Zurück   Trojaner-Board > Malware entfernen > Log-Analyse und Auswertung

Log-Analyse und Auswertung: W10: Adware.Elex.ShrtCln entfernen

Windows 7 Wenn Du Dir einen Trojaner eingefangen hast oder ständig Viren Warnungen bekommst, kannst Du hier die Logs unserer Diagnose Tools zwecks Auswertung durch unsere Experten posten. Um Viren und Trojaner entfernen zu können, muss das infizierte System zuerst untersucht werden: Erste Schritte zur Hilfe. Beachte dass ein infiziertes System nicht vertrauenswürdig ist und bis zur vollständigen Entfernung der Malware nicht verwendet werden sollte.XML.

 
Alt 15.11.2017, 18:41   #2
Absolutio
 
W10: Adware.Elex.ShrtCln entfernen - Standard

Addition.txt



und hier die Addition.txt:
Code:
ATTFilter
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2017 03
durchgeführt von marti (14-11-2017 23:53:08)
Gestartet von D:\Martin Daten\Downloads
Windows 10 Home Version 1709 16299.64 (X64) (2017-11-10 22:54:49)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-1647029929-280508669-3162605020-500 - Administrator - Disabled)
DefaultAccount (S-1-5-21-1647029929-280508669-3162605020-503 - Limited - Disabled)
Gast (S-1-5-21-1647029929-280508669-3162605020-501 - Limited - Disabled)
marti (S-1-5-21-1647029929-280508669-3162605020-1001 - Administrator - Enabled) => C:\Users\marti
WDAGUtilityAccount (S-1-5-21-1647029929-280508669-3162605020-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

