwCleaner[C0].txt - [15963 Bytes] - [02/02/2017 18:35:05] C:\AdwCleaner\AdwCleaner[C2].txt - [5180 Bytes] - [02/02/2017 18:40:15] C:\AdwCleaner\AdwCleaner[C3].txt - [1566 Bytes] - [02/02/2017 18:42:22] C:\AdwCleaner\AdwCleaner[C4].txt - [1617 Bytes] - [02/02/2017 18:56:29] C:\AdwCleaner\AdwCleaner[C5].txt - [5654 Bytes] - [02/02/2017 18:58:45] C:\AdwCleaner\AdwCleaner[C6].txt - [6143 Bytes] - [03/02/2017 16:09:36] C:\AdwCleaner\AdwCleaner[S0].txt - [15294 Bytes] - [02/02/2017 18:34:22] C:\AdwCleaner\AdwCleaner[S1].txt - [5113 Bytes] - [02/02/2017 18:40:08] C:\AdwCleaner\AdwCleaner[S2].txt - [1704 Bytes] - [02/02/2017 18:42:03] C:\AdwCleaner\AdwCleaner[S3].txt - [1873 Bytes] - [02/02/2017 18:44:44] C:\AdwCleaner\AdwCleaner[S4].txt - [5544 Bytes] - [02/02/2017 18:58:30] C:\AdwCleaner\AdwCleaner[S5].txt - [2149 Bytes] - [02/02/2017 19:00:39] C:\AdwCleaner\AdwCleaner[S6].txt - [6591 Bytes] - [03/02/2017 16:09:14] ########## EOF - C:\AdwCleaner\AdwCleaner[C6].txt - [6728 Bytes] ########## Code:
ATTFilter Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 29-01-2017 durchgeführt von Jonathan (Administrator) auf DESKTOP-M3N38S4 (03-02-2017 16:14:42) Gestartet von C:\Users\Jonathan\Downloads Geladene Profile: Jonathan (Verfügbare Profile: Jonathan) Platform: Windows 10 Home Version 1607 (X64) Sprache: Deutsch (Deutschland) Internet Explorer Version 11 (Standard-Browser: Chrome) Start-Modus: Normal Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Prozesse (Nicht auf der Ausnahmeliste) ================= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe () C:\Windows\SysWOW64\PnkBstrB.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe (Electronic Arts) C:\Program Files (x86)\Origin\OriginWebHelperService.exe () C:\Windows\SysWOW64\PnkBstrA.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MsMpEng.exe (Hi-Rez Studios) E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (Microsoft Corporation) C:\Program Files\Windows Defender\NisSrv.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler.exe (Google Inc.) C:\Program Files (x86)\Google\Update\1.3.32.7\GoogleCrashHandler64.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersServer.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe (Microsoft Corporation) C:\Windows\System32\browser_broker.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\System32\smartscreen.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Adobe Systems Incorporated) C:\Windows\System32\Macromed\Flash\FlashUtil_ActiveX.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MpCmdRun.exe (Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe (Microsoft Corporation) C:\Program Files\Windows Defender\MSASCuiL.exe (Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe (Valve Corporation) E:\Program Files (x86)\Steam\Steam.exe (MY.COM B.V.) C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe (Razer Inc.) C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe (AVM Berlin) C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe (Samsung Electronics.) C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe (Valve Corporation) E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe (Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe (Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\PlacesServer.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe (Microsoft Corporation) C:\Windows\System32\wbem\WMIADAP.exe ==================== Registry (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.) HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [8783616 2015-12-31] (Realtek Semiconductor) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2397120 2016-06-14] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => "C:\WINDOWS\system32\rundll32.exe" C:\WINDOWS\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [WindowsDefender] => C:\Program Files\Windows Defender\MSASCuiL.exe [631808 2016-09-25] (Microsoft Corporation) HKLM\...\Run: [Malwarebytes TrayApp] => C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\mbamtray.exe [2780112 2017-01-20] (Malwarebytes) HKLM-x32\...\Run: [RzWizard] => C:\Program Files (x86)\Razer\RzWizard\RzWizard.exe [263112 2016-03-23] (Razer Inc.) HKLM-x32\...\Run: [AVMWlanClient] => C:\Program Files (x86)\avmwlanstick\FRITZWLANMini.exe [933888 2013-12-17] (AVM Berlin) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Steam] => E:\Program Files (x86)\Steam\steam.exe [2881824 2017-01-19] (Valve Corporation) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [Discord] => C:\Users\Jonathan\AppData\Local\Discord\app-0.0.296\Discord.exe [62471352 2016-08-24] (Hammer & Chisel, Inc.) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Run: [MyComGames] => C:\Users\Jonathan\AppData\Local\MyComGames\MyComGames.exe [5014928 2017-02-02] (MY.COM B.V.) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\MountPoints2: {1c168c84-6096-11e6-858a-806e6f6e6963} - "G:\pushinst.exe" HKU\S-1-5-18\...\Run: [script_fcbd] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\fcbd.bat [351 2016-11-10] () ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => -> Keine Datei Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\fcbd.bat [2016-11-10] () ==================== Internet (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.) Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt Tcpip\Parameters: [DhcpNameServer] 192.168.178.1 Tcpip\..\Interfaces\{26d0c356-7015-4c04-a5b9-6da47962995c}: [DhcpNameServer] 192.168.178.1 Internet Explorer: ================== HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = HKU\S-1-5-21-3104372971-824348289-1990348516-1001\Software\Microsoft\Internet Explorer\Main,Start Page = SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = SearchScopes: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = DPF: HKLM-x32 {69069B2A-3E5E-4907-A43B-7B98812C4F7D} hxxps://api.koggames.com/auth/KOGHWActiveX.CAB StartMenuInternet: IEXPLORE.EXE - iexplore.exe Edge: ====== Edge Session Restore: HKU\S-1-5-21-3104372971-824348289-1990348516-1001 -> ist aktiviert. FireFox: ======== FF Plugin: @adobe.com/FlashPlayer -> C:\WINDOWS\system32\Macromed\Flash\NPSWF64_24_0_0_194.dll [2017-01-30] () FF Plugin: @videolan.org/vlc,version=2.2.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2016-06-01] (VideoLAN) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\WINDOWS\SysWoW64\Macromed\Flash\NPSWF32_24_0_0_194.dll [2017-01-30] () FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.68 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2015-08-24] (Intel Corporation) FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2015-08-24] (Intel Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-09-16] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-09-16] (NVIDIA Corporation) FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.32.7\npGoogleUpdate3.dll [2016-12-16] (Google Inc.) FF Plugin HKU\S-1-5-21-3104372971-824348289-1990348516-1001: @my.com/Games -> C:\Users\Jonathan\AppData\Local\MyComGames\NPMyComDetector.dll [2017-02-02] (MY.COM B.V.) Chrome: ======= CHR Session Restore: Default -> ist aktiviert. CHR Profile: C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default [2017-02-03] CHR Extension: (Google Präsentationen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-12-11] CHR Extension: (Google Docs) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2016-12-11] CHR Extension: (Google Drive) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-12-11] CHR Extension: (YouTube) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-12-11] CHR Extension: (Google Tabellen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-12-11] CHR Extension: (Google Docs Offline) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-12-11] CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2017-01-30] CHR Extension: (Google Mail) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-12-11] CHR Extension: (Chrome Media Router) - C:\Users\Jonathan\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-12-11] ==================== Dienste (Nicht auf der Ausnahmeliste) ==================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1456136 2017-01-10] () S3 DAUpdaterSvc; E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe [25832 2017-01-31] (BioWare) S3 EasyAntiCheat; C:\WINDOWS\SysWOW64\EasyAntiCheat.exe [395536 2016-12-21] (EasyAntiCheat Ltd) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1163712 2016-06-14] (NVIDIA Corporation) U2 HiPatchService; E:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9728 2016-12-09] (Hi-Rez Studios) [Datei ist nicht signiert] S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [881152 2015-05-22] (Intel(R) Corporation) S3 Intel(R) Security Assist; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isa.exe [335872 2015-05-19] (Intel Corporation) [Datei ist nicht signiert] R2 isaHelperSvc; C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe [7680 2015-05-19] () [Datei ist nicht signiert] R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [207648 2015-10-16] (Intel Corporation) R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [4355024 2017-01-20] (Malwarebytes) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1879488 2016-06-14] (NVIDIA Corporation) R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [3632576 2016-06-14] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2521024 2016-06-14] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2119688 2016-12-07] (Electronic Arts) R2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2180624 2016-12-07] (Electronic Arts) R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [66872 2016-12-05] () R2 PnkBstrB; C:\WINDOWS\SysWOW64\PnkBstrB.exe [107832 2016-12-05] () R2 RzWizardService; C:\Program Files (x86)\Razer\RzWizard\RzWizardService.exe [376272 2016-03-23] (Razer Inc.) R3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [347328 2016-07-16] (Microsoft Corporation) R2 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [103720 2016-07-16] (Microsoft Corporation) ===================== Treiber (Nicht auf der Ausnahmeliste) ====================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [77416 2017-01-20] () R3 fwlanusb6; C:\WINDOWS\system32\DRIVERS\fwlanusb6.sys [1327744 2014-03-27] (AVM GmbH) R3 iaLPSS2_UART2; C:\WINDOWS\System32\drivers\iaLPSS2_UART2.sys [281896 2015-07-20] (Intel Corporation) R2 MBAMChameleon; C:\WINDOWS\system32\drivers\MBAMChameleon.sys [176584 2017-02-03] (Malwarebytes) R3 MBAMFarflt; C:\WINDOWS\system32\drivers\farflt.sys [110536 2017-02-03] (Malwarebytes) R3 MBAMProtection; C:\WINDOWS\system32\drivers\mbam.sys [43968 2017-02-03] (Malwarebytes) R0 MBAMSwissArmy; C:\WINDOWS\System32\drivers\MBAMSwissArmy.sys [251848 2017-02-03] (Malwarebytes) R3 MBAMWebProtection; C:\WINDOWS\system32\drivers\mwac.sys [91584 2017-02-03] (Malwarebytes) S3 NetAdapterCx; C:\WINDOWS\System32\drivers\NetAdapterCx.sys [90624 2016-07-16] () R3 nvlddmkm; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispiwu.inf_amd64_bf2d88c4ea749bb8\nvlddmkm.sys [14242880 2016-09-23] (NVIDIA Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [26560 2016-06-14] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\WINDOWS\system32\drivers\nvvad64v.sys [56384 2016-04-14] (NVIDIA Corporation) R3 rt640x64; C:\WINDOWS\System32\drivers\rt640x64.sys [935168 2015-10-10] (Realtek ) S0 WdBoot; C:\WINDOWS\System32\drivers\WdBoot.sys [44056 2016-07-16] (Microsoft Corporation) R0 WdFilter; C:\WINDOWS\System32\drivers\WdFilter.sys [290144 2016-07-16] (Microsoft Corporation) R3 WdNisDrv; C:\WINDOWS\System32\Drivers\WdNisDrv.sys [123232 2016-07-16] (Microsoft Corporation) U0 aswVmm; kein ImagePath ==================== NetSvcs (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Ein Monat: Erstellte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-03 16:12 - 2017-02-03 16:12 - 00006854 _____ C:\Users\Jonathan\Desktop\AdwCleaner[C6].txt 2017-02-03 16:09 - 2017-02-03 16:09 - 00000008 __RSH C:\ProgramData\ntuser.pol 2017-02-03 16:06 - 2017-02-03 16:06 - 00002384 _____ C:\Users\Jonathan\Desktop\mbam.txt 2017-02-03 16:03 - 2017-02-03 16:03 - 00000000 ___HD C:\OneDriveTemp 2017-02-03 15:58 - 2017-02-03 16:10 - 00110536 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys 2017-02-03 15:58 - 2017-02-03 16:10 - 00091584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys 2017-02-03 15:58 - 2017-02-03 16:10 - 00043968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys 2017-02-03 15:58 - 2017-02-03 15:58 - 00176584 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMChameleon.sys 2017-02-03 15:57 - 2017-02-03 16:10 - 00251848 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MBAMSwissArmy.sys 2017-02-03 15:57 - 2017-02-03 15:57 - 00001912 _____ C:\Users\Public\Desktop\Malwarebytes.lnk 2017-02-03 15:57 - 2017-02-03 15:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes 2017-02-03 15:57 - 2017-02-03 15:57 - 00000000 ____D C:\ProgramData\Malwarebytes 2017-02-03 15:57 - 2017-02-03 15:57 - 00000000 ____D C:\Program Files\Malwarebytes 2017-02-03 15:57 - 2017-01-20 07:47 - 00077416 _____ C:\WINDOWS\system32\Drivers\mbae64.sys 2017-02-03 15:56 - 2017-02-03 15:57 - 55566792 _____ (Malwarebytes ) C:\Users\Jonathan\Downloads\mb3-setup-consumer-3.0.6.1469.exe 2017-02-03 15:46 - 2017-02-03 15:46 - 00001079 _____ C:\Users\Public\Desktop\Revo Uninstaller.lnk 2017-02-03 15:46 - 2017-02-03 15:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller 2017-02-03 15:46 - 2017-02-03 15:46 - 00000000 ____D C:\Program Files\VS Revo Group 2017-02-03 15:44 - 2017-02-03 15:45 - 07097928 _____ (VS Revo Group ) C:\Users\Jonathan\Downloads\revo202setup.exe 2017-02-02 19:21 - 2017-02-02 19:21 - 00103369 _____ C:\Users\Jonathan\Downloads\Addition.txt 2017-02-02 19:20 - 2017-02-03 16:14 - 00016572 _____ C:\Users\Jonathan\Downloads\FRST.txt 2017-02-02 19:20 - 2017-02-03 16:14 - 00000000 ____D C:\FRST 2017-02-02 19:19 - 2017-02-02 19:20 - 02420736 _____ (Farbar) C:\Users\Jonathan\Downloads\FRST64.exe 2017-02-02 18:33 - 2017-02-03 16:09 - 00000000 ____D C:\AdwCleaner 2017-02-02 18:33 - 2017-02-02 18:33 - 04015056 _____ C:\Users\Jonathan\Downloads\adwcleaner_6.043.exe 2017-02-02 13:11 - 2017-02-02 13:11 - 00002145 _____ C:\Users\Jonathan\Desktop\My.com Game Center.lnk 2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\My.com Games 2017-02-02 13:11 - 2017-02-02 13:11 - 00000000 ____D C:\MyGames 2017-02-02 13:02 - 2017-02-03 16:12 - 00000000 ____D C:\Users\Jonathan\AppData\Local\MyComGames 2017-01-31 18:38 - 2017-01-31 18:38 - 00000000 ____D C:\Users\Jonathan\Documents\BioWare 2017-01-31 15:10 - 2017-01-31 15:57 - 908814467 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.2.zip 2017-01-31 14:48 - 2017-01-31 14:48 - 00000044 _____ C:\Users\Jonathan\AppData\Roaming\WB.CFG 2017-01-30 23:40 - 2017-01-30 23:42 - 00000221 _____ C:\Users\Jonathan\Desktop\Dragon Age Origins - Ultimate Edition.url 2017-01-30 23:25 - 2017-01-30 23:25 - 00000000 ____D C:\WINDOWS\system32\sstmp 2017-01-30 21:35 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\AVAST Software 2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\WINDOWS\System32\Tasks\AVAST Software 2017-01-30 21:34 - 2017-01-30 21:34 - 00000000 ____D C:\Program Files\Common Files\AV 2017-01-30 21:33 - 2017-01-30 21:33 - 00004256 _____ C:\WINDOWS\System32\Tasks\Opera scheduled Autoupdate 1485808408 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Opera Software 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Opera Software 2017-01-30 21:33 - 2017-01-30 21:33 - 00000000 ____D C:\Program Files\AVAST Software 2017-01-30 21:32 - 2017-01-30 21:32 - 00000000 ____D C:\ProgramData\AVAST Software 2017-01-30 21:24 - 2017-02-01 17:27 - 00000884 _____ C:\WINDOWS\Tasks\Adobe Flash Player Updater.job 2017-01-30 21:24 - 2017-01-30 21:35 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Adobe 2017-01-30 21:24 - 2017-01-30 21:24 - 00003860 _____ C:\WINDOWS\System32\Tasks\Adobe Flash Player Updater 2017-01-30 21:08 - 2017-01-30 21:08 - 00522074 _____ C:\Users\Jonathan\Downloads\GangsnWhores+-+2014-12-13.swf 2017-01-29 20:43 - 2017-01-29 20:43 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win 2017-01-29 20:42 - 2017-01-29 20:42 - 165992048 _____ C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win.zip 2017-01-29 20:42 - 2017-01-29 20:42 - 00000000 ____D C:\Users\Jonathan\Downloads\BHB-ReMastered-3.00-win 2017-01-29 20:36 - 2017-01-29 20:39 - 77801774 _____ C:\Users\Jonathan\Downloads\BHB-Chapter-IV_4.01-win.zip 2017-01-29 19:33 - 2017-01-29 19:40 - 00000000 ____D C:\Users\Jonathan\Documents\Joyimpact 2017-01-29 19:11 - 2017-01-29 19:11 - 00000222 _____ C:\Users\Jonathan\Desktop\Crush Online.url 2017-01-27 21:18 - 2017-01-27 21:18 - 00000000 ____D C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win 2017-01-27 21:17 - 2017-01-27 21:17 - 339321033 _____ C:\Users\Jonathan\Downloads\Magic_Shop_1.03-win.zip 2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Mozilla 2017-01-26 20:57 - 2017-01-26 20:57 - 00000000 ____D C:\Users\Jonathan\.swt 2017-01-26 18:31 - 2017-01-26 18:31 - 00013311 _____ C:\Users\Jonathan\AppData\Localtransition_49097ac42189f504b1bf4241f359cbe6.ini 