"Suchen und neue Registerkarte von Yahoo" kommt nach dem Entfernen zurück

computerfrea · 24.02.2019, 06:01

Hi,
ich lasse gelegentlich den AdwCleaner laufen und schaue was er so findet. Seit locker einem Jahr findet er
"PUP.Optional.Legacy Suchen und neue Registerkarte von Yahoo".
Wenn ich das dann entfernen lasse ist es nach dem Neustart vorerst auch verschwunden. Wenn ich dann allerdings Google Chrome öffne werde ich gefragt ob ich "Suchen und neue Registerkarte von Yahoo" als Erweiterung hinzufügen möchte. Auch wenn ich auf "Nein" klicke ist es beim nächsten Suchlauf von AdwCleaner wieder da. In Chrome ändert sich nichts, ganz egal ob ich es hinzufügen lasse oder nicht. Auch eine Erweiterung mit diesem Namen ist in Google Chrome in beiden Fällen nicht zu finden. Dieses Spiel kann ich so oft treiben wie ich will. Es kommt immer wieder.
Würde mich freuen wenn jemand herausfinden könnte was dieses lästige Ding triggert damit ich es endgültig zerstören kann

.

Hier das letzte Scan-Log:

Code:

ATTFilter

# -------------------------------
# Malwarebytes AdwCleaner 7.2.7.0
# -------------------------------
# Build:    01-30-2019
# Database: 2019-02-21.1 (Cloud)
# Support:  https://www.malwarebytes.com/support
#
# -------------------------------
# Mode: Scan
# -------------------------------
# Start:    02-24-2019
# Duration: 00:00:15
# OS:       Windows 10 Home
# Scanned:  31818
# Detected: 1


***** [ Services ] *****

No malicious services found.

***** [ Folders ] *****

No malicious folders found.

***** [ Files ] *****

No malicious files found.

***** [ DLL ] *****

No malicious DLLs found.

***** [ WMI ] *****

No malicious WMI found.

***** [ Shortcuts ] *****

No malicious shortcuts found.

***** [ Tasks ] *****

No malicious tasks found.

***** [ Registry ] *****

No malicious registry entries found.

***** [ Chromium (and derivatives) ] *****

PUP.Optional.Legacy             Suchen und neue Registerkarte von Yahoo

***** [ Chromium URLs ] *****

No malicious Chromium URLs found.

***** [ Firefox (and derivatives) ] *****

No malicious Firefox entries found.

***** [ Firefox URLs ] *****

No malicious Firefox URLs found.


AdwCleaner[S00].txt - [1941 octets] - [25/04/2018 02:12:47]
AdwCleaner[C00].txt - [1380 octets] - [25/04/2018 02:14:01]
AdwCleaner[S01].txt - [1869 octets] - [25/04/2018 02:15:59]
AdwCleaner[S02].txt - [2894 octets] - [22/05/2018 13:27:01]
AdwCleaner[C02].txt - [1970 octets] - [22/05/2018 13:29:18]
AdwCleaner[S03].txt - [2168 octets] - [22/05/2018 13:32:03]
AdwCleaner[C03].txt - [1450 octets] - [22/05/2018 13:32:58]
AdwCleaner[S04].txt - [2017 octets] - [22/05/2018 13:34:39]
AdwCleaner[S05].txt - [2053 octets] - [29/05/2018 14:22:05]
AdwCleaner[C05].txt - [1382 octets] - [29/05/2018 14:22:46]
AdwCleaner[S06].txt - [2017 octets] - [29/05/2018 14:24:23]
AdwCleaner[S07].txt - [2053 octets] - [29/05/2018 18:02:57]
AdwCleaner[S08].txt - [2053 octets] - [29/05/2018 18:04:01]
AdwCleaner[C08].txt - [1382 octets] - [29/05/2018 18:04:48]
AdwCleaner[S09].txt - [2017 octets] - [29/05/2018 18:06:33]
AdwCleaner[S10].txt - [2053 octets] - [29/05/2018 18:09:55]
AdwCleaner[C10].txt - [1382 octets] - [29/05/2018 18:10:05]
AdwCleaner[S11].txt - [2017 octets] - [29/05/2018 18:11:28]
AdwCleaner[S12].txt - [2053 octets] - [29/05/2018 18:11:57]
AdwCleaner[S13].txt - [2053 octets] - [29/05/2018 18:19:25]
AdwCleaner[C13].txt - [1382 octets] - [29/05/2018 18:22:22]
AdwCleaner[S14].txt - [2053 octets] - [29/05/2018 18:26:59]
AdwCleaner[C14].txt - [1382 octets] - [29/05/2018 18:43:09]
AdwCleaner[S15].txt - [2017 octets] - [29/05/2018 18:44:59]
AdwCleaner[S16].txt - [2053 octets] - [29/05/2018 18:52:03]
AdwCleaner[S17].txt - [2053 octets] - [29/05/2018 18:54:09]
AdwCleaner[C17].txt - [1382 octets] - [29/05/2018 18:54:50]
AdwCleaner[S18].txt - [2017 octets] - [29/05/2018 18:56:12]
AdwCleaner[S19].txt - [2053 octets] - [29/05/2018 21:04:05]
AdwCleaner[S20].txt - [2053 octets] - [04/06/2018 02:23:55]
AdwCleaner[C20].txt - [1382 octets] - [04/06/2018 02:24:33]
AdwCleaner[S21].txt - [2017 octets] - [04/06/2018 02:26:02]
AdwCleaner[S22].txt - [4005 octets] - [13/06/2018 15:07:20]
AdwCleaner[C22].txt - [3395 octets] - [13/06/2018 15:23:12]
AdwCleaner[S23].txt - [4091 octets] - [13/06/2018 15:25:37]
AdwCleaner[S24].txt - [4111 octets] - [06/09/2018 00:09:22]
AdwCleaner[C24].txt - [3586 octets] - [06/09/2018 00:11:10]
AdwCleaner[S25].txt - [4198 octets] - [06/09/2018 00:12:47]
AdwCleaner[S26].txt - [4294 octets] - [06/09/2018 00:15:00]
AdwCleaner[S27].txt - [4355 octets] - [06/09/2018 00:17:48]
AdwCleaner[S28].txt - [4416 octets] - [06/09/2018 00:19:41]
AdwCleaner[S29].txt - [4477 octets] - [06/09/2018 00:24:34]
AdwCleaner[C29].txt - [3952 octets] - [06/09/2018 00:25:04]
AdwCleaner[S30].txt - [4564 octets] - [06/09/2018 00:27:06]
AdwCleaner[S31].txt - [4660 octets] - [30/09/2018 01:23:09]
AdwCleaner[S32].txt - [4806 octets] - [30/09/2018 01:33:27]
AdwCleaner[C32].txt - [4196 octets] - [30/09/2018 01:33:50]
AdwCleaner[S33].txt - [4928 octets] - [27/10/2018 01:37:59]
AdwCleaner[S34].txt - [4812 octets] - [25/11/2018 04:40:36]
AdwCleaner[S35].txt - [5114 octets] - [11/02/2019 23:03:35]
AdwCleaner[S36].txt - [5175 octets] - [11/02/2019 23:30:54]
AdwCleaner[C36].txt - [4692 octets] - [11/02/2019 23:31:17]
AdwCleaner[S37].txt - [4927 octets] - [12/02/2019 00:02:48]
AdwCleaner[S38].txt - [5107 octets] - [18/02/2019 01:12:30]
AdwCleaner[S39].txt - [5168 octets] - [24/02/2019 02:11:45]
AdwCleaner[S40].txt - [4865 octets] - [24/02/2019 02:20:38]
AdwCleaner[C40].txt - [4868 octets] - [24/02/2019 02:45:07]
AdwCleaner[S41].txt - [4821 octets] - [24/02/2019 05:23:31]
AdwCleaner[S42].txt - [4917 octets] - [24/02/2019 05:26:08]

########## EOF - C:\AdwCleaner\Logs\AdwCleaner[S43].txt ##########

M-K-D-B · 24.02.2019, 11:15

Mein Name ist Matthias und ich werde dir bei der Analyse und der eventuell notwendigen Bereinigung deines Computers helfen.

Bitte vergewissere dich zuerst, dass du die folgenden Regeln und Hinweise für eine Analyse inklusive Bereinigung gelesen und verstanden hast:
Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?

Schritt 1
Bitte lade dir die passende Version von Farbar Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit

Starte jetzt FRST.
Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
Poste mir die FRST.txt und die Addition.txt in deinem Thema (#-Symbol im Eingabefenster der Webseite anklicken)

Bitte poste mit deiner nächsten Antwort

die beiden neuen Logdateien von FRST (FRST.txt und Addition.txt).

computerfrea · 24.02.2019, 12:26

Hi Matthias,
danke für deine Hilfe.

FRST.txt

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 20.02.2019 02
durchgeführt von Michael (Administrator) auf MICHAEL-PC (24-02-2019 12:07:25)
Gestartet von C:\Users\Michael\Desktop
Geladene Profile: Michael (Verfügbare Profile: Michael & sshd)
Platform: Windows 10 Home Version 1809 17763.316 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
() C:\Program Files (x86)\NordVPN\nordvpn-service.exe
(ICEpower) C:\Windows\System32\ICEsoundService64.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation) C:\Windows\System32\snmp.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
() G:\Programme\ProtonVPN\ProtonVPNService.exe
(Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(CHENGDU YIWO Tech Development Co., Ltd) G:\Programme\Todo Backup\bin\Agent.exe
(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
() C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation) C:\Windows\SystemApps\Microsoft.LockApp_cw5n1h2txyewy\LockApp.exe
() G:\Programme\Todo Backup\bin\TodoBackupService.exe
(Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Crystal Dew World) G:\Programme\CrystalDiskInfo\DiskInfo32.exe
(Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Dropbox, Inc.) C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Dr. J. Rathlev, D-24222 Schwentinental) C:\Program Files\Personal Backup 5\Persbackup.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Valve Corporation) G:\Programme\Steam\Steam.exe
() C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Mozilla Corporation) G:\Programme\Firefox\firefox.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SystemApps\InputApp_cw5n1h2txyewy\WindowsInternal.ComposableShell.Experiences.TextInput.InputApp.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreamsDownloader.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM...\Run: [SecurityHealth] => C:\Windows\system32\SecurityHealthSystray.exe [83968 2018-09-15] (Microsoft Windows -> Microsoft Corporation)
HKLM...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279520 2019-01-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [] => [X]
HKLM-x32...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [whatpulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3377376 2018-11-16] (WhatPulse -> )
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Spotify] => C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe [26118888 2019-02-13] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2019-01-15] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [] => [X]
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Dropbox Update] => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-07] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [TunnelBear] => G:\Programme\TunnelBear\TunnelBear.UI.exe [1047936 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Policies\Explorer: [NoSecurityTab] 1
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L)
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/)
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L)
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/)
HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\SysWOW64\vct3216.acm [82944 2003-05-21] (Voxware, Inc.)
HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\SysWOW64\scg726.acm [13239 2000-03-14] (SHARP Corporation)
HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\SysWOW64\alf2cd.acm [38912 2003-05-21] (NCT Company)
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\AC3ACM.acm [81920 2004-02-04] (fccHandler)
HKLM\...\Drivers32-x32: [msacm.lame] => lame.ax
HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\SysWOW64\mcdvd_32.dll [261632 2003-05-21] (MainConcept)
HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation)
HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation)
HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation)
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [139264 2004-07-03] ()
HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\SysWOW64\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.)
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com)
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com)
HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com)
HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( )
HKLM\...\Drivers32: [VIDC.ZMBV] => C:\Windows\SysWOW64\zmbv.dll [94208 2010-04-09] ()
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.109\Installer\chrmstp.exe [2019-02-15] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GigaTribe.lnk [2017-01-03]
ShortcutTarget: GigaTribe.lnk -> G:\Programme\GigaTribe\gigatribe.exe (Gigatribe)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk [2017-12-28]
ShortcutTarget: Persbackup.lnk -> C:\Program Files\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.lnk [2014-07-21]
ShortcutTarget: Steam.lnk -> G:\Programme\Steam\Steam.exe (Valve Corporation)
GroupPolicy: Beschränkung ? <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81299b37-ca74-45f0-bb98-ac773480681d}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Wondershare AllMyTube 4.9.0 -> {067DF9EC-26B7-40DC-8DB8-CD8BE85AE367} -> Keine Datei
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://files.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler: WSAllMyTubechrome - {0A0C95CF-A116-4C74 -  Keine Datei

Edge: 
======
Edge Session Restore: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default [2019-02-24]
FF Homepage: Mozilla\Firefox\Profiles\s12ar7zc.default -> hxxp://www.google.de
FF NetworkProxy: Mozilla\Firefox\Profiles\s12ar7zc.default -> backup.ftp", "127.0.0.1"
FF Session Restore: Mozilla\Firefox\Profiles\s12ar7zc.default -> ist aktiviert.
FF Extension: (Bookmarks Organizer) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\bookmarksorganizer@agenedia.com.xpi [2019-01-27]
FF Extension: (HTTPS Everywhere) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\https-everywhere@eff.org.xpi [2019-02-01]
FF Extension: (ProxTube) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\ich@maltegoetz.de.xpi [2018-09-13]
FF Extension: (PDF Mage) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\jid1-GeRCnsiDhZiTvA@jetpack.xpi [2018-12-28]
FF Extension: (404 Bookmarks) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{5f8d31ba-47fb-4b70-bf8d-d2113f6da22f}.xpi [2018-09-15]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-24]
FF SearchPlugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\searchplugins\bing-lavasoft-ff59.xml [2018-05-22]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [AllMyTube@Wondershare.com] - C:\ProgramData\Wondershare\AllMyTube\AllMyTube@Wondershare.com_xpi => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_142.dll [2019-02-14] ()
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-20] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-20] (Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] ( Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-14] ()
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] ( Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker -> C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> G:\Programme\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems Inc.)
StartMenuInternet: Firefox-E6D11708B02F97DD - G:\Programme\Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxps://encrypted.google.com
CHR StartupUrls: Default -> "hxxps://encrypted.google.com"
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default [2019-02-24]
CHR Extension: (ProxFlow) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2019-02-24]
CHR Extension: (Präsentationen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-07]
CHR Extension: (Docs) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-07]
CHR Extension: (Google Drive) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-27]
CHR Extension: (YouTube) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]
CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-01-30]
CHR Extension: (RealPlayer Cloud) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\damemajnpodbdjndboidpmfpjlabocje [2016-02-07]
CHR Extension: (Adobe Acrobat) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-05-31]
CHR Extension: (uDomainFlag) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklbfdpploakpkdakoielobggbhemlnm [2015-11-25]
CHR Extension: (Tabellen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-07]
CHR Extension: (Video Downloader PLUS) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2019-01-20]
CHR Extension: (HTTPS Everywhere) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2019-02-04]
CHR Extension: (PDF Mage) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\gknphemhpcknkhegndlihchfonpdcben [2018-10-27]
CHR Extension: (Bookmark Scanner) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijpiaohplcljdpbgiaggdipdogjlejko [2018-11-13]
CHR Extension: (HTTP Headers) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioieekamcpjfleokdcdifpmclkohddp [2017-11-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Mosh) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooiklbnjmhbcgemelgfhaeaocllobloj [2018-09-08]
CHR Extension: (Google Mail) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-09]
CHR Extension: (Chrome Media Router) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-18]
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile [2018-06-04]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [nladljmabboanhihfkjacnnkgjhnokhj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6893704 2018-07-15] (BattlEye Innovations e.K. -> )
S4 BetterHashPrelogin; G:\Programme\BetterHash\prelogin.exe [621640 2018-02-16] (Innovative Solutions Grup SRL -> )
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-07-19] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 EaseUS Agent; G:\Programme\Todo Backup\bin\Agent.exe [40080 2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2018-06-24] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ICEsoundService; C:\Windows\system32\ICEsoundService64.exe [807808 2019-01-11] (ICEpower a/s -> ICEpower)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
S3 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6058960 2017-08-07] (Malwarebytes Corporation -> Malwarebytes)
S4 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [184784 2018-12-04] (TEFINCOM S.A. -> )
S3 Origin Client Service; G:\Programme\Origin\OriginClientService.exe [2298688 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; G:\Programme\Origin\OriginWebHelperService.exe [3171144 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S4 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 ProtonVPN Service; G:\Programme\ProtonVPN\ProtonVPNService.exe [38664 2018-10-17] (ProtonVPN AG -> )
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R2 SNMP; C:\Windows\System32\snmp.exe [53248 2018-12-08] (Microsoft Windows -> Microsoft Corporation)
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [974848 2018-12-08] (Microsoft Windows -> )
S3 TunnelBearMaintenance; G:\Programme\TunnelBear\TBear.Maintenance.exe [38272 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
S3 VBoxSDS; G:\Programme\OracleVM VirtualBox\VBoxSDS.exe [690424 2019-01-25] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AmUStor; C:\Windows\system32\drivers\AmUStor.SYS [109504 2018-11-28] (Alcorlink Corp. -> )
S0 asahci64; C:\Windows\System32\drivers\asahci64.sys [36448 2011-01-30] (ASMedia Technology Inc. -> Asmedia Technology)
R0 asstahci64; C:\Windows\System32\drivers\asstahci64.sys [98696 2019-02-03] (ASMedia Technology Inc. -> Asmedia Technology)
S3 avmaura; C:\Windows\System32\drivers\avmaura.sys [116480 2015-11-20] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [269408 2018-01-09] (Bluestack Systems, Inc. -> Bluestack System Inc. )
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [34496 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [30416 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [73328 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [53360 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [22640 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [341104 2018-07-28] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2018-10-24] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Datei ist nicht signiert]
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\vrtaucbl.sys [110368 2014-05-30] (Muzychenko Evgenii Viktorovich -> Eugene V. Muzychenko)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [33968 2015-08-26] (Paragon Software GmbH -> Paragon Software Group)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-05-31] (Martin Malik - REALiX -> REALiX(tm))
S4 IObitUnlocker; G:\Programme\IObit Unlocker\IObitUnlocker.sys [66824 2017-06-15] (IObit Information Technology -> IObit)
R1 ISODrive; G:\Programme\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 jakstaVA; C:\Windows\system32\DRIVERS\jaksta_va.sys [103816 2017-02-23] (Jaksta Technologies Pty Ltd -> e2eSoft)
S3 KMWDFILTER; C:\Windows\System32\drivers\KMWDFILTER.sys [30208 2009-04-29] (MLK Technologies Limited -> Windows (R) Codename Longhorn DDK provider)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-07-23] (Tages SA -> )
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_01c064f3d89f92be\nvlddmkm.sys [20424640 2019-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
R3 P17; C:\Windows\system32\drivers\P17.sys [1289216 2009-08-03] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2017-11-25] (PAIPTAC  Driver -> )
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1122200 2019-01-11] (Realtek Semiconductor Corp. -> Realtek )
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] (Intel(R) Code Signing External -> )
R0 speedfan; C:\Windows\SysWow64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tap-tb-0901; C:\Windows\System32\drivers\tap-tb-0901.sys [38656 2016-10-17] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2018-06-13] (TEFINCOM S.A. -> The OpenVPN Project)
R3 tapprotonvpn; C:\Windows\System32\drivers\tapprotonvpn.sys [44976 2018-06-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 teVirtualMIDI64; C:\Windows\system32\DRIVERS\teVirtualMIDI64.sys [41016 2016-08-31] (Tobias Erichsen -> Tobias Erichsen)
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102576 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25904 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [701232 2015-08-26] (Paragon Software GmbH -> )
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2016-04-05] (Wireshark Foundation, Inc. -> USBPcap)
R3 VBAudioVMVAIOMME; C:\Windows\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-10-12] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [235832 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [247216 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [828776 2018-09-23] (IDRIX -> IDRIX)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-02-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [333792 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [39112 2017-03-29] (Wondershare Technology Co.,Ltd -> Wondershare)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-02-24 12:07 - 2019-02-24 12:08 - 000036061 _____ C:\Users\Michael\Desktop\FRST.txt
2019-02-24 12:07 - 2019-02-24 12:07 - 002435072 _____ (Farbar) C:\Users\Michael\Desktop\FRST64.exe
2019-02-24 05:37 - 2019-02-24 12:07 - 000000000 ____D C:\FRST
2019-02-23 09:02 - 2019-02-23 09:02 - 002870767 _____ C:\Users\Michael\Desktop\RathausRevue-Nr22_final.pdf
2019-02-23 01:08 - 2019-02-23 01:08 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-02-22 21:47 - 2019-02-22 21:47 - 000000000 ____D C:\Users\Michael\AppData\Local\IsolatedStorage
2019-02-21 00:16 - 2019-02-21 00:16 - 000000000 ____D C:\Users\Michael\Documents\Flower
2019-02-19 00:38 - 2019-02-19 00:38 - 000000000 ____D C:\Users\Michael\OnionShare
2019-02-18 01:11 - 2019-02-18 01:11 - 000002918 _____ C:\Windows\System32\Tasks\Driver Booster SkipUAC (Michael)
2019-02-18 01:11 - 2019-02-18 01:11 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Driver Booster 6
2019-02-13 15:44 - 2019-02-13 15:44 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 023439360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 020812288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 019023872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006540424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006070272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004885504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004688896 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004627456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003922944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003743744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002927120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002626592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002469648 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002323696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001969680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 001700864 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001671864 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001467560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000982032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000475152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-02-13 15:44 - 2019-02-13 15:44 - 000421904 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000340480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:44 - 009683984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 003662336 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002721280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002437552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 001255736 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050936 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000982576 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000765960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000419128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000387384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000047136 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000072 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2019-02-10 21:36 - 2019-02-10 21:36 - 000626634 _____ C:\Users\Michael\Desktop\dl-praesentation.pdf
2019-02-07 02:13 - 2019-02-08 11:34 - 023578051 _____ C:\Users\Michael\Desktop\Stefan Nixdorf - Commodus Part 2 The Menace.mp4
2019-02-06 18:17 - 2019-02-06 18:20 - 000000000 ____D C:\Users\Michael\VirtualBox VMs
2019-02-06 18:10 - 2019-02-06 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2019-02-06 18:04 - 2019-02-06 18:04 - 001779329 _____ C:\Users\Michael\Desktop\Anhang_Themendienst_ETCS-data.pdf
2019-02-06 15:39 - 2019-02-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 11.5
2019-02-06 15:38 - 2018-08-14 09:40 - 000026256 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\fbnative.exe
2019-02-05 08:05 - 2019-02-24 00:47 - 000017525 _____ C:\Users\Michael\Desktop\_Stundennachweis - Abrechung Ausdruck ZVMC.ods
2019-02-05 07:46 - 2019-02-05 07:47 - 000000000 ____D C:\Program Files\Recuva
2019-02-05 07:46 - 2019-02-05 07:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2019-02-05 01:25 - 2019-02-18 01:30 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-02-03 08:06 - 2019-02-03 08:06 - 000098696 _____ (Asmedia Technology) C:\Windows\system32\Drivers\asstahci64.sys
2019-02-01 14:04 - 2019-02-01 14:04 - 000000000 ____D C:\Users\Michael\Desktop\Spiele
2019-01-29 06:49 - 2019-01-29 06:49 - 000001948 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATTO Disk Benchmark.lnk
2019-01-28 02:14 - 2019-01-28 02:14 - 000247216 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2019-01-28 02:14 - 2019-01-28 02:14 - 000235832 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys
2019-01-25 14:17 - 2019-01-25 14:17 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\iTunes
2019-01-25 14:17 - 2019-01-25 14:17 - 000000000 ____D C:\Program Files\iPod