Asus Sonic Suite Plugins (HKLM-x32\...\{33a5e7af-230c-4676-8304-74018007b452}) (Version: 2.2.3601 - ASUSTeKcomputer.Inc)
ASUS Xonar DX Audio (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392008788}) (Version:   - ASUSTeK Computer Inc.)
Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)
Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.8.2.48475 - Electronic Arts)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.3.0 - EA Digital Illusions CE AB)
CheckDevicesConfigurator (HKLM\...\{4276CA57-B63C-40FF-A592-B1B0B236D192}) (Version: 2.2.3601 - ASUSTeKcomputer.Inc) Hidden
Command & Conquer 3 Tiberium Wars™ (HKLM-x32\...\{CAC9DCAF-0EA8-442C-97EA-CA6F5755390A}) (Version: 1.0.0.0 - Electronic Arts)
Command & Conquer™ 3 Kane's Wrath (HKLM-x32\...\{8D37C28B-D1A5-41C0-9E5E-80D01355FEBC}) (Version: 1.0.0.0 - Electronic Arts)
Command & Conquer™: Generals and Zero Hour (HKLM-x32\...\{8F0F5689-6900-425B-A8C2-0DBD10DAB694}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
Dragon Age™: Inquisition (HKLM-x32\...\{DC4C36DC-4E5B-4262-B0C7-157DF534B969}) (Version: 1.0.0.12 - Electronic Arts)
ESN Sonar (HKLM-x32\...\ESN Sonar-0.70.4) (Version: 0.70.4 - ESN Social Software AB)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 62.0.3202.94 - Google Inc.)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.5 - Google Inc.) Hidden
Intel(R) Network Connections 22.4.16.0 (HKLM\...\PROSetDX) (Version: 22.4.16.0 - Intel)
LauncherSetup (HKLM\...\{EF6A75C9-263C-4FEE-9027-C5116E454C3D}) (Version: 2.2.3601 - ASUSTeKcomputer.Inc) Hidden
League of Legends (HKLM-x32\...\League of Legends 1.0) (Version: 1.0 - Riot Games, Inc)
Malwarebytes Version 3.3.1.2183 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.3.1.2183 - Malwarebytes)
Microsoft Office 365 - de-de (HKLM\...\O365HomePremRetail - de-de) (Version: 16.0.8625.2121 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-1647029929-280508669-3162605020-1001\...\OneDriveSetup.exe) (Version: 17.3.7076.1026 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24215 (HKLM-x32\...\{d992c12e-cab2-426f-bde3-fb8c53950b0d}) (Version: 14.0.24215.1 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24215 (HKLM-x32\...\{e2803110-78b3-4664-a479-3611a381656a}) (Version: 14.0.24215.1 - Microsoft Corporation)
NahimicSettingsConfigurator (HKLM\...\{BF1A98CB-95A9-4CBF-AA8B-C521F4F7CC59}) (Version: 2.2.3601 - ASUSTeKcomputer.Inc) Hidden
Need for Speed™ Rivals (HKLM-x32\...\{E0A32336-AA27-4053-99B2-C3380B7B95AC}) (Version: 1.4.0.0 - Electronic Arts)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 388.13 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.10.0.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.10.0.95 - NVIDIA Corporation)
NVIDIA Grafiktreiber 388.13 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 388.13 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.35.1 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.35.1 - NVIDIA Corporation)
NVIDIA PhysX (Legacy) (HKLM-x32\...\{6F9D5A0B-202C-4161-BC7F-0664EA39E7E7}) (Version: 9.12.1031 - NVIDIA Corporation)
Office 16 Click-to-Run Extensibility Component (HKLM-x32\...\{90160000-008C-0000-0000-0000000FF1CE}) (Version: 16.0.8625.2121 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Extensibility Component 64-bit Registration (HKLM\...\{90160000-00DD-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2121 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-008F-0000-1000-0000000FF1CE}) (Version: 16.0.8625.2121 - Microsoft Corporation) Hidden
Office 16 Click-to-Run Localization Component (HKLM-x32\...\{90160000-008C-0407-0000-0000000FF1CE}) (Version: 16.0.8326.2076 - Microsoft Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
Oracle VM VirtualBox 5.2.0 (HKLM\...\{9DF09FCF-7F55-402E-AAB8-67FFBA56EA3B}) (Version: 5.2.0 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.5.6040 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version:  - Blizzard Entertainment)
ProductDaemonSetup (HKLM\...\{F4BAC9D7-0E42-4456-AD6F-88D0F06FEC27}) (Version: 2.2.3601 - ASUSTeKcomputer.Inc) Hidden
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.988 - Even Balance, Inc.)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8158 - Realtek Semiconductor Corp.)
SHIFT 2 UNLEASHED™ (HKLM-x32\...\{E8C37E27-5205-4C8A-BECB-B00533045AAE}) (Version: 1.0.2.2 - Electronic Arts)
SonicRadarSetup (HKLM\...\{731D72B4-5DBF-4B75-864A-F2FB0C9DE96C}) (Version: 1.0.0.0 - ASUSTeKcomputer.Inc) Hidden
SonicStudioSetup (HKLM\...\{B826CAA3-B878-451F-8167-3D504B430625}) (Version: 2.2.3601 - ASUSTeKcomputer.Inc) Hidden
Spotify (HKU\S-1-5-21-1647029929-280508669-3162605020-1001\...\Spotify) (Version: 1.0.67.582.g19436fa3 - Spotify AB)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
SVLoadSense (HKLM-x32\...\{C4226734-F925-448C-8F15-0D5419F003DF}) (Version: 1.0.12 - SAVITECH)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.1.6 - TeamSpeak Systems GmbH)
TeamViewer 12 (HKLM-x32\...\TeamViewer) (Version: 12.0.83369 - TeamViewer)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
Tom Clancy's Ghost Recon Wildlands (HKLM-x32\...\Uplay Install 1771) (Version:  - Ubisoft)
Twitch (HKU\S-1-5-21-1647029929-280508669-3162605020-1001\...\{DEE70742-F4E9-44CA-B2B9-EE95DCF37295}) (Version: 7.0.0.0 - Twitch Interactive, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 43.1 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.2.6 - VideoLAN)
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)
WinRAR 5.50 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.50.0 - win.rar GmbH)
World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2017-10-27] (NVIDIA Corporation)
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-11-01] (Malwarebytes)
ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2017-08-11] (Alexander Roshal)
ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2017-08-11] (Alexander Roshal)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {1CB8A352-6B6E-4563-8B6B-37DEBE915F23} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-11] (Google Inc.)
Task: {249100E6-68B1-4462-B684-8DFADC0AE041} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [2017-10-27] (NVIDIA Corporation)
Task: {367158CA-1458-43AF-B274-1230FDEEA58A} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [2017-10-27] (NVIDIA Corporation)
Task: {44D2840C-AF1B-4877-8077-536523629AB5} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2017-11-11] (Google Inc.)
Task: {5DBFAF61-0CAF-449E-9853-B697275E0546} - System32\Tasks\QwebTray => C:\ProgramData\Qweb\systray.exe
Task: {5F69ECA3-03FB-4797-AF84-1810A3D4AA8B} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-27] (NVIDIA Corporation)
Task: {6791377D-26AE-45DF-87DB-0917BA83A136} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-27] (NVIDIA Corporation)
Task: {68E30E21-0197-4602-95A0-7F3183B656B6} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerRegistration => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-11-11] ()
Task: {7C6B9535-DFA3-44E2-8F22-D0AFA0106DC8} - System32\Tasks\SS2UILauncherRun => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2UILauncher.exe [2017-04-13] (ASUSTeK COMPUTER INC.)
Task: {B01349CE-7D35-4B22-8DBD-EA8BA397CC22} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_ERROR_HB => C:\Windows\system32\MRT-KB890830.exe [2017-11-14] (Microsoft Corporation)
Task: {BCD36938-B71C-4E85-A0FA-87EE7ADDD7C8} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2017-10-27] (NVIDIA Corporation)
Task: {BFB06FE5-8A5B-4A50-804E-4E9F0DD3B693} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2017-10-27] (NVIDIA Corporation)
Task: {C10B04AD-7E32-4C1C-95E0-2AA50B6CAEF0} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2017-10-27] (NVIDIA Corporation)
Task: {C2540718-7811-4D79-91EB-59BED38E91CE} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-31] (Microsoft Corporation)
Task: {CDD0678E-20F5-46C3-BC4F-58A9A2AF5B18} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2017-10-27] (NVIDIA Corporation)
Task: {D41D4C83-2CB9-45FB-BE6D-F3ACAAF6285E} - System32\Tasks\SS2Svc64Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2Svc64.exe [2017-04-13] ()
Task: {D9071A2D-2D75-474D-BD1D-4A386A720B7B} - System32\Tasks\Microsoft\Office\Office Automatic Updates => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [2017-10-31] (Microsoft Corporation)
Task: {EFDE4E08-2393-4D73-B0BC-2463C071D5A4} - System32\Tasks\SS2Svc32Run => C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2Svc32.exe [2017-04-13] ()
Task: {F76837D7-1719-4D86-BA52-11CEFA2B0F2E} - System32\Tasks\Microsoft\Office\OfficeBackgroundTaskHandlerLogon => C:\Program Files (x86)\Microsoft Office\root\Office16\officebackgroundtaskhandler.exe [2017-11-11] ()

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)