2017-01-26 18:31 - 2017-01-26 18:31 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ankama 2017-01-26 18:25 - 2017-01-26 18:25 - 00000222 _____ C:\Users\Jonathan\Desktop\WAKFU.url 2017-01-25 16:29 - 2017-01-25 17:09 - 930168991 _____ C:\Users\Jonathan\Downloads\The_Parabellum_v1.0.zip 2017-01-25 15:36 - 2017-01-25 15:36 - 00000221 _____ C:\Users\Jonathan\Desktop\Warhammer 40,000 Dawn of War II.url 2017-01-25 13:19 - 2016-12-21 08:08 - 00142848 _____ (Microsoft Corporation) C:\WINDOWS\system32\poqexec.exe 2017-01-25 13:19 - 2016-12-21 05:44 - 00120320 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\poqexec.exe 2017-01-22 05:20 - 2017-01-22 05:20 - 00000222 _____ C:\Users\Jonathan\Desktop\Valkyria Chronicles.url 2017-01-21 00:43 - 2017-01-21 00:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Zombie Army Trilogy 2017-01-20 22:00 - 2017-01-20 22:00 - 00000000 ____D C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win 2017-01-20 21:56 - 2017-01-20 22:00 - 170578526 _____ C:\Users\Jonathan\Downloads\Star_Channel_34-1.02-win.zip 2017-01-20 18:53 - 2017-01-20 18:53 - 00000000 ____D C:\Users\Jonathan\AppData\LocalLow\GameScience 2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslaunchershell 2017-01-20 18:50 - 2017-01-20 18:50 - 00000000 ____D C:\Users\Jonathan\AppData\Local\gslauncher 2017-01-20 18:35 - 2017-01-20 18:35 - 00000222 _____ C:\Users\Jonathan\Desktop\Art of War Red Tides.url 2017-01-19 12:57 - 2017-01-19 12:57 - 00000000 ____D C:\Program Files (x86)\VulkanRT 2017-01-19 12:57 - 2016-09-16 23:36 - 00134712 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvStreaming.exe 2017-01-19 12:57 - 2016-09-09 19:25 - 00269600 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll 2017-01-19 12:57 - 2016-09-09 19:25 - 00261920 _____ C:\WINDOWS\system32\vulkan-1.dll 2017-01-19 12:57 - 2016-09-09 19:25 - 00110880 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe 2017-01-19 12:57 - 2016-09-09 19:24 - 00125216 _____ C:\WINDOWS\system32\vulkaninfo.exe 2017-01-18 17:53 - 2017-01-18 17:53 - 00169681 _____ C:\Users\Jonathan\Downloads\FNV Sexual Innuendo 007 DEUTSCH Plus-58670-0-991.zip 2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4ng.dll 2017-01-17 19:52 - 2015-06-20 17:37 - 00929280 _____ C:\Users\Jonathan\Desktop\nvse_1_4.dll 2017-01-17 19:52 - 2015-06-17 00:39 - 00363520 _____ C:\Users\Jonathan\Desktop\nvse_editor_1_4.dll 2017-01-17 19:52 - 2015-05-27 21:07 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_loader.exe 2017-01-17 19:52 - 2015-05-27 21:04 - 00123904 _____ C:\Users\Jonathan\Desktop\nvse_steam_loader.dll 2017-01-17 17:04 - 2017-01-17 17:04 - 00000000 ____D C:\Users\Jonathan\Desktop\nvse_5_0_beta2 2017-01-17 17:03 - 2017-01-17 17:03 - 00693929 _____ C:\Users\Jonathan\Downloads\nvse_5_0_beta2 (1).7z 2017-01-17 13:29 - 2017-01-17 16:42 - 00000000 ____D C:\Users\Jonathan\Documents\Nexus Mod Manager 2017-01-17 13:29 - 2017-01-17 13:29 - 00000931 _____ C:\Users\Public\Desktop\Nexus Mod Manager.lnk 2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Nexus Mod Manager 2017-01-17 13:29 - 2017-01-17 13:29 - 00000000 ____D C:\Program Files\Nexus Mod Manager 2017-01-17 13:22 - 2017-01-17 13:22 - 00000221 _____ C:\Users\Jonathan\Desktop\Fallout New Vegas.url 2017-01-17 08:46 - 2016-07-18 07:55 - 13675584 ____N (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvlddmkm.sys 2017-01-17 08:46 - 2016-07-11 03:34 - 20417200 ____N (NVIDIA Corporation) C:\WINDOWS\system32\nvwgf2umx.dll 2017-01-17 08:46 - 2016-07-11 03:34 - 14487768 ____N (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvd3dum.dll 2017-01-17 08:46 - 2016-07-11 03:34 - 01939000 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispco6436881.dll 2017-01-17 08:46 - 2016-07-11 03:34 - 01571776 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdispgenco6436881.dll 2017-01-17 08:40 - 2017-01-17 08:45 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql (1).exe 2017-01-17 08:25 - 2017-01-17 08:30 - 360576160 _____ (NVIDIA Corporation) C:\Users\Jonathan\Downloads\368.81-desktop-win10-64bit-international-whql.exe 2017-01-17 08:14 - 2016-09-23 23:20 - 00222664 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll 2017-01-17 08:14 - 2016-09-23 23:20 - 00210376 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll 2017-01-17 06:06 - 2017-01-17 06:07 - 00000000 ____D C:\Users\Jonathan\AppData\Local\FalloutNV 2017-01-16 17:06 - 2017-01-17 13:29 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Black_Tree_Gaming 2017-01-16 17:04 - 2017-01-16 17:05 - 06441432 _____ (Black Tree Gaming ) C:\Users\Jonathan\Downloads\Nexus Mod Manager-0.63.12.exe 2017-01-16 16:42 - 2017-01-16 17:03 - 56484838 _____ C:\Users\Jonathan\Downloads\Required Files 1.1 UPDATED-57249-1-1.zip 2017-01-16 16:42 - 2017-01-16 17:03 - 255841686 _____ C:\Users\Jonathan\Downloads\Pornout Originals-57249-.zip 2017-01-15 06:17 - 2017-01-15 06:17 - 00000000 ____D C:\Users\Jonathan\Documents\Lara Croft and the Temple of Osiris 2017-01-14 19:08 - 2017-01-14 19:08 - 00000222 _____ C:\Users\Jonathan\Desktop\Lara Croft and the Temple of Osiris.url 2017-01-11 04:53 - 2016-12-21 09:08 - 00245600 _____ (Microsoft Corporation) C:\WINDOWS\system32\offlinesam.dll 2017-01-11 04:53 - 2016-12-21 09:08 - 00136032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ImplatSetup.dll 2017-01-11 04:53 - 2016-12-21 08:46 - 00624048 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\cng.sys 2017-01-11 04:53 - 2016-12-21 08:43 - 04130440 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfcore.dll 2017-01-11 04:53 - 2016-12-21 08:43 - 01454504 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetsrc.dll 2017-01-11 04:53 - 2016-12-21 08:43 - 01071736 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfnetcore.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 22224480 _____ (Microsoft Corporation) C:\WINDOWS\system32\shell32.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 01988560 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmp4srcsnk.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 01702392 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfasfsrcsnk.dll 2017-01-11 04:53 - 2016-12-21 08:42 - 01300600 _____ (Microsoft Corporation) C:\WINDOWS\system32\mfmpeg2srcsnk.dll 2017-01-11 04:53 - 2016-12-21 08:41 - 01600632 _____ (Microsoft Corporation) C:\WINDOWS\system32\sppobjs.dll 2017-01-11 04:53 - 2016-12-21 08:08 - 00360448 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpencom.dll 2017-01-11 04:53 - 2016-12-21 08:06 - 06285312 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Media.dll 2017-01-11 04:53 - 2016-12-21 07:59 - 01908224 _____ (Microsoft Corporation) C:\WINDOWS\system32\AzureSettingSyncProvider.dll 2017-01-11 04:53 - 2016-12-21 07:59 - 00883712 _____ (Microsoft Corporation) C:\WINDOWS\system32\samsrv.dll 2017-01-11 04:53 - 2016-12-21 07:56 - 00936960 _____ (Microsoft Corporation) C:\WINDOWS\system32\MCRecvSrc.dll 2017-01-11 04:53 - 2016-12-21 07:55 - 08129536 _____ (Microsoft Corporation) C:\WINDOWS\system32\Chakra.dll 2017-01-11 04:53 - 2016-12-21 07:55 - 04749312 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingsHandlers_nt.dll 2017-01-11 04:53 - 2016-12-21 07:53 - 06664192 _____ (Microsoft Corporation) C:\WINDOWS\system32\mspaint.exe 2017-01-11 04:53 - 2016-12-21 07:53 - 04474368 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3DCompiler_47.dll 2017-01-11 04:53 - 2016-12-21 07:51 - 08075776 _____ (Microsoft Corporation) C:\WINDOWS\system32\mstscax.dll 2017-01-11 04:53 - 2016-12-21 07:51 - 05611008 _____ (Microsoft Corporation) C:\WINDOWS\system32\d2d1.dll 2017-01-11 04:53 - 2016-12-21 07:50 - 01490432 _____ (Microsoft Corporation) C:\WINDOWS\system32\lsasrv.dll 2017-01-11 04:53 - 2016-12-21 06:59 - 00218976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\offlinesam.dll 2017-01-11 04:53 - 2016-12-21 06:09 - 00263472 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Storage.ApplicationData.dll 2017-01-11 04:53 - 2016-12-21 06:01 - 20969928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\shell32.dll 2017-01-11 04:53 - 2016-12-21 05:43 - 00285184 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BlockedShutdown.dll 2017-01-11 04:53 - 2016-12-21 05:41 - 00253952 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.BioFeedback.dll 2017-01-11 04:53 - 2016-12-21 05:40 - 00557568 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\StoreAgent.dll 2017-01-11 04:53 - 2016-12-21 05:40 - 00180224 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgent.exe 2017-01-11 04:53 - 2016-12-21 05:39 - 00223232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\InstallAgentUserBroker.exe 2017-01-11 04:53 - 2016-12-21 05:38 - 00866816 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Cred.dll 2017-01-11 04:53 - 2016-12-21 05:35 - 00198656 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\indexeddbserver.dll 2017-01-11 04:53 - 2016-12-21 05:34 - 07626752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\twinui.dll 2017-01-11 04:53 - 2016-12-21 05:33 - 19413504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\edgehtml.dll 2017-01-11 04:53 - 2016-12-21 05:32 - 19417600 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mshtml.dll 2017-01-11 04:53 - 2016-12-21 05:30 - 05398016 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aclui.dll 2017-01-11 04:53 - 2016-12-21 05:30 - 01255936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AzureSettingSyncProvider.dll 2017-01-11 04:53 - 2016-12-21 05:26 - 01155072 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVP9DEC.dll 2017-01-11 04:53 - 2016-12-21 05:25 - 06474752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mspaint.exe 2017-01-11 04:53 - 2016-12-21 05:24 - 06044160 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakra.dll 2017-01-11 04:53 - 2016-12-21 05:22 - 01883648 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Logon.dll 2017-01-11 04:53 - 2016-12-14 06:41 - 01235296 _____ (Microsoft Corporation) C:\WINDOWS\system32\aeinv.dll 2017-01-11 04:53 - 2016-12-14 06:23 - 00404832 _____ (Microsoft Corporation) C:\WINDOWS\system32\msv1_0.dll 2017-01-11 04:53 - 2016-12-14 06:21 - 02206496 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msmpeg2vdec.dll 2017-01-11 04:53 - 2016-12-14 06:17 - 00319288 _____ (Microsoft Corporation) C:\WINDOWS\system32\wow64.dll 2017-01-11 04:53 - 2016-12-14 06:01 - 00382784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AUDIOKSE.dll 2017-01-11 04:53 - 2016-12-14 05:48 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.Resources.dll 2017-01-11 04:53 - 2016-12-14 05:46 - 01631232 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.Resources.dll 2017-01-11 04:53 - 2016-12-14 05:43 - 00201728 _____ (Microsoft Corporation) C:\WINDOWS\system32\ScDeviceEnum.dll 2017-01-11 04:53 - 2016-12-14 05:42 - 00236544 _____ (Microsoft Corporation) C:\WINDOWS\system32\WinSCard.dll 2017-01-11 04:53 - 2016-12-14 05:42 - 00167424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\WinSCard.dll 2017-01-11 04:53 - 2016-12-14 05:40 - 00193536 _____ (Microsoft Corporation) C:\WINDOWS\system32\certprop.dll 2017-01-11 04:53 - 2016-12-14 05:38 - 17188864 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Xaml.dll 2017-01-11 04:53 - 2016-12-14 05:38 - 13869056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.Xaml.dll 2017-01-11 04:53 - 2016-12-14 05:38 - 00213504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.UI.CredDialogController.dll 2017-01-11 04:53 - 2016-12-14 05:37 - 00090112 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatepolicy.dll 2017-01-11 04:53 - 2016-12-14 05:36 - 00074752 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\updatepolicy.dll 2017-01-11 04:53 - 2016-12-14 05:35 - 00755712 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\kerberos.dll 2017-01-11 04:53 - 2016-12-14 05:35 - 00600576 _____ (Microsoft Corporation) C:\WINDOWS\system32\cryptui.dll 2017-01-11 04:53 - 2016-12-14 05:35 - 00553984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\cryptui.dll 2017-01-11 04:53 - 2016-12-14 05:26 - 00932864 _____ (Microsoft Corporation) C:\WINDOWS\system32\kerberos.dll 2017-01-11 04:53 - 2016-12-14 05:26 - 00869888 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuapi.dll 2017-01-11 04:53 - 2016-12-14 05:24 - 01005568 _____ (Microsoft Corporation) C:\WINDOWS\system32\D3D12.dll 2017-01-11 04:53 - 2016-12-14 05:24 - 00673792 _____ (Microsoft Corporation) C:\WINDOWS\system32\winlogon.exe 2017-01-11 04:53 - 2016-12-14 05:23 - 03134976 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcore.dll 2017-01-11 04:53 - 2016-12-14 05:22 - 02317824 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuaueng.dll 2017-01-11 04:53 - 2016-12-14 05:22 - 01513472 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kbase.sys 2017-01-11 04:53 - 2016-12-14 05:22 - 00391168 _____ (Microsoft Corporation) C:\WINDOWS\system32\wuuhext.dll 2017-01-11 04:53 - 2016-11-02 13:01 - 00484584 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\AudioSes.dll 2017-01-11 04:53 - 2016-11-02 11:28 - 00324608 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.ApplicationModel.LockScreen.dll 2017-01-11 04:53 - 2016-08-02 05:30 - 00822784 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Chakradiag.dll 2017-01-11 04:52 - 2016-12-21 09:04 - 07816032 _____ (Microsoft Corporation) C:\WINDOWS\system32\ntoskrnl.exe 2017-01-11 04:52 - 2016-12-21 08:49 - 00328008 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Storage.ApplicationData.dll 2017-01-11 04:52 - 2016-12-21 08:43 - 00092512 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpudd.dll 2017-01-11 04:52 - 2016-12-21 08:42 - 00241504 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudExperienceHost.dll 2017-01-11 04:52 - 2016-12-21 08:37 - 00455520 _____ (Microsoft Corporation) C:\WINDOWS\system32\securekernel.exe 2017-01-11 04:52 - 2016-12-21 08:15 - 22563840 _____ (Microsoft Corporation) C:\WINDOWS\system32\edgehtml.dll 2017-01-11 04:52 - 2016-12-21 08:14 - 00043008 _____ (Microsoft Corporation) C:\WINDOWS\system32\LaunchWinApp.exe 2017-01-11 04:52 - 2016-12-21 08:13 - 00119808 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCsp.dll 2017-01-11 04:52 - 2016-12-21 08:12 - 00083968 _____ (Microsoft Corporation) C:\WINDOWS\system32\ProvPluginEng.dll 2017-01-11 04:52 - 2016-12-21 08:10 - 00234496 _____ (Microsoft Corporation) C:\WINDOWS\system32\KnobsCore.dll 2017-01-11 04:52 - 2016-12-21 08:09 - 00368640 _____ (Microsoft Corporation) C:\WINDOWS\system32\OneBackupHandler.dll 2017-01-11 04:52 - 2016-12-21 08:09 - 00363520 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BioFeedback.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 01292288 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVPXENC.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00418304 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.BlockedShutdown.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00349184 _____ (Microsoft Corporation) C:\WINDOWS\system32\provengine.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00289792 _____ (Microsoft Corporation) C:\WINDOWS\system32\DeveloperOptionsSettingsHandlers.dll 2017-01-11 04:52 - 2016-12-21 08:08 - 00211968 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgent.exe 2017-01-11 04:52 - 2016-12-21 08:07 - 00748544 _____ (Microsoft Corporation) C:\WINDOWS\system32\StoreAgent.dll 2017-01-11 04:52 - 2016-12-21 08:06 - 00310784 _____ (Microsoft Corporation) C:\WINDOWS\system32\SyncSettings.dll 2017-01-11 04:52 - 2016-12-21 08:06 - 00260608 _____ (Microsoft Corporation) C:\WINDOWS\system32\InstallAgentUserBroker.exe 2017-01-11 04:52 - 2016-12-21 08:06 - 00147456 _____ (Microsoft Corporation) C:\WINDOWS\system32\winsrv.dll 2017-01-11 04:52 - 2016-12-21 08:05 - 00425984 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadcloudap.dll 2017-01-11 04:52 - 2016-12-21 08:05 - 00261632 _____ (Microsoft Corporation) C:\WINDOWS\system32\indexeddbserver.dll 2017-01-11 04:52 - 2016-12-21 08:05 - 00049152 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Shell.dll 2017-01-11 04:52 - 2016-12-21 08:01 - 09131008 _____ (Microsoft Corporation) C:\WINDOWS\system32\twinui.dll 2017-01-11 04:52 - 2016-12-21 08:00 - 00440320 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhcfg.dll 2017-01-11 04:52 - 2016-12-21 07:58 - 23678464 _____ (Microsoft Corporation) C:\WINDOWS\system32\mshtml.dll 2017-01-11 04:52 - 2016-12-21 07:57 - 00462336 _____ (Microsoft Corporation) C:\WINDOWS\system32\fhsettingsprovider.dll 2017-01-11 04:52 - 2016-12-21 07:56 - 00947712 _____ (Microsoft Corporation) C:\WINDOWS\system32\MSVP9DEC.dll 2017-01-11 04:52 - 2016-12-21 07:54 - 05511680 _____ (Microsoft Corporation) C:\WINDOWS\system32\aclui.dll 2017-01-11 04:52 - 2016-12-21 07:53 - 01692672 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentExtensions.onecore.dll 2017-01-11 04:52 - 2016-12-21 07:51 - 02275840 _____ (Microsoft Corporation) C:\WINDOWS\system32\AppXDeploymentServer.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 04149248 _____ (Microsoft Corporation) C:\WINDOWS\system32\rdpcorets.