==================== Ein Monat (geänderte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-02-24 12:05 - 2018-12-08 19:07 - 000004166 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B0378A27-122D-4BCB-88AD-AA674EF080DB}
2019-02-24 12:02 - 2018-12-08 18:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-02-24 12:02 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-24 12:02 - 2015-01-31 23:20 - 000000000 ____D C:\Users\Michael\AppData\Local\whatpulse
2019-02-24 12:02 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Spotify
2019-02-24 12:02 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Spotify
2019-02-24 09:04 - 2015-11-22 19:23 - 000000600 _____ C:\Users\Michael\AppData\Local\PUTTY.RND
2019-02-24 05:34 - 2017-09-15 21:09 - 000000000 ____D C:\Users\Michael\AppData\Local\PingPlotter 5
2019-02-24 05:27 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-02-24 05:24 - 2016-11-25 15:01 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\Mozilla
2019-02-24 05:18 - 2018-12-08 19:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-02-24 05:18 - 2017-07-25 15:37 - 000000000 ____D C:\ProgramData\NVIDIA
2019-02-24 05:18 - 2015-01-25 00:49 - 000000000 ___RD C:\Users\Michael\iCloudDrive
2019-02-24 02:45 - 2018-09-15 07:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-02-24 02:11 - 2014-07-23 15:16 - 000000000 ____D C:\Users\Michael\Desktop\Bereinigungsprogramme
2019-02-24 02:08 - 2018-12-08 19:07 - 000003928 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-02-24 02:06 - 2014-07-22 01:05 - 000000000 ____D C:\ProgramData\Origin
2019-02-24 02:05 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Origin
2019-02-24 02:04 - 2018-12-11 22:34 - 000000000 ____D C:\Users\Michael\AppData\Roaming\OnionShare
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files\OBS
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files (x86)\OBS
2019-02-24 00:50 - 2018-03-02 05:42 - 000000000 ____D C:\Users\Michael\.VirtualBox
2019-02-24 00:44 - 2019-01-02 10:36 - 000000000 ____D C:\ProgramData\VirtualBox
2019-02-24 00:43 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-23 19:42 - 2018-05-18 04:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-02-23 01:08 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Dropbox
2019-02-22 21:47 - 2016-12-08 18:26 - 000000000 ____D C:\Users\Michael\AppData\Roaming\TunnelBear
2019-02-22 09:20 - 2017-01-06 22:05 - 000000000 ____D C:\Users\Michael\AppData\Roaming\vlc
2019-02-21 20:37 - 2017-11-16 03:31 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-20 01:01 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Ubisoft Game Launcher
2019-02-19 00:38 - 2018-12-08 19:01 - 000000000 ____D C:\Users\Michael
2019-02-18 16:05 - 2018-11-28 16:03 - 001466882 _____ C:\Windows\ntbtlog.txt
2019-02-18 15:23 - 2017-09-15 22:03 - 000000827 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-02-18 01:35 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-02-18 01:28 - 2014-07-21 20:47 - 000000000 ____D C:\Users\Michael\Desktop\Icons
2019-02-18 01:11 - 2019-01-02 09:05 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2019-02-18 01:11 - 2019-01-02 09:00 - 000000000 ____D C:\ProgramData\IObit
2019-02-18 01:08 - 2017-05-31 23:54 - 000000000 ____D C:\ProgramData\ProductData
2019-02-15 18:23 - 2014-07-19 21:37 - 000002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-14 16:04 - 2018-12-08 19:07 - 000004534 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-02-14 15:51 - 2018-12-08 19:07 - 000004636 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-02-13 21:29 - 2018-12-08 18:57 - 000585952 _____ C:\Windows\system32\FNTCACHE.DAT
2019-02-13 21:29 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-02-13 15:42 - 2014-07-19 22:02 - 000000000 ____D C:\Windows\system32\MRT
2019-02-13 15:39 - 2014-07-19 22:02 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-02-12 13:57 - 2018-12-08 19:07 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-02-11 23:26 - 2018-09-15 18:34 - 000000000 ____D C:\Windows\system32\OpenSSH
2019-02-09 10:29 - 2016-10-07 17:09 - 000001254 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job
2019-02-09 10:29 - 2016-10-07 17:09 - 000001202 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job
2019-02-08 12:26 - 2015-01-25 23:39 - 000000000 ____D C:\Users\Michael\AppData\Roaming\PersBackup5
2019-02-08 10:51 - 2018-12-08 19:07 - 000004408 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3
2019-02-08 10:51 - 2018-12-08 19:07 - 000004032 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318
2019-02-07 16:42 - 2016-07-28 17:12 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cain
2019-02-06 18:12 - 2017-10-24 03:54 - 000000000 ____D C:\Users\Michael\Documents\PersBackup
2019-02-06 15:39 - 2018-03-02 21:30 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-02-05 21:51 - 2015-11-26 23:20 - 000000306 __RSH C:\ProgramData\ntuser.pol
2019-02-04 16:40 - 2017-05-15 13:48 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-04 16:40 - 2014-07-20 01:28 - 000000000 ____D C:\ProgramData\Avira
2019-02-04 16:39 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-02-04 16:30 - 2018-12-08 19:09 - 001968014 _____ C:\Windows\system32\PerfStringBackup.INI
2019-02-04 16:30 - 2018-09-15 18:33 - 000805258 _____ C:\Windows\system32\perfh007.dat
2019-02-04 16:30 - 2018-09-15 18:33 - 000172634 _____ C:\Windows\system32\perfc007.dat
2019-02-04 15:55 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-04 15:45 - 2010-11-21 04:27 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-02-03 14:39 - 2018-05-18 04:45 - 000000000 ____D C:\Users\Michael\AppData\Local\D3DSCache
2019-02-01 23:31 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-02-01 23:31 - 2018-09-15 08:36 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-02-01 17:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-01-31 18:29 - 2018-07-10 01:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2019-01-31 18:22 - 2014-07-19 18:30 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-28 02:14 - 2019-01-02 10:36 - 001021768 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2019-01-28 02:14 - 2019-01-02 10:36 - 000185960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys
2019-01-25 14:17 - 2015-09-16 23:25 - 000000000 ____D C:\Program Files\iTunes

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-14 12:37 - 2017-01-14 12:37 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2015-03-09 23:37 - 2015-03-09 23:37 - 000000095 _____ () C:\Users\Michael\AppData\Roaming\LauncherSettings_live.cfg
2017-08-09 00:04 - 2017-08-09 00:09 - 000000166 _____ () C:\Users\Michael\AppData\Roaming\nuvotonISP.lua
2015-03-09 23:36 - 2015-03-09 23:36 - 000000040 _____ () C:\Users\Michael\AppData\Roaming\TheHunterSettings_steam_live.cfg
2017-10-12 23:37 - 2018-06-03 23:07 - 000004402 _____ () C:\Users\Michael\AppData\Roaming\VoiceMeeterDefault.xml
2014-07-20 12:33 - 2014-01-13 13:37 - 000000074 _____ () C:\Users\Michael\AppData\Roaming\WB.CFG
2014-07-20 12:28 - 2013-01-04 22:20 - 000000095 _____ () C:\Users\Michael\AppData\Local\fusioncache.dat
2015-11-22 19:23 - 2019-02-24 09:04 - 000000600 _____ () C:\Users\Michael\AppData\Local\PUTTY.RND
2017-03-19 00:04 - 2017-03-19 00:04 - 000007606 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2014-07-21 23:42 - 2014-07-21 23:42 - 000828671 _____ () C:\Users\Michael\AppData\Local\Tempmusic.ogg
2014-07-20 12:28 - 2012-09-21 19:12 - 000017408 _____ () C:\Users\Michael\AppData\Local\WebpageIcons.db
2012-09-10 12:49 - 2012-09-10 12:49 - 000001050 ____H () C:\Users\Michael\AppData\Local\{793FD447-37EB-4083-B222-2E447297AF07}

Einige Dateien in TEMP:
====================
2019-02-24 08:56 - 2008-05-30 13:24 - 000430172 _____ (Ashok P. Nadkarni) C:\Users\Michael\AppData\Local\Temp\twapi-2.0a9.dll

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\dllhost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\dllhost.exe => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

==================== Ende von FRST.txt ============================

computerfrea · 24.02.2019, 12:28

Addition.txt:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 20.02.2019 02
durchgeführt von Michael (24-02-2019 12:08:41)
Gestartet von C:\Users\Michael\Desktop
Windows 10 Home Version 1809 17763.316 (X64) (2018-12-08 18:07:40)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2862775871-2864016982-4179919401-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2862775871-2864016982-4179919401-1005 - Limited - Enabled)
DefaultAccount (S-1-5-21-2862775871-2864016982-4179919401-503 - Limited - Disabled)
Gast (S-1-5-21-2862775871-2864016982-4179919401-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2862775871-2864016982-4179919401-1044 - Limited - Enabled)
Michael (S-1-5-21-2862775871-2864016982-4179919401-1000 - Administrator - Enabled) => C:\Users\Michael
WDAGUtilityAccount (S-1-5-21-2862775871-2864016982-4179919401-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.)
4K Stogram 2.6 (HKLM\...\{CBD24523-4E64-4DFB-8311-05019EFD0D6B}) (Version: 2.6.14.1590 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{345F3F90-0505-4EDF-B7A9-5E3AC1AC6CE4}) (Version: 15.2.1 - Hewlett-Packard) Hidden
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Any Video Converter 6.2.3 (HKLM-x32\...\Any Video Converter) (Version: 6.2.3 - Anvsoft)
Apple Application Support (32-Bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.1.9.000 - Asmedia Technology)
Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version:  - Ubisoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)
Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.51 - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version:  - Ubisoft)
Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)
ATTO Disk Benchmark (HKLM-x32\...\{8D451ECC-F576-41CF-8059-150676D668EF}) (Version: 4.000.4002 - ATTO Technology)
AVS Image Converter 5.0.3 (HKLM-x32\...\AVS Image Converter_is1) (Version: 5.0.3.293 - Online Media Technologies Ltd.)
Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)
Balabolka (HKLM-x32\...\Balabolka) (Version: 2.05 - Ilya Morozov)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.57.44284 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlefield™ V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.59.63793 - Electronic Arts)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.18.5 - Bethesda Softworks)
BetterHash (HKLM-x32\...\BH1_is1) (Version: 2.41.0.203 - Innovative Solutions)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.1 - BlueJ Team)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 3.55.70.1783 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BPM-Studio 4 Demo (HKLM-x32\...\{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}) (Version: 4.9.94 - AlcaTech)
Cain & Abel 4.9.56 (HKLM-x32\...\Cain & Abel 4.9.56) (Version:  - )
CameoD4 (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\{3b187530-f325-414e-85ac-b5b28c38ba65}) (Version: 1.0.0.0 - LightingSoft)
CCleaner (HKLM\...\CCleaner) (Version: 5.53 - Piriform)
Cobra 11 - Crash Time Demo (remove only) (HKLM-x32\...\CrashTime Demo) (Version:  - )
Cobra 11 - Nitro Demo (HKLM-x32\...\{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic) Hidden
Cobra 11 - Nitro Demo (HKLM-x32\...\InstallShield_{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
CPUID CPU-Z 1.86 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.86 - CPUID, Inc.)
Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.45 - Creative Technology Limited)
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version:  - )
Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited)
CrystalDiskInfo 7.5.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.5.1 - Crystal Dew World)
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dead in Bermuda (HKLM-x32\...\{FA6BAE37-E751-46A2-A26D-C6090ECCEBD3}) (Version: 4.7.0.2969 - Plug In Digital)
Dead Space (HKLM-x32\...\{9789E33B-317A-44B2-AF9A-FF8708AD93E0}) (Version: 3.0.0.222 - Electronic Arts)
D-Fend Reloaded 1.4.4 (deinstallieren) (HKLM-x32\...\D-Fend Reloaded) (Version: 1.4.4 - Alexander Herzog)
DMXControl 3.1 (HKLM-x32\...\DMXControl3) (Version: 3.1 - DMXControl Projects e.V.)
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.60.000 - Runtime Software)
Driver Booster 6 (HKLM-x32\...\Driver Booster_is1) (Version: 6.2.1 - IObit)
Dropbox (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Dropbox) (Version: 68.3.92 - Dropbox, Inc.)
Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts)
EaseUS Partition Master 13.0 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 11.5 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 11.5 - CHENGDU YIWO Tech Development Co., Ltd)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version:  - Steinberg Media Technologies GmbH)
Emperors New Groove (HKLM-x32\...\Emperors New Groove) (Version:  - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
Far Cry 5 (HKLM-x32\...\Uplay Install 1803) (Version:  - Ubisoft)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Fresco Logic USB3.0 Host Controller (HKLM\...\{6E9E1B70-59C4-403E-ABFB-C08012BC7F8A}) (Version: 3.0.89.14 - Fresco Logic Inc.)
Funfair Machines Break Dance No.1 V1.1 (HKLM-x32\...\Funfair Machines Break Dance No.1 V1.1) (Version:  - )
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.40.0 - International GeoGebra Institute)
G-Force (HKLM-x32\...\G-Force) (Version: 5.1.2 - SoundSpectrum)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.109 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
gpedt.msc 1.0 (HKLM-x32\...\{10B9C608-BF7C-4CCF-A658-C01D969DCA21}_is1) (Version:  - Richard)
Gpg4win (3.1.4) (HKLM-x32\...\Gpg4win) (Version: 3.1.4 - The Gpg4win Project)
HashCalc 2.02 (HKLM-x32\...\HashCalc_is1) (Version:  - SlavaSoft Inc.)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
IdleMaster (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\1d85483b1c982d8c) (Version: 1.4.0.0 - IdleMaster)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
ImageGlass (HKLM\...\{D539FBEF-4AA8-4415-B66F-6367DA5D0186}_is1) (Version: 4.5.11.27 - Duong Dieu Phap)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4885 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1.2.1 - IObit)
ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version:  - isotousb.com)
IsoBuster 4.3 (HKLM-x32\...\IsoBuster_is1) (Version: 4.3 - Smart Projects)
iTunes (HKLM\...\{C704C598-39D0-4B12-BBFA-FF6D43C95BFD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Java SE Development Kit 8 Update 112 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180112}) (Version: 8.0.1120.15 - Oracle Corporation)
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version:  - )
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version:  - Nicolaudie)
Malwarebytes Version 3.2.2.2029 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.2.2.2029 - Malwarebytes)
Manhunt 2 (HKLM-x32\...\Manhunt 2) (Version: 1.00.0000 - Rockstar Games)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Mäx! (HKLM-x32\...\Maex) (Version:  - )
MeatCity 2 V2.03  (HKLM-x32\...\MeatCity 2) (Version: V2.03 - )
Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.280 - Electronic Arts)
Medal of Honor™ Warfighter (HKLM-x32\...\{1040143F-FEFB-4B90-8E51-E47D40E14C4E}) (Version: 1.0.0.3 - Electronic Arts)
Melodyne 3.2 Demo (HKLM-x32\...\{EC9A0711-9823-4DD2-83C4-039886A3ECF6}) (Version: 3.2.0105 - Celemony Software GmbH) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.62615.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62615.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mirror's Edge™ Catalyst (HKLM-x32\...\{12228a0d-f6ad-4691-82af-d2c643424468}) (Version: 1.0.3.47248 - Electronic Arts)
Mirror's Edge™ Catalyst Closed Beta (HKLM-x32\...\{A0F5340B-2F0B-4830-B746-1850B62B61E0}) (Version: 1.0.3.31690 - Electronic Arts)
Morphyre (HKLM-x32\...\Morphyre) (Version:  - )
Mozilla Firefox 58.0.2 (x64 de) (HKLM\...\Mozilla Firefox 58.0.2 (x64 de)) (Version: 58.0.2 - Mozilla)
Mozilla Firefox 65.0.1 (x64 de) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Mozilla Firefox 65.0.1 (x64 de)) (Version: 65.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
NASA World Wind 1.4 (HKLM-x32\...\NASA World Wind 1.4) (Version:  - )
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)
NirSoft ShellExView (HKLM-x32\...\NirSoft ShellExView) (Version:  - )
NordVPN (HKLM-x32\...\{F11DDED0-213C-41B7-B120-514E402A7B53}) (Version: 6.19.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.19.6) (Version: 6.19.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NOX (HKLM-x32\...\{BF152F35-9708-452C-862C-F7E3B62DF732}) (Version: 2.0.0.22 - Electronic Arts, Inc.)
NVIDIA HD-Audiotreiber 1.3.38.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.5 (HKLM-x32\...\{F0C909D7-D643-4628-8C6A-94073139F0CE}) (Version: 4.15.9789 - Apache Software Foundation)
Oracle VM VirtualBox 6.0.4 (HKLM\...\{9E2B30E6-2102-45C0-9EAF-B631EBCEC198}) (Version: 6.0.4 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.34.21025 - Electronic Arts, Inc.)
Paragon Backup and Recovery™ 14 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Partition Manager™ 2014 Free (HKLM-x32\...\{47E5588F-C3A0-11DE-9857-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Personal Backup 5.9.4.10 (64-bit) (HKLM\...\Personal Backup 5_is1) (Version: 5.9.4.10 - Dr. J. Rathlev)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PingPlotter 5 (HKLM-x32\...\{F513FFE3-ED3B-4DC1-BB41-DABEBCAE2F6F}) (Version: 5.5.14.4908 - Pingman Tools, LLC) Hidden
PingPlotter 5 (HKLM-x32\...\PingPlotter 5 5.5.14.4908) (Version: 5.5.14.4908 - Pingman Tools, LLC)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.) Hidden
ProtonVPN (HKLM-x32\...\{ED11FFD4-61B3-4329-870E-8F4DAC7D5A0D}) (Version: 1.6.4 - ProtonVPN AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.6.4) (Version: 1.6.4 - ProtonVPN AG)
ProtonVPNTap (HKLM-x32\...\{C23BCE3A-FD25-48BA-948E-2CE94576F983}) (Version: 1.0.1 - ProtonVPN AG)
Quake Champions (HKLM-x32\...\Quake Champions) (Version:  - Bethesda Softworks)
RealSpeak Solo fur Deutsch - Steffi (HKLM-x32\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8549 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Rename Master (HKLM-x32\...\Rename Master_is1) (Version:  - )
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Rise of the Triad (HKLM-x32\...\1207659244_is1) (Version: 2.5.0.23 - GOG.com)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version:  - )
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.2.0.1610 - Samsung Electronics)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SeaTools for Windows 1.4.0.6 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.6 - Seagate Technology)
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM-x32\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Sniper Elite (HKLM-x32\...\{A979B2D8-E3EE-4523-A26C-4AF0A6809280}) (Version:  - )
SoftPerfect Network Scanner version 7.1.2 (HKLM\...\{8083C3D9-F400-48FA-B060-CF55F25E2D4B}_is1) (Version: 7.1.2 - SoftPerfect)
SoftSkies (HKLM-x32\...\SoftSkies) (Version: 2.1.2 - SoundSpectrum)
Spire-1.1 Plug-In (x64) (HKLM\...\{3F98118B-D5D1-455B-A899-E03C1D7B4E89}) (Version: 1.1.12.0 - Reveal Sound Ltd.)
Splice (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\splice) (Version: 3.2.28369 - Distributed Creation, Inc.)
Spotify (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Spotify) (Version: 1.1.0.237.g378f6f25 - Spotify AB)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
TAP-NordVPN 9.21.2 (HKLM\...\TAP-NordVPN) (Version: 9.21.2 - NordVPN.com)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Termius 3.0.10 (only current user) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\4f53adaa-a4b2-50c1-b605-e304e4d14011) (Version: 3.0.10 - Crystalnix)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.1 - Electronic Arts)
The Train 1.0 (HKLM-x32\...\The Train 1.0) (Version: 1.0 - Cat-A-Cat)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
Total Overdose (HKLM-x32\...\GOGPACKTOTALOVERDOSE_is1) (Version: 2.0.0.2 - GOG.com)
Trials of the Blood Dragon (HKLM-x32\...\Uplay Install 2741) (Version:  - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TunnelBear (HKLM-x32\...\{1d805fba-7655-411e-a641-51f4f8e6bd5b}) (Version: 3.0.33.0 - TunnelBear)
TunnelBear (HKLM-x32\...\{C0A3B957-2B11-404F-9FFC-D97E7D175681}) (Version: 3.0.33.0 - TunnelBear) Hidden
Ultima 8 (HKLM-x32\...\{428C6B01-D292-46F9-9321-75668ED17DA2}) (Version: 1.0.0.1 - Electronic Arts)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)
USBPcap 1.1.0.0-g794bf26-3 (HKLM\...\USBPcap) (Version: 1.1.0.0-g794bf26-3 - )
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.23 - IDRIX)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.)
Virtual Audio Cable 4.14 (HKLM\...\Virtual Audio Cable 4.14) (Version:  - )
Vistawinexit (HKLM-x32\...\{2FC1B08D-B4B6-42F4-B1BF-C913625EAC6C}_is1) (Version: 8 - hxxp://www.kurt-selzam.de/)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version:  - VB-Audio Software)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{71B8842B-5C0D-4221-968D-8750D4F3DF63}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{cc96a3c1-3461-4e39-be96-50219a26ce18}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
WhatPulse version 2.8.4 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.8.4 - WhatPulse)
WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.5 - SoundSpectrum)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Winamp Essentials Pack (HKLM-x32\...\Winamp Essentials Pack) (Version: v5.64 - Christoph Grether)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinToUSB Version 3.9 (HKLM\...\WinToUSB_is1) (Version: 3.9 - Hasleo Software.)
Wireshark 2.4.2 32-bit (HKLM-x32\...\Wireshark) (Version: 2.4.2 - The Wireshark developer community, hxxps://www.wireshark.org)
Wondershare AllMyTube(Build 4.10.2.3) (HKLM-x32\...\Wondershare AllMyTube_is1) (Version: 4.10.2.3 - Wondershare Software)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Zip Motion Block Video codec (Remove Only) (HKLM-x32\...\ZMBV) (Version:  - DOSBox Team)
Zumas Revenge (HKLM-x32\...\{0B153CAB-792B-4CA2-B2A5-AB0BBAF2FFA9}) (Version: 1.0.5.600 - PopCap Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{9B57F475-CCB0-4C85-88A9-2AA9A6C0809A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => G:\Programme\Balabolka\BFileExt.dll [2012-04-06] (Ilya Morozov)
ContextMenuHandlers1: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} =>  -> Keine Datei
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>  -> Keine Datei
ContextMenuHandlers2: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4: [UltraISO] -> [CC]{AD392E40-428C-459F-961E-9B147782D099} =>  -> Keine Datei
ContextMenuHandlers4: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-12-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov)
ContextMenuHandlers6: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2017-08-30] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01EA6A67-8822-46E0-BD96-FC08DB3D8BBB} - System32\Tasks\{89DD9B44-2F83-4197-996E-C8098428B644} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setupd.exe -d C:\Users\Michael\Desktop
Task: {059CD803-B78C-413D-BE1A-AA09A9445C32} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {07DDD542-132B-46BB-B3FC-F35BA76D0CA9} - System32\Tasks\CCleaner Update => G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {0B709BD2-E774-420A-A51B-BBD4DA2A66CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {17B66134-46E2-4A54-8BF9-990BA02C0C5C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {35A08F34-9552-4F46-B6F7-BF78570FA332} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {39029539-4295-4AEB-84D8-B523676A734A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {3CCB2340-05A8-41A1-A53E-071A229DDC24} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4250DC96-7DDE-4BAE-A3DA-CCA4F32C9438} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {466FD5D0-FAFE-42D6-97D2-029ABBEB5A54} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {4B2485CD-C98B-4707-A57B-9B7E1B189B35} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.EXE /NOUACCHECK
Task: {5068825B-B75D-436A-AB39-5665687A7E9F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5C072332-DBEA-42E8-A395-9E5CB91F6E15} - System32\Tasks\S-1-5-21-2862775871-2864016982-4179919401-1000\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe (Microsoft Windows -> Microsoft Corporation)
Task: {6485F8B2-6355-40E9-A653-5A9BF901A413} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {6656EB71-F08F-4A17-AAC4-3031825E49D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {779C4E69-F3B3-4D22-A9B0-5ED017345E3D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {8A9D0829-BB90-4472-B4C2-8A70FFEACCE4} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {8B778A13-4A28-4427-A53D-95B6BA5CF98C} - System32\Tasks\SamsungMagician => G:\Programme\Samsung Magician\SamsungMagician.exe (Samsung Electronics Co., Ltd. -> Samsung Electronics Co. Ltd.)
Task: {8D512E7D-F4D8-47EE-A0BB-3C36FA78D4FB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {8F44A9F9-2DB8-4407-931D-725DAFFD0D24} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {9D144209-4029-48FD-B10A-66A3ACDB35AE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {A2F85536-A291-4FF9-88FE-6620A6DB6D91} - System32\Tasks\{1DE6E651-2507-43E3-9FF8-E287F4799876} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setup.exe -d C:\Users\Michael\Desktop
Task: {AED74002-9BE2-466E-86F1-9370F35F24AE} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {B7ECBF71-5300-4273-9E5B-71C343957C32} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {B823C99B-068A-47F9-B8D6-E652C6620DF6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BDAB4FB8-B3EC-4598-A2A6-7C6654BD7B69} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C4B78B46-40B0-463D-9841-2D8816553CD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {CE7BF8D7-4637-474F-A48C-7034C246B4D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {CED07631-1858-44D0-8F84-456AEBE2D6FC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {D6E2EDBA-DEDE-4893-87A1-61EEEACD3F99} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB292475-781B-48F6-97C7-5694CF930CBA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {E203F373-B08B-4C09-B4FD-6EC0B64B59AB} - System32\Tasks\Driver Booster SkipUAC (Michael) => G:\Programme\Driver Booster\6.2.1\DriverBooster.exe (IObit Information Technology -> IObit)
Task: {E3CCB1BB-EFF6-4410-8E9F-8AAC2973C17B} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {E922B90C-F1EA-4D8C-BEAE-D573F342E45F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {EDD03E1B-FEAD-47F1-8388-2F27B94E3A7E} - System32\Tasks\CrystalDiskInfo => G:\Programme\CrystalDiskInfo\DiskInfo32.exe (Noriyuki Miyazaki -> Crystal Dew World)
Task: {FC158B24-ECDF-4F3F-8C9B-764B5078E035} - System32\Tasks\Tweaking.com - Registry Backup => G:\Programme\Registry Backup\TweakingRegistryBackup.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Mosh.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=ooiklbnjmhbcgemelgfhaeaocllobloj