==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2017-09-29 14:41 - 2017-09-29 14:41 - 000184432 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-11-11 00:49 - 2017-10-27 18:50 - 001267320 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-11-11 00:54 - 2017-11-11 11:45 - 000076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2017-11-14 21:44 - 2017-11-01 08:54 - 002358736 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\MwacLib.dll
2017-11-14 21:44 - 2017-11-01 08:55 - 002299344 _____ () C:\PROGRAM FILES\MALWAREBYTES\ANTI-MALWARE\SelfProtectionSdk.dll
2017-04-13 17:56 - 2017-04-13 17:56 - 000289296 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll
2017-04-13 17:56 - 2017-04-13 17:56 - 000207888 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll
2017-09-29 14:42 - 2017-09-30 15:36 - 011044864 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\CortanaApi.dll
2017-09-29 14:42 - 2017-09-30 15:36 - 001804288 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2017-11-12 00:04 - 2017-11-12 00:04 - 000087552 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeHost.exe
2017-11-12 00:04 - 2017-11-12 00:04 - 000206336 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkypeBackgroundTasks.dll
2017-11-12 00:04 - 2017-11-12 00:04 - 025461760 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\SkyWrap.dll
2017-11-11 00:33 - 2017-11-11 00:33 - 002552832 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\skypert.dll
2017-11-12 00:04 - 2017-11-12 00:04 - 000685056 _____ () C:\Program Files\WindowsApps\Microsoft.SkypeApp_12.8.487.0_x64__kzf8qxf38zg5c\RtmMvrUap.dll
2017-04-13 17:54 - 2017-04-13 17:54 - 002742272 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2svc32.exe
2017-04-13 17:57 - 2017-04-13 17:57 - 000485888 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2svc64.exe
2017-11-11 00:31 - 2017-11-11 00:31 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-11-11 00:32 - 2017-11-11 00:32 - 025741312 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Video.UI.exe
2017-11-11 00:32 - 2017-11-11 00:32 - 009257984 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\EntCommon.dll
2017-11-11 00:32 - 2017-11-11 00:32 - 003553704 _____ () C:\Program Files\WindowsApps\Microsoft.ZuneVideo_10.17092.13511.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2017-09-29 14:41 - 2017-09-29 14:41 - 000030208 _____ () C:\Windows\system32\Windows.WARP.JITService.exe
2017-11-11 00:33 - 2017-11-11 00:33 - 000061952 _____ () C:\Program Files\WindowsApps\Microsoft.WindowsStore_11710.1001.27.0_x64__8wekyb3d8bbwe\WinStoreTasksWrapper.dll
2017-04-13 17:53 - 2017-04-13 17:53 - 000257040 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2OSD.dll
2017-04-13 17:53 - 2017-04-13 17:53 - 000177680 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\SS2DevProps.dll
2017-11-11 00:49 - 2017-10-27 18:50 - 001040504 _____ () C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll
2017-04-13 17:54 - 2017-04-13 17:54 - 000098816 _____ () C:\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\sradarlauncher.dll
2017-11-11 10:56 - 2012-06-06 02:56 - 000143360 ____N () C:\Program Files\ASUS Xonar DX Audio\Customapp\VmixP8.dll
2017-11-11 00:29 - 2016-09-01 02:02 - 004969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2017-11-11 00:29 - 2017-09-09 20:25 - 000688416 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2017-11-11 00:29 - 2017-10-31 04:22 - 002546976 _____ () C:\Program Files (x86)\Steam\video.dll
2017-11-11 00:29 - 2016-01-27 08:49 - 000491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2017-11-11 00:29 - 2016-09-01 02:02 - 001195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2017-11-11 00:29 - 2016-09-01 02:02 - 001563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2017-11-11 00:29 - 2016-01-27 08:49 - 002549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2017-11-11 00:29 - 2016-01-27 08:49 - 000485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2017-11-11 00:29 - 2016-01-27 08:49 - 000332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2017-11-11 00:29 - 2016-01-27 08:49 - 000442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2017-11-11 00:29 - 2017-10-31 04:22 - 000901408 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2017-11-11 00:29 - 2016-07-04 23:17 - 000266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2017-11-11 01:26 - 2017-11-11 01:26 - 068211824 _____ () C:\Users\marti\AppData\Roaming\Spotify\libcef.dll
2017-11-11 00:30 - 2017-09-07 03:04 - 000678400 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\SDL2.dll
2017-11-11 00:30 - 2017-08-16 23:28 - 073130272 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.win7\libcef.dll
2017-11-11 00:29 - 2015-09-25 00:52 - 000119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
2017-11-11 01:26 - 2017-11-11 01:26 - 003110512 _____ () C:\Users\marti\AppData\Roaming\Spotify\libglesv2.dll
2017-11-11 01:26 - 2017-11-11 01:26 - 000087152 _____ () C:\Users\marti\AppData\Roaming\Spotify\libegl.dll
2017-11-11 00:49 - 2017-10-27 18:50 - 070806136 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 14:46 - 2017-09-29 14:44 - 000000824 _____ C:\Windows\system32\Drivers\etc\hosts


==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-1647029929-280508669-3162605020-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\marti\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.0.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

HKLM\...\StartupApproved\Run: => "RTHDVCPL"
HKLM\...\StartupApproved\Run: => "SVLoadSense"
HKU\S-1-5-21-1647029929-280508669-3162605020-1001\...\StartupApproved\Run: => "Qweb-Updater"