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 02691072 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.Logon.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 01062912 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncCore.dll 2017-01-11 04:52 - 2016-12-21 07:47 - 01121280 _____ (Microsoft Corporation) C:\WINDOWS\system32\aadtb.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 03892864 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfcore.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01852720 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmp4srcsnk.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01360464 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetsrc.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01277344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfasfsrcsnk.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 01201872 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfmpeg2srcsnk.dll 2017-01-11 04:52 - 2016-12-21 06:02 - 00980832 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mfnetcore.dll 2017-01-11 04:52 - 2016-12-21 05:46 - 00034304 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LaunchWinApp.exe 2017-01-11 04:52 - 2016-12-21 05:41 - 00231936 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.ApplicationModel.LockScreen.dll 2017-01-11 04:52 - 2016-12-21 05:40 - 00318976 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpencom.dll 2017-01-11 04:52 - 2016-12-21 05:40 - 00237056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SyncSettings.dll 2017-01-11 04:52 - 2016-12-21 05:39 - 01300480 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MSVPXENC.dll 2017-01-11 04:52 - 2016-12-21 05:35 - 04612608 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Media.dll 2017-01-11 04:52 - 2016-12-21 05:27 - 00640000 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\MCRecvSrc.dll 2017-01-11 04:52 - 2016-12-21 05:25 - 07469056 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\mstscax.dll 2017-01-11 04:52 - 2016-12-21 05:24 - 05061120 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\d2d1.dll 2017-01-11 04:52 - 2016-12-21 05:24 - 03733504 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3DCompiler_47.dll 2017-01-11 04:52 - 2016-12-21 05:24 - 00886272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\aadtb.dll 2017-01-11 04:52 - 2016-12-21 05:22 - 00860672 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncCore.dll 2017-01-11 04:52 - 2016-12-14 06:41 - 00590960 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioSes.dll 2017-01-11 04:52 - 2016-12-14 06:34 - 02482280 _____ (Microsoft Corporation) C:\WINDOWS\system32\msmpeg2vdec.dll 2017-01-11 04:52 - 2016-12-14 06:33 - 01356864 _____ (Microsoft Corporation) C:\WINDOWS\system32\ClipUp.exe 2017-01-11 04:52 - 2016-12-14 06:19 - 00584544 _____ (Microsoft Corporation) C:\WINDOWS\system32\SettingSyncHost.exe 2017-01-11 04:52 - 2016-12-14 06:18 - 00715104 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\vhdmp.sys 2017-01-11 04:52 - 2016-12-14 06:18 - 00335712 _____ (Microsoft Corporation) C:\WINDOWS\system32\Drivers\pci.sys 2017-01-11 04:52 - 2016-12-14 06:14 - 01694712 _____ (Microsoft Corporation) C:\WINDOWS\system32\winmde.dll 2017-01-11 04:52 - 2016-12-14 06:14 - 00418952 _____ (Microsoft Corporation) C:\WINDOWS\system32\AUDIOKSE.dll 2017-01-11 04:52 - 2016-12-14 06:14 - 00089416 _____ (Microsoft Corporation) C:\WINDOWS\system32\remoteaudioendpoint.dll 2017-01-11 04:52 - 2016-12-14 06:08 - 00341344 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\msv1_0.dll 2017-01-11 04:52 - 2016-12-14 06:06 - 00509792 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\SettingSyncHost.exe 2017-01-11 04:52 - 2016-12-14 06:01 - 01557808 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\winmde.dll 2017-01-11 04:52 - 2016-12-14 06:01 - 00076984 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\remoteaudioendpoint.dll 2017-01-11 04:52 - 2016-12-14 05:46 - 00206848 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32k.sys 2017-01-11 04:52 - 2016-12-14 05:45 - 00147968 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32k.sys 2017-01-11 04:52 - 2016-12-14 05:42 - 00352768 _____ (Microsoft Corporation) C:\WINDOWS\system32\cloudAP.dll 2017-01-11 04:52 - 2016-12-14 05:42 - 00208896 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-11 04:52 - 2016-12-14 05:41 - 00223744 _____ (Microsoft Corporation) C:\WINDOWS\system32\ie4uinit.exe 2017-01-11 04:52 - 2016-12-14 05:40 - 00324096 _____ (Microsoft Corporation) C:\WINDOWS\system32\domgmt.dll 2017-01-11 04:52 - 2016-12-14 05:40 - 00266752 _____ (Microsoft Corporation) C:\WINDOWS\system32\ConsoleLogon.dll 2017-01-11 04:52 - 2016-12-14 05:40 - 00231424 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\CloudBackupSettings.dll 2017-01-11 04:52 - 2016-12-14 05:40 - 00104448 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\Windows.Internal.UI.Logon.ProxyStub.dll 2017-01-11 04:52 - 2016-12-14 05:39 - 00837632 _____ (Microsoft Corporation) C:\WINDOWS\system32\wbiosrvc.dll 2017-01-11 04:52 - 2016-12-14 05:39 - 00290816 _____ (Microsoft Corporation) C:\WINDOWS\system32\updatehandlers.dll 2017-01-11 04:52 - 2016-12-14 05:39 - 00257024 _____ (Microsoft Corporation) C:\WINDOWS\system32\Windows.UI.CredDialogController.dll 2017-01-11 04:52 - 2016-12-14 05:38 - 00295424 _____ (Microsoft Corporation) C:\WINDOWS\system32\CloudBackupSettings.dll 2017-01-11 04:52 - 2016-12-14 05:36 - 01002496 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRH.dll 2017-01-11 04:52 - 2016-12-14 05:36 - 00539648 _____ (Microsoft Corporation) C:\WINDOWS\system32\usocore.dll 2017-01-11 04:52 - 2016-12-14 05:35 - 00712192 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\wuapi.dll 2017-01-11 04:52 - 2016-12-14 05:32 - 00806400 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\D3D12.dll 2017-01-11 04:52 - 2016-12-14 05:32 - 00497152 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\LogonController.dll 2017-01-11 04:52 - 2016-12-14 05:25 - 02009600 _____ (Microsoft Corporation) C:\WINDOWS\system32\SRHInproc.dll 2017-01-11 04:52 - 2016-12-14 05:23 - 01231872 _____ (Microsoft Corporation) C:\WINDOWS\system32\dosvc.dll 2017-01-11 04:52 - 2016-12-14 05:22 - 02998272 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\win32kfull.sys 2017-01-11 04:52 - 2016-12-14 05:22 - 02748416 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\rdpcore.dll 2017-01-11 04:52 - 2016-12-14 05:22 - 00707584 _____ (Microsoft Corporation) C:\WINDOWS\system32\LogonController.dll 2017-01-11 04:52 - 2016-12-14 05:21 - 03616768 _____ (Microsoft Corporation) C:\WINDOWS\system32\win32kfull.sys 2017-01-11 04:52 - 2016-11-02 12:00 - 00534096 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEng.dll 2017-01-11 04:52 - 2016-11-02 11:22 - 00337920 _____ (Microsoft Corporation) C:\WINDOWS\system32\AudioEndpointBuilder.dll 2017-01-11 04:52 - 2016-11-02 11:21 - 00942080 _____ (Microsoft Corporation) C:\WINDOWS\system32\audiosrv.dll 2017-01-10 13:45 - 2017-01-10 13:45 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games 2017-01-10 04:17 - 2017-01-10 04:17 - 00000222 _____ C:\Users\Jonathan\Desktop\Day of Infamy.url 2017-01-05 22:35 - 2017-01-05 22:35 - 00000000 ____D C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all 2017-01-05 22:33 - 2017-01-05 22:33 - 400404903 _____ C:\Users\Jonathan\Downloads\WitchTrainer_1.6-all.zip ==================== Ein Monat: Geänderte Dateien und Ordner ======== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.) 2017-02-03 16:12 - 2016-08-12 11:27 - 00000000 ___RD C:\Users\Jonathan\OneDrive 2017-02-03 16:10 - 2016-09-25 22:09 - 00000006 ____H C:\WINDOWS\Tasks\SA.DAT 2017-02-03 16:10 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA 2017-02-03 16:09 - 2016-07-16 07:04 - 00786432 _____ C:\WINDOWS\system32\config\BBI 2017-02-03 15:34 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\LiveKernelReports 2017-02-02 21:54 - 2016-09-25 22:06 - 00000000 ____D C:\Users\Jonathan 2017-02-02 21:54 - 2016-09-25 22:05 - 00000000 ____D C:\WINDOWS\system32\SleepStudy 2017-02-02 20:34 - 2016-11-06 17:44 - 00000000 ____D C:\Users\Jonathan\Documents\SpellForce 2017-02-02 19:33 - 2016-08-12 11:26 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Packages 2017-02-02 19:33 - 2016-07-16 12:47 - 00000000 ___HD C:\Program Files\WindowsApps 2017-02-02 19:33 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\AppReadiness 2017-02-02 19:18 - 2016-08-12 12:28 - 00000000 ____D C:\Users\Jonathan\AppData\Local\CrashDumps 2017-02-02 19:06 - 2016-08-12 11:22 - 02606462 _____ C:\WINDOWS\system32\PerfStringBackup.INI 2017-02-02 19:06 - 2016-07-16 23:51 - 01108300 _____ C:\WINDOWS\system32\perfh007.dat 2017-02-02 19:06 - 2016-07-16 23:51 - 00264632 _____ C:\WINDOWS\system32\perfc007.dat 2017-01-31 16:40 - 2016-08-19 11:52 - 00000000 ____D C:\Users\Jonathan\Documents\Mount&Blade Warband Savegames 2017-01-31 00:08 - 2016-09-24 14:33 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\vlc 2017-01-30 21:34 - 2016-10-15 20:14 - 00000000 ____D C:\Program Files (x86)\OpenDungeons 2017-01-30 21:34 - 2016-08-17 11:11 - 00000000 ____D C:\Program Files (x86)\Origin Games 2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\SysWOW64\Macromed 2017-01-30 21:24 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\Macromed 2017-01-29 20:43 - 2016-08-17 10:32 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\RenPy 2017-01-25 17:30 - 2016-08-16 22:21 - 00000000 ____D C:\Users\Jonathan\Documents\My Games 2017-01-25 13:23 - 2016-07-16 12:36 - 00000000 ____D C:\WINDOWS\CbsTemp 2017-01-22 06:24 - 2016-09-24 14:34 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\dvdcss 2017-01-20 08:42 - 2016-08-16 21:45 - 00000000 ____D C:\ProgramData\Origin 2017-01-19 15:43 - 2016-12-13 15:47 - 00003296 _____ C:\WINDOWS\System32\Tasks\OneDrive Standalone Update Task v2 2017-01-19 15:43 - 2016-08-12 11:27 - 00002437 _____ C:\Users\Jonathan\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\OneDrive.lnk 2017-01-19 13:47 - 2016-08-12 12:27 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2017-01-19 12:57 - 2016-09-25 22:05 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2017-01-19 12:57 - 2016-07-16 12:45 - 00000000 ____D C:\WINDOWS\INF 2017-01-18 10:46 - 2016-09-14 15:45 - 00000000 ____D C:\Users\Jonathan\AppData\Local\Ubisoft Game Launcher 2017-01-14 14:20 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\NDF 2017-01-12 13:07 - 2016-08-13 10:08 - 00000000 ____D C:\Users\Jonathan\AppData\Local\ElevatedDiagnostics 2017-01-11 18:56 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\rescache 2017-01-11 12:57 - 2016-08-12 11:26 - 00000000 __RHD C:\Users\Public\AccountPictures 2017-01-11 12:56 - 2016-09-25 22:05 - 00224392 _____ C:\WINDOWS\system32\FNTCACHE.DAT 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ___RD C:\WINDOWS\ImmersiveControlPanel 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\WinBioPlugIns 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\system32\oobe 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\ShellExperiences 2017-01-11 10:44 - 2016-07-16 12:47 - 00000000 ____D C:\WINDOWS\Provisioning 2017-01-11 07:46 - 2016-08-12 12:34 - 00000000 ____D C:\WINDOWS\system32\MRT 2017-01-11 07:45 - 2016-08-12 12:34 - 135657872 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe 2017-01-10 16:00 - 2016-08-16 22:05 - 00000000 ____D C:\Users\Jonathan\AppData\Roaming\Origin ==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ======= 2017-01-31 14:48 - 2017-01-31 14:48 - 0000044 _____ () C:\Users\Jonathan\AppData\Roaming\WB.CFG 2016-09-25 22:06 - 2016-09-25 22:06 - 0000000 ____H () C:\ProgramData\DP45977C.lfl 2016-08-21 05:50 - 2016-08-21 05:50 - 0000016 _____ () C:\ProgramData\mntemp Einige Dateien in TEMP: ==================== 2016-11-06 17:43 - 2003-08-13 19:05 - 0040960 _____ () C:\Users\Jonathan\AppData\Local\Temp\comver.dll 2016-10-18 20:29 - 2016-09-15 15:41 - 0037376 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe 2016-10-18 20:29 - 2016-09-15 15:14 - 0020992 _____ (Microsoft) C:\Users\Jonathan\AppData\Local\Temp\HiRezLauncherControls.dll 2017-01-17 08:14 - 2016-09-16 23:36 - 0860960 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvSCPAPI64.dll 2017-01-17 08:46 - 2016-09-16 23:36 - 0346680 _____ (NVIDIA Corporation) C:\Users\Jonathan\AppData\Local\Temp\nvStInst.exe ==================== Bamital & volsnap ====================== (Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.) C:\WINDOWS\system32\winlogon.exe => Datei ist digital signiert C:\WINDOWS\system32\wininit.exe => Datei ist digital signiert C:\WINDOWS\explorer.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\explorer.exe => Datei ist digital signiert C:\WINDOWS\system32\svchost.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\svchost.exe => Datei ist digital signiert C:\WINDOWS\system32\services.exe => Datei ist digital signiert C:\WINDOWS\system32\User32.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\User32.dll => Datei ist digital signiert C:\WINDOWS\system32\userinit.exe => Datei ist digital signiert C:\WINDOWS\SysWOW64\userinit.exe => Datei ist digital signiert C:\WINDOWS\system32\rpcss.dll => Datei ist digital signiert C:\WINDOWS\system32\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\SysWOW64\dnsapi.dll => Datei ist digital signiert C:\WINDOWS\system32\Drivers\volsnap.sys => Datei ist digital signiert LastRegBack: 2017-01-29 02:25 ==================== Ende von FRST.txt ============================ |
03.02.2017, 19:52 | #4 |
| NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. FRST Addition: Code:
ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 29-01-2017 durchgeführt von Jonathan (03-02-2017 16:15:05) Gestartet von C:\Users\Jonathan\Downloads Windows 10 Home Version 1607 (X64) (2016-09-25 21:09:58) Start-Modus: Normal ========================================================== ==================== Konten: ============================= Administrator (S-1-5-21-3104372971-824348289-1990348516-500 - Administrator - Disabled) DefaultAccount (S-1-5-21-3104372971-824348289-1990348516-503 - Limited - Disabled) Gast (S-1-5-21-3104372971-824348289-1990348516-501 - Limited - Disabled) Jonathan (S-1-5-21-3104372971-824348289-1990348516-1001 - Administrator - Enabled) => C:\Users\Jonathan ==================== Sicherheits-Center ======================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.) AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} ==================== Installierte Programme ====================== (Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.) 7-Zip 16.02 (x64) (HKLM\...\7-Zip) (Version: 16.02 - Igor Pavlov) Adobe Flash Player 24 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 24.0.0.194 - Adobe Systems Incorporated) AirMech (HKLM\...\Steam App 206500) (Version: - Carbon Games) Ansel (Version: 368.81 - NVIDIA Corporation) Hidden Art of War: Red Tides (HKLM\...\Steam App 558100) (Version: - Game Science) Asmedia USB Host Controller Driver (HKLM-x32\...\{E4FB0B39-C991-4EE7-95DD-1A1A7857D33D}) (Version: 1.16.28.1 - Asmedia Technology) Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version: - Ubisoft) Atlas Reactor (HKLM\...\Steam App 402570) (Version: - Trion Worlds) Atlas Reactor Live (HKLM-x32\...\Glyph Atlas Reactor Live) (Version: - Trion Worlds, Inc.) AVM FRITZ!WLAN (HKLM-x32\...\AVMWLANCLI) (Version: 1.2.0.0 - AVM Berlin) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battleborn (HKLM\...\Steam App 394230) (Version: - Gearbox Software) Beyond Good and Evil (HKLM-x32\...\Uplay Install 232) (Version: - Ubisoft) Bloody Walls (HKLM\...\Steam App 531960) (Version: - L. Stotch) Bloons TD5 (HKLM\...\Steam App 306020) (Version: - Ninja Kiwi) Clicker Guild (HKLM\...\Steam App 557810) (Version: - Fox Dawn) CLIP STUDIO PAINT 1.5.4 (HKLM-x32\...\{88B5A062-DDA1-4F62-A4DD-95D0C4F19979}) (Version: 1.5.4 - CELSYS) Company of Heroes 2 (HKLM\...\Steam App 231430) (Version: - Relic Entertainment) Counter-strike 1.6 (HKLM-x32\...\Counter-strike 1.6) (Version: 1.6 - Counter-strike) Counter-Strike: Global Offensive (HKLM\...\Steam App 730) (Version: - Valve) CrossCode Demo (HKLM\...\Steam App 370900) (Version: - Radical Fish Games) Crush Online (HKLM\...\Steam App 475630) (Version: - JoyImpact) Crypt of the NecroDancer (HKLM\...\Steam App 247080) (Version: - Brace Yourself Games) Crysis®3 (HKLM-x32\...\{4198AE83-A3C6-4C41-85C8-EC63E990696E}) (Version: 1.0.0.0 - Electronic Arts) Day of Infamy (HKLM\...\Steam App 447820) (Version: - New World Interactive) DayZ (HKLM\...\Steam App 221100) (Version: - Bohemia Interactive) Dead Age (HKLM\...\Steam App 363930) (Version: - Silent Dreams) Deadly 30 (HKLM\...\Steam App 264730) (Version: - Ignatus Zuk and Gonzalo Villagomez) Deus Ex GOTY (HKLM-x32\...\GOGPACKDEUSEX_is1) (Version: 2.0.0.11 - GOG.com) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Dirty Bomb (HKLM\...\Steam App 333930) (Version: - Splash Damage®) Discord (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Discord) (Version: 0.0.296 - Hammer & Chisel, Inc.) Dogs of War Online - Beta (HKLM\...\Steam App 219700) (Version: - Cyanide) DOOM (HKLM\...