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2018-09-15 08:28 - 2018-09-15 08:28 - 000834088 _____ () C:\Windows\SYSTEM32\inputhost.dll
2017-11-30 18:54 - 2017-11-30 18:54 - 000088888 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\zlib1.dll
2019-01-15 01:27 - 2019-01-15 01:27 - 001356088 _____ () C:\Program Files\Common Files\Apple\Apple Application Support\libxml2.dll
2018-12-04 11:14 - 2018-12-04 11:14 - 000184784 _____ () C:\Program Files (x86)\NordVPN\nordvpn-service.exe
2018-10-17 13:46 - 2018-10-17 13:46 - 000038664 _____ () G:\Programme\ProtonVPN\ProtonVPNService.exe
2018-08-17 06:50 - 2018-08-17 06:50 - 000300032 _____ () G:\Programme\ProtonVPN\Resources\64-bit\firewall.dll
2018-09-15 08:28 - 2018-09-15 08:28 - 000474624 _____ () C:\Windows\ShellExperiences\TileControl.dll
2019-01-23 01:06 - 2019-01-23 01:06 - 002801152 _____ () C:\Windows\ShellComponents\TaskFlowUI.dll
2019-01-23 01:06 - 2019-01-23 01:06 - 001740800 _____ () C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\Cortana.Core.dll
2019-02-23 00:28 - 2019-02-23 00:28 - 007181824 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\YourPhone.exe
2019-02-23 00:28 - 2019-02-23 00:28 - 002542592 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\YourPhone.AppCore.dll
2019-02-23 00:28 - 2019-02-23 00:28 - 000256000 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\AppConfig.dll
2018-10-31 16:23 - 2018-10-31 16:23 - 001004032 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\RuntimeConfiguration.dll
2019-02-23 00:28 - 2019-02-23 00:28 - 003547136 _____ () C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\PhoneCommunicationAppService.dll
2018-12-08 00:57 - 2018-12-08 00:57 - 004380232 _____ () C:\Program Files\WindowsApps\Microsoft.UI.Xaml.2.0_2.1810.18004.0_x64__8wekyb3d8bbwe\Microsoft.UI.Xaml.dll
2019-02-06 15:38 - 2018-08-14 09:41 - 000270480 _____ () G:\Programme\Todo Backup\bin\TodoBackupService.exe
2019-01-23 16:33 - 2019-01-23 16:33 - 000088888 _____ () C:\Program Files\iTunes\zlib1.dll
2019-01-23 16:33 - 2019-01-23 16:33 - 001356088 _____ () C:\Program Files\iTunes\libxml2.dll
2017-07-10 23:36 - 2018-11-16 13:52 - 003377376 _____ () C:\Program Files (x86)\WhatPulse2\whatpulse.exe
2017-07-10 23:36 - 2018-11-16 13:52 - 000652000 _____ () C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
2018-08-29 13:44 - 2019-02-05 02:46 - 001072416 _____ () G:\Programme\Steam\bin\cef\cef.win7x64\SDL2.dll
2018-08-29 13:43 - 2018-11-20 01:56 - 102804768 _____ () G:\Programme\Steam\bin\cef\cef.win7x64\libcef.dll
2018-08-29 13:43 - 2018-11-20 01:56 - 004866336 _____ () G:\Programme\Steam\bin\cef\cef.win7x64\libglesv2.dll
2018-08-29 13:43 - 2018-11-20 01:56 - 000116000 _____ () G:\Programme\Steam\bin\cef\cef.win7x64\libegl.dll
2019-02-15 18:23 - 2019-02-13 06:14 - 005186032 _____ () C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.109\libglesv2.dll
2019-02-15 18:23 - 2019-02-13 06:14 - 000117232 _____ () C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.109\libegl.dll
2018-05-24 13:45 - 2018-05-24 13:45 - 000250368 _____ () C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2019-02-06 15:38 - 2017-02-21 17:19 - 000083136 _____ () G:\Programme\Todo Backup\bin\CodeLog.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000019600 _____ () G:\Programme\Todo Backup\bin\CompressFile.dll
2019-02-06 15:38 - 2016-03-07 18:08 - 001291264 _____ () G:\Programme\Todo Backup\bin\libxml2.dll
2019-02-06 15:38 - 2004-10-05 03:08 - 000055808 _____ () G:\Programme\Todo Backup\bin\zlib1.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000024720 _____ () G:\Programme\Todo Backup\bin\CmcTbProxy.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000188560 _____ () G:\Programme\Todo Backup\bin\CMCPipeCenter.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000195728 _____ () G:\Programme\Todo Backup\bin\CMCAdapt.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000163472 _____ () G:\Programme\Todo Backup\bin\CMCAdapt_RTTO.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000055952 _____ () G:\Programme\Todo Backup\bin\TBInfo.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000018064 _____ () G:\Programme\Todo Backup\bin\CMCNetTokenProxy.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000058000 _____ () G:\Programme\Todo Backup\bin\ActivationOnline.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000704144 _____ () G:\Programme\Todo Backup\bin\EuActiveOnline.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000487568 _____ () G:\Programme\Todo Backup\bin\EULicenseDLL.DLL
2019-02-06 15:38 - 2018-08-14 09:39 - 000021648 _____ () G:\Programme\Todo Backup\bin\fsclog.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000264336 _____ () G:\Programme\Todo Backup\bin\AuthorizedMng.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000112272 _____ () G:\Programme\Todo Backup\bin\CalcScheduleTime.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000085648 _____ () G:\Programme\Todo Backup\bin\logsys.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000032912 _____ () G:\Programme\Todo Backup\bin\DiskSearchImg.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000070800 _____ () G:\Programme\Todo Backup\bin\MountImg.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000169616 _____ () G:\Programme\Todo Backup\bin\ImgFile.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000539280 _____ () G:\Programme\Todo Backup\bin\DsImgFile.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000078480 _____ () G:\Programme\Todo Backup\bin\FatLib.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000318608 _____ () G:\Programme\Todo Backup\bin\NTFSUtil.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000026256 _____ () G:\Programme\Todo Backup\bin\CallbackOperator.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000211088 _____ () G:\Programme\Todo Backup\bin\NTFSLib.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000074384 _____ () G:\Programme\Todo Backup\bin\CheckImg.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000141968 _____ () G:\Programme\Todo Backup\bin\vhdvmdk.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000089232 _____ () G:\Programme\Todo Backup\bin\BootDriver.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 002458768 _____ () G:\Programme\Todo Backup\bin\ExImage.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000266384 _____ () G:\Programme\Todo Backup\bin\EmailBackupSize.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000162960 _____ () G:\Programme\Todo Backup\bin\EnumDisk.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000029328 _____ () G:\Programme\Todo Backup\bin\DeviceAdapter.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000131216 _____ () G:\Programme\Todo Backup\bin\FileStorage.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000026768 _____ () G:\Programme\Todo Backup\bin\GetDriverInfo.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000024720 _____ () G:\Programme\Todo Backup\bin\CorrectMbr.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000034448 _____ () G:\Programme\Todo Backup\bin\EnumTapeDevice.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000054416 _____ () G:\Programme\Todo Backup\bin\TbTapeBrowse.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000026768 _____ () G:\Programme\Todo Backup\bin\AccountManager.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000066192 _____ () G:\Programme\Todo Backup\bin\RegLib.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000072848 _____ () G:\Programme\Todo Backup\bin\NasOperator.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000292496 _____ () G:\Programme\Todo Backup\bin\EmailBrowser.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000078992 _____ () G:\Programme\Todo Backup\bin\CloudOperator.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000021648 _____ () G:\Programme\Todo Backup\bin\ActiveOnline.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000138384 _____ () G:\Programme\Todo Backup\bin\VMConfig.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000075408 _____ () G:\Programme\Todo Backup\bin\SqlExBrowser.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000585872 _____ () G:\Programme\Todo Backup\bin\SqlSMOCPlusPlus.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000119952 _____ () G:\Programme\Todo Backup\bin\FileSearch.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000045200 _____ () G:\Programme\Todo Backup\bin\TbDataSwap.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000367760 _____ () G:\Programme\Todo Backup\bin\DeviceManager.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000142992 _____ () G:\Programme\Todo Backup\bin\Device.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000149136 _____ () G:\Programme\Todo Backup\bin\Partition.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000052368 _____ () G:\Programme\Todo Backup\bin\FileSystemAnalyser.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000064144 _____ () G:\Programme\Todo Backup\bin\FATFileSystemAnalyser.dll
2019-02-06 15:38 - 2018-08-14 09:38 - 000091792 _____ () G:\Programme\Todo Backup\bin\Common.dll
2019-02-06 15:38 - 2018-08-14 09:39 - 000058512 _____ () G:\Programme\Todo Backup\bin\NTFSFileSystemAnalyser.dll
2019-02-06 15:38 - 2018-08-14 09:40 - 000220304 _____ () G:\Programme\Todo Backup\bin\SmartBackup.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000039936 _____ () C:\Program Files (x86)\WhatPulse2\CrashRpt1402.dll
2015-03-14 03:42 - 2019-02-13 21:30 - 088824552 _____ () C:\Users\Michael\AppData\Roaming\Spotify\libcef.dll
2019-01-15 01:28 - 2019-01-15 01:28 - 001042744 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxml2.dll
2017-11-30 18:55 - 2017-11-30 18:55 - 000076088 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\zlib1.dll
2019-01-15 01:28 - 2019-01-15 01:28 - 000189752 _____ () C:\Program Files (x86)\Common Files\Apple\Apple Application Support\libxslt.dll
2015-03-14 03:42 - 2019-02-13 21:30 - 004239592 _____ () C:\Users\Michael\AppData\Roaming\Spotify\libglesv2.dll
2015-03-14 03:42 - 2019-02-13 21:30 - 000098024 _____ () C:\Users\Michael\AppData\Roaming\Spotify\libegl.dll
2014-07-20 19:09 - 2019-02-05 02:46 - 000890144 _____ () G:\Programme\Steam\SDL2.dll
2014-07-20 19:10 - 2019-02-18 23:21 - 002666784 _____ () G:\Programme\Steam\video.dll
2014-12-02 22:09 - 2016-09-01 02:02 - 004969248 _____ () G:\Programme\Steam\v8.dll
2017-12-14 06:40 - 2018-11-05 19:53 - 000351520 _____ () G:\Programme\Steam\libavresample-3.dll
2017-12-14 06:40 - 2018-11-05 19:53 - 000810784 _____ () G:\Programme\Steam\libavformat-57.dll
2017-12-14 06:40 - 2018-11-05 19:53 - 000847136 _____ () G:\Programme\Steam\libavutil-55.dll
2017-12-14 06:40 - 2018-11-05 19:53 - 000783648 _____ () G:\Programme\Steam\libswscale-4.dll
2014-12-02 22:09 - 2016-09-01 02:02 - 001195296 _____ () G:\Programme\Steam\icuuc.dll
2017-12-14 06:40 - 2018-11-05 19:53 - 005137696 _____ () G:\Programme\Steam\libavcodec-57.dll
2014-12-02 22:09 - 2016-09-01 02:02 - 001563936 _____ () G:\Programme\Steam\icui18n.dll
2014-07-20 19:13 - 2019-02-18 23:21 - 001031456 _____ () G:\Programme\Steam\bin\chromehtml.DLL
2016-02-19 15:49 - 2016-07-04 23:17 - 000266560 _____ () G:\Programme\Steam\openvr_api.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:5C4F2F39 [111]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)


==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 14:46 - 2014-07-24 15:14 - 000000027 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static;G:\Programme\IsoBuster;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;G:\Programme\cygwin_64\bin;G:\Programme\OpenSSH\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI Backupper
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.

MSCONFIG\Services: AntiVirMailService => 2
MSCONFIG\Services: AntiVirSchedulerService => 2
MSCONFIG\Services: AntiVirService => 2
MSCONFIG\Services: AntiVirWebService => 2
MSCONFIG\Services: Hamachi2Svc => 3
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run32: => "Avira SystrayStartTrigger"
HKLM\...\StartupApproved\Run32: => "DelaypluginInstall"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\StartupApproved\StartupFolder: => "GigaTribe.lnk"
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\StartupApproved\Run: => "TunnelBear"

computerfrea · 24.02.2019, 12:30

Addition.txt Teil 2:

Code:

ATTFilter

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{73E4C534-B4A7-4D4B-B2AE-08EA311EA344}] => (Allow) G:\Programme\BetterHash\Cores\ccminer-x64\ccminer-x64.exe ()
FirewallRules: [{022F0B74-44D4-477A-A391-D59DF4AE1342}] => (Allow) G:\Programme\BetterHash\Cores\ccminer-x64\ccminer-x64.exe ()
FirewallRules: [{C4D0F7A7-9C92-4C1A-B30C-9AB2EDFB417F}] => (Allow) G:\Programme\BetterHash\Cores\claymore-xmr\NsGpuCNMiner.exe ()
FirewallRules: [{B650287A-6DB0-410C-AB41-24DC5F2FCDEF}] => (Allow) G:\Programme\BetterHash\Cores\claymore-xmr\NsGpuCNMiner.exe ()
FirewallRules: [{407CEE8A-BD63-4749-AD06-06FC0A4837E6}] => (Allow) G:\Programme\BetterHash\Cores\ewbf\miner.exe ()
FirewallRules: [{7EA784C1-9A22-4A6A-9514-FE6BCFC3C77B}] => (Allow) G:\Programme\BetterHash\Cores\ewbf\miner.exe ()
FirewallRules: [{7AA2E822-FB84-4DA6-8C9F-F2D43193218C}] => (Allow) G:\Programme\BetterHash\Cores\claymore-dual\EthDcrMiner64.exe ()
FirewallRules: [{B36BF1C4-6340-4F07-8421-D4E2AE82FD4F}] => (Allow) G:\Programme\BetterHash\Cores\claymore-dual\EthDcrMiner64.exe ()
FirewallRules: [{CE659653-E8DD-4BF1-BF7F-28906BF0F86F}] => (Allow) G:\Programme\BetterHash\Cores\equihash\powercore-main-g.exe ()
FirewallRules: [{B0DD98A9-8DCF-47BF-95BC-C230C4ACC5BB}] => (Allow) G:\Programme\BetterHash\Cores\equihash\powercore-main-g.exe ()
FirewallRules: [{D65D5FB1-BCE8-4035-9E51-34C8DC2FA3BF}] => (Allow) G:\Programme\BetterHash\Cores\xmr-stak-cpu\powercore-main.exe ()
FirewallRules: [{9C2B90A5-67BB-405B-9AC9-66324862763E}] => (Allow) G:\Programme\BetterHash\Cores\xmr-stak-cpu\powercore-main.exe ()
FirewallRules: [{B457E74A-DA16-4CE8-BA82-3475A86CC3B0}] => (Allow) G:\Programme\Steam\SteamApps\common\HITMAN2\Launcher.exe (IO INTERACTIVE A/S -> )
FirewallRules: [{A0482C7B-729F-40D8-BEFD-CE5A10BACB12}] => (Allow) G:\Programme\Steam\SteamApps\common\HITMAN2\Launcher.exe (IO INTERACTIVE A/S -> )
FirewallRules: [{D5D9D43C-990B-4E00-B016-3B05F9723E0E}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{EC14C5B7-F796-4B06-88C3-4C7FB312BFE1}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{92289831-5E81-4A68-A03C-DD9555918ECE}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{461A0E35-EE60-469A-ACD7-EC97F8C35F73}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [UDP Query User{B31B5AF3-DD22-4C9B-A6E1-648F683E778B}G:\programme\rise of the triad (2013)\binaries\win32\rott.exe] => (Allow) G:\programme\rise of the triad (2013)\binaries\win32\rott.exe (Epic Games, Inc.)
FirewallRules: [TCP Query User{61569A93-DD16-4A14-A1D1-6AAE9E925B9B}G:\programme\rise of the triad (2013)\binaries\win32\rott.exe] => (Allow) G:\programme\rise of the triad (2013)\binaries\win32\rott.exe (Epic Games, Inc.)
FirewallRules: [{2EFD2C16-8E29-41F7-8425-3CFFEDAB242B}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{9E78D5EA-3EFF-4323-A6BF-C221017BE6DF}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{ACB71350-E26C-4921-BFF1-302293EF66CD}] => (Allow) G:\Programme\Steam\SteamApps\common\House Flipper\HouseFlipper.exe ()
FirewallRules: [{CBFB9E95-1402-4F9E-A371-E6C9BC5FD068}] => (Allow) G:\Programme\Steam\SteamApps\common\House Flipper\HouseFlipper.exe ()
FirewallRules: [UDP Query User{140CF92A-4870-43FD-B9CD-96BD91B97FFC}G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe] => (Allow) G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe (Epic Games, Inc.)
FirewallRules: [TCP Query User{3495B6CE-338C-43D3-8825-2B349A3AB215}G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe] => (Allow) G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe (Epic Games, Inc.)
FirewallRules: [{C23912C5-C24E-4CEA-9FDE-74B6A9389CF4}] => (Allow) G:\Programme\Steam\SteamApps\common\Downward\Downward.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> )
FirewallRules: [{97E34A02-F903-4627-AC60-83781E0A1D56}] => (Allow) G:\Programme\Steam\SteamApps\common\Downward\Downward.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> )
FirewallRules: [{C52EB5AE-30AB-448B-9CD8-4A26A826DEA5}] => (Allow) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{70B9CA79-11C1-4631-BD84-369700B4DB60}] => (Allow) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{FD0112DE-9D8E-466F-9FC7-416CF7027ECF}] => (Allow) G:\Programme\Steam\SteamApps\common\Ultimate Doom\base\dosbox.exe (DOSBox Team)
FirewallRules: [{5E357744-2823-4E2D-96C3-B4D4D494992D}] => (Allow) G:\Programme\Steam\SteamApps\common\Ultimate Doom\base\dosbox.exe (DOSBox Team)
FirewallRules: [UDP Query User{DADB0B6B-98F6-48D9-BA72-B1DF1B0F10C0}G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe (Alex Olinkiwicz)
FirewallRules: [TCP Query User{A108F632-EFAC-498F-9321-DE01E26511D2}G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe (Alex Olinkiwicz)
FirewallRules: [{ADB50D83-DBD5-4699-AEF7-6F0FA5C2A7FC}] => (Allow) G:\Programme\Steam\SteamApps\common\FROSTBITE Deadly Climate\Frostbite_AlexO.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> )
FirewallRules: [{10B8D9F9-1E0C-4C3A-9CB5-18739102B0AB}] => (Allow) G:\Programme\Steam\SteamApps\common\FROSTBITE Deadly Climate\Frostbite_AlexO.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> )
FirewallRules: [{14DA6731-B77A-4DE2-A04A-A0566630A533}] => (Allow) G:\Programme\Steam\SteamApps\common\Lovely Planet\LovelyPlanet.exe ()
FirewallRules: [{D470AD00-7DE9-42C2-A3E8-027FB3317E9E}] => (Allow) G:\Programme\Steam\SteamApps\common\Lovely Planet\LovelyPlanet.exe ()
FirewallRules: [{531A4412-7F9E-45D4-8735-0C9D69BAB63E}] => (Allow) G:\Programme\Steam\SteamApps\common\DeadCore\DeadCore.exe ()
FirewallRules: [{991CA1BE-A278-49E8-959E-745DD3EA4695}] => (Allow) G:\Programme\Steam\SteamApps\common\DeadCore\DeadCore.exe ()
FirewallRules: [{3DC23397-3D57-4651-A22A-9D7B3F74AE81}] => (Allow) G:\Programme\Steam\SteamApps\common\Aim Lab\aimlab_tb.exe ()
FirewallRules: [{AE04D025-A00E-4D35-9E83-8B98A895E091}] => (Allow) G:\Programme\Steam\SteamApps\common\Aim Lab\aimlab_tb.exe ()
FirewallRules: [{A66FA46C-4387-4FB6-8B9B-B56636418C1A}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{E7F86514-1BD2-4C61-920F-5B82E0046DA8}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{AF2671FC-3CE7-4A64-8C3F-5059BE2E7FEC}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{D902D336-A527-4CFF-846A-D75D97F1B1D8}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{470F45FB-9F65-4EAD-983C-77169D3B0A5D}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe (Nicolaudie)
FirewallRules: [TCP Query User{9C444022-7137-4275-846E-6AAB3E6FB923}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe (Nicolaudie)
FirewallRules: [{4FAE1028-175E-402D-B2B0-4D0E1CDB238C}] => (Allow) G:\Programme\Origin\_Downloads\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe (Electronic Arts -> Maxis, a division of Electronic Arts Inc.)
FirewallRules: [{10D23750-4541-49D8-B57D-0E67EEA75ECC}] => (Allow) G:\Programme\Origin\_Downloads\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe (Electronic Arts -> Maxis, a division of Electronic Arts Inc.)
FirewallRules: [UDP Query User{3615F735-4BF9-4175-B713-0D0403C9D8C2}G:\programme\bpm studio\bpm.exe] => (Allow) G:\programme\bpm studio\bpm.exe (AlcaTech)
FirewallRules: [TCP Query User{426C1645-4182-4C6A-ABB5-16549E10D97C}G:\programme\bpm studio\bpm.exe] => (Allow) G:\programme\bpm studio\bpm.exe (AlcaTech)
FirewallRules: [UDP Query User{53B1B492-1FEA-4F35-B39C-478ACFF73814}G:\programme\cameod4\hardwaremanager\hardwaremanager.exe] => (Allow) G:\programme\cameod4\hardwaremanager\hardwaremanager.exe (LightingSoft AG -> LightingSoft AG)
FirewallRules: [TCP Query User{64D6307F-75BD-4A80-8A69-905D9F8E2F18}G:\programme\cameod4\hardwaremanager\hardwaremanager.exe] => (Allow) G:\programme\cameod4\hardwaremanager\hardwaremanager.exe (LightingSoft AG -> LightingSoft AG)
FirewallRules: [UDP Query User{8655827B-5AC0-4586-AB87-65357AC5EDCB}G:\programme\cameod4\easyview2\easyview2.exe] => (Allow) G:\programme\cameod4\easyview2\easyview2.exe (LightingSoft)
FirewallRules: [TCP Query User{AC0D505F-3E47-4E84-A5A6-35DC5D5E7054}G:\programme\cameod4\easyview2\easyview2.exe] => (Allow) G:\programme\cameod4\easyview2\easyview2.exe (LightingSoft)
FirewallRules: [UDP Query User{C48E5AFD-D1CF-4776-A543-34D86677448B}G:\programme\cameod4\cameod4\cameod4.exe] => (Allow) G:\programme\cameod4\cameod4\cameod4.exe (Nicolaudie Europe)
FirewallRules: [TCP Query User{1CB0C073-5B06-4511-BC0E-2BC0EB4BAB28}G:\programme\cameod4\cameod4\cameod4.exe] => (Allow) G:\programme\cameod4\cameod4\cameod4.exe (Nicolaudie Europe)
FirewallRules: [{CB602DAA-68E2-4503-9A00-ED72C990260F}] => (Allow) LPort=12452
FirewallRules: [{C05762C4-781C-4A1D-97BB-FCEAC57DE9A7}] => (Allow) LPort=12451
FirewallRules: [{7A63E4A5-2BC2-4788-BBC3-023DC89EC944}] => (Allow) LPort=12352
FirewallRules: [{24DA065E-EE23-4ADA-A010-EBC5DE86797A}] => (Allow) LPort=12351
FirewallRules: [UDP Query User{831D8398-0703-4937-96DF-691C7CC78945}G:\programme\dmxcontrol3\kernel\lumos.exe] => (Allow) G:\programme\dmxcontrol3\kernel\lumos.exe (DMXControl Projects e.V. -> DMXControl Projects e.V.)
FirewallRules: [TCP Query User{75415325-7B6A-4098-97FF-C87E824B77A5}G:\programme\dmxcontrol3\kernel\lumos.exe] => (Allow) G:\programme\dmxcontrol3\kernel\lumos.exe (DMXControl Projects e.V. -> DMXControl Projects e.V.)
FirewallRules: [UDP Query User{59FBAA36-A465-4E93-9BE9-3FF53B3F9E0A}G:\programme\minihost\minihostmodular_x64.exe] => (Allow) G:\programme\minihost\minihostmodular_x64.exe (Image Line -> Image-Line)
FirewallRules: [TCP Query User{A8764EF5-2B22-48FD-950E-F2E2B6A0245D}G:\programme\minihost\minihostmodular_x64.exe] => (Allow) G:\programme\minihost\minihostmodular_x64.exe (Image Line -> Image-Line)
FirewallRules: [UDP Query User{5CFF200B-0C1F-49D5-BF09-3009556AD516}G:\programme\slmev\easyview.exe] => (Allow) G:\programme\slmev\easyview.exe (Nicolaudie)
FirewallRules: [TCP Query User{53F29DA5-1613-4785-9EA4-A766AA4F40FA}G:\programme\slmev\easyview.exe] => (Allow) G:\programme\slmev\easyview.exe (Nicolaudie)
FirewallRules: [{C8DA38AA-B804-4FD5-86A0-63421E2DAEB0}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry Primal\bin\FCPrimal.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{F5694051-A863-484A-9F68-5B0D89AB7DEA}] => (Allow) G:\Programme\Steam\SteamApps\common\Dishonored2\Dishonored2.exe (Arkane Studios)
FirewallRules: [{F8A52C5E-8CD5-4A38-9B7C-9022C10E5320}] => (Allow) G:\Programme\Steam\SteamApps\common\Dishonored2\Dishonored2.exe (Arkane Studios)
FirewallRules: [{7BA7F556-B71B-4ACF-B744-FD805C065C4C}] => (Block) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games)
FirewallRules: [{4E09696D-D05D-4440-A196-B7704D391288}] => (Block) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games)
FirewallRules: [UDP Query User{43FE3775-7798-49D9-85EC-DD0EAFD94102}G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games)
FirewallRules: [TCP Query User{D5475D3A-CC4D-49F7-8501-82E1F6B5C7B5}G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games)
FirewallRules: [{177B36D0-A5CC-420B-AAD1-649DB815AADA}] => (Allow) G:\Programme\Steam\SteamApps\common\Saints Row 2\SR2_pc.exe ()
FirewallRules: [{FC146E65-E2A2-43A9-9CD4-4DA0AC15E160}] => (Allow) G:\Programme\Steam\SteamApps\common\Saints Row 2\SR2_pc.exe ()
FirewallRules: [{EE93EB43-D96F-4232-976D-489A0BD15559}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Setup.exe ()
FirewallRules: [{C125C009-B1B6-4FD6-80EA-1DF4517B3033}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Setup.exe ()
FirewallRules: [{C1210A68-CEB6-47FA-80C3-CD15376099AF}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Hitman.Exe ()
FirewallRules: [{3F554ADC-3DBC-415B-9061-DF9557F11E17}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Hitman.Exe ()
FirewallRules: [{CC2D0337-FCA2-432F-BEF1-D335B2BF2AC7}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{F4B04DC7-3962-4E05-A594-AF4BDC68E927}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{BB113CC8-7FC6-4314-94F2-55BDD2DDC3CE}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{8F96FFEA-AA13-4EC2-85FC-9393E1EBAC02}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{A0AFCBE7-6814-4237-928B-CE3B146BDBA3}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\config.exe ()
FirewallRules: [{3A34BADD-6F1C-4574-8142-EAA0A418C655}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\config.exe ()
FirewallRules: [{36973EAC-D8C2-4030-A84C-811B79BF7E67}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\hitman2.exe (IO Interactive)
FirewallRules: [{38883E99-3664-4224-A5DF-05B25DD143F0}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\hitman2.exe (IO Interactive)
FirewallRules: [{4D65573D-31FF-4A45-8A6E-397B4C19CD15}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Contracts\HitmanContracts.exe (IO Interactive)
FirewallRules: [{0F0E348F-67C4-4A16-842E-93F880422DC5}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Contracts\HitmanContracts.exe (IO Interactive)
FirewallRules: [{69D0AEF1-4C83-4714-9B8B-36E96D9A0D3F}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\configure.exe ()
FirewallRules: [{4B89DA37-E664-4DAB-9A4C-F91879E96926}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\configure.exe ()
FirewallRules: [{68610AF1-B1B6-4FE6-AE67-93E9EB821734}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\HitmanBloodMoney.exe ()
FirewallRules: [{5E1BC5EB-1D18-464D-A20C-7AE35D5B0A18}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\HitmanBloodMoney.exe ()
FirewallRules: [{A9003B2A-5766-4B0F-89B1-5218BB6DA08E}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe (Sony DADC Austria AG -> Sony DADC Austria AG)
FirewallRules: [{C96DBA13-68A2-4B7F-8CC2-AAF1C42B3D1E}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe (Sony DADC Austria AG -> Sony DADC Austria AG)
FirewallRules: [{A5B50B31-5482-48C4-8722-466E1908928D}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe ()
FirewallRules: [{D19C6E25-E814-466E-B151-0B045D76EDE3}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe ()
FirewallRules: [{18F5000D-4BDD-4BC1-8C3C-E98F1F6681CF}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto 3\gta3.exe ()
FirewallRules: [{479B25E1-D158-4A2B-A4D6-972A576882CD}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto 3\gta3.exe ()
FirewallRules: [{44302C0D-D95C-4F89-AE41-0A5C9C9D4ADA}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV Episodes from Liberty City\EFLC\LaunchEFLC.exe (Sony DADC Austria AG -> Sony DADC Austria AG)
FirewallRules: [{D534019C-56AF-4F81-A7DF-B38376C79AFF}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV Episodes from Liberty City\EFLC\LaunchEFLC.exe (Sony DADC Austria AG -> Sony DADC Austria AG)
FirewallRules: [{28F2BD0B-7DE5-4576-A807-F9E79910AD9E}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe ()
FirewallRules: [{72CFCA32-4CB1-401C-ABA9-5FC828C2525B}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe ()
FirewallRules: [{AC1736BB-8101-4805-AE7D-8A01EC9892E4}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Syndicate\ACS.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{983668BE-79F8-43E7-AFB7-BBD7E1020E0D}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{AEDFE4DC-2C6F-4057-8227-27C150FF2323}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{D9B6FBD0-B227-4EA4-B057-68DF845AB5E5}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{7F2895AE-C05F-407D-A9FB-7961EE443F83}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{021658A2-A2CA-4CBE-A2D1-FF1D2D373AB0}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{F19E6490-3AE1-4BE0-956E-C42F0E4805FA}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{3E708617-2CE2-4BD6-8D65-9176FAE02619}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{C8EA3EE5-83A1-4D9A-918E-AA0796A8EE78}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{AD839073-7DB9-4F44-ADD0-2A1191D118F4}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{37F8614D-6B58-476D-B725-CF0410F31F06}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{597E3C6F-42AB-4623-8470-6394755823C7}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{51BDB8B9-19BA-4706-9008-956B1DB88DEC}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{1631D4CD-1361-427B-8FE9-C6499CABF078}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Trials of the Blood Dragon\datapack\trialsblooddragon.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{4A13F5FE-4051-4DE2-8E58-E8A3FD04A054}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{6F3EA8CD-F633-4219-B292-1B545742C3EB}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{D9C97866-C8FD-4D46-B3FF-29C4B952CE4E}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{4080FEB2-9C9A-4DC6-9055-A120311EA578}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{AD9B6176-387D-48DB-A1E3-EC120B8B692D}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa_setup.exe (Electronic Arts Inc.)
FirewallRules: [{0E1AEAA8-2B2A-46A1-9D1D-3B0731BA13EA}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa_setup.exe (Electronic Arts Inc.)
FirewallRules: [{A3BD9375-1285-44C2-A005-0756CC7FDD31}] => (Block) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive)
FirewallRules: [{BD67EA93-5AE2-4416-98D3-8792C8B67A6D}] => (Block) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive)
FirewallRules: [UDP Query User{3829D102-96F8-4BAA-B125-EAA1484F272D}G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe] => (Allow) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive)
FirewallRules: [TCP Query User{6C5ACCCA-EBB6-4588-8A83-E61E287FF6D5}G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe] => (Allow) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive)
FirewallRules: [{4913E67E-C756-424D-9794-E13212C5E1AC}] => (Allow) G:\Programme\Steam\SteamApps\common\18 Wheels of Steel American Long Haul\alh.exe ()
FirewallRules: [{0409CF1A-D3DF-4827-AE96-27606B54B735}] => (Allow) G:\Programme\Steam\SteamApps\common\18 Wheels of Steel American Long Haul\alh.exe ()
FirewallRules: [{72C656DA-0757-494F-830E-27F6CF629877}] => (Allow) G:\Programme\Steam\SteamApps\common\Snik\snik.exe (Unity Technologies SF -> )
FirewallRules: [{69776348-9985-4112-882B-BF4428BB2A3C}] => (Allow) G:\Programme\Steam\SteamApps\common\Snik\snik.exe (Unity Technologies SF -> )
FirewallRules: [{43FE3A9E-D29F-42A6-9524-1C0331468E23}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment)
FirewallRules: [{7579B346-0C9E-4EE6-8014-634CFAD06B35}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment)
FirewallRules: [{46D92DD4-AE58-4D6B-876D-F8F84768F9CC}] => (Allow) LPort=22
FirewallRules: [{EC68C6ED-2A47-4D02-A805-08C392E3EFDD}] => (Allow) G:\Programme\Steam\SteamApps\common\Tony Hawk's Pro Skater HD\Binaries\Win32\THHDGame.exe (Activision Publishing, Inc.)
FirewallRules: [{121D693B-6993-4703-A0C7-B41DE5BC1627}] => (Allow) G:\Programme\Steam\SteamApps\common\Tony Hawk's Pro Skater HD\Binaries\Win32\THHDGame.exe (Activision Publishing, Inc.)
FirewallRules: [{F9726EBA-A73E-4B73-A9F6-F073E095F7E5}] => (Allow) G:\Programme\Steam\SteamApps\common\Marcus Level\MarcusLevel.exe ()
FirewallRules: [{CF16AB88-C7A7-43EE-A085-842B24B3F3A1}] => (Allow) G:\Programme\Steam\SteamApps\common\Marcus Level\MarcusLevel.exe ()
FirewallRules: [{AAC0C748-B9B3-4CEC-9B4B-2CAA06C47EEA}] => (Allow) G:\Programme\Steam\SteamApps\common\What'sunderyourblanket!\game.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 ->  )
FirewallRules: [{A03BE86A-6AD9-420C-AC58-15902F29975D}] => (Allow) G:\Programme\Steam\SteamApps\common\What'sunderyourblanket!\game.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 ->  )
FirewallRules: [{5AFF9752-80E3-4232-A364-F45FEE47CF11}] => (Allow) G:\Programme\Origin\_Downloads\BFH\BFHWebHelper.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{A5F46A03-F061-41AD-BBBE-26F138A32735}] => (Allow) G:\Programme\Origin\_Downloads\BFH\BFHWebHelper.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{FBFAE41F-966B-49F0-84C4-83BD702A6997}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird_DX11.exe (Valve Corp. -> THQ Inc.)
FirewallRules: [{0A93FB2B-7EB3-49FE-B225-B1DE983C8CCB}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird_DX11.exe (Valve Corp. -> THQ Inc.)
FirewallRules: [{921D84AF-B648-491B-811E-ACE4CA282032}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird.exe (Valve Corp. -> THQ Inc.)
FirewallRules: [{6EEE38C6-F354-43D1-8024-5C9019DD67E9}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird.exe (Valve Corp. -> THQ Inc.)
FirewallRules: [{339FE63F-229D-48FD-9459-4C870CE8556E}] => (Allow) G:\Programme\Steam\SteamApps\common\Defy Gravity\DefyGravity.exe (GRP)
FirewallRules: [{2EAD955E-EA0A-4895-8750-D677A868B5DF}] => (Allow) G:\Programme\Steam\SteamApps\common\Defy Gravity\DefyGravity.exe (GRP)
FirewallRules: [{779DCB47-8C80-4A3B-A7B1-4FF5C0E6BAA4}] => (Allow) G:\Programme\Steam\SteamApps\common\Fotonica\FOTONICA.exe ()
FirewallRules: [{A119ABFF-4B36-4BE8-A399-F4FAFCB4D904}] => (Allow) G:\Programme\Steam\SteamApps\common\Fotonica\FOTONICA.exe ()
FirewallRules: [{1FD6F85B-CD4D-46FB-BAD7-8912F034EF20}] => (Allow) G:\Programme\Origin\_Downloads\Need for Speed(TM) Most Wanted\NFS13.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{9F688CCD-5B86-4893-B37D-3FC3F2550DB8}] => (Allow) G:\Programme\Origin\_Downloads\Need for Speed(TM) Most Wanted\NFS13.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{D722DF0C-70FF-432B-9A63-A2E27A356660}] => (Allow) G:\Programme\Steam\SteamApps\common\Dusk 12\dusk.exe (Orion)
FirewallRules: [{71EA59A1-C9D3-4A51-86E8-42FF00D1CDE5}] => (Allow) G:\Programme\Steam\SteamApps\common\Dusk 12\dusk.exe (Orion)
FirewallRules: [{36BAC272-E642-4C04-AF9F-205797050983}] => (Allow) G:\Programme\Steam\SteamApps\common\Statues\Statues.exe (Unity Technologies SF -> )
FirewallRules: [{2347B67B-7014-46CA-906B-4F55D408C324}] => (Allow) G:\Programme\Steam\SteamApps\common\Statues\Statues.exe (Unity Technologies SF -> )
FirewallRules: [{18DD5A8E-E4B1-4834-8F83-444FCBC2266B}] => (Allow) G:\Programme\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe (Io Interactive A/S)
FirewallRules: [{59C046F3-D513-4E9E-BC2A-DE6D8B0FE4DA}] => (Allow) G:\Programme\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe (Io Interactive A/S)
FirewallRules: [{70710B5D-B4A2-409F-9CC7-CB9CD5C41A78}] => (Allow) G:\Programme\Steam\SteamApps\common\Just Cause 3\JustCause3.exe ()
FirewallRules: [{086A48EE-9B96-428C-A62C-E8165DCBAF47}] => (Allow) G:\Programme\Steam\SteamApps\common\Just Cause 3\JustCause3.exe ()
FirewallRules: [{C79CA1D8-1415-46F2-8E87-3377248D658B}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOT\SUPERHOT.exe (SUPERHOT Sp z o.o.)
FirewallRules: [{E6462DAC-5D24-4970-BD93-3660ABE8486B}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOT\SUPERHOT.exe (SUPERHOT Sp z o.o.)
FirewallRules: [{7D40F4EC-E605-425F-9457-84361ED4AF5C}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcepswx.exe (Lexmark International, Inc. -> )
FirewallRules: [{C80173BA-9B4C-4855-84CA-E926D3BAC1AD}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcepswx.exe (Lexmark International, Inc. -> )
FirewallRules: [{9E69CE8B-9A0A-4536-BFBE-B59537934415}] => (Allow) G:\Programme\Steam\SteamApps\common\iambread\IamBread.exe (Unity Technologies SF -> )
FirewallRules: [{16E161DE-25BE-43DA-88E8-108BDBD729E3}] => (Allow) G:\Programme\Steam\SteamApps\common\iambread\IamBread.exe (Unity Technologies SF -> )
FirewallRules: [{5770138E-4BDD-4C5C-BFEA-05EA8A91D973}] => (Allow) G:\Programme\Origin\_Downloads\Zuma's Revenge\ZumasRevenge.exe (Electronic Arts -> PopCap Games, Inc.)
FirewallRules: [{0E3683CB-C4BB-446C-A8FE-8AA66B13920F}] => (Allow) G:\Programme\Origin\_Downloads\Zuma's Revenge\ZumasRevenge.exe (Electronic Arts -> PopCap Games, Inc.)
FirewallRules: [{49E0E3E8-37C9-4072-B95A-D40663F921BC}] => (Allow) G:\Programme\Origin\_Downloads\BFH\bfh.exe (Electronic Arts -> Visceral Games)
FirewallRules: [{06C54A07-CE5F-478D-B0C7-C030ABE571A6}] => (Allow) G:\Programme\Origin\_Downloads\BFH\bfh.exe (Electronic Arts -> Visceral Games)
FirewallRules: [{A3683AC0-C91B-46FE-96ED-846613F4E74E}] => (Allow) G:\Programme\Steam\SteamApps\common\Portal Stories Mel\portal2.exe ()
FirewallRules: [{F44982E1-9B9A-4DFE-B5ED-F4A5510BA971}] => (Allow) G:\Programme\Steam\SteamApps\common\Portal Stories Mel\portal2.exe ()
FirewallRules: [{B40AD8F0-67E8-4818-B25E-EF114B047D03}] => (Allow) G:\Programme\Steam\SteamApps\common\Grass Simulator\Grass Simulator.exe ()
FirewallRules: [{60ED1A10-B5CF-4286-B285-02CE60880AE7}] => (Allow) G:\Programme\Steam\SteamApps\common\Grass Simulator\Grass Simulator.exe ()
FirewallRules: [{9F0A9E95-8E02-4AA0-A95F-EDCD895815A3}] => (Allow) G:\Programme\Steam\SteamApps\common\Magnetic Cage Closed\Magnetic.exe ()
FirewallRules: [{D9AD4A23-B67C-4EE6-A7E5-B12F14659DFB}] => (Allow) G:\Programme\Steam\SteamApps\common\Magnetic Cage Closed\Magnetic.exe ()
FirewallRules: [{F365CEC4-84FB-4362-9B9C-03352C0249CC}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\Win64\Hatred-Win64-Shipping.exe (Epic Games, Inc.)
FirewallRules: [{4A2DB197-E143-4A0C-992A-A3E7966921F3}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\Win64\Hatred-Win64-Shipping.exe (Epic Games, Inc.)
FirewallRules: [{C67148D5-7C0A-430C-875C-CFA2AD1C499B}] => (Allow) G:\Programme\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe ()
FirewallRules: [{71C9D954-40A5-4288-8D9F-38BC4AD7CB48}] => (Allow) G:\Programme\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe ()
FirewallRules: [{CC10C36C-A43F-4D0F-83CD-05AD3A5FF556}] => (Allow) G:\Programme\Steam\SteamApps\common\Kill The Bad Guy\KillTheBadGuy.exe ()
FirewallRules: [{118DA636-4064-45B6-B7ED-CA592EEFC45B}] => (Allow) G:\Programme\Steam\SteamApps\common\Kill The Bad Guy\KillTheBadGuy.exe ()
FirewallRules: [{D34F9DB3-4ECC-422E-B70A-7DAEA47EB97D}] => (Allow) G:\Programme\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe (Epic Games, Inc.)
FirewallRules: [{445AB26F-75AC-45D3-A786-3C59D824BD8C}] => (Allow) G:\Programme\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe (Epic Games, Inc.)
FirewallRules: [{82A85425-F254-459A-AA27-987D1222D67B}] => (Allow) G:\Programme\Origin\_Downloads\Ultima 8\Game\Game\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{9B74867C-5F21-45D6-AC31-07D1215BF1BA}] => (Allow) G:\Programme\Origin\_Downloads\Ultima 8\Game\Game\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{3A1CC453-2778-4539-9779-70B7139F0E9E}] => (Allow) G:\Programme\Steam\SteamApps\common\FSX\fsx.exe (RailSimulator T/A Dovetail -> Microsoft Corp.)
FirewallRules: [{592DD891-944C-4322-8798-9E731524E1C2}] => (Allow) G:\Programme\Steam\SteamApps\common\FSX\fsx.exe (RailSimulator T/A Dovetail -> Microsoft Corp.)
FirewallRules: [{863115C8-B708-42CC-AF2E-84578BF32303}] => (Allow) G:\Programme\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe ()
FirewallRules: [{7C80DB33-8EC2-423A-95F4-7F662140DE5D}] => (Allow) G:\Programme\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe ()
FirewallRules: [UDP Query User{9FF23C6F-ED8E-4C0E-8B06-DC2E2B4D94B6}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [TCP Query User{90E31DFB-1E1F-4314-BB28-A7C7A656CD50}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{8CCC455A-08D9-4F09-9B59-4735697A14FD}] => (Allow) G:\Programme\Steam\SteamApps\common\Outlast\OutlastLauncher.exe (Red Barrels Inc.)
FirewallRules: [{1B393E8B-E164-45AE-8AE6-3E05F9DEA0A3}] => (Allow) G:\Programme\Steam\SteamApps\common\Outlast\OutlastLauncher.exe (Red Barrels Inc.)
FirewallRules: [{716A3B82-7005-4FB3-8997-CEBD897F6ACF}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{2E603094-7EC0-40D1-B361-3C652004ECE9}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{207AD6DC-8990-4EB4-B307-20A0789D9C03}] => (Allow) G:\Programme\Origin\_Downloads\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe (Electronic Arts -> )
FirewallRules: [{165D9B44-048C-49EA-A860-DC0D1F992890}] => (Allow) G:\Programme\Origin\_Downloads\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe (Electronic Arts -> )
FirewallRules: [{D36B7024-7D60-4D4E-8F17-F6E22277C168}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Rogue\ACC.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{8731631F-86BE-4A90-97E3-2A3DDAEB9035}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Rogue\ACC.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [UDP Query User{98F19232-492D-4C3F-A90A-E5BB2EB0191D}G:\programme\gta episodes from liberty city\eflc\eflc.exe] => (Allow) G:\programme\gta episodes from liberty city\eflc\eflc.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [TCP Query User{0332F899-B794-4B67-8371-BDE031827877}G:\programme\gta episodes from liberty city\eflc\eflc.exe] => (Allow) G:\programme\gta episodes from liberty city\eflc\eflc.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [UDP Query User{3189AFB7-2C3C-4815-AE92-BA40BF39326F}G:\programme\gta iv\grand theft auto iv\gtaiv.exe] => (Allow) G:\programme\gta iv\grand theft auto iv\gtaiv.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [TCP Query User{02BEB3D4-286B-44DB-85A6-604092CC39D8}G:\programme\gta iv\grand theft auto iv\gtaiv.exe] => (Allow) G:\programme\gta iv\grand theft auto iv\gtaiv.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [{4196082A-4C82-44CA-932B-297C192D1CC4}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\The Crew (Worldwide)\TheCrew.exe (Shanghai Ubi Computer Software Co Ltd -> UBISoft)
FirewallRules: [{F61DE192-FF41-4F38-B995-25C5B34023C7}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\The Crew (Worldwide)\TheCrew.exe (Shanghai Ubi Computer Software Co Ltd -> UBISoft)
FirewallRules: [{1CC8DE84-EF0C-4F20-8B54-41977909CDD2}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam 2\Bin\Sam2.exe ()