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [{15B52E75-C2CD-4A50-9F8F-89266B83CE7C}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{D8401AD8-DE56-4D88-8F2F-5DB3C3869A66}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{084DA1DC-F270-409C-8ADD-DE6520E35A88}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{345C9386-E8A2-4866-8CC9-480994B44598}] => (Allow) C:\Program Files (x86)\Steam\bin\cef\cef.win7\steamwebhelper.exe
FirewallRules: [{0D35600A-9230-4322-92BE-3BF0321BE42C}] => (Allow) D:\Steam Games\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{0D14F49D-AA81-4C7C-9842-0E812332AA74}] => (Allow) D:\Steam Games\steamapps\common\Age2HD\Launcher.exe
FirewallRules: [{EEE0A76B-FFB8-4440-86E8-788DE8FED8C6}] => (Allow) D:\Steam Games\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{CD5BA21F-14CD-431E-8F1D-413AC43D4AD3}] => (Allow) D:\Steam Games\steamapps\common\Age Of Empires 3\bin\age3.exe
FirewallRules: [{42286482-C5F1-4055-8809-7B3D0503A3DC}] => (Allow) D:\Steam Games\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{B3FDCEA7-6756-4240-9522-3C4C156FA2DA}] => (Allow) D:\Steam Games\steamapps\common\Age Of Empires 3\bin\age3x.exe
FirewallRules: [{4D574815-5501-4C9D-9DAC-857AAA4F4665}] => (Allow) D:\Steam Games\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{3A324E00-F208-4353-AB19-3AEF611B9BC8}] => (Allow) D:\Steam Games\steamapps\common\Age Of Empires 3\bin\age3y.exe
FirewallRules: [{6D2BE1F9-FE0D-4AB2-B322-451A89C7C8C5}] => (Allow) D:\Steam Games\steamapps\common\Anno 2070\Anno5.exe
FirewallRules: [{1FA87158-966C-4BDE-B93E-1E76A8EDA447}] => (Allow) D:\Steam Games\steamapps\common\Anno 2070\Anno5.exe
FirewallRules: [{CA645DEB-5B8B-4E3E-9B04-A4A458B68943}] => (Allow) D:\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{4A3D5EDC-5D5D-45EB-B590-50EDD36EC8A7}] => (Allow) D:\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{E33E2F18-2F76-4C80-89D7-9AF85FAF5845}] => (Allow) C:\Program Files (x86)\Microsoft Office\root\Office16\outlook.exe
FirewallRules: [TCP Query User{66E04B07-42A0-45DF-B659-F727B150FE26}C:\users\marti\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\marti\appdata\roaming\spotify\spotify.exe
FirewallRules: [UDP Query User{B80142CD-B5AD-4BB9-9D3F-41F4B5C10072}C:\users\marti\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\marti\appdata\roaming\spotify\spotify.exe
FirewallRules: [{9E2AD4F0-5693-461C-841E-D4BC8AEE330F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{28895287-4283-49F6-A35A-8EA7679ED8CF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe
FirewallRules: [{EEEA69CD-0872-4472-9AC6-BB9E848E58AA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{439EFCE4-CD0B-4392-9C0A-5D5E15025CA1}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe
FirewallRules: [{B6A6158F-DF77-4679-84CA-F2987BCAD3FD}] => (Allow) D:\Steam Games\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{0DE3F70B-C735-4BC9-8447-755734A10713}] => (Allow) D:\Steam Games\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{AB895A3C-E76F-4D21-BA7E-A5F01729B4A2}] => (Allow) D:\Steam Games\steamapps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{7DC41D8E-533E-4DC5-9FC8-EFD58694DF68}] => (Allow) D:\Steam Games\steamapps\common\Total War Rome II\launcher\launcher.exe
FirewallRules: [{C578DB95-A236-44BC-89F5-7259CCAD64D6}] => (Allow) D:\Steam Games\steamapps\common\Spintires\SpinTires.exe
FirewallRules: [{8393B05B-E39B-4846-97AD-894549C0C66D}] => (Allow) D:\Steam Games\steamapps\common\Spintires\SpinTires.exe
FirewallRules: [{556BBEFC-9B04-4615-AD4D-DD0F7E425263}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{41BA5FF6-2620-45E4-AB8C-D5516766C635}] => (Allow) C:\Program Files (x86)\Battlelog Web Plugins\Sonar\0.70.4\SonarHost.exe
FirewallRules: [{BE0F2F1E-95BB-435A-8368-C06B86E56E7A}] => (Allow) D:\Origin Games\Battlefield 4\BFLauncher.exe
FirewallRules: [{5DFC4811-5300-40A4-8F42-6B057C722C43}] => (Allow) D:\Origin Games\Battlefield 4\BFLauncher.exe
FirewallRules: [{BBFBF4F1-516C-483E-B636-C3BF53C7B60F}] => (Allow) D:\Origin Games\Battlefield 4\BFLauncher_x86.exe
FirewallRules: [{4FCA3213-827B-4823-B433-528FB7316F97}] => (Allow) D:\Origin Games\Battlefield 4\BFLauncher_x86.exe
FirewallRules: [{E31898A3-6CEF-4600-A3E0-7F83AD109B24}] => (Allow) D:\Steam Games\steamapps\common\Dawn of War III\RelicDoW3.exe
FirewallRules: [{BA7D4E09-C3B0-4539-B0C6-6A8F98FBF8EE}] => (Allow) D:\Steam Games\steamapps\common\Dawn of War III\RelicDoW3.exe
FirewallRules: [{04543559-F7A7-45B9-B231-DC0EAE813A75}] => (Allow) D:\Steam Games\steamapps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{AC23B449-0BBC-4E9A-A497-BB892786B984}] => (Allow) D:\Steam Games\steamapps\common\MedievalEngineers\Bin64\MedievalEngineers.exe
FirewallRules: [{66E80845-DEEA-436B-9A9C-9B33CFC3F0BB}] => (Allow) D:\Steam Games\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{DA6839E2-F8F1-4605-AACE-6B9D0E595B46}] => (Allow) D:\Steam Games\steamapps\common\Portal 2\portal2.exe
FirewallRules: [{97D1048F-27C1-47CF-BC47-C7AB304BB8B5}] => (Allow) D:\Steam Games\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{1AD11333-E376-43E1-B809-55785572AA89}] => (Allow) D:\Steam Games\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{A58F538F-BEF1-473E-84FE-64FF4FB4912E}] => (Allow) D:\Origin Games\SHIFT 2 UNLEASHED\shift2u.exe