\Steam App 379720) (Version: - id Software) Dota 2 (HKLM\...\Steam App 570) (Version: - Valve) Dragon Age: Origins - Ultimate Edition (HKLM\...\Steam App 47810) (Version: - BioWare) Duelyst (HKLM\...\Steam App 291410) (Version: - Counterplay Games Inc.) Dungeon Defenders II (HKLM\...\Steam App 236110) (Version: - Trendy Entertainment) Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts) EAX4 Unified Redist (HKLM-x32\...\{89661B04-C646-4412-B6D3-5E19F02F1F37}) (Version: 4.001 - Creative Labs) Fallout: New Vegas (HKLM\...\Steam App 22380) (Version: - Obsidian Entertainment) Far Cry 3 Blood Dragon (HKLM-x32\...\Uplay Install 205) (Version: - Ubisoft) GameSpy Arcade (HKLM-x32\...\GameSpy Arcade) (Version: - ) Garry's Mod (HKLM\...\Steam App 4000) (Version: - Facepunch Studios) Ghost 1.0 (HKLM\...\Steam App 463270) (Version: - @unepic_fran) Ghost in the Shell Stand Alone Complex First Assault Online (HKLM\...\Steam App 369200) (Version: - Neople) Glyph (HKLM-x32\...\Glyph) (Version: - Trion Worlds, Inc.) Google Chrome (HKLM-x32\...\Google Chrome) (Version: 55.0.2883.87 - Google Inc.) Google Update Helper (x32 Version: 1.3.32.7 - Google Inc.) Hidden Hearthstone (HKLM-x32\...\Hearthstone) (Version: - Blizzard Entertainment) HiPatch (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF000}) (Version: 5.0.6.4 - Hi-Rez Studios) Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios) Hitman: Blood Money (HKLM\...\Steam App 6860) (Version: - IO Interactive) How to Survive 2 (HKLM\...\Steam App 360170) (Version: - EKO Software) Infinity Wars - Animated Trading Card Game (HKLM\...\Steam App 257730) (Version: - Lightmare Studios) Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 11.0.0.1173 - Intel Corporation) Intel(R) Serial IO (HKLM\...\{9FD91C5C-44AE-4D9D-85BE-AE52816B0294}) (Version: 30.63.1519.7 - Intel Corporation) Intel® Chipsatz-Gerätesoftware (x32 Version: 10.1.1.9 - Intel(R) Corporation) Hidden Intel® Security Assist (HKLM-x32\...\{4B230374-6475-4A73-BA6E-41015E9C5013}) (Version: 1.0.0.532 - Intel Corporation) Killing Floor 2 (HKLM\...\Steam App 232090) (Version: - Tripwire Interactive) Kingdom Wars 2: Battles (HKLM\...\Steam App 253190) (Version: - Reverie World Studios, INC) Krita (x64) 3.0 (HKLM\...\Krita_x64) (Version: 3.0.0.0 - Krita Foundation) Lara Croft and the Temple of Osiris (HKLM\...\Steam App 289690) (Version: - Crystal Dynamics) League of Legends (HKLM-x32\...\League of Legends 4.1.2) (Version: 4.1.2 - Riot Games) League of Legends (x32 Version: 4.1.2 - Riot Games) Hidden Malwarebytes Version 3.0.6.1469 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.0.6.1469 - Malwarebytes) MCSetup_OneClick version 1.5 (HKLM-x32\...\{3D42651D-DCD5-40DB-8E20-D22F60E425C3}_is1) (Version: 1.5 - KOG Games) Microsoft OneDrive (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\OneDriveSetup.exe) (Version: 17.3.6743.1212 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation) Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation) Mount & Blade: Warband (HKLM\...\Steam App 48700) (Version: - TaleWorlds Entertainment) My.com Game Center (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\MyComGames) (Version: 3.194 - My.com B.V.) Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.12 - Black Tree Gaming) NVIDIA 3D Vision Controller-Treiber 364.44 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 364.44 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 372.90 - NVIDIA Corporation) NVIDIA GeForce Experience 2.11.4.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.11.4.0 - NVIDIA Corporation) NVIDIA Grafiktreiber 372.90 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 372.90 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation) OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation) Origin (HKLM-x32\...\Origin) (Version: 10.3.3.1921 - Electronic Arts, Inc.) Paladins (HKLM\...\Steam App 444090) (Version: - Hi-Rez Studios) Path of Exile (HKLM\...\Steam App 238960) (Version: - Grinding Gear Games) PAYDAY 2 (HKLM\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PlanetSide 2 (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\DG0-PlanetSide 2) (Version: - Sony Online Entertainment) Project Zomboid (HKLM\...\Steam App 108600) (Version: - The Indie Stone) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.) Rayman Origins (HKLM-x32\...\Uplay Install 80) (Version: - Ubisoft) Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 10.6.1001.2015 - Realtek) Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7708 - Realtek Semiconductor Corp.) Rebel Galaxy (HKLM\...\Steam App 290300) (Version: - Double Damage Games) Revo Uninstaller 2.0.2 (HKLM\...\{A28DBDA2-3CC7-4ADC-8BFE-66D7743C6C97}_is1) (Version: 2.0.2 - VS Revo Group, Ltd.) Rise of the Tomb Raider (HKLM\...\Steam App 391220) (Version: - Crystal Dynamics) Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 4.5.1 - Samsung Electronics) Sanctum 2 (HKLM\...\Steam App 210770) (Version: - Coffee Stain Studios) Savage Resurrection (HKLM\...\Steam App 366440) (Version: - S2 Games, LLC) Scorched3D 44 (HKLM-x32\...\Scorched3D) (Version: 44 - Scorched) Shadowgrounds (HKLM\...\Steam App 2500) (Version: - Frozenbyte) Shadowgrounds: Survivor (HKLM\...\Steam App 11200) (Version: - Frozenbyte) Shadowrun: Dragonfall - Director's Cut (HKLM\...\Steam App 300550) (Version: - Harebrained Schemes) Shadowrun: Hong Kong - Extended Edition (HKLM\...\Steam App 346940) (Version: - Harebrained Schemes) Shadowverse (HKLM\...\Steam App 453480) (Version: - Cygames, Inc.) Shadwen (HKLM\...\Steam App 425210) (Version: - Frozenbyte) SHIELD Streaming (Version: 7.1.0280 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.11.4.0 - NVIDIA Corporation) Hidden Source SDK (HKLM\...\Steam App 211) (Version: - Valve) SpellForce: Platinum Edition (HKLM\...\Steam App 39540) (Version: - Phenomic) STAR WARS™ Battlefront™ II (HKLM\...\Steam App 6060) (Version: - Pandemic Studios) STAR-BOX: RPG Adventures in Space! (HKLM\...\Steam App 363510) (Version: - Michael Flynn) StarCraft II (HKLM-x32\...\StarCraft II) (Version: - Blizzard Entertainment) Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation) Streamline (HKLM\...\Steam App 252850) (Version: - Proletariat Inc.) Sunrider: Mask of Arcadius (HKLM\...\Steam App 313730) (Version: - Love in Space) Team Fortress 2 (HKLM\...\Steam App 440) (Version: - Valve) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.19 - TeamSpeak Systems GmbH) The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version: - Ubisoft) The Elder Scrolls Online (HKLM-x32\...\The Elder Scrolls Online) (Version: 1.0.0.0 - Zenimax Online Studios) The Elder Scrolls Online: Tamriel Unlimited (HKLM\...\Steam App 306130) (Version: - Zenimax Online Studios) Tom Clancy's Rainbow Six 3: Athena Sword (HKLM\...\Steam App 19840) (Version: - Ubisoft) Tom Clancy's Rainbow Six 3: Gold Edition (HKLM\...\Steam App 19830) (Version: - Red Storm Entertainment) Tom Clancy's Splinter Cell (HKLM-x32\...\Uplay Install 109) (Version: - Ubisoft) Total War: WARHAMMER (HKLM\...\Steam App 364360) (Version: - Creative Assembly) Trine (HKLM\...\Steam App 35700) (Version: - Frozenbyte) Trine 2 (HKLM\...\Steam App 35720) (Version: - Frozenbyte) Trine 3: The Artifacts of Power (HKLM\...\Steam App 319910) (Version: - Frozenbyte) Unreal Development Kit: 2015-01 (HKLM\...\UDK-6094d38d-44a8-4e1e-b513-fbfce8acf50f) (Version: - Epic Games, Inc.) Uplay (HKLM-x32\...\Uplay) (Version: 22.2 - Ubisoft) Valkyria Chronicles™ (HKLM\...\Steam App 294860) (Version: - SEGA) Vanguards (HKLM\...\Steam App 546600) (Version: - BYU Games) Visual Studio 2012 x64 Redistributables (HKLM\...\{8C775E70-A791-4DA8-BCC3-6AB7136F4484}) (Version: 14.0.0.1 - AVG Technologies) Visual Studio 2012 x86 Redistributables (HKLM-x32\...\{98EFF19A-30AB-4E4B-B943-F06B1C63EBF8}) (Version: 14.0.0.1 - AVG Technologies CZ, s.r.o.) VLC media player (HKLM\...\VLC media player) (Version: 2.2.4 - VideoLAN) Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.) WAKFU (HKLM\...\Steam App 215080) (Version: - Ankama Studio) War of the Human Tanks (HKLM\...\Steam App 263400) (Version: - Yakiniku Banzai) Warface My.Com (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\Warface My.Com) (Version: 1.13 - Оператор Warface) Warhammer® 40,000™: Dawn of War® II (HKLM\...\Steam App 15620) (Version: - Relic Entertainment) World of Tanks Blitz (HKLM\...\Steam App 444200) (Version: - Wargaming Group Limited) World of Warcraft (HKLM-x32\...\World of Warcraft) (Version: - Blizzard Entertainment) World of Warships (HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version: - Wargaming.net) XCOM 2 (HKLM\...\Steam App 268500) (Version: - Firaxis) XCom Long War EW Mod version 1.0 (HKLM-x32\...\{860C3266-65B9-4BF2-937A-1778483046B5}_is1) (Version: 1.0 - JohnnyLump) XCOM: Enemy Unknown (HKLM\...\Steam App 200510) (Version: - Firaxis Games) Yu-Gi-Oh! Legacy of the Duelist (HKLM\...\Steam App 480650) (Version: - Other Ocean Interactive) Zombie City Defense 2 (HKLM\...\Steam App 473970) (Version: - Mozg Labs) Zombie Night Terror (HKLM\...\Steam App 416680) (Version: - NoClip) ==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ========================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) ==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) Task: {0D707953-1237-44B8-93E9-14559C3AED0F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation) Task: {348C891F-A1F9-421F-9487-934AF596F60D} - System32\Tasks\Opera scheduled Autoupdate 1485808408 => C:\Users\Jonathan\AppData\Local\Programs\Opera\launcher.exe Task: {59720B00-38BB-408B-BF42-A2DC0B5E1139} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2017-01-30] (AVAST Software) Task: {5F7817E0-EFD1-426C-BBE1-10919720F0AB} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation) Task: {6885D363-0D69-4C86-B8FF-0F3DE351C6DC} - System32\Tasks\Adobe Flash Player Updater => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe [2017-01-30] (Adobe Systems Incorporated) Task: {7201EFCA-BB18-43C6-AA83-F5C85BDACBA7} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-11] (Google Inc.) Task: {92F430B3-1E2C-4C76-B380-1F19BDECC969} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2016-12-11] (Google Inc.) Task: {971FEEEB-1412-422E-B578-24DEBABC1941} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation) Task: {BD27D714-D2A6-4CF1-9680-D15554B36195} - System32\Tasks\OneDrive Standalone Update Task => C:\Users\Jonathan\AppData\Local\Microsoft\OneDrive\17.3.6517.0809\OneDriveStandaloneUpdater.exe Task: {D8B341BE-C446-49EB-A849-C204A595345A} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\Program Files\Windows Defender\\MpCmdRun.exe [2016-07-16] (Microsoft Corporation) Task: {F7E922C4-ED99-4CA1-95AA-CBBA2310DB97} - System32\Tasks\SamsungMagician => C:\Program Files (x86)\Samsung\Samsung Magician\Samsung Magician.exe [2014-09-28] (Samsung Electronics.) (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.) Task: C:\WINDOWS\Tasks\Adobe Flash Player Updater.job => C:\WINDOWS\SysWoW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Verknüpfungen ============================= (Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.) Shortcut: C:\Users\Jonathan\Desktop\Counter-strike 1.6.lnk -> C:\Program Files (x86)\Counter-strike\Counter-strike\Counter-Strike.bat () ==================== Geladene Module (Nicht auf der Ausnahmeliste) ============== 2016-07-16 12:42 - 2016-07-16 12:42 - 00231424 _____ () C:\WINDOWS\SYSTEM32\ism32k.dll 2016-12-14 12:48 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\system32\CoreUIComponents.dll 2016-09-25 22:05 - 2016-09-16 23:54 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2015-05-19 08:11 - 2015-05-19 08:11 - 00007680 _____ () C:\Program Files (x86)\Intel\Intel(R) Security Assist\isaHelperService.exe 2016-08-17 15:18 - 2016-12-05 21:29 - 00107832 _____ () C:\WINDOWS\SysWoW64\PnkBstrB.exe 2016-08-12 12:27 - 2016-06-14 21:03 - 00367552 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 00288192 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 01147328 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\libprotobuf.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 03611584 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll 2016-08-17 15:18 - 2016-12-05 21:29 - 00066872 _____ () C:\WINDOWS\SysWoW64\PnkBstrA.exe 2017-02-03 15:57 - 2017-01-20 07:47 - 02264352 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\PoliciesControllerImpl.dll 2017-02-03 15:57 - 2017-01-20 07:47 - 02254800 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll 2017-02-03 15:57 - 2017-01-20 07:47 - 02829776 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\arwlib.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 01988544 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvPortForwardPlugin.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 02665920 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\NvMdnsPlugin.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 01840576 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Plugins\NSS\RtspPlugin.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 00207296 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\RtspServer.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 00034240 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_system-vc120-mt-1_58.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 00920000 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\boost_regex-vc120-mt-1_58.dll 2016-12-14 12:48 - 2016-12-09 11:29 - 02681200 _____ () C:\WINDOWS\SYSTEM32\CoreUIComponents.dll 2016-09-25 23:03 - 2016-09-25 23:03 - 00134656 _____ () C:\Windows\ShellExperiences\Windows.UI.Shell.SharedUtilities.dll 2017-01-11 04:52 - 2016-12-21 08:09 - 00474112 _____ () C:\Windows\ShellExperiences\QuickActions.dll 2017-01-11 04:52 - 2016-12-21 07:54 - 09760768 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll 2017-01-11 04:52 - 2016-12-21 07:48 - 01401856 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll 2017-01-11 04:52 - 2016-12-21 07:48 - 00757248 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CSGSuggestLib.dll 2017-01-11 04:52 - 2016-12-21 07:48 - 01033216 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Actions.dll 2017-01-11 04:52 - 2016-12-21 07:48 - 02424320 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.BackgroundTask.dll 2017-01-11 04:52 - 2016-12-21 07:53 - 04853760 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\RemindersUI.dll 2017-01-11 04:52 - 2016-12-21 07:47 - 00114176 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Dss.BackgroundTask.dll 2017-01-11 04:52 - 2016-12-21 07:49 - 04046848 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Signals.dll 2017-01-11 04:52 - 2016-12-21 07:47 - 01475584 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.IntentExtraction.dll 2016-07-16 12:42 - 2016-07-16 12:42 - 01872384 _____ () C:\Windows\System32\speech_onecore\engines\tts\MSTTSEngine_OneCore.dll 2017-01-23 11:11 - 2017-01-23 11:12 - 00072192 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeHost.exe 2017-01-23 11:11 - 2017-01-23 11:12 - 00179712 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll 2017-01-23 11:11 - 2017-01-23 11:12 - 42130432 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\SkyWrap.dll 2016-12-14 09:18 - 2016-12-14 09:18 - 02216448 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_11.10.152.0_x64__kzf8qxf38zg5c\roottools.dll 2016-10-07 19:55 - 2016-12-07 22:00 - 02493440 _____ () C:\Program Files (x86)\Origin\libGLESv2.dll 2016-08-12 12:27 - 2016-06-14 21:03 - 00018880 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2017-01-19 22:51 - 2016-12-23 19:28 - 00657184 _____ () E:\Program Files (x86)\Steam\SDL2.dll 2016-12-12 20:11 - 2016-09-01 02:02 - 04969248 _____ () E:\Program Files (x86)\Steam\v8.dll 2017-01-19 22:51 - 2017-01-19 02:30 - 02327840 _____ () E:\Program Files (x86)\Steam\video.dll 2016-12-12 20:11 - 2016-09-01 02:02 - 01563936 _____ () E:\Program Files (x86)\Steam\icui18n.dll 2016-12-12 20:11 - 2016-09-01 02:02 - 01195296 _____ () E:\Program Files (x86)\Steam\icuuc.dll 2016-12-12 20:11 - 2016-01-27 08:49 - 02549760 _____ () E:\Program Files (x86)\Steam\libavcodec-56.dll 2016-12-12 20:11 - 2016-01-27 08:49 - 00491008 _____ () E:\Program Files (x86)\Steam\libavformat-56.dll 2016-12-12 20:11 - 2016-01-27 08:49 - 00332800 _____ () E:\Program Files (x86)\Steam\libavresample-2.dll 2016-12-12 20:11 - 2016-01-27 08:49 - 00442880 _____ () E:\Program Files (x86)\Steam\libavutil-54.dll 2016-12-12 20:11 - 2016-01-27 08:49 - 00485888 _____ () E:\Program Files (x86)\Steam\libswscale-3.dll 2017-01-19 22:51 - 2017-01-19 02:30 - 00838432 _____ () E:\Program Files (x86)\Steam\bin\chromehtml.DLL 2016-12-12 20:11 - 2016-07-04 23:17 - 00266560 _____ () E:\Program Files (x86)\Steam\openvr_api.dll 2017-02-02 13:02 - 2017-02-02 13:02 - 00144896 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\zlib1.dll 2017-02-02 13:02 - 2017-02-02 13:02 - 00076176 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\pxd.dll 2017-02-02 13:02 - 2017-02-02 13:02 - 00186256 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\LightUpdate.dll 2017-02-02 13:02 - 2017-02-02 13:02 - 02396560 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\BigUp2.dll 2016-05-23 19:36 - 2016-05-23 19:36 - 48962048 _____ () C:\Users\Jonathan\AppData\Local\MyComGames\Chrome\3.2623.1401\libcef.dll 2016-08-12 11:46 - 2014-09-28 16:59 - 00019872 _____ () C:\Program Files (x86)\Samsung\Samsung Magician\SAMSUNG_SSD.dll 2017-01-19 22:51 - 2017-01-05 04:12 - 68813088 _____ () E:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll 2015-10-16 05:14 - 2015-10-16 05:14 - 01243936 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll ==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========= (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.) ==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) =================== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service" HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service" ==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.) ==================== Internet Explorer Vertrauenswürdig/Eingeschränkt =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.) ==================== Hosts Inhalt: ========================== (Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.) 