FirewallRules: [{E6627837-9C4B-4387-90BE-636E278F98FC}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam 2\Bin\Sam2.exe ()
FirewallRules: [{5C7AA1C3-3ABB-4349-9F55-066B30202E29}] => (Allow) G:\Programme\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe ()
FirewallRules: [{15F5FE5A-394D-4A63-9EEF-64DA580517AF}] => (Allow) G:\Programme\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe ()
FirewallRules: [UDP Query User{0ED37D11-274B-49CC-AF4C-2D087E84B54A}G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe] => (Allow) G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [TCP Query User{751311E0-C197-49B5-BC9F-61457ABCA5EF}G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe] => (Allow) G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{3A18A5CA-EC07-4808-A90D-9388C4347865}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [TCP Query User{2DB24DFC-89BB-44D0-BCF2-C7F986B9BB4F}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{C6DCD891-3FE5-4275-8C4B-B1A7BF57B287}] => (Allow) G:\Programme\Steam\SteamApps\common\Octodad Dadliest Catch\OctodadDadliestCatch.exe ()
FirewallRules: [{A9238CD0-7D20-4F00-9445-B8D6441D1AFA}] => (Allow) G:\Programme\Steam\SteamApps\common\Octodad Dadliest Catch\OctodadDadliestCatch.exe ()
FirewallRules: [{48791405-73CF-4FC2-AB9A-54380CA512FC}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\game_launcher.exe (THQ Inc.)
FirewallRules: [{D32576E9-7EF9-44D4-A794-E06341A69656}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\game_launcher.exe (THQ Inc.)
FirewallRules: [{D2895DD1-A173-4C69-8CC3-E1F57B822D08}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe (GSC Game World -> )
FirewallRules: [{814D52A8-E6DB-49AF-90DB-40E37BCD681F}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe (GSC Game World -> )
FirewallRules: [{140B8844-6C43-46D8-8845-F3266FE67335}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe (GSC Game World -> )
FirewallRules: [{12FDC862-A430-4307-9FDB-62F0F07281CA}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe (GSC Game World -> )
FirewallRules: [UDP Query User{B14DB619-9F14-4936-89A2-29DC3BDB2C1E}G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe (Red Barrels Inc.)
FirewallRules: [TCP Query User{DCD89A5C-3A90-452C-BA29-3005487D929B}G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe (Red Barrels Inc.)
FirewallRules: [UDP Query User{CEB9F4D3-7F3E-4298-9361-B194023BDE18}G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe (Eidos Plc -> Io Interactive A/S)
FirewallRules: [TCP Query User{E7F1BA68-5A8B-4DB0-93FE-556528FEFAC8}G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe (Eidos Plc -> Io Interactive A/S)
FirewallRules: [UDP Query User{AE101A10-E2BD-4CD5-B1DB-8487D7547E44}G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe (Epic Games, Inc.)
FirewallRules: [TCP Query User{079AA4EE-4CDC-41A0-9207-B16B6B20C7E8}G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe (Epic Games, Inc.)
FirewallRules: [{5C4EADEB-EE22-4822-A5DF-DE3E6D96E075}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{7EE7C196-DAE2-4F2D-B9DD-13706935D677}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{579BE34E-ED30-40EC-9759-A26BE5938383}] => (Allow) G:\Programme\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe (Valve Corp. -> )
FirewallRules: [{461BA46F-69D4-4854-BEC2-07576BF08BB7}] => (Allow) G:\Programme\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe (Valve Corp. -> )
FirewallRules: [UDP Query User{EE23DC8F-9B37-488D-A477-BEE63B561447}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{B87A68CF-043A-42AA-9889-9A67A4FA61E7}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A165A510-B391-4775-B734-48A1CDBA19C3}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Liberation HD\ac3lhd_32.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{1650BFF8-EEB9-46E1-8EBB-CB54564D15F1}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{6A608558-D247-429E-8EA2-E0B173B4089D}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{F1FF8D57-4B5F-4518-806A-C39027DAC8A0}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{998A42C6-FCF6-4B23-920F-DA551118F02D}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{4141ECA6-25D7-45D1-BFD9-F455B4DC669A}] => (Allow) G:\Programme\Assassins Creed III\AssassinsCreed3.exe (Ubisoft Entertainment SA -> Ubisoft)
FirewallRules: [{1C6C0E37-E158-438D-85EF-CD20F725A1C2}] => (Allow) G:\Programme\Assassins Creed III\AssassinsCreed3.exe (Ubisoft Entertainment SA -> Ubisoft)
FirewallRules: [{2A4DF289-F2EF-4C39-AEB7-FD701A04B8FE}] => (Allow) G:\Programme\Assassins Creed III\AC3MP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{D35EC7FC-B6D2-4E08-B3AA-E0D3F6ECB6B6}] => (Allow) G:\Programme\Assassins Creed III\AC3MP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{6A177206-669F-4D26-95A0-D9ED202E7C96}] => (Allow) G:\Programme\Assassins Creed III\AC3SP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{3F35A8C2-ABC4-43D4-ABAB-0B55014B4810}] => (Allow) G:\Programme\Assassins Creed III\AC3SP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{50EA5B26-6792-489F-84C5-500C71795ECB}] => (Allow) G:\Programme\Assassins Creed II\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{D3ABE1E7-F401-457D-9F15-C3EDA7F3DFE3}] => (Allow) G:\Programme\Assassins Creed II\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{BEDFD3FA-272F-4927-83FB-03FC0ED15290}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedII.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{493D7BF6-A7F3-48D8-A89F-6C71DABBF53A}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedII.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{8BA9F119-CF6C-4CC6-B816-5FA1739DD2E2}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedIIGame.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{A2EEEF59-DA46-48EA-AC1C-37B89BCEE9E5}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedIIGame.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{B67449E7-A6E1-4001-8630-934A93B48999}] => (Allow) G:\Programme\Assassins Creed Brotherhood\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{9C989768-AFA2-43F9-80A1-F9356F9CCF87}] => (Allow) G:\Programme\Assassins Creed Brotherhood\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{66DCC7E6-006A-4BB2-9418-0F2B73E3C7EB}] => (Allow) G:\Programme\Assassins Creed Brotherhood\AssassinsCreedBrotherhood.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{69D56FBC-8919-4C1A-9CFD-02AD241B2550}] => (Allow) G:\Programme\Assassins Creed Brotherhood\AssassinsCreedBrotherhood.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{B0EEE457-8118-46A8-A4BC-9433AD623259}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{61A58714-391B-4318-9B82-B8C2F57457FC}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{B33BF06A-B220-4F7A-97EA-D3DCC1093816}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{97C4369A-9655-4B8F-9A07-E50A5367D68E}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{85DED472-D32F-4458-B676-D57626E2BF15}] => (Allow) G:\Programme\Assassins Creed Revelations\AssassinsCreedRevelations.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{3DF1A996-7D7D-4397-BD69-2CB7C317B34F}] => (Allow) G:\Programme\Assassins Creed Revelations\AssassinsCreedRevelations.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{BC03F208-CE0F-4699-A252-F5E70710A6A7}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{558F8C2E-73A1-451F-AE46-FC50808AA954}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{145F0FA8-7569-4D21-B578-6151CCC0F1C2}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{91CF8AAD-3D7A-476E-BD57-C621E9DA631E}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{BE398A30-0FB1-4DA7-992B-F1EAEADDA74E}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe ()
FirewallRules: [{AAA88C41-D19D-4E12-9690-F38BB11E43C1}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe ()
FirewallRules: [{6B933768-1D9A-4982-943B-8B8FF6568E22}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe ()
FirewallRules: [{921C19AB-DCEC-4F65-BA8C-8F99C247FED1}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe ()
FirewallRules: [{3E5B04AD-D653-47A6-8EE1-D01BDC23AD9F}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield Bad Company 2\BFBC2Game.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{C0F248F7-28DD-4C75-9BA4-B0436A058ACB}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield Bad Company 2\BFBC2Game.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{4ADFCB4E-95EF-44AD-B997-FA057DB6B9A1}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Warfighter\MOHW.exe (Electronic Arts -> Danger Close Games)
FirewallRules: [{79451383-660B-4F53-9437-89BF663EDC16}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Warfighter\MOHW.exe (Electronic Arts -> Danger Close Games)
FirewallRules: [{52CFB23A-5D65-46DA-9F40-7F9BBBAABA89}] => (Allow) G:\Programme\Origin\_Downloads\Peggle Deluxe\Peggle.exe (Electronic Arts -> )
FirewallRules: [{D538E0B3-AD64-42F0-B806-9D2A4E163A51}] => (Allow) G:\Programme\Origin\_Downloads\Peggle Deluxe\Peggle.exe (Electronic Arts -> )
FirewallRules: [{3B2C7EAD-5154-4357-B2CF-F4424AA58543}] => (Allow) G:\Programme\Origin\_Downloads\Plants vs. Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{E85120DE-1250-4DFA-8E37-91EAB406C9F0}] => (Allow) G:\Programme\Origin\_Downloads\Plants vs. Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [UDP Query User{107F2BC2-BC9A-4FF0-811B-993D228F1779}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{1433B0AE-EC7D-403E-9764-0A00C1177F13}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F80E4FCF-1C34-4001-B381-8C8FB634853B}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Low.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{6BEC037A-F486-4FCB-8241-4B30E127EC6A}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Low.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{30A2058E-F21C-490E-BCA4-A1B9D1B07A51}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Hi.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{B5296167-2D9D-4252-A184-F3D007505A3A}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Hi.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{F297D99C-085D-46B1-9290-76768FA7BA47}] => (Allow) G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{81897A87-6DB5-485E-9257-CD65F8D721C5}] => (Allow) G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{A5D6B316-6538-4632-95D1-048BE5A89A7F}] => (Allow) G:\Programme\Steam\SteamApps\common\Showerdad\SHOWERDAD.exe ()
FirewallRules: [{9CD3D5AA-0E01-4B11-A2D0-6A3B4A65ECE3}] => (Allow) G:\Programme\Steam\SteamApps\common\Showerdad\SHOWERDAD.exe ()
FirewallRules: [{ADD1BB43-6718-43B6-BE51-59C60BA322AA}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\HatredConfig.exe (Destructive Creations)
FirewallRules: [{19DB0ED1-B4B7-4C60-AD27-C7BEFD76EE2B}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\HatredConfig.exe (Destructive Creations)
FirewallRules: [{8D030F37-C80E-4789-AD59-CEDA64E0B05F}] => (Allow) G:\Programme\Origin\_Downloads\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{57E38B66-A27D-469E-88B3-EE4F7E04DC28}] => (Allow) G:\Programme\Origin\_Downloads\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{229363AB-EA6A-498D-A15A-9A15DE7D84C0}] => (Allow) G:\Programme\Origin\_Downloads\Command and Conquer Red Alert II\RA2Launcher.exe (Kalloc Studios, Inc. -> Kalloc Studios)
FirewallRules: [{9D638FD1-A9CC-4644-8FD1-F6A44892EB71}] => (Allow) G:\Programme\Origin\_Downloads\Command and Conquer Red Alert II\RA2Launcher.exe (Kalloc Studios, Inc. -> Kalloc Studios)
FirewallRules: [{54347EF9-085C-4C8E-A271-7F744A0E5A4E}] => (Allow) G:\Programme\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8E501D08-7F02-4CE9-9F03-B36EF9139DE6}] => (Allow) G:\Programme\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8C06E058-E52F-4D5D-82AC-4FBA82CFDBC7}] => (Allow) G:\Programme\Steam\SteamApps\common\Crazy Chicken - Invasion\mh_invasion.exe ()
FirewallRules: [{1B7E1D9A-4323-47C7-868F-40174FE50E90}] => (Allow) G:\Programme\Steam\SteamApps\common\Crazy Chicken - Invasion\mh_invasion.exe ()
FirewallRules: [{3035ECCB-276A-4C14-9C7C-6AF0CDFED64A}] => (Allow) G:\Programme\Steam\SteamApps\common\CrazyChicken\MoorhuhnDeluxe.exe ()
FirewallRules: [{07D1882F-6F1F-4062-B8F3-225C9CCC8914}] => (Allow) G:\Programme\Steam\SteamApps\common\CrazyChicken\MoorhuhnDeluxe.exe ()
FirewallRules: [{AB088B6F-A1FA-45FF-8D7B-2342669511E4}] => (Allow) G:\Programme\Origin\_Downloads\Dungeon Keeper\DATA\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{C941AECE-79A0-4465-B93B-C73B205022A0}] => (Allow) G:\Programme\Origin\_Downloads\Dungeon Keeper\DATA\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{60151ADB-6A09-4731-8AE1-D83C2AEF8A09}] => (Allow) G:\Programme\Steam\SteamApps\common\Homefront_The_Revolution\Bin64\Homefront2_Release.exe (Dambuster Studios)
FirewallRules: [{B7646C81-EB4E-4E00-8857-F30305F63C37}] => (Allow) G:\Programme\Steam\SteamApps\common\Homefront_The_Revolution\Bin64\Homefront2_Release.exe (Dambuster Studios)
FirewallRules: [TCP Query User{AC8F5FF3-D567-46E4-AEC6-9EB1F964ADC7}G:\programme\gigatribe\gigatribe.exe] => (Allow) G:\programme\gigatribe\gigatribe.exe (Gigatribe -> Gigatribe)
FirewallRules: [UDP Query User{3FFBA312-7910-411D-9714-802AEEABA88E}G:\programme\gigatribe\gigatribe.exe] => (Allow) G:\programme\gigatribe\gigatribe.exe (Gigatribe -> Gigatribe)
FirewallRules: [{A80B511B-FE60-4225-945E-2398B1A850D0}] => (Allow) G:\Programme\Steam\SteamApps\common\QuantumBreak\dx11\QuantumBreak.exe ()
FirewallRules: [{65535CBF-04BA-4B17-9C20-F43C57183880}] => (Allow) G:\Programme\Steam\SteamApps\common\QuantumBreak\dx11\QuantumBreak.exe ()
FirewallRules: [{4B437AA5-B4A4-49BC-A2DF-19F818B3A16E}] => (Allow) G:\Programme\Steam\SteamApps\common\Sword With Sauce Alpha\SwordWithSauce.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> )
FirewallRules: [{F59A259D-937F-4E1C-A618-D602A8AE7C99}] => (Allow) G:\Programme\Steam\SteamApps\common\Sword With Sauce Alpha\SwordWithSauce.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> )
FirewallRules: [{7BEF0E01-F808-4A70-AB18-6E9AB412B19B}] => (Allow) G:\Programme\Steam\SteamApps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe (CI Games S.A.)
FirewallRules: [{93CFCE7E-2DD8-4E07-A618-BB105CD0B955}] => (Allow) G:\Programme\Steam\SteamApps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe (CI Games S.A.)
FirewallRules: [{AC84F096-3D9D-46B0-9E24-E4D7A3FF0649}] => (Allow) G:\Programme\Origin\_Downloads\Mass Effect 2\Binaries\MassEffect2.exe (Electronic Arts -> BioWare)
FirewallRules: [{B7F25524-20D2-4063-8756-0DD2BE63CF2F}] => (Allow) G:\Programme\Origin\_Downloads\Mass Effect 2\Binaries\MassEffect2.exe (Electronic Arts -> BioWare)
FirewallRules: [TCP Query User{02BFB883-DA8E-4283-913D-687D233FAF9A}G:\programme\personal backup 5\persbackup.exe] => (Allow) G:\programme\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental)
FirewallRules: [UDP Query User{9B0C7B38-24EC-4063-B898-94FA06A72F56}G:\programme\personal backup 5\persbackup.exe] => (Allow) G:\programme\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental)
FirewallRules: [{7127E82C-63C8-4AE0-89AA-B4655DDF725C}] => (Allow) G:\Programme\Steam\SteamApps\common\Steep\steep.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{1A989C6B-D3BC-4B03-B067-548BD98176DE}] => (Allow) G:\Programme\Steam\SteamApps\common\Steep\steep.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{74C47F92-05FE-4C7F-8721-AA23DF4DEA60}] => (Allow) G:\Programme\Steam\SteamApps\common\Agents of Mayhem\aom\AOM_Release_Final.exe ()
FirewallRules: [{F0DA23E1-C7C4-4A15-9A2B-D275AE170597}] => (Allow) G:\Programme\Steam\SteamApps\common\Agents of Mayhem\aom\AOM_Release_Final.exe ()
FirewallRules: [{B2D6BB57-F022-4E8C-B225-0095B8BE2927}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{36114247-EB1B-45C3-B1AF-B9F7E58C6635}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOTMCD\SUPERHOTMCD.exe (SUPERHOT Sp z o.o.)
FirewallRules: [{DA95258B-040E-40BF-89E9-5409F03F305B}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOTMCD\SUPERHOTMCD.exe (SUPERHOT Sp z o.o.)
FirewallRules: [TCP Query User{DF52C5D2-12C7-418C-B380-B68632E51ED1}C:\program files\personal backup 5\persbackup.exe] => (Allow) C:\program files\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental)
FirewallRules: [UDP Query User{78CB2A62-6E51-44B0-83FC-C74285F1C6C1}C:\program files\personal backup 5\persbackup.exe] => (Allow) C:\program files\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental)
FirewallRules: [{706B81C1-352F-4105-8F37-B5482D803AED}] => (Allow) G:\Programme\Steam\SteamApps\common\ECHO\Echo.exe ()
FirewallRules: [{5219E6E5-1014-42D4-8CCC-24471DC3A2E7}] => (Allow) G:\Programme\Steam\SteamApps\common\ECHO\Echo.exe ()
FirewallRules: [TCP Query User{6AC42703-FB73-406D-A6DB-197F20A827BA}G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe (Epic Games, Inc.)
FirewallRules: [UDP Query User{0ED095CE-6563-46DC-B5CF-0CB6456DFCBC}G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe (Epic Games, Inc.)
FirewallRules: [{8DB0DA07-0355-4395-9FCA-27822DA84A84}] => (Allow) G:\Programme\Origin\_Downloads\Dead Space\Dead Space.exe (Electronic Arts, Inc. -> )
FirewallRules: [{30EE185D-609F-443E-AA20-DE2689B9445A}] => (Allow) G:\Programme\Origin\_Downloads\Dead Space\Dead Space.exe (Electronic Arts, Inc. -> )
FirewallRules: [{0C2740B6-7656-4E93-B478-569D0D5BE349}] => (Allow) G:\Programme\Origin\_Downloads\NOX\NOX.exe (Electronic Arts, Inc. -> )
FirewallRules: [{6CDCBAAA-94F5-4C58-AFEB-271ACA7D48E4}] => (Allow) G:\Programme\Origin\_Downloads\NOX\NOX.exe (Electronic Arts, Inc. -> )
FirewallRules: [{70BA2575-E456-4CDC-BDFC-63DA442D2339}] => (Allow) G:\Programme\Origin\_Downloads\NOX\Game.exe (Electronic Arts, Inc. -> )
FirewallRules: [{969F2315-07EF-42F5-AFF0-E238D7F2C8CD}] => (Allow) G:\Programme\Origin\_Downloads\NOX\Game.exe (Electronic Arts, Inc. -> )
FirewallRules: [{F26FA441-F89D-4F7F-A722-73C63FB28397}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{28B34CD2-3071-4ACA-90E2-4254925E99B6}] => (Allow) G:\Programme\Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{018C65D7-0CAC-437B-A3B5-0CF3FC1FC95D}] => (Allow) G:\Programme\Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{BD986AFB-7A79-4FD7-BF61-AD9355C4C941}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software)
FirewallRules: [UDP Query User{8B94EFDF-C593-4DB9-9EBA-9DF8765B9964}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software)
FirewallRules: [TCP Query User{3FFEAA4E-489B-430D-839D-D5B8A69A4AD6}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{8E05D4F8-9548-4B55-915C-90F59D1FB917}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [{2DA87A23-6CF5-4B3C-A308-2CD451F137BA}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{DE617DB1-2830-4875-A1AC-91757D7A7112}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{69793F51-8FBD-45ED-8A23-4EA1E293B8B3}G:\programme\softperfect network scanner\netscan.exe] => (Allow) G:\programme\softperfect network scanner\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [UDP Query User{AA616F58-0EBD-45B2-98DF-F8A32F6C5EB8}G:\programme\softperfect network scanner\netscan.exe] => (Allow) G:\programme\softperfect network scanner\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [TCP Query User{78AD9386-4F65-4667-90F2-FDB5F4517F8D}G:\programme\minihost\minihostmodular.exe] => (Block) G:\programme\minihost\minihostmodular.exe (Image Line -> Image-Line)
FirewallRules: [UDP Query User{BA3D12A0-11C2-4882-8263-0D5998D741D3}G:\programme\minihost\minihostmodular.exe] => (Block) G:\programme\minihost\minihostmodular.exe (Image Line -> Image-Line)
FirewallRules: [TCP Query User{856FC02B-B0C6-4CD4-A9F6-FA2E11BA774B}C:\windows\system32\openssh\ssh.exe] => (Allow) C:\windows\system32\openssh\ssh.exe (Microsoft Windows -> )
FirewallRules: [UDP Query User{F2D2EB63-7784-4A12-852A-760680617225}C:\windows\system32\openssh\ssh.exe] => (Allow) C:\windows\system32\openssh\ssh.exe (Microsoft Windows -> )
FirewallRules: [{5AEC6348-6287-4F1D-98D1-F20DCB966B6D}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{423068E8-9AC5-420A-BCEF-98F7BE2C76DB}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{25E8B6E7-2424-43C4-B6C8-C9FDD6016213}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{D8FBA490-F683-47BE-BE56-8D76F59591C8}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{FFA4EA00-5C77-490F-AEA1-5F13087D4783}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{3BE0BD1D-6E01-4C24-AB81-8A63CC4E2993}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{85A08BAD-DD88-4AF5-95C8-D5E88C652BA6}] => (Allow) G:\Programme\Steam\SteamApps\common\Deus Ex Mankind Divided\retail\DXMD.exe ()
FirewallRules: [{FC4A334F-5B0D-4AA1-96D8-7FD679BDB344}] => (Allow) G:\Programme\Steam\SteamApps\common\Deus Ex Mankind Divided\retail\DXMD.exe ()
FirewallRules: [{617C113C-87C7-49F1-B3C5-809CD7DC8A24}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CC2001E8-524B-4406-B98E-F6193C0E95C9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4150B0AF-A195-4F0D-AE09-E3716EEB7452}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EA7185E6-E00E-4C1B-99FE-143B1D2F2CC9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{12B7469D-19C3-4DA9-978B-F44D8E5EE30F}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{9B1B4144-1D89-4276-B711-E53F36348B1C}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{09E9646E-45E7-481E-BAE0-8BAC906106E9}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [{697BF52A-4B9E-4D92-B0AC-80CB19BC0B80}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [TCP Query User{FAF6DD5F-0E27-45CC-A994-F63506F58298}Y:\_tor zeugs\tox\utox64.exe] => (Block) Y:\_tor zeugs\tox\utox64.exe Keine Datei
FirewallRules: [UDP Query User{2D840A3B-58A7-491C-AB45-79443295D8C7}Y:\_tor zeugs\tox\utox64.exe] => (Block) Y:\_tor zeugs\tox\utox64.exe Keine Datei
FirewallRules: [TCP Query User{3595AEE3-ACFD-4982-8848-838DCE23F878}O:\_tor\tox\utox64.exe] => (Allow) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [UDP Query User{E084C790-59D3-44B7-88EB-CC17DA6B5681}O:\_tor\tox\utox64.exe] => (Allow) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [{6E938AB2-BC2A-4A7A-B48C-06B17E5AD07F}] => (Block) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [{E9EF94F8-1A0E-4B5F-ACD8-F164EF68CABA}] => (Block) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [TCP Query User{C03EE5CE-729D-4A68-8024-C8F9372E6F17}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software)
FirewallRules: [UDP Query User{45D488AE-2D6A-42CC-BFAF-9A7FA0A5843F}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software)
FirewallRules: [TCP Query User{4B3CDB3E-DBBE-4001-A146-3B47E93EAEE6}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{66C35A46-F2C8-4BA4-9BFB-2F77AF87B96A}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [{F752CD99-4D7F-4449-A1E4-EF0EDEBA30AE}] => (Allow) G:\Programme\Steam\SteamApps\common\Alien Isolation\AI.exe ()
FirewallRules: [{7088FA85-DDB7-423C-ACC4-FD8F554A0314}] => (Allow) G:\Programme\Steam\SteamApps\common\Alien Isolation\AI.exe ()
FirewallRules: [{D031A860-93C3-4485-89C3-677175EA80DC}] => (Allow) G:\Programme\Steam\SteamApps\common\F.E.A.R. 3\F.E.A.R. 3.exe (Valve Corp. -> Day 1 Studios, LLC)
FirewallRules: [{61D21C29-D571-4F9B-98AE-6246FB956989}] => (Allow) G:\Programme\Steam\SteamApps\common\F.E.A.R. 3\F.E.A.R. 3.exe (Valve Corp. -> Day 1 Studios, LLC)
FirewallRules: [{BC810E15-BA49-4FB2-8F6C-4C7CEB743389}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{1DF53109-3EEE-4FB3-A658-6061F81B1D71}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{6A20E07A-68CD-426F-AAC4-9B301C19280C}] => (Allow) G:\Programme\Steam\SteamApps\common\Ring of Elysium\SLauncher.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{122A2369-DBD5-4784-B328-3FF2B51FE722}] => (Allow) G:\Programme\Steam\SteamApps\common\Ring of Elysium\SLauncher.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{CCF1F94E-6F0B-4234-9C6D-73E1CBF585F2}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A07A1855-2523-4AA9-AF8E-3A0653719274}] => (Allow) G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{CD30F855-D3DC-4873-B568-019E96EC3CDE}] => (Allow) G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{DF519B2E-FEDC-4FC5-981E-814110282605}] => (Allow) G:\Programme\Steam\SteamApps\common\Vampyr\AVGame\Binaries\Win64\AVGame-Win64-Shipping.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{AC0BBC92-837F-41AD-B0FC-C52296833B9D}] => (Allow) G:\Programme\Steam\SteamApps\common\Vampyr\AVGame\Binaries\Win64\AVGame-Win64-Shipping.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{FCDC61CB-4334-4A72-A1BF-AE4AC3C90BEE}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch.exe (Define Human Studios LLC -> Define Human Studios)
FirewallRules: [{8F942CF6-84A3-4727-995B-ABF25BFEEECB}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch.exe (Define Human Studios LLC -> Define Human Studios)
FirewallRules: [{4BA0ECBE-125B-481E-AFB6-502E0A8A7A28}] => (Allow) G:\Programme\Steam\SteamApps\common\Metro Last Light\MetroLL.exe (Koch Media GmbH -> 4A Games)
FirewallRules: [{A8669C2D-95F5-49A4-ACEA-8992FC5A3E19}] => (Allow) G:\Programme\Steam\SteamApps\common\Metro Last Light\MetroLL.exe (Koch Media GmbH -> 4A Games)
FirewallRules: [{977563A3-BEDC-41EC-B80E-FBFACB4D9C5A}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{56AF5911-11FB-49A6-99CD-90371F6E75CC}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{21708D00-96B3-4D90-A6D7-35D404F85C5D}] => (Allow) G:\Programme\Steam\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{7E42BDD8-1E39-422C-BDB3-35E5BE9CAEE3}] => (Allow) G:\Programme\Steam\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{F1687312-6FEB-473D-92B6-66EBD282067F}] => (Allow) G:\Programme\Steam\SteamApps\common\Slender - The Arrival\Slender - The Arrival.exe ()
FirewallRules: [{578C2FAD-548B-4F83-8B03-03B8E3D7D441}] => (Allow) G:\Programme\Steam\SteamApps\common\Slender - The Arrival\Slender - The Arrival.exe ()
FirewallRules: [{814F49DA-9732-405A-AC48-AA4E11949E2E}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment)
FirewallRules: [{63A7EF5D-8EAC-4CB7-8E06-A03ACC302AF8}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment)
FirewallRules: [{E7ACF5B2-10A8-4986-AF84-EE55A3A4EE51}] => (Allow) G:\Programme\Steam\SteamApps\common\Magrunner\Binaries\Win32\Magrunner.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{ED89AD27-45FF-4BF4-9E62-045D3A3EBCC5}] => (Allow) G:\Programme\Steam\SteamApps\common\Magrunner\Binaries\Win32\Magrunner.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{09184F2D-20ED-4AF6-A25F-CC7E68984BF0}] => (Allow) G:\Programme\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{99E89A62-5C76-4EB3-B91C-D3E5A303F73D}] => (Allow) G:\Programme\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{6560545C-C44B-4A47-AE12-BB7CC68BBE39}] => (Allow) G:\Programme\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{07B68213-5B3D-4D2B-B971-9F1D945E2D4A}] => (Allow) G:\Programme\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{29B728AB-8252-42A0-AAAE-9BC5A813992E}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{7FD87189-EE4D-4494-9629-FC91B146C2A6}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [OpenSSH-Server-In-TCP] => (Allow) %SystemRoot%\system32\OpenSSH\sshd.exe (Microsoft Windows -> )
FirewallRules: [{41243DF6-C57C-4332-9AEE-81B4322CEC08}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{836E79CB-6699-4C59-ACF2-150F06F80EF0}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{E0C46B7D-A117-44DE-8F48-75785074B424}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{40CD82A2-71BB-4104-A9C5-A47869BF500C}] => (Allow) G:\Programme\Driver Booster\6.2.1\DriverBooster.exe (IObit Information Technology -> IObit)
FirewallRules: [{B210C387-3B1D-4D60-AF35-94452B297573}] => (Allow) G:\Programme\Driver Booster\6.2.1\DriverBooster.exe (IObit Information Technology -> IObit)
FirewallRules: [{20CA08E2-FD9E-41C7-8ED5-0F89C4924977}] => (Allow) G:\Programme\Driver Booster\6.2.1\DBDownloader.exe (IObit Information Technology -> IObit)
FirewallRules: [{0C2A33DE-A13E-4918-9595-5D2F7758F748}] => (Allow) G:\Programme\Driver Booster\6.2.1\DBDownloader.exe (IObit Information Technology -> IObit)
FirewallRules: [{790C69F6-3337-43D6-ADA6-BE67A3B9BEBC}] => (Allow) G:\Programme\Driver Booster\6.2.1\AutoUpdate.exe (IObit Information Technology -> IObit)
FirewallRules: [{8B65A745-CDB7-42C5-B76B-58B64400F9F9}] => (Allow) G:\Programme\Driver Booster\6.2.1\AutoUpdate.exe (IObit Information Technology -> IObit)
FirewallRules: [{09E435D7-E314-49F5-92F4-24C2F134DD15}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{019A91EA-3B00-47B9-BD98-AA1ADBE73CBC}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{3993C3FE-D58E-4368-8A4D-1A3F695B4B11}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [{03AE6F9C-8836-4DF9-9D10-E0C1CB47FC7E}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [{C19669B6-452A-4E92-93E8-18A1461C421B}] => (Allow) G:\Programme\Steam\SteamApps\common\Flower\Flower.exe ()
FirewallRules: [{942FC2D7-471F-49FC-B431-B37EF9CD4A7E}] => (Allow) G:\Programme\Steam\SteamApps\common\Flower\Flower.exe ()
FirewallRules: [{D53A4F4D-78AF-4BA9-AE53-DEEB49DF2039}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{CF61BC5F-057A-4BE2-A911-D05A058A66FF}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{F615156F-E5F5-45F7-A813-6E4A1256693B}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{DE840458-F8D1-42F3-81DC-812834AE1FEE}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)