FirewallRules: [{B363CE2D-9D14-4D73-B8E9-CF9BF02C38B1}] => (Allow) D:\Origin Games\SHIFT 2 UNLEASHED\shift2u.exe
FirewallRules: [{3E1C5F8D-70C6-4672-A115-636987AB23DD}] => (Allow) D:\Origin Games\Need for Speed(TM) Rivals\NFS14_x86.exe
FirewallRules: [{6868C75F-FDDE-417D-B638-9A6639751DAB}] => (Allow) D:\Origin Games\Need for Speed(TM) Rivals\NFS14_x86.exe
FirewallRules: [{5B22738B-0F27-44B8-A860-D93509A90013}] => (Allow) D:\Origin Games\Need for Speed(TM) Rivals\NFS14.exe
FirewallRules: [{78B5C8C4-D0E9-48D1-8397-513A72EF3BF3}] => (Allow) D:\Origin Games\Need for Speed(TM) Rivals\NFS14.exe
FirewallRules: [{5104694E-83D5-41A9-99D9-914BA5EDE71C}] => (Allow) D:\Steam Games\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{3F9846F8-2DA8-43DB-ACA6-21B8F67D1B44}] => (Allow) D:\Steam Games\steamapps\common\BioShock Infinite\Binaries\Win32\BioShockInfinite.exe
FirewallRules: [{DF4F0A7C-D687-4677-8FF5-B91ED8E9D367}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{034CA109-49FA-4C93-8E50-5730BB38395B}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{FBDAE9D6-46EC-40D2-AABA-649EB8396A60}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{AAF7E421-8B45-484D-9AB5-5D63478B1F13}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{1956A4BD-C19C-44EC-AF3A-52270E514741}] => (Allow) D:\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{E339EAF0-EA4C-406D-BB52-29919C7642C3}] => (Allow) D:\Origin Games\Battlefield Bad Company 2\BFBC2Game.exe
FirewallRules: [{A5D24C36-C5A9-4FAA-8E8C-8686F61F17D0}] => (Allow) D:\Steam Games\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{CEC3C962-54DC-48FE-BA7B-2F476C736F1D}] => (Allow) D:\Steam Games\steamapps\common\Sid Meier's Civilization V\Launcher.exe
FirewallRules: [{A27CE136-FBA9-4A80-B00E-912DC1A6AF12}] => (Allow) D:\Steam Games\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{8E146C3A-7E3C-4C22-85B9-61EFDA2BBD36}] => (Allow) D:\Steam Games\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{4D747D7B-A1CC-4306-93DA-D1BDA70ED526}] => (Allow) D:\Steam Games\steamapps\common\Dungeon Siege III\Dungeon Siege III.exe
FirewallRules: [{650F5AF5-A8F1-4F50-A36E-6B8FB52CEAD6}] => (Allow) D:\Steam Games\steamapps\common\Dungeon Siege III\Dungeon Siege III.exe
FirewallRules: [{44231F17-43BA-4FCC-A335-01C2F4C95484}] => (Allow) D:\Steam Games\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{0D262A5E-057C-4D85-9C06-3BB689A40BE7}] => (Allow) D:\Steam Games\steamapps\common\Batman Arkham City GOTY\Binaries\Win32\BatmanAC.exe
FirewallRules: [{F497EA02-78EE-43D5-B5C8-88759DFB377C}] => (Allow) D:\Origin Games\Command and Conquer Generals Zero Hour\Generals.exe
FirewallRules: [{63334F87-88CE-4135-95F4-8D352CFA0A0B}] => (Allow) D:\Origin Games\Command and Conquer Generals Zero Hour\Generals.exe
FirewallRules: [{46DDF29C-8E50-4BEF-A1E8-2D9AAE616C81}] => (Allow) D:\Steam Games\steamapps\common\DiRT Showdown\showdown.exe
FirewallRules: [{901D27EB-1F09-4905-9EE5-480DE0FF91DC}] => (Allow) D:\Steam Games\steamapps\common\DiRT Showdown\showdown.exe
FirewallRules: [{FC900578-B0E7-4D21-B956-8CA161DAF00F}] => (Allow) D:\Steam Games\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{C5D5B8B0-CC97-4E2B-8E68-1A57609B0739}] => (Allow) D:\Steam Games\steamapps\common\Orcs Must Die 2\build\release\OrcsMustDie2.exe
FirewallRules: [{09BAC8C0-B923-435F-8FF1-3CC18E67821C}] => (Allow) D:\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{7581198D-A81A-4597-93F8-31B1EE211112}] => (Allow) D:\Origin Games\Dragon Age Inquisition\DragonAgeInquisition.exe
FirewallRules: [{825CC4C6-3C01-425B-ACD8-81960BE0588D}] => (Allow) D:\Steam Games\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{14E9262B-8E35-473F-AE4D-1F60A9D2758D}] => (Allow) D:\Steam Games\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{D705D413-E1AC-4C5A-AFBE-8BE68313CF26}] => (Allow) D:\Steam Games\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{080DFD69-F589-49B5-BC56-81E0F6612FAC}] => (Allow) D:\Steam Games\steamapps\common\DayZ\DayZ_BE.exe
FirewallRules: [{9BD110DE-30F6-44E9-9066-A959F26054B2}] => (Allow) D:\Steam Games\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{931A7016-088E-409D-AD3F-1480A51404A5}] => (Allow) D:\Steam Games\steamapps\common\insurgency2\insurgency_BE.exe
FirewallRules: [{D17B4499-5951-4481-AA3D-1F727A09D6EB}] => (Allow) D:\Steam Games\steamapps\common\Just Cause 3\JustCause3.exe
FirewallRules: [{AEAAFBE3-B5C0-41B7-BA43-0C02ADE384C4}] => (Allow) D:\Steam Games\steamapps\common\Just Cause 3\JustCause3.exe
FirewallRules: [{4D4BC97C-9BE6-4F6B-A33D-31CE6FDCAFD0}] => (Allow) D:\Steam Games\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{BEBAE716-3384-43BD-8746-67A98DE6575A}] => (Allow) D:\Steam Games\steamapps\common\Company of Heroes 2\RelicCoH2.exe
FirewallRules: [{E29C3466-5438-46CD-8D2F-7D3CC5E76FAD}] => (Allow) D:\Steam Games\steamapps\common\Planetary Annihilation\bin_x64\PA.exe
FirewallRules: [{2A6667B2-51E0-4BCD-880B-F7440A2BF3D4}] => (Allow) D:\Steam Games\steamapps\common\Planetary Annihilation\bin_x64\PA.exe
FirewallRules: [{7137B7F6-8D12-459F-B394-7C364FA3686F}] => (Allow) D:\Steam Games\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{AA60AE6B-3136-4331-9546-D91643DE7125}] => (Allow) D:\Steam Games\steamapps\common\pCars\pCARS64.exe