2015-10-30 08:24 - 2017-02-01 17:27 - 00002024 ____A C:\WINDOWS\system32\Drivers\etc\hosts 0.0.0.0 0.0.0.0 # fix for traceroute and netstat display anomaly 0.0.0.0 tracking.opencandy.com.s3.amazonaws.com 0.0.0.0 media.opencandy.com 0.0.0.0 cdn.opencandy.com 0.0.0.0 tracking.opencandy.com 0.0.0.0 api.opencandy.com 0.0.0.0 api.recommendedsw.com 0.0.0.0 installer.betterinstaller.com 0.0.0.0 installer.filebulldog.com 0.0.0.0 d3oxtn1x3b8d7i.cloudfront.net 0.0.0.0 inno.bisrv.com 0.0.0.0 nsis.bisrv.com 0.0.0.0 cdn.file2desktop.com 0.0.0.0 cdn.goateastcach.us 0.0.0.0 cdn.guttastatdk.us 0.0.0.0 cdn.inskinmedia.com 0.0.0.0 cdn.insta.oibundles2.com 0.0.0.0 cdn.insta.playbryte.com 0.0.0.0 cdn.llogetfastcach.us 0.0.0.0 cdn.montiera.com 0.0.0.0 cdn.msdwnld.com 0.0.0.0 cdn.mypcbackup.com 0.0.0.0 cdn.ppdownload.com 0.0.0.0 cdn.riceateastcach.us 0.0.0.0 cdn.shyapotato.us 0.0.0.0 cdn.solimba.com 0.0.0.0 cdn.tuto4pc.com 0.0.0.0 cdn.appround.biz 0.0.0.0 cdn.bigspeedpro.com 0.0.0.0 cdn.bispd.com Da befinden sich 4 zusätzliche Einträge. ==================== Andere Bereiche ============================ (Aktuell gibt es keinen automatisierten Fix für diesen Bereich.) HKU\S-1-5-21-3104372971-824348289-1990348516-1001\Control Panel\Desktop\\Wallpaper -> C:\Windows\web\wallpaper\Windows\img0.jpg DNS Servers: 192.168.178.1 HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1) Windows Firewall ist aktiviert. ==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge == HKU\S-1-5-21-3104372971-824348289-1990348516-1001\...\StartupApproved\Run: => "Discord" ==================== Firewall Regeln (Nicht auf der Ausnahmeliste) =============== (Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.) FirewallRules: [vm-monitoring-nb-session] => LPort=139 FirewallRules: [{35CFC276-7EBB-4470-95B5-125B28F38A4D}] => E:\SteamLibrary\steamapps\common\Savage Resurrection\Savage\Binaries\Win64\Savage-Win64-Shipping.exe FirewallRules: [{9550AFDF-D23A-448A-937F-245C66B4F80A}] => E:\SteamLibrary\steamapps\common\Savage Resurrection\Savage\Binaries\Win64\Savage-Win64-Shipping.exe FirewallRules: [UDP Query User{049BCCA7-A093-4436-9D2B-2F73FD78D0CF}E:\the crew (worldwide)\thecrew.exe] => E:\the crew (worldwide)\thecrew.exe FirewallRules: [TCP Query User{07C3624D-41C9-4F7C-8937-DBAD173E048A}E:\the crew (worldwide)\thecrew.exe] => E:\the crew (worldwide)\thecrew.exe FirewallRules: [UDP Query User{87F3A976-5E27-4AC3-92F4-B2B87B5B173A}E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe FirewallRules: [TCP Query User{6256CF9F-27D0-43E8-9B01-6B66DADC9115}E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe] => E:\program files (x86)\steam\steamapps\common\paladins\binaries\win32\paladins.exe FirewallRules: [{000B3A05-BF25-4404-97BF-7E257F1F8E22}] => E:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe FirewallRules: [{C4393BC8-0A40-42BC-B28E-208A8C841069}] => E:\Program Files (x86)\Steam\steamapps\common\Paladins\Binaries\Win32\HirezBridge.exe FirewallRules: [{50808387-28DA-45D8-86B9-5EB4D793886B}] => E:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{C5B36808-E166-4C11-B950-26C21C93D92A}] => E:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [UDP Query User{6D68BA73-3F8F-4857-A05B-40C7AAD68CB1}C:\program files (x86)\diablo iii\diablo iii.exe] => C:\program files (x86)\diablo iii\diablo iii.exe FirewallRules: [TCP Query User{E482E63C-B3BB-4F3A-A96A-3E2344641C4A}C:\program files (x86)\diablo iii\diablo iii.exe] => C:\program files (x86)\diablo iii\diablo iii.exe FirewallRules: [{8AABA668-0ABE-486C-9329-EC182DDD8D18}] => E:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe FirewallRules: [{592BD28F-980F-498B-8487-B20C480089BD}] => E:\Program Files (x86)\Steam\steamapps\common\Zombie Night Terror\znt.exe FirewallRules: [{949CE1C3-39A5-4EF8-B90C-8D91492B696F}] => E:\Program Files (x86)\Steam\steamapps\common\CrossCode Demo\crosscode-beta.exe FirewallRules: [{1C193A6F-25B2-4CA7-B32C-5FEEAE5A73AE}] => E:\Program Files (x86)\Steam\steamapps\common\CrossCode Demo\crosscode-beta.exe FirewallRules: [{1CA06D10-43C6-40F8-AB4E-37EBF1565F5A}] => E:\Program Files (x86)\Steam\steamapps\common\Spellforce Platinum Edition\SpellForce.exe FirewallRules: [{AD8A16F2-6869-4C13-9CCE-EA144CE84AA3}] => E:\Program Files (x86)\Steam\steamapps\common\Spellforce Platinum Edition\SpellForce.exe FirewallRules: [{0AABD25B-7260-44AF-894B-37D451DC1906}] => E:\Program Files (x86)\Steam\steamapps\common\Deadly30\Deadly30.exe FirewallRules: [{538433C7-A520-429C-B8C1-764EEDEEF4EF}] => E:\Program Files (x86)\Steam\steamapps\common\Deadly30\Deadly30.exe FirewallRules: [{98448D14-A5F0-4BA9-8E11-2547A0B90CA7}] => E:\Program Files (x86)\Steam\steamapps\common\Ghost\ghost.exe FirewallRules: [{3C09B8A6-FC19-4888-9654-061D5EB8A37F}] => E:\Program Files (x86)\Steam\steamapps\common\Ghost\ghost.exe FirewallRules: [{D4FFE01B-46E8-4E5B-8FFB-5CD964E215DC}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{EBB022C4-6EF9-4960-A61B-1B57ECF1A364}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExileSteam.exe FirewallRules: [{08D9D7A0-2A3B-437D-9F11-C060FD7FEE5C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{6594AEAA-C574-4734-8DE0-E863858B3467}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{8AF3AC56-877A-4435-AA6B-8996D6217EAB}] => E:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{D51B8637-7350-4432-9CDD-25DAE4525CB2}] => E:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{D26E5ECD-EDB0-4451-9EFF-C7DD956F8812}] => E:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{E23D9864-BD72-49BE-8CD8-CCED9237B1EC}] => E:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{443B9F80-48D4-4881-BA4E-B60990368BD4}] => E:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{96A89632-7C76-4058-861B-9898B1911639}] => E:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{F66DDC78-384F-40F8-9368-9CA0F752D09B}] => E:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{779CC018-27AF-4539-91AB-3020209CA25C}] => E:\Program Files (x86)\Steam\Steam.exe FirewallRules: [UDP Query User{414E480A-91FD-41B3-A287-10149DE3052B}E:\hearthstone\hearthstone.exe] => E:\hearthstone\hearthstone.exe FirewallRules: [TCP Query User{8DD10473-311E-489A-BCA0-4E3331EE2676}E:\hearthstone\hearthstone.exe] => E:\hearthstone\hearthstone.exe FirewallRules: [{EC04DBC7-77C2-4E43-9FA9-C49B55272FCB}] => E:\SteamLibrary\steamapps\common\Zombie City Defense 2\ZCD2.exe FirewallRules: [{60B345B2-6911-485A-BD79-CE05A377B9E9}] => E:\SteamLibrary\steamapps\common\Zombie City Defense 2\ZCD2.exe FirewallRules: [{B1D9550F-BCB4-4A7B-9CCB-BEEB7F8B274B}] => E:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{E88FE938-6C23-47C2-889F-ADA6E1369BF1}] => E:\SteamLibrary\steamapps\common\GarrysMod\hl2.exe FirewallRules: [{3D446137-FC16-4972-9FCA-BD94AAC9A501}] => E:\SteamLibrary\steamapps\common\War of the Human Tanks\War of the Human Tanks.exe FirewallRules: [{6C3391E4-A748-45D2-808E-C6D270A9C357}] => E:\SteamLibrary\steamapps\common\War of the Human Tanks\War of the Human Tanks.exe FirewallRules: [{6EB7A842-7DCA-4B23-B914-BA4568B436CA}] => E:\SteamLibrary\steamapps\common\Duelyst\Duelyst.exe FirewallRules: [{4F721FAC-3A39-4BD2-A557-C9BE514E3D26}] => E:\SteamLibrary\steamapps\common\Duelyst\Duelyst.exe FirewallRules: [{7E08E825-1CEF-4A21-9ED4-CFFBB2D7606A}] => E:\SteamLibrary\steamapps\common\Crypt of the NecroDancer\NecroDancer.exe FirewallRules: [{657DF24C-74F9-48AE-8B3E-9345F784F1F9}] => E:\SteamLibrary\steamapps\common\Crypt of the NecroDancer\NecroDancer.exe FirewallRules: [{9688742B-3CCF-4550-843B-97373E06FF97}] => E:\SteamLibrary\steamapps\common\AirMech\AirMech.exe FirewallRules: [{FB1BDA12-7980-4E36-B98E-7AB89F10025F}] => E:\SteamLibrary\steamapps\common\AirMech\AirMech.exe FirewallRules: [{7FEB1A90-348A-403D-A81B-8A90909B8046}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\GAME.exe FirewallRules: [{4D4C2D8B-3548-4B2A-8E2C-FE620EDC232F}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\GAME.exe FirewallRules: [{6AD43E65-4AAB-485A-A8EF-974A44126A59}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\configure.exe FirewallRules: [{C063EEC5-F57B-47B9-B911-F779BC09A639}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\configure.exe FirewallRules: [{FB25B13F-E480-4A9A-9C99-6CE3FFDD359A}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\HitmanBloodMoney.exe FirewallRules: [{0536973D-1042-451D-AC2D-BD8D995754DA}] => E:\SteamLibrary\steamapps\common\Hitman Blood Money\HitmanBloodMoney.exe FirewallRules: [{4AD7A1A2-1893-4807-ABDD-455E046C54F3}] => E:\SteamLibrary\steamapps\common\MountBlade Warband\mb_warband.exe FirewallRules: [{8F004FE6-C2BC-4FF8-AD4D-04292A15AD82}] => E:\SteamLibrary\steamapps\common\MountBlade Warband\mb_warband.exe FirewallRules: [{4CEB1096-CBD3-4068-AE01-09816F41BDC7}] => E:\SteamLibrary\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe FirewallRules: [{B4B06926-3BF7-43DA-996D-91BECCDBA9F2}] => E:\SteamLibrary\steamapps\common\Sanctum2\Binaries\Win32\SanctumGame-Win32-Shipping.exe FirewallRules: [{41FC8989-8330-4970-9857-0E47BA14C2F5}] => E:\SteamLibrary\steamapps\common\InfinityWars\Infinity Wars TCG.exe FirewallRules: [{A865BF50-DA62-426F-AEAD-52F3BEFE344D}] => E:\SteamLibrary\steamapps\common\InfinityWars\Infinity Wars TCG.exe FirewallRules: [{4208F3F2-B530-4B58-8CAD-94EC99A209F8}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe FirewallRules: [{E4F41827-7026-462F-9DA8-94ED4AC06EEF}] => E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe FirewallRules: [{97FB27A3-61E5-4059-86C2-D44273ED29E6}] => E:\Program Files (x86)\Origin Games\Crysis 3\Bin32\Crysis3.exe FirewallRules: [{5EB34E52-2760-41C6-B72C-D88C1F13B8E2}] => E:\Program Files (x86)\Origin Games\Crysis 3\Bin32\Crysis3.exe FirewallRules: [{6FCF9910-498F-4B17-B6E4-2F1821B2EA1E}] => C:\Program Files (x86)\Steam\steamapps\common\Contagion\contagion.exe FirewallRules: [{D7E1D59B-7634-4832-9CC2-621B3E79D267}] => C:\Program Files (x86)\Steam\steamapps\common\Contagion\contagion.exe FirewallRules: [{172EE065-3219-438B-AECD-6133CFDA7836}] => C:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe FirewallRules: [{68DF5999-E979-4E4E-BC62-3B2C63E4618E}] => C:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe FirewallRules: [{57F10B5A-5CC2-45CE-A3EB-D114A5670638}] => C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe FirewallRules: [{A5C9C045-7ECB-4042-8AFB-86EC03390FDA}] => C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe FirewallRules: [{B4B22AAE-D437-4588-BBA6-3C7B8BA6719B}] => C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe FirewallRules: [{83E8E329-820A-4568-BC19-37FA2A9CC2D3}] => C:\Program Files (x86)\Steam\steamapps\common\Mafia II\pc\mafia2.exe FirewallRules: [{CF200FFA-1026-4344-9EC4-DD6DF24C9084}] => C:\Program Files (x86)\Steam\steamapps\common\Shadwen\shadwen_launcher.exe FirewallRules: [{46CD2E39-AB9F-4CA8-9089-794AB0763AE4}] => C:\Program Files (x86)\Steam\steamapps\common\Shadwen\shadwen_launcher.exe FirewallRules: [{AC3A587A-2DEB-4B3F-ABB8-02E6D555070E}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 3\trine3_launcher.exe FirewallRules: [{3684F3B6-B328-48DF-A3E8-6D1A0ECC36FE}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 3\trine3_launcher.exe FirewallRules: [{93E95434-F6B6-4911-A053-186E31191A29}] => C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{37FADAF5-D0EB-4080-B204-AE4328B5AEA3}] => C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{60AF0DE6-73BD-4095-BB7D-74635D9BF9AC}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 2\trine2_launcher.exe FirewallRules: [{12C69A7D-7BB1-487B-803F-D866B4EFB8B0}] => C:\Program Files (x86)\Steam\steamapps\common\Trine 2\trine2_launcher.exe FirewallRules: [{2225331B-5412-4835-98E8-D372923AD663}] => C:\Program Files (x86)\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe FirewallRules: [{869C8FB6-170B-4F84-8237-24C9C9702475}] => C:\Program Files (x86)\Steam\steamapps\common\Trine\_enchanted_edition_\trine1_launcher.exe FirewallRules: [{0EC5E70A-0692-4BEF-8767-C1D848BAC811}] => C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{FA030ADE-519B-4743-B4B1-F3A40B70B052}] => C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{2288DB85-27A4-4652-8663-F8BA64ADFBD3}] => C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{4D3BA0C0-5B87-4D59-97E9-DBD76DFA5D15}] => C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe FirewallRules: [{6D7B8A76-02B6-435C-803A-F5F7AEAE4274}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe FirewallRules: [{387D9AFD-0DD9-4391-8E52-DD14CBD8EC0E}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe FirewallRules: [{F86059B0-CB5C-44EF-A75C-D91714A7F2FD}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe FirewallRules: [{C3B5307F-DC4E-444C-8744-3AC03588F495}] => C:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe FirewallRules: [{C9FF2619-5E20-4BB7-97F8-44150C368914}] => C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{40470BD7-29E4-454A-92A5-8BCFA1A54F9F}] => C:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [UDP Query User{618B8E73-9DC7-4D7D-85A0-1F03AEF15C38}C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe FirewallRules: [TCP Query User{83FA71AB-E6FF-42AC-8BFD-731291570644}C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => C:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe FirewallRules: [{A93DE7BC-B877-4BF2-B026-E170F842E01C}] => C:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe FirewallRules: [{D55F38D6-BEF9-4F15-97F5-226476F96F71}] => C:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe FirewallRules: [{47ED4C95-5C04-47B7-92A2-D6C12BA04F74}] => C:\Program Files (x86)\Steam\steamapps\common\Sunrider\SunriderMaskofArcadius-Steam.exe FirewallRules: [{1EFABF9D-DD25-498C-9884-3E683822754D}] => C:\Program Files (x86)\Steam\steamapps\common\Sunrider\SunriderMaskofArcadius-Steam.exe FirewallRules: [{289DB92D-0409-42D5-BD87-E15B2C685B8F}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\Shadowgrounds Survivor Launcher.exe FirewallRules: [{1F95774F-53A7-4D5A-ADF9-628E0E9CDAFC}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\Shadowgrounds Survivor Launcher.exe FirewallRules: [{9E587941-C6D0-4173-8CCA-B9D22B8ADBE4}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\survivor.exe FirewallRules: [{98004AB0-7797-4157-BCF0-F3F293D01662}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds Survivor\survivor.exe FirewallRules: [{1A3E147D-27F4-4CDB-858D-C80E562ECC78}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\ShadowgroundsLauncher.exe FirewallRules: [{9C37A5D2-7F9D-491D-99FE-9AD0EE9F75E0}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\ShadowgroundsLauncher.exe FirewallRules: [{536D1F57-6C23-4ED1-8870-1E185C3A147B}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\Shadowgrounds.exe FirewallRules: [{9FBD63B2-BBC8-4F30-AA19-1E2E2AD9E98D}] => C:\Program Files (x86)\Steam\steamapps\common\Shadowgrounds\Shadowgrounds.exe FirewallRules: [{70C2E79B-B871-4476-BB96-DD7C24EEF81C}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{33707207-71B3-4381-90DF-7498066DA8ED}] => C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{37CD030F-122D-439F-AA1A-A7626616F7DA}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{750EFBA0-429B-41F2-88C9-3E70F7014B8B}] => C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{496A8DE4-B431-4E76-A8A8-C2891748CCFC}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{F38248B1-F972-4BDD-81B7-00898EC35DF1}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{35BFB23E-B7F4-49AC-B99E-C62B473EA71B}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe FirewallRules: [{CA338693-B436-4A24-9FE1-B64F12447D97}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{6C97D52C-C498-4CE1-B76A-8622063AF913}] => C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{E6DFEC20-EEDA-4C1B-9DC8-C5E2AA1E5A2C}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{82541839-9314-493D-A848-EBF5FA36EF94}] => C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{56430841-5D55-4A6B-B414-33B879391082}] => E:\Program