==================== Wiederherstellungspunkte =========================

06-02-2019 18:10:29 Installed Oracle VM VirtualBox 6.0.4
13-02-2019 15:39:45 Windows Update
21-02-2019 23:26:03 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: TunnelBear Adapter V9
Description: TunnelBear Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TunnelBear Provider V9
Service: tap-tb-0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/24/2019 05:25:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Michael\Desktop\Bereinigungsprogramme\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_05b53be2071f46b6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_4d6272b91b9b6fbc.manifest.

Error: (02/24/2019 02:05:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Michael\Desktop\Bereinigungsprogramme\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_05b53be2071f46b6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_4d6272b91b9b6fbc.manifest.

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 20

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 19


Systemfehler:
=============
Error: (02/24/2019 12:02:11 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Der Treiber hat einen internen Treiberfehler auf \Device\VBoxNetLwf gefunden.

Error: (02/24/2019 12:02:11 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Der Treiber hat einen internen Treiberfehler auf \Device\VBoxNetLwf gefunden.

Error: (02/24/2019 12:02:11 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Der Treiber hat einen internen Treiberfehler auf \Device\VBoxNetLwf gefunden.

Error: (02/24/2019 10:08:38 AM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/24/2019 10:08:37 AM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/24/2019 10:08:37 AM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/24/2019 10:08:37 AM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/24/2019 10:04:44 AM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.


Windows Defender:
===================================
Date: 2019-02-18 15:51:55.452
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {99D4EB30-61E2-4652-B742-C8C55E10E3E0}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-12 21:12:24.083
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4E3E7511-AF97-4BFF-AD5C-A73BE28E5031}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-09 16:14:02.600
Description: 
Von Windows Defender Antivirus wurde Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Virus:DOS/EICAR_Test_File&threatid=2147519003&enterprise=0
Name: Virus:DOS/EICAR_Test_File
ID: 2147519003
Schweregrad: Schwerwiegend
Kategorie: Virus
Pfad: containerfile:_C:\Users\Michael\Desktop\eicar.zip; file:_C:\Users\Michael\Desktop\eicar.zip->eicar.com
Erkennungsursprung: Lokaler Computer
Erkennungstyp: Konkret
Erkennungsquelle: System
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: Unknown
Signaturversion: AV: 1.285.1195.0, AS: 1.285.1195.0, NIS: 1.285.1195.0
Modulversion: AM: 1.1.15600.4, NIS: 1.1.15600.4

Date: 2019-02-09 15:59:34.009
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {DD7410E2-FBC3-49F4-B79D-482230511674}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-09 11:26:03.848
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {90099CA8-F267-4AF7-9A42-B2F9EBAE3DEF}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-18 16:05:31.109
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

Date: 2019-02-18 01:40:32.646
Description: 
Fehler von Windows Defender Antivirus beim Aktualisieren von Signaturen.
Neue Signaturversion: 
Vorherige Signaturversion: 1.287.189.0
Updatequelle: Microsoft Update-Server
Signaturtyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
Vorherige Modulversion: 1.1.15700.8
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 

Date: 2019-02-18 01:30:30.949
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

Date: 2019-02-05 01:25:12.904
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

Date: 2019-02-04 16:37:34.944
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Verhaltensüberwachung
Fehlercode: 0x80508023
Fehlerbeschreibung: Auf dem Gerät wurde keine Schadsoftware oder andere potenziell unerwünschte Software gefunden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

CodeIntegrity:
===================================

Date: 2019-02-14 00:20:22.781
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2019-02-14 00:20:22.738
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume3\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2019-01-23 12:32:38.451
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2019-01-23 12:32:38.395
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2019-01-11 20:20:21.319
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2019-01-11 20:20:21.275
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2018-12-21 23:41:40.591
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

Date: 2018-12-21 23:41:40.546
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume4\Windows\Microsoft.NET\Framework\v4.0.30319\mscorsvw.exe) attempted to load \Device\HarddiskVolume2\Programme\PingPlotter 5.0\System.ValueTuple.dll that did not meet the Microsoft signing level requirements.

==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 50%
Installierter physikalischer RAM: 16312.69 MB
Verfügbarer physikalischer RAM: 8017.06 MB
Summe virtueller Speicher: 20024.69 MB
Verfügbarer virtueller Speicher: 8267.51 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:233.11 GB) (Free:112.41 GB) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (Fresslatte) (Fixed) (Total:931.5 GB) (Free:784.54 GB) NTFS
Drive f: (ICloud, Filme, TOR) (Fixed) (Total:298.09 GB) (Free:22.09 GB) NTFS
Drive g: (Platte) (Fixed) (Total:2794.52 GB) (Free:1089.83 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive h: (Gekrackte Spiele) (Fixed) (Total:279.46 GB) (Free:127.94 GB) NTFS

\\?\Volume{86c62333-0000-0000-0000-304d3a000000}\ () (Fixed) (Total:0 GB) (Free:0 GB) 
\\?\Volume{86c62333-0000-0000-0000-30823b000000}\ () (Fixed) (Total:0 GB) (Free:0 GB) 
\\?\Volume{7b58d956-396c-11e8-9e12-3085a994db21}\ () () (Total:0 GB) (Free:0 GB) 
\\?\Volume{3149b930-37eb-11e9-9ef5-3085a994db21}\ () () (Total:0 GB) (Free:0 GB) 

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E94FE94F)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2794.5 GB) (Disk ID: 0D146A27)

Partition: GPT.

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 86C62333)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=510 MB) - (Type=27)
Partition 4: (Not Active) - (Size=450 MB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 298.1 GB) (Disk ID: B8000000)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 279.5 GB) (Disk ID: A7A7A7A7)
Partition 1: (Not Active) - (Size=279.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

M-K-D-B · 24.02.2019, 12:40

Servus,

ich sehe die Erweiterung nicht in dieser Logdatei von FRST... hast du sie gerade eben wieder erst entfernen lassen?

Öffne Chrome erneut, so dass wieder die Meldung der Erweiterung erscheint. Lass sie dieses Mal zu.

Anschließend bitte folgendes tun:

Schritt 1
Die folgenden Programme sind veraltet, stören die Bereinigung oder es handelt sich um Werbesoftware bzw. unerwünschte Software (Adware, PUP) und müssen entfernt werden:

Deinstalliere über Start > Einstellungen > Apps (Windows 10) bzw. Start > Systemsteuerung > Programme deinstallieren (Windows 7) die folgenden Programme:
- Driver Booster 6
- Malwarebytes AntiMalware Version 3.2
Starte den Rechner im Anschluss neu auf.
Gib eine kurze Rückmeldung, ob die Deinstallation erfolgreich war.

Schritt 2
Downloade Dir bitte Malwarebytes Anti-Malware.

Installiere das Programm in den vorgegebenen Pfad.
Starte Malwarebytes' Anti-Malware (MBAM).
Klicke im Anschluss auf Scan, wähle den Bedrohungs-Scan aus und klicke auf Scan starten.
Lass am Ende des Suchlaufs alle Funde (falls vorhanden) in die Quarantäne verschieben. Klicke dazu auf Ausgewählte Elemente in die Quarantäne verschieben.
Lass deinen Rechner ggf. neu starten, um die Bereinigung abzuschließen.
Starte MBAM nach dem Neustart, klicke auf Berichte.
Wähle den neuesten Scan-Bericht aus, klicke auf Bericht anzeigen und dann auf Export.
Wähle Textdatei (.txt) aus und speichere die Datei als mbam.txt auf dem Desktop ab.
Füge den Inhalt der mbam.txt mit deiner nächsten Antwort hinzu.

Bitte poste mit deiner nächsten Antwort

die Logdatei von MBAM.

computerfrea · 24.02.2019, 16:42

Hi,
du hast mich glaub ich missverstanden.

Ich lasse AdwCleaner diese Erweiterung die er findet entfernen und wenn ich direkt danach nochmal einen Suchlauf starte findet er sie auch nicht mehr.
Wenn ich dann Google Chrome öffne fragt er mich ob er Sie hinzufügen soll oder nicht. Egal ob ich auf "Ja" oder "Nein" drücke ist Sie unter Google Chrome nicht zu finden. Aber der AdwCleaner findet Sie in beiden Fällen wieder. Und wenn ich dann den AdwCleaner wieder laufen lasse entfern er Sie auch wieder. Bis zum nächsten Start von Google Chrome. Dann fragt mich Google Chrome wieder ob er Sie hinzufügen soll und das Spiel geht von vorne los.

Bei einem zweiten Start von Google Chrome fragt er mich auch nicht mehr ob er Sie hinzufügen soll oder nicht. Ausser eben ich lasse Sie durch den AdwCleaner wieder entfernen.

Jetzt gerade wird Sie vom AdwCleaner gefunden weil ich Google Chrome gestartet hatte um diesen Thread zu öffnen. Ich hatte auf "Nein" gedrückt aber wie gesagt macht es keinen Unterschied was ich drücke weil es keine direkten Auswirkungen hat (ausser dass Sie vom AdwCleaner wieder gefunden wird). Google Chrome verhält sich völlig normal ganz egal ob ich die Erweiterung zulasse oder nicht.

Soll ich trotzdem machen was du vorgeschlagen hast?

M-K-D-B · 24.02.2019, 18:22

Zitat:

Zitat von computerfrea

Soll ich trotzdem machen was du vorgeschlagen hast?

Ja bitte.

Und ich habe noch zwei Zusatzfragen (bitte diesbezüglich nicht aktiv werden, nur die Fragen beantworten):
1)
Nutzt zu zufällig die Syncronisation von Google Chrome über mehrere Geräte (Notebook, Tablet, Smartphone, etc.)?
Das könnte ein Grund sein, warum es immer wieder beim Start von AdwCleaner erkannt wird...

2)
Hast du Google Chrome schon mal zurückgesetzt bzw. deinstalliert und anschließend neu installiert?

computerfrea · 25.02.2019, 00:46

1. Ich habe ein Online-Konto bei Google Chrome. Meine Google Chrome Daten werden mit der Google Chrome App auf meinem Iphone synchronisiert.

2. Ich habe mein Google Chrome genau wegen diesem Prioblem schonmal zurückgesetzt, allerdings nicht neu installiert.
Dafür habe ich die Synchronisierung auf diesem Computer deaktiviert und Chrome zurückgesetzt. Allerdings hab ich das eher halbherzig ausprobiert weil ich einerseits eigentlich glaube dass die Synchronisation darauf keinen Einfluss hat und ich andererseits zu viel Sorge hatte meine Daten zu verlieren.
(Man kennts ja beispielsweise noch von Windows XP wenn man einmal die falsche Schaltfläche drückt und beim nächsten hochfahren nur noch blau sieht während einem so langsam der kalte Schweiß aus allen Poren kriecht

Deswegen hatte ich dieses Problem dann erstmal wieder prokrastiniert)

Malwarebytes hat tatsächlich was gefunden. Ich glaube ich weiß auch was das ist. Ich hatte es gelegentlich dass sich beim Start von Google Chrome ein Tab mit einer willkürlichen Buchstabenkombination etwa drei Sekunden lang mehrfach geöffnet und wieder geschlossen hat. Da das allerdings höchstens einmal alle paar Monate vorgekommen ist und ansonsten alles normal schien hab ich dem keine größere Beachtung geschenkt. Schön dass das jetzt vermutlich behoben ist

Die ursprüngliche Situation ist allerdings unverändert und der AdwCleaner findet dieses Ding immer noch:

mbam.txt:

Code:

ATTFilter

Malwarebytes
www.malwarebytes.com

-Protokolldetails-
Scan-Datum: 24.02.19
Scan-Zeit: 23:52
Protokolldatei: d79094f4-3886-11e9-9ebe-3085a994db21.json

-Softwaredaten-
Version: 3.7.1.2839
Komponentenversion: 1.0.538
Version des Aktualisierungspakets: 1.0.9420
Lizenz: Testversion

-Systemdaten-
Betriebssystem: Windows 10 (Build 17763.316)
CPU: x64
Dateisystem: NTFS
Benutzer: Michael-PC\Michael

-Scan-Übersicht-
Scan-Typ: Bedrohungs-Scan
Scan gestartet von: Manuell
Ergebnis: Abgeschlossen
Gescannte Objekte: 382575
Erkannte Bedrohungen: 4
In die Quarantäne verschobene Bedrohungen: 4
Abgelaufene Zeit: 2 Min., 20 Sek.