FirewallRules: [{D90461D0-6372-4F4C-B644-F97D49EB9E9F}] => (Allow) D:\Steam Games\steamapps\common\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{476B610D-E1C9-46AA-8C7D-5B43E8898F7B}] => (Allow) D:\Steam Games\steamapps\common\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{095D39C7-3D59-4C54-B506-0B042F93557A}] => (Allow) D:\Steam Games\steamapps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe
FirewallRules: [{F21C51EE-7E48-4416-8A3A-5F29A80791DC}] => (Allow) D:\Steam Games\steamapps\common\Sniper Elite 3\Launcher\Sniper3Launcher.exe
FirewallRules: [{41610BE3-2762-4C45-99A7-BF790C783BFE}] => (Allow) D:\Steam Games\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{88D35300-88B4-4900-8AF7-F7EB9FC71828}] => (Allow) D:\Steam Games\steamapps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{B3747068-9BDD-4C84-85F4-BCA356D3AA85}] => (Allow) D:\Steam Games\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{65856A88-A64A-4966-BF3D-DE3A3AD69383}] => (Allow) D:\Steam Games\steamapps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{FA191923-FB49-4D66-9459-0330B263C6DB}] => (Allow) D:\Steam Games\steamapps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{A63A258D-35D8-4975-B504-206505AB81FF}] => (Allow) D:\Steam Games\steamapps\common\Tropico 5\Tropico5Steam.exe
FirewallRules: [{6C68FE3E-2336-41F3-AFEB-82808960F14B}] => (Allow) D:\Steam Games\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{A512DF07-E2DE-4717-99FD-135EAD122DBE}] => (Allow) D:\Steam Games\steamapps\common\Gauntlet\binaries\gauntlet.exe
FirewallRules: [{182F708B-6CF4-4E21-BFB9-03EAADB00C48}] => (Allow) D:\Steam Games\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{221C55F0-22A3-4C5E-BDC8-19CA60C3E464}] => (Allow) D:\Steam Games\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{4822813F-3EDD-41DC-8C89-D973CEFD3CE2}] => (Allow) D:\Steam Games\steamapps\common\RollerCoaster Tycoon World\RollerCoaster Tycoon World.exe
FirewallRules: [{E45A470B-AACA-4D54-8CCD-1E1AA9F20B21}] => (Allow) D:\Steam Games\steamapps\common\RollerCoaster Tycoon World\RollerCoaster Tycoon World.exe
FirewallRules: [{C5DD4040-797C-4CC5-8BD4-9E329982AF52}] => (Allow) D:\Steam Games\steamapps\common\MK10\Binaries\Retail\MK10.exe
FirewallRules: [{5619794C-CB0D-4B1F-8864-A415BFFCDC13}] => (Allow) D:\Steam Games\steamapps\common\MK10\Binaries\Retail\MK10.exe
FirewallRules: [{10F8F389-82D0-4B8C-BAB7-D299310306B7}] => (Allow) D:\Steam Games\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
FirewallRules: [{9312777B-11EE-40BC-A10F-9D4E393C3381}] => (Allow) D:\Steam Games\steamapps\common\MK10\Binaries\Retail\MKXLauncher.exe
FirewallRules: [{C2ABEB51-499C-4C78-86B5-31D56168CFC8}] => (Allow) D:\Steam Games\steamapps\common\Naval Action\Client.exe
FirewallRules: [{B43B9264-2FAB-4B15-BDE1-197D2CB69402}] => (Allow) D:\Steam Games\steamapps\common\Naval Action\Client.exe
FirewallRules: [{24399D1D-122B-4E08-A1F9-66D54E246F5B}] => (Allow) D:\Steam Games\steamapps\common\Naval Action\NavalActionCrashSender.exe
FirewallRules: [{E7E6D705-8B07-459C-935D-2C1BDC3B7773}] => (Allow) D:\Steam Games\steamapps\common\Naval Action\NavalActionCrashSender.exe
FirewallRules: [{193294AE-8CE5-4809-A90B-9E2A6669B49E}] => (Allow) D:\Steam Games\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{0A599A2B-74B5-485F-B7BA-461ECA4BD4AB}] => (Allow) D:\Steam Games\steamapps\common\DiRT 3 Complete Edition\dirt3_game.exe
FirewallRules: [{B11A37EE-5298-4F15-9ED4-FF0F09187480}] => (Allow) D:\Steam Games\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{DA6A5C61-D5D4-416E-AB3C-6F5855B8DDD2}] => (Allow) D:\Steam Games\steamapps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{37CA8517-017A-4718-8D2D-B6E4E0480170}] => (Allow) D:\Steam Games\steamapps\common\Project CARS 2\pCARS2.exe
FirewallRules: [{AF10E083-A393-4DB2-81F0-A1CDC53E5B08}] => (Allow) D:\Steam Games\steamapps\common\Project CARS 2\pCARS2.exe
FirewallRules: [{48FBC324-A941-4C6D-ADC5-1CE167BE9343}] => (Allow) D:\Steam Games\steamapps\common\DOOM\DOOMx64.exe
FirewallRules: [{37C3CF9F-93FC-4EC0-A10F-BE425B3016CC}] => (Allow) D:\Steam Games\steamapps\common\DOOM\DOOMx64.exe
FirewallRules: [{8562D237-9E62-4B7B-83A6-4AC7D9107440}] => (Allow) D:\Steam Games\steamapps\common\Argo\argobattleye.exe
FirewallRules: [{D6BF4960-3A24-430A-B147-AD62BB283C1D}] => (Allow) D:\Steam Games\steamapps\common\Argo\argobattleye.exe
FirewallRules: [{3907BA6C-1B5E-4F7D-A7B1-BD014E07AB02}] => (Allow) D:\Steam Games\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [{A8E6B280-FB44-4336-AC72-77D350D225EB}] => (Allow) D:\Steam Games\steamapps\common\PUBG\TslGame\Binaries\Win64\TslGame_BE.exe
FirewallRules: [TCP Query User{0658D422-7E54-43BB-A7DB-437F1C75CA5B}D:\steam games\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\steam games\steamapps\common\arma 3\arma3_x64.exe
FirewallRules: [UDP Query User{CE307497-261F-4FE3-B1AD-07095450B1FE}D:\steam games\steamapps\common\arma 3\arma3_x64.exe] => (Allow) D:\steam games\steamapps\common\arma 3\arma3_x64.exe
FirewallRules: [{3F35A995-E729-4DE6-B94E-6579EFBE00B0}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