Files (x86)\Steam\steamapps\common\RebelGalaxy\SteamLauncher.exe FirewallRules: [{A15CDE16-4694-44BB-9306-334695EE5DC7}] => E:\Program Files (x86)\Steam\steamapps\common\RebelGalaxy\SteamLauncher.exe FirewallRules: [{0CD1EB9D-B9FC-47C5-8B7D-D360B3AAFC0B}] => E:\Program Files (x86)\Steam\steamapps\common\BloonsTD5\BTD5-Win.exe FirewallRules: [{561BEC68-9D04-41DC-85DA-D83FE51DD124}] => E:\Program Files (x86)\Steam\steamapps\common\BloonsTD5\BTD5-Win.exe FirewallRules: [{69FACE47-35B9-4201-99E0-F000D4CF940F}] => E:\Program Files (x86)\Steam\steamapps\common\Magic 2015\DotP_D15.exe FirewallRules: [{E827CF6A-865E-4D56-81A1-49EB562CABBB}] => E:\Program Files (x86)\Steam\steamapps\common\Magic 2015\DotP_D15.exe FirewallRules: [{8DCA107F-64C3-4DA7-862F-A17A5D7E8990}] => E:\Program Files (x86)\Steam\steamapps\common\Magic Duels\MagicDuels.exe FirewallRules: [{30BEAD87-CE90-4E85-A336-AB1083402BE2}] => E:\Program Files (x86)\Steam\steamapps\common\Magic Duels\MagicDuels.exe FirewallRules: [TCP Query User{80757309-357B-4794-875B-DDAE76F62FE9}E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe FirewallRules: [UDP Query User{F2B825F6-6E75-4C11-B63C-40A0A5ACD661}E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe] => E:\program files (x86)\steam\steamapps\common\total war warhammer\warhammer.exe FirewallRules: [{199AF2D9-EBBF-4D3A-A82A-C7650080ABB1}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe FirewallRules: [{CBBBBF5A-3079-49E5-AC3B-E30F2C0002BC}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Dragonfall Director's Cut\Dragonfall.exe FirewallRules: [{A96D90D8-F474-4136-BA57-A09F62C8C2DB}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe FirewallRules: [{C03D7565-C82A-4128-ACB0-5696CBDAF74C}] => E:\Program Files (x86)\Steam\steamapps\common\Shadowrun Hong Kong\SRHK.exe FirewallRules: [{2A459017-A1DB-4B5A-9B28-47280332E19A}] => E:\Program Files (x86)\Steam\steamapps\common\STAR-BOX\Game.exe FirewallRules: [{C631CBA4-1DE8-4FD8-AECB-AADE2A56D236}] => E:\Program Files (x86)\Steam\steamapps\common\STAR-BOX\Game.exe FirewallRules: [{BEE8546F-170A-4F8E-8CEB-908EEE9A9C5E}] => E:\Program Files (x86)\Steam\steamapps\common\Atlas Reactor\GlyphClient.exe FirewallRules: [{5B52F912-398C-4EE0-B13E-F12E230F0324}] => E:\Program Files (x86)\Steam\steamapps\common\Atlas Reactor\GlyphClient.exe FirewallRules: [{986A4965-EAF0-4AB0-8A07-288B1C882F40}] => E:\Program Files (x86)\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe FirewallRules: [{35A46A55-8736-4883-95C4-36F7D8C76F83}] => E:\Program Files (x86)\Steam\steamapps\common\mark_of_the_ninja\bin\game.exe FirewallRules: [{569A2D39-360D-4245-9430-E01BE3E8F186}] => E:\Program Files (x86)\Steam\steamapps\common\Bloody Walls\game.exe FirewallRules: [{400E1FBF-A5C4-4544-B8D3-9CF7087CAF03}] => E:\Program Files (x86)\Steam\steamapps\common\Bloody Walls\game.exe FirewallRules: [{03B94802-9F4B-4433-859B-C8EB321A5898}] => E:\Program Files (x86)\Steam\steamapps\common\Star Wars Battlefront II\GameData\BattlefrontII.exe FirewallRules: [{EF1DC6C2-B39B-4F68-ABFA-C2A42A77E80E}] => E:\Program Files (x86)\Steam\steamapps\common\Star Wars Battlefront II\GameData\BattlefrontII.exe FirewallRules: [{0B41EF7B-C85C-4C3A-9ED2-C46C26C07541}] => C:\Program Files (x86)\Origin Games\Dungeon Keeper\DATA\DOSBox\DOSBox.exe FirewallRules: [{F3CFCA1F-51E7-4974-ACB6-080EEE311C57}] => C:\Program Files (x86)\Origin Games\Dungeon Keeper\DATA\DOSBox\DOSBox.exe FirewallRules: [{EDD1C830-6B8A-47F6-8675-00C8B5132FA2}] => E:\SteamLibrary\steamapps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{CA740004-5D83-4C26-BA14-55A1071502E3}] => E:\SteamLibrary\steamapps\common\Rise of the Tomb Raider\ROTTR.exe FirewallRules: [{4C396A49-F701-4D0C-845E-6E8383D2C304}] => E:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe FirewallRules: [{DC7EAC97-08CD-4B20-8188-C39A43A0FBEC}] => E:\Program Files (x86)\Steam\steamapps\common\Battleborn\Binaries\Win64\Battleborn.exe FirewallRules: [{D48116AA-1FAD-40A7-90EA-D021E9F13871}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{D39CA1D0-1576-4356-924A-DA8456ABE150}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2cfg.exe FirewallRules: [{8E83A21A-19B1-4FB3-B72C-81A98AE06561}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7BECF0BF-053E-47A9-9351-C48F2DCA9533}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2227327B-D596-4C1B-A946-7379EDE9DDA3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{181189AB-0637-4C26-8502-398540E4CAE9}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F74AEE0B-BE9A-41BC-9B0A-026589307B74}] => C:\Games\World_of_Warships\WoWSLauncher.exe FirewallRules: [{3E2B74E4-2EA1-4691-BC7E-7EE706763717}] => C:\Games\World_of_Warships\WoWSLauncher.exe FirewallRules: [{5B03C3D5-BF27-4BBE-82D6-D31F65C543BD}] => C:\Games\World_of_Warships\worldofwarships.exe FirewallRules: [{D3978088-67E8-45AD-95BA-C392E1976D35}] => C:\Games\World_of_Warships\worldofwarships.exe FirewallRules: [TCP Query User{C814BC18-6A63-4291-9B24-D4690178072D}C:\program files (x86)\opendungeons\opendungeons.exe] => C:\program files (x86)\opendungeons\opendungeons.exe FirewallRules: [UDP Query User{EC3B3B9A-5E00-418D-AFE3-39A5231BD5D6}C:\program files (x86)\opendungeons\opendungeons.exe] => C:\program files (x86)\opendungeons\opendungeons.exe FirewallRules: [{EC29E49B-2A9A-46BF-A707-900905923441}] => E:\SteamLibrary\steamapps\common\SourceSDK\bin\SDKLauncher.exe FirewallRules: [{8282779F-C5D6-4A60-951C-CD5D4B5EB5DE}] => E:\SteamLibrary\steamapps\common\SourceSDK\bin\SDKLauncher.exe FirewallRules: [{9C079AA2-29C4-4016-88D3-387158393EB2}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A774DAFF-81E0-4933-A332-7BABD10CF7EA}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{6AF60BD8-912E-4B13-8F2D-131106B25C60}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{3A7D8B35-7580-4263-9C42-DD4CA96D5B8A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [TCP Query User{0CE12F12-54BE-43DC-A8BA-352795BE2B1A}C:\users\jonathan\desktop\xonotic\xonotic.exe] => C:\users\jonathan\desktop\xonotic\xonotic.exe FirewallRules: [UDP Query User{78050057-A131-470F-8DA6-EAECEC44CA10}C:\users\jonathan\desktop\xonotic\xonotic.exe] => C:\users\jonathan\desktop\xonotic\xonotic.exe FirewallRules: [TCP Query User{4762C647-9415-43D5-B97F-133291EEF2D9}C:\program files (x86)\counter-strike\counter-strike\hl.exe] => C:\program files (x86)\counter-strike\counter-strike\hl.exe FirewallRules: [UDP Query User{E66B53C2-D284-46D5-8CE1-9E7C5724A74B}C:\program files (x86)\counter-strike\counter-strike\hl.exe] => C:\program files (x86)\counter-strike\counter-strike\hl.exe FirewallRules: [{FA3FCC26-FA12-4D5A-A82E-9724BEB02BC7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{FC4D66CE-519E-47B5-ACC3-D485A68590A3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F06345DA-A94D-4614-9268-C04E06BE3854}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7FBF94CD-61A1-4EB7-99B6-CE6822954D66}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D97EABFB-D56F-4C1E-9C26-73E392686D72}] => E:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe FirewallRules: [{DD43D6C6-2CB4-483C-861F-7FA4C46A714D}] => E:\Program Files (x86)\Steam\steamapps\common\EvolveGame\bin64_SteamRetail\Evolve.exe FirewallRules: [{C29E5567-E54F-490E-A409-853B138452CE}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{95C2D103-6E9D-435B-AF8D-9E00F3F90EC8}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{67CF0793-EF9E-4D2A-917F-C22F7769DADB}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{73E6B78C-B6FA-47E6-89E9-E2AB874395EB}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{19AD245B-0F79-45D4-AD8F-F117662AB2BF}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{1B04A0EE-4892-4809-95A5-191AC5741A25}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B6B5E469-7895-456F-93E1-836745BB4723}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{36010AAB-A4A9-429C-BD5B-D51DF2764967}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{20C93A02-11F3-4487-9A9A-1A79059C736A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{604F5C85-1615-4B27-9FC6-CD39A7BBED10}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D457FDD6-9AD4-458B-AEDD-52F53B3BA055}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{0A6181D7-45B6-454F-9D62-7F440F63A97D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{079F2E0F-EA9A-4291-924D-192336641517}] => E:\SteamLibrary\steamapps\common\Dungeon Defenders 2\DunDefLauncher.exe FirewallRules: [{0C8C25D9-B71B-403F-BD12-6D9BBE0C12E9}] => E:\SteamLibrary\steamapps\common\Dungeon Defenders 2\DunDefLauncher.exe FirewallRules: [TCP Query User{78904BE1-1822-4B6C-BDFB-6635A0DEDCA6}E:\starcraft ii\versions\base47185\sc2_x64.exe] => E:\starcraft ii\versions\base47185\sc2_x64.exe FirewallRules: [UDP Query User{08E40D5A-1D7A-4E8F-A6B9-3392A5262D63}E:\starcraft ii\versions\base47185\sc2_x64.exe] => E:\starcraft ii\versions\base47185\sc2_x64.exe FirewallRules: [{AFC91C9E-418A-497F-AB80-306F2305C642}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C3AD879F-3AD3-41A1-9AE8-A6A12038B033}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{64940C6D-7D09-4ED6-931A-D891AE3F1535}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{DF67E8C8-295D-4596-BB66-BF715B92ED01}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{21942EED-2CB2-46C6-AC59-8F890555AC9A}] => E:\SteamLibrary\steamapps\common\Shadowverse\Shadowverse.exe FirewallRules: [{D44DD015-9549-4E12-91CC-783CF5DA2DD2}] => E:\SteamLibrary\steamapps\common\Shadowverse\Shadowverse.exe FirewallRules: [{16336BE0-7A31-42F0-ACDF-9C11EBFB49B1}] => E:\SteamLibrary\steamapps\common\Dead Age\DeadAge.exe FirewallRules: [{44D978E4-D5E5-41ED-9481-A5B5AE18BF37}] => E:\SteamLibrary\steamapps\common\Dead Age\DeadAge.exe FirewallRules: [TCP Query User{146208BD-A42E-480B-9207-1D574897632A}E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe] => E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe FirewallRules: [UDP Query User{E2F21297-1CC0-4541-8A2A-EE74339B0C72}E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe] => E:\steamlibrary\steamapps\common\metal assault - gigaslave - europe\_mas.exe FirewallRules: [{FD0C0E17-97A9-435C-900B-C499DDD5E130}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{925D6974-70BF-48D9-8B0D-F78B0DC964DA}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2344D580-30EE-4A5E-AAD9-2EC874DD3664}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{276DF986-C7ED-4BAA-8CB9-D72BB8CCD509}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5B056765-B473-45E5-A5F1-CB878C71173A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{6626EDD2-A4D7-4988-9D7C-116FAFFC4849}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A2C3D1F6-BAC7-451B-A7DB-5D0196F981FA}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe FirewallRules: [{23025E19-C03C-4735-8E6C-998304ACA079}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid32.exe FirewallRules: [{BE7F97B2-C5A7-4F66-BDEA-5B5C32585013}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe FirewallRules: [{2B990431-AD07-4B16-9074-AE57A6062D67}] => E:\Program Files (x86)\Steam\steamapps\common\ProjectZomboid\ProjectZomboid64.exe FirewallRules: [{367C9E23-E8B6-4671-AB6C-9BD88D8D312F}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe FirewallRules: [{B99ACD93-FB43-4DEA-97CB-D009B4901566}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon.exe FirewallRules: [{5BF403DA-455A-4D23-9CC2-595E63B88C69}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11_b.exe FirewallRules: [{5025BD80-BD10-42B7-BEA4-9476F0206F2C}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11_b.exe FirewallRules: [{57BE5A68-2194-471D-A6A0-52CA775B49ED}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe FirewallRules: [{43E025C1-D1DC-4072-881C-78DB9AC0D8FF}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Far Cry 3 Blood Dragon\bin\fc3_blooddragon_d3d11.exe FirewallRules: [{78E770CE-C50C-4417-A124-630A7F6A4874}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{82FC6CE6-9951-4B92-BC4B-825F4F272E56}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{183BA5AD-63A3-4367-9CD7-A490D984DF66}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{03CC1667-AA67-4D7C-A8B0-7518B63196F9}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{6EC45C86-D11A-48AF-90DA-4CA88779F074}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B0864AB7-68B1-4437-A43E-8D80D70BC69E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BC78EB61-AF5F-4C55-863B-5FEACA69B878}] => E:\SteamLibrary\steamapps\common\Vanguards\Vanguards.exe FirewallRules: [{FD41667D-A35D-42E0-890F-7AB511E446B5}] => E:\SteamLibrary\steamapps\common\Vanguards\Vanguards.exe FirewallRules: [TCP Query User{0AF4F6F3-255C-47DC-9247-B3633C2AB448}E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe] => E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe FirewallRules: [UDP Query User{801AB3F8-ADA7-4A0B-B97E-15F247FFA9B4}E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe] => E:\steamlibrary\steamapps\common\vanguards\vanguards\binaries\win32\vanguards-win32-shipping.exe FirewallRules: [{87D7FF36-3511-43A4-9855-2411F9837180}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9AB988F0-5080-4068-AAE9-B721B1BB304A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C218FCC6-D23A-4D11-993C-1A9C8E94F490}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExile_x64Steam.exe FirewallRules: [{B04703B3-D67B-483A-8A2F-B9F77635C02E}] => E:\Program Files (x86)\Steam\steamapps\common\Path of Exile\PathOfExile_x64Steam.exe FirewallRules: [{C66EE641-8582-45E8-AFB0-44C34E665EBD}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{3D951F78-AD43-4F3B-BAD3-91BAF19D4595}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [TCP Query User{144C1408-F048-43A7-AF3D-031E791A60DC}E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe FirewallRules: [UDP Query User{1B576111-9C5C-4A47-8249-B17208565F86}E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe] => E:\steamlibrary\steamapps\common\eve online\sharedcache\tq\bin\exefile.exe FirewallRules: [{7AB1CD2E-E5E9-4E20-8BC7-51A66EAADABC}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{3BAF439E-EFA4-4A00-B962-66D7C591CD68}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E1544905-CF14-40A5-BCFA-19A510276362}] => E:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe FirewallRules: [{81AB704C-B2A1-49D3-9C19-504291B07096}] => E:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe FirewallRules: [{33004F66-EAC7-4673-9273-D6E3D105BD73}] => E:\SteamLibrary\steamapps\common\Warface\live\nw.exe FirewallRules: [{9373B8B7-72C2-4459-A1B2-8918E24D922D}] => E:\SteamLibrary\steamapps\common\Warface\live\nw.exe FirewallRules: [TCP Query User{7753D235-C6CC-4764-A9DB-CB5B545E4375}E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe FirewallRules: [UDP Query User{55D823E1-738E-422D-BE94-3C641B54BDB7}E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe] => E:\steamlibrary\steamapps\common\xcom-enemy-unknown\xew\binaries\win32\xcomew.exe FirewallRules: [{B779BDC1-CA18-4DC0-ABBC-DC44BA8DE893}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{3EC8EAD9-B671-46F7-8E7A-B747DE74C3F6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{06C8B61D-D552-4351-B695-31729527368F}] => E:\SteamLibrary\steamapps\common\Zenimax Online\zosSteamStarter.exe FirewallRules: [{53ADC676-645F-49A0-B1FC-CC7F2B6F07C2}] => E:\SteamLibrary\steamapps\common\Zenimax Online\zosSteamStarter.exe FirewallRules: [TCP Query User{D7166135-2ADF-4301-9537-AC56AF5F2893}C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe] => C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe FirewallRules: [UDP Query User{AC8AB07A-90F0-40FB-9B35-3C80C4FF9522}C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe] => C:\users\jonathan\appdata\local\temp\i1480541206\windows\resource\jre\bin\javaw.exe FirewallRules: [{AD83F36E-4E54-478F-944C-81EFFD2067A7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4D33EDD7-10DA-4573-9759-5298E1BD1C8E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5C096371-959F-4ABD-8E46-489C4AE44D19}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{1F5AD116-705A-4F81-AE6A-696B88AFD905}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{DC41437D-85D4-4CEF-8ECE-3EA67BB5619A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B91604CA-9F0B-422A-8367-DDBD1DD00C30}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5787AB14-8E9B-4AA6-8903-1E3C11E0E455}] => E:\SteamLibrary\steamapps\common\World of Tanks Blitz\wotblitz.exe FirewallRules: [{D3C00FEB-BC9F-455C-A53E-52DD1380142B}] => E:\SteamLibrary\steamapps\common\World of Tanks Blitz\wotblitz.exe FirewallRules: [{BAD7980C-367C-4FFB-B845-0267EB367F2F}] => E:\SteamLibrary\steamapps\common\Dogs of War Online\DogsOfWar.exe FirewallRules: [{C2630CF0-D815-403C-9C9B-3E50AE7890C6}] => E:\SteamLibrary\steamapps\common\Dogs of War Online\DogsOfWar.exe FirewallRules: [{5A7666D7-5303-44AF-BA36-AEBF045A46B9}] => E:\SteamLibrary\steamapps\common\Rainbow Six 3 Gold\system\RavenShield.exe FirewallRules: [{37FB7901-9723-4972-946D-83AF6DDC8066}] => E:\SteamLibrary\steamapps\common\Rainbow Six 3 