-Scan-Optionen-
Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Erkennung
PUM: Erkennung

-Scan-Details-
Prozess: 0
(keine bösartigen Elemente erkannt)

Modul: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 1
PUP.Optional.DefaultSearch, HKLM\SOFTWARE\WOW6432NODE\GOOGLE\CHROME\EXTENSIONS\nladljmabboanhihfkjacnnkgjhnokhj, In Quarantäne, [297], [550469],1.0.9420

Registrierungswert: 1
PUP.Optional.DefaultSearch, HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\GOOGLE\CHROME\PREFERENCEMACS\Default\extensions.settings|NLADLJMABBOANHIHFKJACNNKGJHNOKHJ, In Quarantäne, [297], [550469],1.0.9420

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Daten-Stream: 0
(keine bösartigen Elemente erkannt)

Ordner: 0
(keine bösartigen Elemente erkannt)

Datei: 2
PUP.Optional.DefaultSearch, C:\USERS\MICHAEL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, [297], [550469],1.0.9420
PUP.Optional.DefaultSearch, C:\USERS\MICHAEL\APPDATA\LOCAL\GOOGLE\CHROME\USER DATA\Default\Secure Preferences, Ersetzt, [297], [469798],1.0.9420

Physischer Sektor: 0
(keine bösartigen Elemente erkannt)

WMI: 0
(keine bösartigen Elemente erkannt)


(end)

M-K-D-B · 25.02.2019, 17:28

Gut gemacht.

Eventuell kann ich es dir ersparen, Google Chrome komplett zu deinstallieren.

Wir versuchen folgendes:

Starte Google Chrome. Dann kommt ja wieder die Frage, ob die Erweiterung "... Yahoo" hinzugefügt werden soll. Dann klickst du dort bitte auf ja und wartest kurz (~ 10 Sekunden).
Anschließend schließt du Google Chrome wieder.

Nun führst du bitte direkt einen FRST-Suchlauf aus und postest mir beide Logdateien (ich hoffe, dass die Erweiterung nun in der Logdatei angezeigt wird):

Starte die FRST.exe erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

computerfrea · 25.02.2019, 19:35

Sieht nach einem Fortschritt aus

Die Erweiterung wird jetzt auch angezeigt. Und wenn ich das richtig interpretiere gehören wohl beide Sachen zusammen.

FRST.txt:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25.02.2019
durchgeführt von Michael (Administrator) auf MICHAEL-PC (25-02-2019 19:24:00)
Gestartet von C:\Users\Michael\Desktop
Geladene Profile: Michael (Verfügbare Profile: Michael & sshd)
Platform: Windows 10 Home Version 1809 17763.316 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\snmp.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(ProtonVPN AG -> ) G:\Programme\ProtonVPN\ProtonVPNService.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) G:\Programme\Todo Backup\bin\Agent.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.Windows.Cortana_cw5n1h2txyewy\SearchUI.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> ) G:\Programme\Todo Backup\bin\TodoBackupService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(WhatPulse -> ) C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Noriyuki Miyazaki -> Crystal Dew World) G:\Programme\CrystalDiskInfo\DiskInfo32.exe
(Apple Inc. -> Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\Persbackup.exe
(Valve -> Valve Corporation) G:\Programme\Steam\Steam.exe
(WhatPulse -> ) C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279520 2019-01-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [] => [X]
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [] => [X]
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [whatpulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3377376 2018-11-16] (WhatPulse -> )
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Spotify] => C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe [26118888 2019-02-13] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2019-01-15] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [] => [X]
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Dropbox Update] => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-07] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [TunnelBear] => G:\Programme\TunnelBear\TunnelBear.UI.exe [1047936 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Policies\Explorer: [NoSecurityTab] 1
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\SysWOW64\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\SysWOW64\scg726.acm [13239 2000-03-14] (SHARP Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\SysWOW64\alf2cd.acm [38912 2003-05-21] (NCT Company) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\AC3ACM.acm [81920 2004-02-04] (fccHandler) [Datei ist nicht signiert]
HKLM\...\Drivers32-x32: [msacm.lame] => lame.ax
HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\SysWOW64\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [139264 2004-07-03] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\SysWOW64\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.ZMBV] => C:\Windows\SysWOW64\zmbv.dll [94208 2010-04-09] () [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.109\Installer\chrmstp.exe [2019-02-15] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GigaTribe.lnk [2017-01-03]
ShortcutTarget: GigaTribe.lnk -> G:\Programme\GigaTribe\gigatribe.exe (Gigatribe -> Gigatribe)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk [2017-12-28]
ShortcutTarget: Persbackup.lnk -> C:\Program Files\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.lnk [2014-07-21]
ShortcutTarget: Steam.lnk -> G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
GroupPolicy: Beschränkung ? <==== ACHTUNG

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81299b37-ca74-45f0-bb98-ac773480681d}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
BHO-x32: Wondershare AllMyTube 4.9.0 -> {067DF9EC-26B7-40DC-8DB8-CD8BE85AE367} -> Keine Datei
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://files.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab
Handler: WSAllMyTubechrome - {0A0C95CF-A116-4C74 -  Keine Datei

Edge: 
======
Edge Session Restore: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default [2019-02-25]
FF Homepage: Mozilla\Firefox\Profiles\s12ar7zc.default -> hxxp://www.google.de
FF NetworkProxy: Mozilla\Firefox\Profiles\s12ar7zc.default -> backup.ftp", "127.0.0.1"
FF Session Restore: Mozilla\Firefox\Profiles\s12ar7zc.default -> ist aktiviert.
FF Extension: (Bookmarks Organizer) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\bookmarksorganizer@agenedia.com.xpi [2019-01-27]
FF Extension: (HTTPS Everywhere) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\https-everywhere@eff.org.xpi [2019-02-01]
FF Extension: (ProxTube) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\ich@maltegoetz.de.xpi [2018-09-13]
FF Extension: (PDF Mage) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\jid1-GeRCnsiDhZiTvA@jetpack.xpi [2018-12-28]
FF Extension: (404 Bookmarks) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{5f8d31ba-47fb-4b70-bf8d-d2113f6da22f}.xpi [2018-09-15]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-24]
FF SearchPlugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\searchplugins\bing-lavasoft-ff59.xml [2018-05-22]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [AllMyTube@Wondershare.com] - C:\ProgramData\Wondershare\AllMyTube\AllMyTube@Wondershare.com_xpi => nicht gefunden
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_142.dll [2019-02-14] (Adobe Systems Incorporated -> )
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (Electronic Arts -> EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-14] (Adobe Systems Incorporated -> )
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (Electronic Arts -> EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google Inc -> Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker -> C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> G:\Programme\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
StartMenuInternet: Firefox-E6D11708B02F97DD - G:\Programme\Firefox\firefox.exe

Chrome: 
=======
CHR HomePage: Default -> hxxps://encrypted.google.com
CHR StartupUrls: Default -> "hxxps://encrypted.google.com"
CHR NewTab: Default ->  Active:"chrome-extension://npdicihegicnhaangkdmcgbjceoemeoo/newtab.html"
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default [2019-02-25]
CHR Extension: (ProxFlow) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2019-02-24]
CHR Extension: (Präsentationen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2017-11-07]
CHR Extension: (Docs) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2017-11-07]
CHR Extension: (Google Drive) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2018-10-27]
CHR Extension: (YouTube) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-10-03]
CHR Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2019-01-30]
CHR Extension: (RealPlayer Cloud) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\damemajnpodbdjndboidpmfpjlabocje [2016-02-07]
CHR Extension: (Adobe Acrobat) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\efaidnbmnnnibpcajpcglclefindmkaj [2017-05-31]
CHR Extension: (uDomainFlag) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\eklbfdpploakpkdakoielobggbhemlnm [2015-11-25]
CHR Extension: (Tabellen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2017-11-07]
CHR Extension: (Video Downloader PLUS) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\fhplmmllnpjjlncfjpbbpjadoeijkogc [2019-01-20]
CHR Extension: (HTTPS Everywhere) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2019-02-04]
CHR Extension: (PDF Mage) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\gknphemhpcknkhegndlihchfonpdcben [2018-10-27]
CHR Extension: (Bookmark Scanner) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ijpiaohplcljdpbgiaggdipdogjlejko [2018-11-13]
CHR Extension: (HTTP Headers) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nioieekamcpjfleokdcdifpmclkohddp [2017-11-10]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2018-04-03]
CHR Extension: (Yahoo Partner) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeoo [2019-02-25]
CHR Extension: (Mosh) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\ooiklbnjmhbcgemelgfhaeaocllobloj [2018-09-08]
CHR Extension: (Google Mail) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-11-09]
CHR Extension: (Chrome Media Router) - C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2019-02-18]
CHR Profile: C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile [2018-06-04]
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6893704 2018-07-15] (BattlEye Innovations e.K. -> )
S4 BetterHashPrelogin; G:\Programme\BetterHash\prelogin.exe [621640 2018-02-16] (Innovative Solutions Grup SRL -> )
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-07-19] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 EaseUS Agent; G:\Programme\Todo Backup\bin\Agent.exe [40080 2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2018-06-24] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ICEsoundService; C:\Windows\system32\ICEsoundService64.exe [807808 2019-01-11] (ICEpower a/s -> ICEpower)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S4 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [184784 2018-12-04] (TEFINCOM S.A. -> )
S3 Origin Client Service; G:\Programme\Origin\OriginClientService.exe [2298688 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; G:\Programme\Origin\OriginWebHelperService.exe [3171144 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S4 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 ProtonVPN Service; G:\Programme\ProtonVPN\ProtonVPNService.exe [38664 2018-10-17] (ProtonVPN AG -> )
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R2 SNMP; C:\Windows\System32\snmp.exe [53248 2018-12-08] (Microsoft Windows -> Microsoft Corporation)
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [974848 2018-12-08] (Microsoft Windows -> )
S3 TunnelBearMaintenance; G:\Programme\TunnelBear\TBear.Maintenance.exe [38272 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
S3 VBoxSDS; G:\Programme\OracleVM VirtualBox\VBoxSDS.exe [690424 2019-01-25] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AmUStor; C:\Windows\system32\drivers\AmUStor.SYS [109504 2018-11-28] (Alcorlink Corp. -> )
S0 asahci64; C:\Windows\System32\drivers\asahci64.sys [36448 2011-01-30] (ASMedia Technology Inc. -> Asmedia Technology)
R0 asstahci64; C:\Windows\System32\drivers\asstahci64.sys [98696 2019-02-03] (ASMedia Technology Inc. -> Asmedia Technology)
S3 avmaura; C:\Windows\System32\drivers\avmaura.sys [116480 2015-11-20] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [269408 2018-01-09] (Bluestack Systems, Inc. -> Bluestack System Inc. )
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [34496 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [30416 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [73328 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [53360 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [22640 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [341104 2018-07-28] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2018-10-24] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Datei ist nicht signiert]
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\vrtaucbl.sys [110368 2014-05-30] (Muzychenko Evgenii Viktorovich -> Eugene V. Muzychenko)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [33968 2015-08-26] (Paragon Software GmbH -> Paragon Software Group)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-05-31] (Martin Malik - REALiX -> REALiX(tm))
S4 IObitUnlocker; G:\Programme\IObit Unlocker\IObitUnlocker.sys [66824 2017-06-15] (IObit Information Technology -> IObit)
R1 ISODrive; G:\Programme\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 jakstaVA; C:\Windows\system32\DRIVERS\jaksta_va.sys [103816 2017-02-23] (Jaksta Technologies Pty Ltd -> e2eSoft)
S3 KMWDFILTER; C:\Windows\System32\drivers\KMWDFILTER.sys [30208 2009-04-29] (MLK Technologies Limited -> Windows (R) Codename Longhorn DDK provider)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-07-23] (Tages SA -> )
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [198512 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [127136 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [72864 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [274416 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [114040 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_01c064f3d89f92be\nvlddmkm.sys [20424640 2019-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
R3 P17; C:\Windows\system32\drivers\P17.sys [1289216 2009-08-03] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2017-11-25] (PAIPTAC  Driver -> )
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1122200 2019-01-11] (Realtek Semiconductor Corp. -> Realtek )
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] (Intel(R) Code Signing External -> )
R0 speedfan; C:\Windows\SysWow64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tap-tb-0901; C:\Windows\System32\drivers\tap-tb-0901.sys [38656 2016-10-17] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2018-06-13] (TEFINCOM S.A. -> The OpenVPN Project)
R3 tapprotonvpn; C:\Windows\System32\drivers\tapprotonvpn.sys [44976 2018-06-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 teVirtualMIDI64; C:\Windows\system32\DRIVERS\teVirtualMIDI64.sys [41016 2016-08-31] (Tobias Erichsen -> Tobias Erichsen)
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102576 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25904 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [701232 2015-08-26] (Paragon Software GmbH -> )
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2016-04-05] (Wireshark Foundation, Inc. -> USBPcap)
R3 VBAudioVMVAIOMME; C:\Windows\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-10-12] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [235832 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [247216 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [828776 2018-09-23] (IDRIX -> IDRIX)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-02-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [333792 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [39112 2017-03-29] (Wondershare Technology Co.,Ltd -> Wondershare)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-02-25 19:24 - 2019-02-25 19:24 - 000035938 _____ C:\Users\Michael\Desktop\FRST.txt
2019-02-25 19:21 - 2019-02-25 19:21 - 000274416 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-02-25 19:21 - 2019-02-25 19:21 - 000198512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-02-25 19:21 - 2019-02-25 19:21 - 000127136 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-02-25 19:21 - 2019-02-25 19:21 - 000114040 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-02-25 19:21 - 2019-02-25 19:21 - 000072864 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-02-24 23:52 - 2019-02-24 23:52 - 000000000 ____D C:\Users\Michael\AppData\Local\mbam
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\Users\Michael\AppData\Local\mbamtray
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-02-24 23:51 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2019-02-24 23:51 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-02-24 12:07 - 2019-02-25 19:23 - 002433536 _____ (Farbar) C:\Users\Michael\Desktop\FRST64.exe
2019-02-24 05:37 - 2019-02-25 19:24 - 000000000 ____D C:\FRST
2019-02-23 09:02 - 2019-02-23 09:02 - 002870767 _____ C:\Users\Michael\Desktop\RathausRevue-Nr22_final.pdf
2019-02-23 01:08 - 2019-02-23 01:08 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-02-22 21:47 - 2019-02-22 21:47 - 000000000 ____D C:\Users\Michael\AppData\Local\IsolatedStorage
2019-02-21 00:16 - 2019-02-21 00:16 - 000000000 ____D C:\Users\Michael\Documents\Flower
2019-02-19 00:38 - 2019-02-19 00:38 - 000000000 ____D C:\Users\Michael\OnionShare
2019-02-13 15:44 - 2019-02-13 15:44 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 023439360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 020812288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 019023872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006540424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006070272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004885504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004688896 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004627456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003922944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003743744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002927120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002626592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002469648 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002323696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001969680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 001700864 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001671864 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001467560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000982032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000475152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-02-13 15:44 - 2019-02-13 15:44 - 000421904 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000340480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:44 - 009683984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 003662336 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002721280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002437552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 001255736 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050936 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000982576 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000765960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000419128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000387384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000047136 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000072 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2019-02-10 21:36 - 2019-02-10 21:36 - 000626634 _____ C:\Users\Michael\Desktop\dl-praesentation.pdf
2019-02-07 02:13 - 2019-02-08 11:34 - 023578051 _____ C:\Users\Michael\Desktop\Stefan Nixdorf - Commodus Part 2 The Menace.mp4
2019-02-06 18:17 - 2019-02-06 18:20 - 000000000 ____D C:\Users\Michael\VirtualBox VMs
2019-02-06 18:10 - 2019-02-06 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2019-02-06 18:04 - 2019-02-06 18:04 - 001779329 _____ C:\Users\Michael\Desktop\Anhang_Themendienst_ETCS-data.pdf
2019-02-06 15:39 - 2019-02-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 11.5
2019-02-06 15:38 - 2018-08-14 09:40 - 000026256 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\fbnative.exe
2019-02-05 08:05 - 2019-02-24 00:47 - 000017525 _____ C:\Users\Michael\Desktop\_Stundennachweis - Abrechung Ausdruck ZVMC.ods
2019-02-05 07:46 - 2019-02-05 07:47 - 000000000 ____D C:\Program Files\Recuva
2019-02-05 07:46 - 2019-02-05 07:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2019-02-05 01:25 - 2019-02-18 01:30 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-02-03 08:06 - 2019-02-03 08:06 - 000098696 _____ (Asmedia Technology) C:\Windows\system32\Drivers\asstahci64.sys
2019-02-01 14:04 - 2019-02-01 14:04 - 000000000 ____D C:\Users\Michael\Desktop\Spiele
2019-01-29 06:49 - 2019-01-29 06:49 - 000001948 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATTO Disk Benchmark.lnk
2019-01-28 02:14 - 2019-01-28 02:14 - 000247216 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2019-01-28 02:14 - 2019-01-28 02:14 - 000235832 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys

==================== Ein Monat (geänderte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-02-25 19:25 - 2018-12-08 19:07 - 000004166 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B0378A27-122D-4BCB-88AD-AA674EF080DB}
2019-02-25 19:22 - 2015-01-31 23:20 - 000000000 ____D C:\Users\Michael\AppData\Local\whatpulse
2019-02-25 19:22 - 2015-01-25 00:49 - 000000000 ___RD C:\Users\Michael\iCloudDrive
2019-02-25 19:22 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Spotify
2019-02-25 19:22 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Spotify
2019-02-25 19:21 - 2018-12-08 19:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-02-25 19:21 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-25 19:21 - 2018-09-15 07:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-02-25 19:21 - 2017-07-25 15:37 - 000000000 ____D C:\ProgramData\NVIDIA
2019-02-25 19:15 - 2016-11-25 15:01 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\Mozilla
2019-02-25 19:14 - 2015-11-22 19:23 - 000000600 _____ C:\Users\Michael\AppData\Local\PUTTY.RND
2019-02-25 18:42 - 2017-09-15 21:09 - 000000000 ____D C:\Users\Michael\AppData\Local\PingPlotter 5
2019-02-25 18:25 - 2018-12-08 18:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-02-25 17:50 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-25 17:50 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-02-24 23:51 - 2018-09-15 08:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-02-24 23:48 - 2019-01-02 09:00 - 000000000 ____D C:\Users\Michael\AppData\Roaming\IObit
2019-02-24 23:48 - 2017-05-31 23:54 - 000000000 ____D C:\ProgramData\ProductData
2019-02-24 02:11 - 2014-07-23 15:16 - 000000000 ____D C:\Users\Michael\Desktop\Bereinigungsprogramme
2019-02-24 02:08 - 2018-12-08 19:07 - 000003928 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-02-24 02:06 - 2014-07-22 01:05 - 000000000 ____D C:\ProgramData\Origin
2019-02-24 02:05 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Origin
2019-02-24 02:04 - 2018-12-11 22:34 - 000000000 ____D C:\Users\Michael\AppData\Roaming\OnionShare
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files\OBS
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files (x86)\OBS
2019-02-24 00:50 - 2018-03-02 05:42 - 000000000 ____D C:\Users\Michael\.VirtualBox
2019-02-24 00:44 - 2019-01-02 10:36 - 000000000 ____D C:\ProgramData\VirtualBox
2019-02-23 19:42 - 2018-05-18 04:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-02-23 01:08 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Dropbox
2019-02-22 21:47 - 2016-12-08 18:26 - 000000000 ____D C:\Users\Michael\AppData\Roaming\TunnelBear
2019-02-22 09:20 - 2017-01-06 22:05 - 000000000 ____D C:\Users\Michael\AppData\Roaming\vlc
2019-02-21 20:37 - 2017-11-16 03:31 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-20 01:01 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Ubisoft Game Launcher
2019-02-19 00:38 - 2018-12-08 19:01 - 000000000 ____D C:\Users\Michael
2019-02-18 16:05 - 2018-11-28 16:03 - 001466882 _____ C:\Windows\ntbtlog.txt
2019-02-18 15:23 - 2017-09-15 22:03 - 000000827 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-02-18 01:35 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-02-18 01:28 - 2014-07-21 20:47 - 000000000 ____D C:\Users\Michael\Desktop\Icons
2019-02-18 01:11 - 2019-01-02 09:05 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2019-02-18 01:11 - 2019-01-02 09:00 - 000000000 ____D C:\ProgramData\IObit
2019-02-15 18:23 - 2014-07-19 21:37 - 000002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-14 16:04 - 2018-12-08 19:07 - 000004534 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-02-14 15:51 - 2018-12-08 19:07 - 000004636 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-02-13 21:29 - 2018-12-08 18:57 - 000585952 _____ C:\Windows\system32\FNTCACHE.DAT
2019-02-13 21:29 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-02-13 15:42 - 2014-07-19 22:02 - 000000000 ____D C:\Windows\system32\MRT
2019-02-13 15:39 - 2014-07-19 22:02 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-02-12 13:57 - 2018-12-08 19:07 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-02-11 23:26 - 2018-09-15 18:34 - 000000000 ____D C:\Windows\system32\OpenSSH
2019-02-09 10:29 - 2016-10-07 17:09 - 000001254 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job
2019-02-09 10:29 - 2016-10-07 17:09 - 000001202 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job
2019-02-08 12:26 - 2015-01-25 23:39 - 000000000 ____D C:\Users\Michael\AppData\Roaming\PersBackup5
2019-02-08 10:51 - 2018-12-08 19:07 - 000004408 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3
2019-02-08 10:51 - 2018-12-08 19:07 - 000004032 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318
2019-02-07 16:42 - 2016-07-28 17:12 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cain
2019-02-06 18:12 - 2017-10-24 03:54 - 000000000 ____D C:\Users\Michael\Documents\PersBackup
2019-02-06 15:39 - 2018-03-02 21:30 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-02-05 21:51 - 2015-11-26 23:20 - 000000306 __RSH C:\ProgramData\ntuser.pol
2019-02-04 16:40 - 2017-05-15 13:48 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-04 16:40 - 2014-07-20 01:28 - 000000000 ____D C:\ProgramData\Avira
2019-02-04 16:39 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-02-04 16:30 - 2018-12-08 19:09 - 001968014 _____ C:\Windows\system32\PerfStringBackup.INI
2019-02-04 16:30 - 2018-09-15 18:33 - 000805258 _____ C:\Windows\system32\perfh007.dat
2019-02-04 16:30 - 2018-09-15 18:33 - 000172634 _____ C:\Windows\system32\perfc007.dat
2019-02-04 15:55 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-04 15:45 - 2010-11-21 04:27 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-02-03 14:39 - 2018-05-18 04:45 - 000000000 ____D C:\Users\Michael\AppData\Local\D3DSCache
2019-02-01 23:31 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-02-01 23:31 - 2018-09-15 08:36 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-02-01 17:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-01-31 18:29 - 2018-07-10 01:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2019-01-31 18:22 - 2014-07-19 18:30 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-28 02:14 - 2019-01-02 10:36 - 001021768 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2019-01-28 02:14 - 2019-01-02 10:36 - 000185960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-14 12:37 - 2017-01-14 12:37 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2015-03-09 23:37 - 2015-03-09 23:37 - 000000095 _____ () C:\Users\Michael\AppData\Roaming\LauncherSettings_live.cfg
2017-08-09 00:04 - 2017-08-09 00:09 - 000000166 _____ () C:\Users\Michael\AppData\Roaming\nuvotonISP.lua
2015-03-09 23:36 - 2015-03-09 23:36 - 000000040 _____ () C:\Users\Michael\AppData\Roaming\TheHunterSettings_steam_live.cfg
2017-10-12 23:37 - 2018-06-03 23:07 - 000004402 _____ () C:\Users\Michael\AppData\Roaming\VoiceMeeterDefault.xml
2014-07-20 12:33 - 2014-01-13 13:37 - 000000074 _____ () C:\Users\Michael\AppData\Roaming\WB.CFG
2014-07-20 12:28 - 2013-01-04 22:20 - 000000095 _____ () C:\Users\Michael\AppData\Local\fusioncache.dat
2015-11-22 19:23 - 2019-02-25 19:14 - 000000600 _____ () C:\Users\Michael\AppData\Local\PUTTY.RND
2017-03-19 00:04 - 2017-03-19 00:04 - 000007606 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2014-07-21 23:42 - 2014-07-21 23:42 - 000828671 _____ () C:\Users\Michael\AppData\Local\Tempmusic.ogg
2014-07-20 12:28 - 2012-09-21 19:12 - 000017408 _____ () C:\Users\Michael\AppData\Local\WebpageIcons.db
2012-09-10 12:49 - 2012-09-10 12:49 - 000001050 ____H () C:\Users\Michael\AppData\Local\{793FD447-37EB-4083-B222-2E447297AF07}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\dllhost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\dllhost.exe => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