==================== Wiederherstellungspunkte =========================

11-11-2017 00:30:18 Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24212
12-11-2017 14:41:38 Installed Oracle VM VirtualBox 5.2.0
13-11-2017 23:34:07 DirectX wurde installiert
14-11-2017 22:20:42 Revo Uninstaller's restore point - Qweb
14-11-2017 22:39:22 Revo Uninstaller's restore point - Total War Warhammer II MULTi2 1.0

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: WiFi
Description: WiFi
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (11/14/2017 10:56:57 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Martin Daten\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_cc9304e22215ca8f.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_14403bb93691f395.manifest.

Error: (11/14/2017 10:56:53 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Martin Daten\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_cc9304e22215ca8f.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_14403bb93691f395.manifest.

Error: (11/14/2017 10:55:30 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Martin Daten\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_cc9304e22215ca8f.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_14403bb93691f395.manifest.

Error: (11/14/2017 10:55:26 PM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "D:\Martin Daten\Downloads\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_cc9304e22215ca8f.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.16299.64_none_14403bb93691f395.manifest.

Error: (11/14/2017 10:49:06 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: adwcleaner_7.0.4.0.exe, Version: 7.0.4.0, Zeitstempel: 0x59f3de9c
Name des fehlerhaften Moduls: adwcleaner_7.0.4.0.exe, Version: 7.0.4.0, Zeitstempel: 0x59f3de9c
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0007a21a
ID des fehlerhaften Prozesses: 0xe4c
Startzeit der fehlerhaften Anwendung: 0x01d35d920a4073ad
Pfad der fehlerhaften Anwendung: D:\Martin Daten\Downloads\adwcleaner_7.0.4.0.exe
Pfad des fehlerhaften Moduls: D:\Martin Daten\Downloads\adwcleaner_7.0.4.0.exe
Berichtskennung: b5d25ad7-76ed-4e58-bd31-51c9fb9eee77
Vollständiger Name des fehlerhaften Pakets: 
Anwendungs-ID, die relativ zum fehlerhaften Paket ist:

Error: (11/14/2017 10:39:21 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {df7f7d49-24f0-4d6e-a8f4-ea1cc5817ba1}

Error: (11/14/2017 10:20:42 PM) (Source: VSS) (EventID: 8194) (User: )
Description: Volumeschattenkopie-Dienstfehler: Beim Abfragen nach der Schnittstelle "IVssWriterCallback" ist ein unerwarteter Fehler aufgetreten. hr = 0x80070005, Zugriff verweigert
.
Die Ursache hierfür ist oft eine falsche Sicherheitseinstellung im Schreib- oder Anfrageprozess.


Vorgang:
   Generatordaten werden gesammelt

Kontext:
   Generatorklassen-ID: {e8132975-6f93-4464-a53e-1050253ae220}
   Generatorname: System Writer
   Generatorinstanz-ID: {bd1389b8-16e6-480b-9902-49f5d55f3029}

Error: (11/14/2017 10:10:46 PM) (Source: nginx) (EventID: 3299) (User: )
Description: C:\ProgramData\Qweb\nginx\nginx.exe:
could not open error log file: CreateFile() "logs/error.log" failed (15100: FormatMessage() error:(15105))
        .

Error: (11/14/2017 10:10:36 PM) (Source: nginx) (EventID: 3299) (User: )
Description: C:\ProgramData\Qweb\nginx\nginx.exe:
could not open error log file: CreateFile() "logs/error.log" failed (15100: FormatMessage() error:(15105))
        .

Error: (11/14/2017 10:10:26 PM) (Source: nginx) (EventID: 3299) (User: )
Description: C:\ProgramData\Qweb\nginx\nginx.exe:
could not open error log file: CreateFile() "logs/error.log" failed (15100: FormatMessage() error:(15105))
        .


Systemfehler:
=============
Error: (11/14/2017 11:49:47 PM) (Source: DCOM) (EventID: 10016) (User: MTN-PC)
Description: Durch die Berechtigungseinstellungen für "Computerstandard" wird dem Benutzer "MTN-PC\marti" (SID: S-1-5-21-1647029929-280508669-3162605020-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{C2F03A33-21F5-47FA-B4BB-156362A2F239}
 und der APPID 
{316CDED5-E4AE-4B15-9113-7055D84DCC97}
 im Anwendungscontainer "Microsoft.Windows.Cortana_1.9.6.16299_neutral_neutral_cw5n1h2txyewy" (SID: S-1-15-2-1861897761-1695161497-2927542615-642690995-327840285-2659745135-2630312742) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/14/2017 11:30:54 PM) (Source: DCOM) (EventID: 10010) (User: MTN-PC)
Description: Der Server "Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/14/2017 11:21:46 PM) (Source: DCOM) (EventID: 10010) (User: MTN-PC)
Description: Der Server "Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/14/2017 11:18:58 PM) (Source: DCOM) (EventID: 10010) (User: MTN-PC)
Description: Der Server "Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/14/2017 11:16:51 PM) (Source: DCOM) (EventID: 10010) (User: MTN-PC)
Description: Der Server "Microsoft.MicrosoftEdge_41.16299.15.0_neutral__8wekyb3d8bbwe!ContentProcess" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.

Error: (11/14/2017 10:59:09 PM) (Source: DCOM) (EventID: 10016) (User: MTN-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "MTN-PC\marti" (SID: S-1-5-21-1647029929-280508669-3162605020-1001) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{D63B10C5-BB46-4990-A94F-E40B9D520160}
 und der APPID 
{9CA88EE3-ACB7-47C8-AFC4-AB702511C276}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (11/14/2017 10:57:53 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (11/14/2017 10:57:53 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\marti\AppData\Local\Temp\ehdrv.sys

Error: (11/14/2017 10:57:52 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet: 
Der Treiber konnte nicht geladen werden.