Gold\system\RavenShield.exe FirewallRules: [{58A13735-AC1D-4B55-A22B-EE9C2866D44D}] => C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{37B3B72D-D93B-4AB2-8729-56644057D41E}] => C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{657CA939-8AD5-4BEA-991A-B7D700879809}] => C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{0C24EC0C-5D96-4987-B897-0E4730EE3D51}] => C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{08FA3C0A-D959-41C3-89C7-84D8B54F8E54}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{DED94182-4110-4450-B312-78E70DAC3464}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2CFDBF8C-44B8-4AEB-8E74-E07BFB81A417}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{25D7FF3A-576E-48B7-B325-9FD66AAE4160}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4507A2E2-CD3C-45BC-A43A-66479512A379}] => E:\Assassin's Creed III\AC3SP.exe FirewallRules: [{0DDBE1B8-8141-4750-A5E4-D50E3541B49B}] => E:\Assassin's Creed III\AC3SP.exe FirewallRules: [{45E61523-726B-4A7E-A94F-15FC8F7E4CD8}] => E:\Assassin's Creed III\AC3MP.exe FirewallRules: [{C6B60FB5-07A8-41DF-869B-7368E681753C}] => E:\Assassin's Creed III\AC3MP.exe FirewallRules: [{AC8B050D-ACC5-480F-981D-8F68E51B7F3B}] => E:\SteamLibrary\steamapps\common\KW2 Battles\kw2b.exe FirewallRules: [{964C5C38-B9D4-4EF6-837C-D5068BDB2706}] => E:\SteamLibrary\steamapps\common\KW2 Battles\kw2b.exe FirewallRules: [{D7E7AF90-D6E7-4BFF-A8EC-A6D907299B75}] => E:\SteamLibrary\steamapps\common\KW2 Battles\options.exe FirewallRules: [{487691AD-5D0E-427A-B589-18E2BB7145A6}] => E:\SteamLibrary\steamapps\common\KW2 Battles\options.exe FirewallRules: [{7022FD56-06F5-4AC4-980F-F15EDC6B72D9}] => E:\SteamLibrary\steamapps\common\KW2 Battles\Editor.exe FirewallRules: [{F73E9D72-C6C2-4C78-85DB-E704505AD6B8}] => E:\SteamLibrary\steamapps\common\KW2 Battles\Editor.exe FirewallRules: [{E530A3C2-D73A-4FA8-A8A9-C11AECD433A5}] => E:\Program Files (x86)\Steam\steamapps\common\TOXIKK\Binaries\ToxikkLauncher.exe FirewallRules: [{5096E01C-F0CE-42D8-8E7C-9B32F56C64C8}] => E:\Program Files (x86)\Steam\steamapps\common\TOXIKK\Binaries\ToxikkLauncher.exe FirewallRules: [{C139A161-2CDC-4D73-8174-9203B3652737}] => E:\SteamLibrary\steamapps\common\Yu-Gi-Oh! Legacy of the Duelist\YuGiOh.exe FirewallRules: [{EDAFBAA4-226A-4BD0-BFCA-EE62DE20D3D4}] => E:\SteamLibrary\steamapps\common\Yu-Gi-Oh! Legacy of the Duelist\YuGiOh.exe FirewallRules: [{3799C63B-E6AA-42F1-A6CF-6E7EC51CDC61}] => C:\Program Files (x86)\Google\Chrome\Application\chrome.exe FirewallRules: [{910DAC5C-B1CA-4030-87D2-050BD72F5329}] => E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{00D15FE2-75EE-4AC0-B0C0-34BFC17FA426}] => E:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe FirewallRules: [{101B7593-30BF-4E48-85F5-06585D0CAE07}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F25D5661-519D-49D1-93DF-8B88F0148D79}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E120725A-3891-4FE0-95AE-86095250550F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{07E0FEFC-2089-497C-A15F-650F7B532710}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F5278708-7965-4E38-941A-C88AE05C7C04}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9A370F1B-0102-405B-B1F8-20B25140B4A3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2E3FE981-3CC9-4C46-A5EA-11F50CAF7BBC}] => E:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe FirewallRules: [{8523E2AE-45BA-4375-B825-F46775464F35}] => E:\Program Files (x86)\Steam\steamapps\common\Total War WARHAMMER\launcher\launcher.exe FirewallRules: [{69826E1B-5DDE-42BA-8EC1-02D5D58CC287}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4F58F1D0-316B-4084-956E-F0AFDB123626}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{38A7A6C2-567E-4A65-B23B-5EE45F2C8B30}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{8810CCA9-49F0-4B55-8AD9-C26C493AA27C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9B3BFFF5-61CE-4C6F-AF91-2C646057919B}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9C71EB6E-BFAB-4068-864B-09A8941A1E18}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{6EC7084D-3D4A-4FD5-9B72-0DE54E2F80F3}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{606C01FF-6E17-40D0-8DD9-F7E6F8609AEF}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D9AD3C07-CD29-447E-98DD-F4771F16E487}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9C2C2100-2017-419F-B639-21EFC0600E3C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{FF466FB2-F01C-406E-9D5D-238DF441D034}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{62F21467-A958-4005-8F18-92D6949E54F1}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4A3A91BB-0A4E-4DD2-8F94-D1B5A5870BF1}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4631817F-A02C-41C6-9D9B-C8FBC30FCB24}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{8039B86F-F00D-4D03-B912-A7842DFF84FE}] => E:\SteamLibrary\steamapps\common\Clicker Guild\guild.exe FirewallRules: [{C7AA08B1-A68A-4D11-A8A9-F116EE426112}] => E:\SteamLibrary\steamapps\common\Clicker Guild\guild.exe FirewallRules: [{B0E0A758-5953-4D7E-A50E-3F42CACCC271}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{64DB0CED-B025-4478-A1E9-FB88E32FFCCE}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C5B22E33-4E24-4120-81C1-52EA13318382}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{3C17C797-D16D-4086-9F52-8CF9D0C2EFA0}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{17E406A6-BA06-4C1B-92B1-444A8AB961D2}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C16D7FC2-AD99-4DAB-8148-51039216C161}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C225F83B-EC43-4717-B087-36D4563062AC}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\gu.exe FirewallRules: [{ECB715E5-F5DE-4D37-A3FC-CF674A73228B}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\gu.exe FirewallRules: [{4C9E03CD-CF92-4133-95BA-B5048B32BAEE}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe FirewallRules: [{338502D0-BE1F-400A-906E-CC19AD7437D6}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Rayman Origins\Rayman Origins.exe FirewallRules: [{615A1FDE-E409-44E7-BAED-BFEFF06E3E56}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C513C93E-A013-48C4-B9CE-6BEF60AA19C9}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A0AB4FB2-DBE5-4725-90A7-A74EA01B5006}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B7D2B899-7BD9-4C19-8B39-E7F2F5E6D18D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [TCP Query User{1BEB1BEC-4CE3-405F-8CA2-D2809A6F8F94}E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe] => E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [UDP Query User{78306F49-6554-41F2-95F3-245B34C65A37}E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe] => E:\steamlibrary\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [{A30B53FB-5007-460D-9D67-5438424D2042}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{77075431-0224-4FE1-B082-06E13FCBDD9D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2B0BC843-4221-4C10-8057-5643882533F4}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{41D62EA2-0F7F-48C2-B31F-51ACEB922B2E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{36034C75-C05E-46FC-B28F-6D09A9AD9C06}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{06079D9B-0ED6-419A-9532-E14997A5C663}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{20E7BA12-766B-43F9-A7C2-F72AA4D56B3E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A1E507CF-B59C-438F-A401-4FAF5706349E}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F47C6E31-A8CE-4E22-88D7-D77286719FAA}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Splinter Cell\system\SplinterCell.exe FirewallRules: [{DE168F08-49D4-42BB-8688-A25239CDE2F3}] => C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Tom Clancy's Splinter Cell\system\SplinterCell.exe FirewallRules: [{A1B24D8F-D2F3-4E30-9116-EB8B6A88BDEB}] => E:\SteamLibrary\steamapps\common\XCOM 2\Binaries\Win64\Launcher\ModLauncherWPF.exe FirewallRules: [{00ADEFDD-5BAE-4CCE-8D5E-3E6D215F8550}] => E:\SteamLibrary\steamapps\common\XCOM 2\Binaries\Win64\Launcher\ModLauncherWPF.exe FirewallRules: [TCP Query User{03D822D2-1311-4240-91B8-3D9D211576EB}E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe FirewallRules: [UDP Query User{165CAD4B-9CDF-46F8-B3EC-58FF16E3A31B}E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe] => E:\steamlibrary\steamapps\common\xcom 2\binaries\win64\xcom2.exe FirewallRules: [{29BEA22D-142B-4385-B725-F57B0F74DDBB}] => E:\SteamLibrary\steamapps\common\Company of Heroes 2\RelicCoH2.exe FirewallRules: [{453C2F9C-594F-4EC9-A523-5ED118BC1BA7}] => E:\SteamLibrary\steamapps\common\Company of Heroes 2\RelicCoH2.exe FirewallRules: [{D9D748E2-6D17-4310-9E82-FEAD0EADCD6B}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{28BDC0A8-A653-4C89-95D7-090E1E4C1C42}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2A8BB6D3-8735-40AC-9F14-C7A509816B74}] => E:\SteamLibrary\steamapps\common\DOOM\DOOMx64.exe FirewallRules: [{8668CD0F-2FB1-4489-868B-398616D98BCE}] => E:\SteamLibrary\steamapps\common\DOOM\DOOMx64.exe FirewallRules: [{9167161A-4A3A-4625-B6D3-B56E22EE375D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C2F4B930-D4B8-4C7C-9B3B-1411AF490974}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{82879BB6-B9C4-42BC-B4F4-E8FDC160F633}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{474F2B3C-61E0-4996-A90D-D6448F6D7338}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7264E46B-8D0C-40C0-84D3-7F7F77CD6FBA}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe FirewallRules: [{8D440DE0-A8B3-471A-8DD4-58EFAA0CD707}] => E:\SteamLibrary\steamapps\common\Warface\live\gflauncher.exe FirewallRules: [{A0F3ED4A-CC3E-4C8B-B87A-7F02556DAB74}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9F0E8A5A-969A-4994-998F-28404EF1D075}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{763675A8-C1A4-4ECF-A202-F918971DC8B6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C62D56BC-5475-477E-85F4-89AA9CDC3186}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{43047CB5-BDDD-4D27-8DF8-54AA40A79B30}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{AE71CB23-8653-494C-9AF9-7C2CDF42F853}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BDD17484-2D85-4605-85FC-80F69F8EECA4}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4E9A2213-7718-444D-B789-1C01D3D06374}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{43FD9C83-6401-419B-A79F-15CE68BB281C}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E3C814F4-1D23-4BA0-AFD5-DEF527E48F4F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A071D0C6-FF59-4C43-9435-7E5598320E74}] => E:\SteamLibrary\steamapps\common\dayofinfamy\dayofinfamy_BE.exe FirewallRules: [{13A36D8A-FEF8-4794-B7FA-93BAFEEF3BE0}] => E:\SteamLibrary\steamapps\common\dayofinfamy\dayofinfamy_BE.exe FirewallRules: [TCP Query User{8AD72A2B-09A2-484C-8E83-848D04E6FDE9}E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe] => E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe FirewallRules: [UDP Query User{149119E5-D1CB-4630-A1C9-78C31AC799FC}E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe] => E:\steamlibrary\steamapps\common\dayofinfamy\dayofinfamy.exe FirewallRules: [{85CD8216-91DC-489A-AB91-EC141251403B}] => E:\SteamLibrary\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe FirewallRules: [{45743051-A919-41A0-894A-6FE479254C20}] => E:\SteamLibrary\steamapps\common\TigerKnight_EW\frontend\bin\frontend.exe FirewallRules: [{91B7897C-C3A7-4BB7-951E-BBDB069D0535}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{9509BE3E-8D86-4E57-A60E-F6C1463B4795}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7C002E0C-8D72-4AB4-9F23-CADD25F69A9A}] => E:\SteamLibrary\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe FirewallRules: [{3D772758-3862-480B-B56F-8592F9A76A90}] => E:\SteamLibrary\steamapps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe FirewallRules: [{29C1DB2B-5B0E-4D06-9E65-C7AB96C3D074}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2802D209-E0E4-4F8B-8373-59B5059C0434}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{F0D5908E-8916-4B38-88FB-990C30940522}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{D75BC329-5AE0-40BB-AD93-85A4D5A0D870}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B9AE77B0-7387-4FDA-89FC-3CBBE3C3285F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{414FA066-28FD-4CD8-BD3A-E3511188DCC8}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B54D3AA6-35BD-45D2-A55E-CDD34DEA905A}] => E:\SteamLibrary\steamapps\common\Lara Croft and the Temple of Osiris\LC2.exe FirewallRules: [{86776E02-BEFB-441A-86B7-6DB850838AB9}] => E:\SteamLibrary\steamapps\common\Lara Croft and the Temple of Osiris\LC2.exe FirewallRules: [{7E97110C-C22B-47B4-A0C2-4440DD5F6E0F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2C08DEA8-EE95-4628-97BA-B306FCB18CC7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{17F779A3-A50B-412A-ABB6-77D37A37BF74}] => E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe FirewallRules: [{6275FC03-FA31-44E2-A092-ECE82947AFA6}] => E:\Program Files (x86)\Steam\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe FirewallRules: [{E67926FD-1C65-44F0-B7CE-AEB533956894}] => E:\SteamLibrary\steamapps\common\Streamline\hns\Binaries\Win64\Streamline.exe FirewallRules: [{917759DE-197C-4779-AE08-6E7F344DA019}] => E:\SteamLibrary\steamapps\common\Streamline\hns\Binaries\Win64\Streamline.exe FirewallRules: [{DE9DFB76-C40E-43CE-9C3A-B89F1BAA4288}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{CF6C377C-52AA-4FC2-9FB4-E6628D7EC5A7}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{A813D4A1-841A-4BE6-905D-BDD5689A4260}] => E:\SteamLibrary\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe FirewallRules: [{5E44F375-45D8-401D-8EF8-C878A25FA240}] => E:\SteamLibrary\steamapps\common\killingfloor2\Binaries\Win64\KFGame.exe FirewallRules: [{162F6D7B-2387-4D67-B8D1-57A9387E2965}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{89D7CE2D-BD2A-4145-8E61-DE98073C24ED}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7C099077-88F1-45A7-A9DE-13ECB6EEBE7A}] => E:\Program Files (x86)\Steam\steamapps\common\ArtOfWar\gslaunchershell.exe FirewallRules: [{A10EA1AD-CA22-4619-A997-17954D74CB09}] => E:\Program Files (x86)\Steam\steamapps\common\ArtOfWar\gslaunchershell.exe FirewallRules: [TCP Query User{F765E58F-CCA3-455C-8D0A-4C51D1CA02D4}E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe] => E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe FirewallRules: [UDP Query User{DBA83BE7-FCD6-47A8-9CB6-C525CB0259FB}E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe] => E:\program files (x86)\steam\steamapps\common\artofwar\game\u1game.exe FirewallRules: [{8A35A286-990D-4B58-848A-B99B7A6C7C86}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2739D995-0953-40A1-B1D5-06A8735C3C2D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C027819E-F8D7-409B-8994-1CA751B9DDD1}] => E:\Program Files (x86)\Steam\steamapps\common\Valkyria Chronicles\Launcher.exe FirewallRules: [{4B9F8E18-549A-4A16-825D-4621621B1A6B}] => E:\Program Files (x86)\Steam\steamapps\common\Valkyria Chronicles\Launcher.exe FirewallRules: [{7A5F9DF4-860F-4623-8DA1-261C156773C6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{C163A5E0-397A-4C5A-99FB-70BF19775C7A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{4CC4F98F-21C9-44C1-AFA9-365FFD5BEBAB}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\HowToSurvive2.exe FirewallRules: [{7B5FE50C-F3AD-4C4B-AC29-FA472D6EC7DC}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\HowToSurvive2.exe FirewallRules: [{E45BF50E-9EF8-413B-8F13-9D7BB23D84D8}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\Detect.exe FirewallRules: [{E0033378-A97F-4462-BED8-30C98CB23FE0}] => E:\SteamLibrary\steamapps\common\How to Survive 2\Exe\Detect.exe FirewallRules: [{9ED5FC74-97E9-4773-B5AC-258966917800}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{DA10939F-BFAD-45CB-B942-769C1C8950C5}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{BAB83D42-98AB-4736-B4CE-A5B5C1B6AB84}] => E:\Program Files (x86)\Steam\steamapps\common\Dawn of War 2\DOW2.exe FirewallRules: [{C680C25F-14A9-4926-9A31-56FAF62E6996}] => E:\Program Files (x86)\Steam\steamapps\common\Dawn of War 2\DOW2.exe FirewallRules: [{4FFB2A9E-D623-46E5-92C8-CA9DACF098F0}] => E:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe FirewallRules: [{BC87634C-7D0C-4DD1-A45A-E7B97E6F3337}] => E:\Program Files (x86)\Steam\steamapps\common\Wakfu\transition\transition.exe FirewallRules: [{92C62AD9-24EC-419E-B984-AB262D1B3C8D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{85360E78-95C2-40D5-88C2-E4F090396C27}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{DD99D4D0-2B11-4140-9F3A-28BC50A2672D}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\nxsteam.exe FirewallRules: [{5D014F74-4646-4CBA-A7DD-DD73A1C98775}] => E:\SteamLibrary\steamapps\common\firstassault\Shipping\nxsteam.exe FirewallRules: [{A7CDBA28-CC81-4F7B-9E34-B20ABDAC53E6}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{7E0BA7CE-BCCE-413A-AFC5-39F4FBEE2D3D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{5E921C38-BA8A-468A-8E94-733B4D1B215A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{031A315C-6727-4A63-9F76-908BD086F5D8}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E73CD73C-3B03-4895-917F-66323A5182D0}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{614911A7-DD8F-4494-AC94-E864EB8E9AC1}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{CFA1F93D-D76D-4423-93BB-FCD918FF2B35}] => E:\Program Files (x86)\Steam\steamapps\common\Crush Online\Launcher.exe FirewallRules: [{7CB44B32-C1D4-4AB7-A7CE-0C370F37A274}] => E:\Program Files (x86)\Steam\steamapps\common\Crush Online\Launcher.exe FirewallRules: [{633A1F16-780C-4C97-993C-BEBCB76FE74A}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B78A7D58-8520-400D-A251-F6822E02DF34}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B459EB9F-A33D-4203-B46B-16CBB3BC5253}] => C:\Users\Jonathan\AppData\Local\Programs\Opera\42.0.2393.517\opera.exe FirewallRules: [{47A306FB-3CAF-4E62-B54B-20E5DC47659D}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\DAOriginsLauncher.exe FirewallRules: [{2FF23F76-5019-4EFF-92FE-6B8C2A618504}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\DAOriginsLauncher.exe FirewallRules: [{1C36D524-CDD9-461F-AE93-193AD79CCF3D}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe FirewallRules: [{4D33D4ED-7DDF-4C84-9EB5-DC6C84E893DE}] => E:\Program Files (x86)\Steam\steamapps\common\Dragon Age Ultimate Edition\bin_ship\DAUpdaterSvc.Service.exe FirewallRules: [TCP Query User{2596ECDE-F23C-41F2-B645-E5943F25F523}E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe] => E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe FirewallRules: [UDP Query User{A33A3F03-BFE7-4B8F-8375-24FBF0A9B3FE}E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe] => E:\program files (x86)\steam\steamapps\common\dragon age ultimate edition\bin_ship\daorigins.exe FirewallRules: [{F962CD5A-B887-4D71-AE71-C3417EBBFF2D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{2189C6A1-D218-4C63-9174-FBE4E7AF6D62}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [TCP Query User{D281ECF0-CA02-47C9-BDCA-1DE895BA99E8}C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe] => C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe FirewallRules: [UDP Query User{24C18AB9-156A-4AF0-92D5-DCAB6101CD30}C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe] => C:\users\jonathan\appdata\local\mycomgames\mycomgames.exe FirewallRules: [{70DED392-DD42-415E-8831-09A7339D4DED}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{99DA8E7D-95F7-45B7-A4C7-220C199A500B}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{59A18C07-E5BD-4A62-9B44-7D959FB4679D}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{E3479C7A-46D9-4166-88AD-EB3316BDFA42}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{0D2B1CC2-4CB9-46B3-B69C-AF1DBDF9F389}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe FirewallRules: [{B24E99C8-6A1B-422B-9BC4-DF618B279A5F}] => E:\Program Files (x86)\Steam\steamapps\common\dota 2 beta\game\bin\win64\dota2.exe ==================== Wiederherstellungspunkte ========================= 25-01-2017 13:23:16 Windows Update 31-01-2017 18:37:09 DirectX wurde installiert 03-02-2017 15:49:17 Revo Uninstaller's restore point - Yahoo! Powered ==================== Fehlerhafte Geräte im Gerätemanager ============= Name: PS/2-Standardtastatur Description: PS/2-Standardtastatur Class Guid: {4d36e96b-e325-11ce-bfc1-08002be10318} Manufacturer: (Standardtastaturen) Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. Name: Microsoft PS/2-Maus Description: Microsoft PS/2-Maus Class Guid: {4d36e96f-e325-11ce-bfc1-08002be10318} Manufacturer: Microsoft Service: i8042prt Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24) Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed. Devices stay in this state if they have been prepared for removal. After you remove the device, this error disappears.Remove the device, and this error should be resolved. ==================== Fehlereinträge in der Ereignisanzeige: ========================= Applikationsfehler: ================== Error: (02/03/2017 03:49:18 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 513) (User: ) Description: Fehler beim Kryptografiedienst während der Verarbeitung des "OnIdentity()"-Aufrufobjekts "System Writer". Details: AddLegacyDriverFiles: Unable to back up image of binary Microsoft-Verbindungsschichterkennungsprotokoll. System Error: Zugriff verweigert . Error: (02/03/2017 03:49:17 PM) (Source: VSS) (EventID: 8194) (User: ) Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert . Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess. Vorgang: Generatordaten werden gesammelt Kontext: Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220} Generatorname: System Writer Generatorinstanz-ID: {e4e4c228-091e-442e-b25e-a1fc590382fb} Error: (02/03/2017 03:43:46 PM) (Source: Application Hang) (EventID: 1002) (User: ) Description: Programm MicrosoftEdgeCP.exe, Version 11.0.14393.82 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Systemsteuerung "Sicherheit und Wartung", um nach weiteren Informationen zum Problem zu suchen. Prozess-ID: 2f70 Startzeit: 01d27e2bced45c93 Beendigungszeit: 7 Anwendungspfad: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe Berichts-ID: 284766ae-ea1f-11e6-85b8-4ccc6a2c5fa5 Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe Auf das fehlerhafte Paket bezogene Anwendungs-ID: MicrosoftEdge Error: (02/02/2017 07:17:59 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786 Name des fehlerhaften Moduls: edgehtml.dll, Version: 11.0.14393.693, Zeitstempel: 0x585a2bf0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000017e2c2 ID des fehlerhaften Prozesses: 0x17c Startzeit der fehlerhaften Anwendung: 0x01d27d7e463ce73c Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\edgehtml.dll Berichtskennung: c5a4322b-5160-4d18-a84f-79f482016635 Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge Error: (02/02/2017 07:13:36 PM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: microsoftedgecp.exe, Version: 11.0.14393.82, Zeitstempel: 0x57a55786 Name des fehlerhaften Moduls: edgehtml.dll, Version: 11.0.14393.693, Zeitstempel: 0x585a2bf0 Ausnahmecode: 0xc0000005 Fehleroffset: 0x000000000017e2c2 ID des fehlerhaften Prozesses: 0x92c Startzeit der fehlerhaften Anwendung: 0x01d27d7e4635125a Pfad der fehlerhaften Anwendung: C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\microsoftedgecp.exe Pfad des fehlerhaften Moduls: C:\WINDOWS\SYSTEM32\edgehtml.dll Berichtskennung: 8e87e751-618f-4f28-aaa4-d490a68d29ab Vollständiger Name des fehlerhaften Pakets: Microsoft.MicrosoftEdge_38.14393.0.0_neutral__8wekyb3d8bbwe Anwendungs-ID, die relativ zum fehlerhaften Paket ist: MicrosoftEdge Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Error: (02/02/2017 06:57:14 PM) (Source: Windows Search Service) (EventID: 3104) (User: ) Description: Fehler beim Aufzählen von Benutzersitzungen zum Generieren von Filterpools. Details: (HRESULT : 0x80040210) (0x80040210) Systemfehler: ============= Error: (02/03/2017 04:12:03 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT) Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID {8D8F4F83-3594-4F07-8369-FC3C3CAE4919} und der APPID {F72671A9-012C-4725-9D2F-2A4D32D65169} im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "7" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "5" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "3" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "1" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "6" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "4" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "2" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:10:29 PM) (Source: Microsoft-Windows-Kernel-Processor-Power) (EventID: 35) (User: NT-AUTORITÄT) Description: Die Energieverwaltungsfeatures für den Leistungsmodus sind für den logischen Hyper-V-Prozessor "0" aufgrund eines Firmwareproblems deaktiviert. Wenden Sie sich an den Computerhersteller, um aktualisierte Firmware zu erhalten. Error: (02/03/2017 04:09:50 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Windows Search" wurde aufgrund folgenden Fehlers nicht gestartet: Der Dienst konnte wegen einer fehlerhaften Anmeldung nicht gestartet werden. CodeIntegrity: =================================== Date: 2017-02-03 15:58:03.901 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.901 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.900 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.900 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.900 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.900 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.900 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.899 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.897 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. Date: 2017-02-03 15:58:03.897 Description: Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume2\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements. ==================== Speicherinformationen =========================== Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz Prozentuale Nutzung des RAM: 19% Installierter physikalischer RAM: 16343.77 MB Verfügbarer physikalischer RAM: 13227.11 MB Summe virtueller Speicher: 18775.77 MB Verfügbarer virtueller Speicher: 15021.2 MB ==================== Laufwerke ================================ Drive c: () (Fixed) (Total:232.4 GB) (Free:91.48 GB) NTFS Drive d: (DVDVolume) (CDROM) (Total:7.35 GB) (Free:0 GB) UDF Drive e: (Volume) (Fixed) (Total:931.51 GB) (Free:47.69 GB) NTFS ==================== MBR & Partitionstabelle ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 232.9 GB) (Disk ID: 3688486E) Partition 1: (Active) - (Size=500 MB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=232.4 GB) - (Type=07 NTFS) ======================================================== Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 06588525) Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS) ==================== Ende von Addition.txt ============================ Die Quarantäne von Malwarebytes hat, glaube ich, mein Hauptproblem, nämlich NetUtils schon behoben. Falls du in den Dateien natürlich noch etwas entdeckst will ich nichts gesagt haben, aber ich glaube mein PC ist fürs erste clean. Vielen herzlichsten Dank für deine Hilfe Rafael, Grüße Ingo. |
03.02.2017, 21:51 | #5 |
/// Malwareteam | NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. warte noch etwas bis ich dir das clean gebe: Schritt 1 ESET Online Scanner
Hinweis: Dieser Scan kann schon einmal mehrere Stunden dauern...
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
04.02.2017, 16:11 | #6 |
| NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. Hier der ESET-Logfile: Code:
ATTFilter ESETSmartInstaller@High as downloader log: all ok # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=812f8000217f434894f4beefa1a6d637 # end=init # utc_time=2017-02-04 10:05:35 # local_time=2017-02-04 11:05:35 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT Update Init Update Download Update Finalize Updated modules version: 32294 # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=812f8000217f434894f4beefa1a6d637 # end=updated # utc_time=2017-02-04 10:12:47 # local_time=2017-02-04 11:12:47 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT # product=EOS # version=8 # OnlineScannerApp.exe=1.0.0.1 # EOSSerial=812f8000217f434894f4beefa1a6d637 # end=restart # utc_time=2017-02-04 10:17:57 # local_time=2017-02-04 11:17:57 (+0100, Mitteleuropäische Zeit) # country="Germany" # osver=6.2.9200 NT # compatibility_mode_1='' # compatibility_mode=5893 16776573 100 94 72703 17534093 0 0 # scanned=11695 # found=0 # cleaned=0 # scan_time=309 Update Init Update Download Update Finalize Updated modules version: 32296 |
05.02.2017, 18:54 | #7 |
/// Malwareteam | NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. Die Logs von deinem Rechner sehen jetzt für mich sauber aus: Herzlichen Glückwunsch - du bist Clean Zum Schluss müssen wir noch etwas aufräumen und ich gebe dir ein paar Hinweise mit auf den Weg: Wichtig: Entfernen der verwendeten Tools Die Reihenfolge ist hier entscheidend.
Malwarebytes Anti-Malware und ESET kannst du als Ergänzung zu deiner bestehenden Antivirus-Lösung auf dem Computer belassen und deinen Computer damit regelmäßig scannen. Persönliche Empfehlungen Das wichtigste zu erst:
Schutz vor unerwünschter Software Adware ist zu einer Art permanenten Bedrohung geworden, weil immer mehr Programme versuchen, einem beim Installieren noch was anderes unterzujubeln - und wie schnell hat man da ein Häkchen übersehen? Darum: pass auf, wenn du dir Software aus dem Internet herunterlädst! Viele Portale im Internet wie Chip, Softonic und Sourceforge versuchen häufig, dir Adware oder sonstige Downloader mit unerwünschten Programmen unterzujubeln. Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal, wie von FilePony.de. Lese dir dazu auch folgenden Artikel durch: CHIP-Installer - was ist das? - Anleitungen Selbst wenn du ein Programm von einer seriösen Quelle heruntergeladen hast, ist das keine Garantie, dass dein Programm nicht doch versucht, unerwünschte Änderungen an deinem Computer vorzunehmen. So versuchen immer mehr Programme, durch modifizierte Installationsroutinen unerwünschte Programme mit auf deinen PC zu schleusen. Das klappt leider auch häufig, weil viele Anwender nicht lesen, was auf dem Bildschirm steht und stattdessen schnell durchklicken. Deshalb: Wenn du ein Programm installierst, wähle immer die benutzerdefinierte Installation und schaue, was du da gerade eigentlich alles mit einem Klick auf "Ok" oder "Weiter" abnickst - entferne entsprechend die Haken bei Dingen, die du nicht möchtest. Wer lesen kann, ist klar im Vorteil! Benutze keine Optimizer, Cleaner oder sonstige SpeedUp Wunder, da diese Tools fast nie einen auch nur messbaren Performancegewinn bringen. Du kannst jedoch regelmäßig auf deinem PC die Datenträgerbereinigung ausführen, so gewinnst du belegten Speicherplatz zurück. Aktiviere in deiner Virenschutzlösungen den "Schutz vor potentiell unerwünschter Software", um dich bestmöglich zu schützen. Guter Trick: Wenn du den kostenlosen Windows Defender benutzt (ab Windows 8), kannst du einen vergleichbaren Schutz durch einen kleinen Trick auch nutzen! Lese dazu folgenden Artikel um dich mehr zu informieren: Windows mit verstecktem Adware-Killer Zum aktivieren dieses "Tricks" lade einfach nur diese Datei und führe sie aus: MpEnablePlus.reg Tipps, um dein System sicherer zu machen Halte immer deine Plug-ins und Software, insbesondere deinen Browser aktuell. Deinstalliere wenn möglich Java und den Adobe Flashplayer von deinem Computer. Neuerdings benötigt man sie fast nie mehr und stellen darum nur mehr eine unnötige Sicherheitslücke auf deinem Computer dar. Wenn du sie doch unbedingt benötigst, halte sie aber unbedingt aktuell. Passwörter Ändere regelmäßig deine Passwörter! Zudem musst du sichere Passwörter benutzen, das bedeutet: mindestens 8 Zeichen, Groß- und Kleinbuchstaben und Sonderzeichen. Ganz wichtig: benutze pro Account ein anderes Passwort! Tipp: Benutze einen Spruch, den du dir leicht merken kannst, als Hilfe für ein Passwort! Zum Beispiel: Der Himmel ist blau und wenn es regnet?-grau ==> DHibuwer?-grau Unterstütze uns und empfiehl uns weiter Du kennst Freunde und Bekannte, die Probleme mit ihrem Computer haben? Schick sie doch zu uns auf das Trojaner Board, wir helfen gerne Wenn du uns mit einer Spende unterstützen möchtest, freuen wir uns sehr und dies kannst du hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html Herzlichen Dank dafür Wir machen diese Tätigkeit hier freiwillig, darum freue ich mich besonders über ein kurzes Danke, wenn du mit mir zufrieden warest oder sonst über Verbesserungsvorschläge - das kannst du gerne hier machen Besuche und like unsere Facebook-Seite! Danke für deine Mitarbeit und alles Gute! Bitte gib mir Bescheid, wenn du das alles gelesen hast und du keine weiteren Fragen mehr hast.
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
05.02.2017, 19:58 | #8 |
| NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. Vielen Dank für die professionelle Hilfe Rafael, du hast mir verdammt viel Ärger und wahrscheinlich ne Stange Geld erspart. Ich werde das Forum auf jeden fall weiter empfehlen und wer weiß, vielleicht lass ich auch mal ne Spende da. Nochmals vielen Dank, Ingo P.s.: Ich habe natürlich alles gelesen, ausgeführt und verstanden. |
05.02.2017, 20:02 | #9 |
/// Malwareteam | NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. passt, herzlichen Dank dafür!
__________________ Mfg, Rafael ~ I'm storm. I'm calm. I'm fire. I'm ice. I'm burningice. ~ Unterstütze uns mit einer Spende ......... Lob, Kritik oder Wünsche ......... .......... Folge uns auf Facebook .......... |
Themen zu NetUtils2016 öffnet dauernd Werbung und lässt sich nicht entfernen. |
.dll, adobe, avast, defender, entfernen, explorer, flash player, google, home, iexplore.exe, netutils2016, neustart, prozesse, realtek, registry, rundll, security, services.exe, software, stick, svchost.exe, system, usb, werbung, windows, windowsapps, öffnet |