Error: (11/14/2017 10:57:52 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: \??\C:\Users\marti\AppData\Local\Temp\ehdrv.sys


CodeIntegrity:
===================================
  Date: 2017-11-14 23:52:03.830
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:52:03.828
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:52:03.789
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:51:48.719
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:51:48.707
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:51:48.678
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:36:46.137
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:36:46.134
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2DevProps.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:36:46.066
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\Malwarebytes\Anti-Malware\mbae64.dll that did not meet the Store signing level requirements.

  Date: 2017-11-14 23:35:49.173
  Description: Code Integrity determined that a process (\Device\HarddiskVolume6\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdgeCP.exe) attempted to load \Device\HarddiskVolume6\Program Files\ASUSTeKcomputer.Inc\SS2\UserInterface\x64\SS2OSD.dll that did not meet the Store signing level requirements.


==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-6700K CPU @ 4.00GHz
Prozentuale Nutzung des RAM: 29%
Installierter physikalischer RAM: 16322.85 MB
Verfügbarer physikalischer RAM: 11497.9 MB
Summe virtueller Speicher: 19266.85 MB
Verfügbarer virtueller Speicher: 13423.91 MB

==================== Laufwerke ================================

Drive c: (System) (Fixed) (Total:465.75 GB) (Free:409.68 GB) NTFS
Drive d: (Daten) (Fixed) (Total:2793.92 GB) (Free:1542.42 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 2794.5 GB) (Disk ID: 00000000)

Partition: GPT.

========================================================
Disk: 1 (Size: 465.8 GB) (Disk ID: 00000000)

Partition: GPT.

==================== Ende von Addition.txt ============================
         
Ich bin die Logs selbst etwas durchgegangen und habe gesehen, dass einige Dinge in Chrome selbst verändert wurden. Daher habe ich nun Chrome mit Revo Uninstaller entfernt. Malwarebytes findet nun keine Schadsoftware mehr aktuell. Jedoch sind Rückstände (und vielleicht auch der "Kern") weiterhin auf meinem Rechner zu finden wie bspw. die drei Services "QwebNginx", "QwebProxyService" und "QwebService", vllt. weitere Services. Aus der Aufgabenplanung habe ich "Qweb" bereits entfernt.

Viele Grüße,
Absolutio
__________________


 

Themen zu W10: Adware.Elex.ShrtCln entfernen
adware, computer, defender, desktop, entfernen, excel, explorer, geforce, google, home, installation, mozilla, node.js, nvidia, programm, prozesse, realtek, registry, revo uninstaller, rundll, scan, schadprogramm, services.exe, svchost.exe, taskleiste, teamspeak, ublock origin, virtualbox, windows, windowsapps, winlogon.exe




Ähnliche Themen: W10: Adware.Elex.ShrtCln entfernen


  1. Malewarebytes kann "Adware.Elex.ShrtCln" nicht löschen
    Plagegeister aller Art und deren Bekämpfung - 18.11.2017 (18)
  2. Probleme mit nicht Löschbarer Adware.Elex.ShrtCln
    Plagegeister aller Art und deren Bekämpfung - 16.11.2017 (23)
  3. Adware/Elex.pyhlw in C:\program files (X86)\Elex-tech\YAC\iImportLib.dll.bak nicht desinfizierbar
    Log-Analyse und Auswertung - 22.10.2017 (20)
  4. Adware.Elex ist immer wieder da
    Log-Analyse und Auswertung - 01.06.2017 (29)
  5. Verzweiflung: Adware.Elex geht einfach nicht weg.
    Log-Analyse und Auswertung - 23.05.2017 (40)
  6. Win10: Adware Elex und Adware Ghokswa kommen ständig wieder
    Log-Analyse und Auswertung - 19.05.2017 (9)
  7. LuckySites Adware Elex - Adware Ghokswa
    Log-Analyse und Auswertung - 14.05.2017 (20)
  8. Windows 10: Adware.Elex, Adware.Elex.Generic, Adware Ghokswa lassen sich nicht vollständig entfernen
    Plagegeister aller Art und deren Bekämpfung - 04.05.2017 (1)
  9. Adware.Elex kommt immer wieder
    Log-Analyse und Auswertung - 03.05.2017 (10)
  10. Elex-Typ Viren wie Kyubey und Winsnare gefunden. Sie lassen sich jedoch nicht dauerhaft entfernen.
    Plagegeister aller Art und deren Bekämpfung - 14.04.2017 (19)
  11. Adware Elex, jhdbca und "jacilevunupy" gelöscht von der Maschine, danke Cosinus
    Lob, Kritik und Wünsche - 24.02.2017 (1)
  12. PUP.Optional.Elex.ClnShrt entfernen
    Anleitungen, FAQs & Links - 27.01.2017 (2)
  13. adware.elex verschwindet auch nach mehrmaliger Säuberung nicht vom PC.
    Plagegeister aller Art und deren Bekämpfung - 04.01.2017 (22)
  14. Browser Hijacker Adware Elex, ändert Suchmaschine, Startseite, etc. in amisites.com
    Log-Analyse und Auswertung - 25.12.2016 (21)
  15. adware/browsefox.dac.1 (wie lässt sich diese lästige Adware entfernen?)
    Log-Analyse und Auswertung - 21.02.2014 (13)
  16. Win-7: Adware / Virus entfernen - Virenscanner inaktiv - Weiterleitung auf Adware Webseite
    Plagegeister aller Art und deren Bekämpfung - 07.01.2014 (12)
  17. Windows Vista: Adware Elex und PUP.opencandy und desk 365 (PC shutdown)
    Plagegeister aller Art und deren Bekämpfung - 06.09.2013 (15)

Zum Thema W10: Adware.Elex.ShrtCln entfernen - und hier die Addition.txt: Code: Alles auswählen Aufklappen ATTFilter Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2017 03 durchgeführt von marti (14-11-2017 23:53:08) Gestartet von D:\Martin Daten\Downloads Windows - W10: Adware.Elex.ShrtCln entfernen...
Archiv
Du betrachtest: W10: Adware.Elex.ShrtCln entfernen auf Trojaner-Board

Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.