==================== Ende von FRST.txt ============================

Addittion.txt Teil 1:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25.02.2019
durchgeführt von Michael (25-02-2019 19:25:29)
Gestartet von C:\Users\Michael\Desktop
Windows 10 Home Version 1809 17763.316 (X64) (2018-12-08 18:07:40)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2862775871-2864016982-4179919401-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2862775871-2864016982-4179919401-1005 - Limited - Enabled)
DefaultAccount (S-1-5-21-2862775871-2864016982-4179919401-503 - Limited - Disabled)
Gast (S-1-5-21-2862775871-2864016982-4179919401-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2862775871-2864016982-4179919401-1044 - Limited - Enabled)
Michael (S-1-5-21-2862775871-2864016982-4179919401-1000 - Administrator - Enabled) => C:\Users\Michael
WDAGUtilityAccount (S-1-5-21-2862775871-2864016982-4179919401-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.)
4K Stogram 2.6 (HKLM\...\{CBD24523-4E64-4DFB-8311-05019EFD0D6B}) (Version: 2.6.14.1590 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{345F3F90-0505-4EDF-B7A9-5E3AC1AC6CE4}) (Version: 15.2.1 - Hewlett-Packard) Hidden
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Any Video Converter 6.2.3 (HKLM-x32\...\Any Video Converter) (Version: 6.2.3 - Anvsoft)
Apple Application Support (32-Bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.1.9.000 - Asmedia Technology)
Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version:  - Ubisoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)
Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.51 - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version:  - Ubisoft)
Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)
ATTO Disk Benchmark (HKLM-x32\...\{8D451ECC-F576-41CF-8059-150676D668EF}) (Version: 4.000.4002 - ATTO Technology)
AVS Image Converter 5.0.3 (HKLM-x32\...\AVS Image Converter_is1) (Version: 5.0.3.293 - Online Media Technologies Ltd.)
Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)
Balabolka (HKLM-x32\...\Balabolka) (Version: 2.05 - Ilya Morozov)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.57.44284 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlefield™ V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.59.63793 - Electronic Arts)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.18.5 - Bethesda Softworks)
BetterHash (HKLM-x32\...\BH1_is1) (Version: 2.41.0.203 - Innovative Solutions)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.1 - BlueJ Team)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 3.55.70.1783 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BPM-Studio 4 Demo (HKLM-x32\...\{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}) (Version: 4.9.94 - AlcaTech)
Cain & Abel 4.9.56 (HKLM-x32\...\Cain & Abel 4.9.56) (Version:  - )
CameoD4 (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\{3b187530-f325-414e-85ac-b5b28c38ba65}) (Version: 1.0.0.0 - LightingSoft)
CCleaner (HKLM\...\CCleaner) (Version: 5.53 - Piriform)
Cobra 11 - Crash Time Demo (remove only) (HKLM-x32\...\CrashTime Demo) (Version:  - )
Cobra 11 - Nitro Demo (HKLM-x32\...\{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic) Hidden
Cobra 11 - Nitro Demo (HKLM-x32\...\InstallShield_{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
CPUID CPU-Z 1.86 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.86 - CPUID, Inc.)
Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.45 - Creative Technology Limited)
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version:  - )
Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited)
CrystalDiskInfo 7.5.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.5.1 - Crystal Dew World)
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dead in Bermuda (HKLM-x32\...\{FA6BAE37-E751-46A2-A26D-C6090ECCEBD3}) (Version: 4.7.0.2969 - Plug In Digital)
Dead Space (HKLM-x32\...\{9789E33B-317A-44B2-AF9A-FF8708AD93E0}) (Version: 3.0.0.222 - Electronic Arts)
D-Fend Reloaded 1.4.4 (deinstallieren) (HKLM-x32\...\D-Fend Reloaded) (Version: 1.4.4 - Alexander Herzog)
DMXControl 3.1 (HKLM-x32\...\DMXControl3) (Version: 3.1 - DMXControl Projects e.V.)
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.60.000 - Runtime Software)
Dropbox (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Dropbox) (Version: 68.3.92 - Dropbox, Inc.)
Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts)
EaseUS Partition Master 13.0 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 11.5 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 11.5 - CHENGDU YIWO Tech Development Co., Ltd)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version:  - Steinberg Media Technologies GmbH)
Emperors New Groove (HKLM-x32\...\Emperors New Groove) (Version:  - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
Far Cry 5 (HKLM-x32\...\Uplay Install 1803) (Version:  - Ubisoft)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Fresco Logic USB3.0 Host Controller (HKLM\...\{6E9E1B70-59C4-403E-ABFB-C08012BC7F8A}) (Version: 3.0.89.14 - Fresco Logic Inc.)
Funfair Machines Break Dance No.1 V1.1 (HKLM-x32\...\Funfair Machines Break Dance No.1 V1.1) (Version:  - )
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.40.0 - International GeoGebra Institute)
G-Force (HKLM-x32\...\G-Force) (Version: 5.1.2 - SoundSpectrum)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.109 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
gpedt.msc 1.0 (HKLM-x32\...\{10B9C608-BF7C-4CCF-A658-C01D969DCA21}_is1) (Version:  - Richard)
Gpg4win (3.1.4) (HKLM-x32\...\Gpg4win) (Version: 3.1.4 - The Gpg4win Project)
HashCalc 2.02 (HKLM-x32\...\HashCalc_is1) (Version:  - SlavaSoft Inc.)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
IdleMaster (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\1d85483b1c982d8c) (Version: 1.4.0.0 - IdleMaster)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
ImageGlass (HKLM\...\{D539FBEF-4AA8-4415-B66F-6367DA5D0186}_is1) (Version: 4.5.11.27 - Duong Dieu Phap)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4885 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1.2.1 - IObit)
ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version:  - isotousb.com)
IsoBuster 4.3 (HKLM-x32\...\IsoBuster_is1) (Version: 4.3 - Smart Projects)
iTunes (HKLM\...\{C704C598-39D0-4B12-BBFA-FF6D43C95BFD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Java SE Development Kit 8 Update 112 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180112}) (Version: 8.0.1120.15 - Oracle Corporation)
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version:  - )
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version:  - Nicolaudie)
Malwarebytes Version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Manhunt 2 (HKLM-x32\...\Manhunt 2) (Version: 1.00.0000 - Rockstar Games)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Mäx! (HKLM-x32\...\Maex) (Version:  - )
MeatCity 2 V2.03  (HKLM-x32\...\MeatCity 2) (Version: V2.03 - )
Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.280 - Electronic Arts)
Medal of Honor™ Warfighter (HKLM-x32\...\{1040143F-FEFB-4B90-8E51-E47D40E14C4E}) (Version: 1.0.0.3 - Electronic Arts)
Melodyne 3.2 Demo (HKLM-x32\...\{EC9A0711-9823-4DD2-83C4-039886A3ECF6}) (Version: 3.2.0105 - Celemony Software GmbH) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.62615.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62615.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mirror's Edge™ Catalyst (HKLM-x32\...\{12228a0d-f6ad-4691-82af-d2c643424468}) (Version: 1.0.3.47248 - Electronic Arts)
Mirror's Edge™ Catalyst Closed Beta (HKLM-x32\...\{A0F5340B-2F0B-4830-B746-1850B62B61E0}) (Version: 1.0.3.31690 - Electronic Arts)
Morphyre (HKLM-x32\...\Morphyre) (Version:  - )
Mozilla Firefox 58.0.2 (x64 de) (HKLM\...\Mozilla Firefox 58.0.2 (x64 de)) (Version: 58.0.2 - Mozilla)
Mozilla Firefox 65.0.1 (x64 de) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Mozilla Firefox 65.0.1 (x64 de)) (Version: 65.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
NASA World Wind 1.4 (HKLM-x32\...\NASA World Wind 1.4) (Version:  - )
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)
NirSoft ShellExView (HKLM-x32\...\NirSoft ShellExView) (Version:  - )
NordVPN (HKLM-x32\...\{F11DDED0-213C-41B7-B120-514E402A7B53}) (Version: 6.19.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.19.6) (Version: 6.19.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NOX (HKLM-x32\...\{BF152F35-9708-452C-862C-F7E3B62DF732}) (Version: 2.0.0.22 - Electronic Arts, Inc.)
NVIDIA HD-Audiotreiber 1.3.38.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.5 (HKLM-x32\...\{F0C909D7-D643-4628-8C6A-94073139F0CE}) (Version: 4.15.9789 - Apache Software Foundation)
Oracle VM VirtualBox 6.0.4 (HKLM\...\{9E2B30E6-2102-45C0-9EAF-B631EBCEC198}) (Version: 6.0.4 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.34.21025 - Electronic Arts, Inc.)
Paragon Backup and Recovery™ 14 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Partition Manager™ 2014 Free (HKLM-x32\...\{47E5588F-C3A0-11DE-9857-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Personal Backup 5.9.4.10 (64-bit) (HKLM\...\Personal Backup 5_is1) (Version: 5.9.4.10 - Dr. J. Rathlev)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PingPlotter 5 (HKLM-x32\...\{F513FFE3-ED3B-4DC1-BB41-DABEBCAE2F6F}) (Version: 5.5.14.4908 - Pingman Tools, LLC) Hidden
PingPlotter 5 (HKLM-x32\...\PingPlotter 5 5.5.14.4908) (Version: 5.5.14.4908 - Pingman Tools, LLC)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.) Hidden
ProtonVPN (HKLM-x32\...\{ED11FFD4-61B3-4329-870E-8F4DAC7D5A0D}) (Version: 1.6.4 - ProtonVPN AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.6.4) (Version: 1.6.4 - ProtonVPN AG)
ProtonVPNTap (HKLM-x32\...\{C23BCE3A-FD25-48BA-948E-2CE94576F983}) (Version: 1.0.1 - ProtonVPN AG)
Quake Champions (HKLM-x32\...\Quake Champions) (Version:  - Bethesda Softworks)
RealSpeak Solo fur Deutsch - Steffi (HKLM-x32\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8549 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Rename Master (HKLM-x32\...\Rename Master_is1) (Version:  - )
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Rise of the Triad (HKLM-x32\...\1207659244_is1) (Version: 2.5.0.23 - GOG.com)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version:  - )
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.2.0.1610 - Samsung Electronics)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SeaTools for Windows 1.4.0.6 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.6 - Seagate Technology)
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM-x32\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Sniper Elite (HKLM-x32\...\{A979B2D8-E3EE-4523-A26C-4AF0A6809280}) (Version:  - )
SoftPerfect Network Scanner version 7.1.2 (HKLM\...\{8083C3D9-F400-48FA-B060-CF55F25E2D4B}_is1) (Version: 7.1.2 - SoftPerfect)
SoftSkies (HKLM-x32\...\SoftSkies) (Version: 2.1.2 - SoundSpectrum)
Spire-1.1 Plug-In (x64) (HKLM\...\{3F98118B-D5D1-455B-A899-E03C1D7B4E89}) (Version: 1.1.12.0 - Reveal Sound Ltd.)
Splice (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\splice) (Version: 3.2.28369 - Distributed Creation, Inc.)
Spotify (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Spotify) (Version: 1.1.0.237.g378f6f25 - Spotify AB)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
TAP-NordVPN 9.21.2 (HKLM\...\TAP-NordVPN) (Version: 9.21.2 - NordVPN.com)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Termius 3.0.10 (only current user) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\4f53adaa-a4b2-50c1-b605-e304e4d14011) (Version: 3.0.10 - Crystalnix)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.1 - Electronic Arts)
The Train 1.0 (HKLM-x32\...\The Train 1.0) (Version: 1.0 - Cat-A-Cat)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
Total Overdose (HKLM-x32\...\GOGPACKTOTALOVERDOSE_is1) (Version: 2.0.0.2 - GOG.com)
Trials of the Blood Dragon (HKLM-x32\...\Uplay Install 2741) (Version:  - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TunnelBear (HKLM-x32\...\{1d805fba-7655-411e-a641-51f4f8e6bd5b}) (Version: 3.0.33.0 - TunnelBear)
TunnelBear (HKLM-x32\...\{C0A3B957-2B11-404F-9FFC-D97E7D175681}) (Version: 3.0.33.0 - TunnelBear) Hidden
Ultima 8 (HKLM-x32\...\{428C6B01-D292-46F9-9321-75668ED17DA2}) (Version: 1.0.0.1 - Electronic Arts)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)
USBPcap 1.1.0.0-g794bf26-3 (HKLM\...\USBPcap) (Version: 1.1.0.0-g794bf26-3 - )
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.23 - IDRIX)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.)
Virtual Audio Cable 4.14 (HKLM\...\Virtual Audio Cable 4.14) (Version:  - )
Vistawinexit (HKLM-x32\...\{2FC1B08D-B4B6-42F4-B1BF-C913625EAC6C}_is1) (Version: 8 - hxxp://www.kurt-selzam.de/)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version:  - VB-Audio Software)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{71B8842B-5C0D-4221-968D-8750D4F3DF63}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{cc96a3c1-3461-4e39-be96-50219a26ce18}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
WhatPulse version 2.8.4 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.8.4 - WhatPulse)
WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.5 - SoundSpectrum)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Winamp Essentials Pack (HKLM-x32\...\Winamp Essentials Pack) (Version: v5.64 - Christoph Grether)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinToUSB Version 3.9 (HKLM\...\WinToUSB_is1) (Version: 3.9 - Hasleo Software.)
Wireshark 2.4.2 32-bit (HKLM-x32\...\Wireshark) (Version: 2.4.2 - The Wireshark developer community, hxxps://www.wireshark.org)
Wondershare AllMyTube(Build 4.10.2.3) (HKLM-x32\...\Wondershare AllMyTube_is1) (Version: 4.10.2.3 - Wondershare Software)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Zip Motion Block Video codec (Remove Only) (HKLM-x32\...\ZMBV) (Version:  - DOSBox Team)
Zumas Revenge (HKLM-x32\...\{0B153CAB-792B-4CA2-B2A5-AB0BBAF2FFA9}) (Version: 1.0.5.600 - PopCap Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{9B57F475-CCB0-4C85-88A9-2AA9A6C0809A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => G:\Programme\Balabolka\BFileExt.dll [2012-04-06] (Ilya Morozov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} =>  -> Keine Datei
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>  -> Keine Datei
ContextMenuHandlers2: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4: [UltraISO] -> [CC]{AD392E40-428C-459F-961E-9B147782D099} =>  -> Keine Datei
ContextMenuHandlers4: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-12-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01EA6A67-8822-46E0-BD96-FC08DB3D8BBB} - System32\Tasks\{89DD9B44-2F83-4197-996E-C8098428B644} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setupd.exe -d C:\Users\Michael\Desktop
Task: {059CD803-B78C-413D-BE1A-AA09A9445C32} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {07DDD542-132B-46BB-B3FC-F35BA76D0CA9} - System32\Tasks\CCleaner Update => G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {0B709BD2-E774-420A-A51B-BBD4DA2A66CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {17B66134-46E2-4A54-8BF9-990BA02C0C5C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {35A08F34-9552-4F46-B6F7-BF78570FA332} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {39029539-4295-4AEB-84D8-B523676A734A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {3CCB2340-05A8-41A1-A53E-071A229DDC24} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4250DC96-7DDE-4BAE-A3DA-CCA4F32C9438} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {466FD5D0-FAFE-42D6-97D2-029ABBEB5A54} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {4B2485CD-C98B-4707-A57B-9B7E1B189B35} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.EXE /NOUACCHECK
Task: {5068825B-B75D-436A-AB39-5665687A7E9F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5C072332-DBEA-42E8-A395-9E5CB91F6E15} - System32\Tasks\S-1-5-21-2862775871-2864016982-4179919401-1000\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe (Microsoft Windows -> Microsoft Corporation)
Task: {6485F8B2-6355-40E9-A653-5A9BF901A413} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {6656EB71-F08F-4A17-AAC4-3031825E49D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {779C4E69-F3B3-4D22-A9B0-5ED017345E3D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {8A9D0829-BB90-4472-B4C2-8A70FFEACCE4} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {8B778A13-4A28-4427-A53D-95B6BA5CF98C} - System32\Tasks\SamsungMagician => G:\Programme\Samsung Magician\SamsungMagician.exe (Samsung Electronics Co., Ltd. -> Samsung Electronics Co. Ltd.)
Task: {8D512E7D-F4D8-47EE-A0BB-3C36FA78D4FB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {8F44A9F9-2DB8-4407-931D-725DAFFD0D24} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {9D144209-4029-48FD-B10A-66A3ACDB35AE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {A2F85536-A291-4FF9-88FE-6620A6DB6D91} - System32\Tasks\{1DE6E651-2507-43E3-9FF8-E287F4799876} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setup.exe -d C:\Users\Michael\Desktop
Task: {AED74002-9BE2-466E-86F1-9370F35F24AE} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {B7ECBF71-5300-4273-9E5B-71C343957C32} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {B823C99B-068A-47F9-B8D6-E652C6620DF6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BDAB4FB8-B3EC-4598-A2A6-7C6654BD7B69} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C4B78B46-40B0-463D-9841-2D8816553CD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {CE7BF8D7-4637-474F-A48C-7034C246B4D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {CED07631-1858-44D0-8F84-456AEBE2D6FC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {D6E2EDBA-DEDE-4893-87A1-61EEEACD3F99} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB292475-781B-48F6-97C7-5694CF930CBA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {E3CCB1BB-EFF6-4410-8E9F-8AAC2973C17B} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {E922B90C-F1EA-4D8C-BEAE-D573F342E45F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {EDD03E1B-FEAD-47F1-8388-2F27B94E3A7E} - System32\Tasks\CrystalDiskInfo => G:\Programme\CrystalDiskInfo\DiskInfo32.exe (Noriyuki Miyazaki -> Crystal Dew World)
Task: {FC158B24-ECDF-4F3F-8C9B-764B5078E035} - System32\Tasks\Tweaking.com - Registry Backup => G:\Programme\Registry Backup\TweakingRegistryBackup.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Mosh.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=ooiklbnjmhbcgemelgfhaeaocllobloj

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2018-05-18 04:44 - 2008-11-18 13:15 - 000307200 ____N (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
2018-08-17 06:50 - 2018-08-17 06:50 - 000300032 _____ () [Datei ist nicht signiert] G:\Programme\ProtonVPN\Resources\64-bit\firewall.dll
2018-05-23 02:39 - 2018-04-30 13:00 - 000075776 _____ (Igor Pavlov) [Datei ist nicht signiert] G:\Programme\7-Zip\7-zip.dll
2017-12-14 00:27 - 2018-12-15 14:08 - 010770944 _____ (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\Persbackup.exe
2017-12-14 00:27 - 2018-03-27 21:41 - 002268160 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\libeay32.dll
2017-12-14 00:27 - 2018-03-27 21:41 - 000386560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\ssleay32.dll
2018-05-24 13:45 - 2018-05-24 13:45 - 000250368 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2019-02-06 15:38 - 2017-02-21 17:19 - 000083136 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\CodeLog.dll
2019-02-06 15:38 - 2016-03-07 18:08 - 001291264 _____ () [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\libxml2.dll
2019-02-06 15:38 - 2004-10-05 03:08 - 000055808 _____ () [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\zlib1.dll
2019-02-06 15:38 - 2008-11-25 17:18 - 000892928 _____ (Free Software Foundation) [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\iconv.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000438272 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 003084800 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 005139968 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 004571648 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 002950144 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 002234880 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll
2019-02-24 23:51 - 2019-02-01 09:55 - 005010944 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 001181184 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000124928 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000026112 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000020992 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000259584 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000729088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000073216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000179712 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000101888 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll
2017-07-10 23:36 - 2017-02-25 23:03 - 004498944 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Widgets.dll
2017-07-10 23:36 - 2017-02-25 22:53 - 000155136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Sql.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000039936 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\CrashRpt1402.dll
2017-07-10 23:36 - 2017-02-25 22:58 - 004871680 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Gui.dll
2017-07-10 23:36 - 2017-02-25 22:53 - 000848896 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Network.dll
2017-07-10 23:36 - 2017-02-26 17:42 - 001360896 _____ (winsparkle.org) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\WinSparkle.dll
2017-07-10 23:36 - 2017-02-25 22:51 - 004685824 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Core.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000211280 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\MSVCP100.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000356176 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\MSVCR100.dll
2017-07-10 23:36 - 2017-02-26 17:42 - 000546816 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\libeay32.dll
2017-07-10 23:36 - 2017-02-25 23:07 - 001041920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\platforms\qwindows.dll
2018-02-25 05:45 - 2018-01-06 21:35 - 000024576 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\imageformats\qgif.dll
2018-04-17 11:54 - 2017-02-25 23:06 - 000687104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\sqldrivers\qsqlite.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000119808 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\ssleay32.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:5C4F2F39 [111]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 14:46 - 2014-07-24 15:14 - 000000027 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static;G:\Programme\IsoBuster;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;G:\Programme\cygwin_64\bin;G:\Programme\OpenSSH\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI Backupper
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.

MSCONFIG\Services: AntiVirMailService => 2
MSCONFIG\Services: AntiVirSchedulerService => 2
MSCONFIG\Services: AntiVirService => 2
MSCONFIG\Services: AntiVirWebService => 2
MSCONFIG\Services: Hamachi2Svc => 3
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run32: => "Avira SystrayStartTrigger"
HKLM\...\StartupApproved\Run32: => "DelaypluginInstall"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\StartupApproved\StartupFolder: => "GigaTribe.lnk"
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\StartupApproved\Run: => "TunnelBear"

computerfrea · 25.02.2019, 19:36

Addition.txt Teil 2:

Code:

ATTFilter

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SNMP-In-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-Out-UDP] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-In-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [SNMP-Out-UDP-NoScope] => (Allow) %SystemRoot%\system32\snmp.exe (Microsoft Windows -> Microsoft Corporation)
FirewallRules: [{73E4C534-B4A7-4D4B-B2AE-08EA311EA344}] => (Allow) G:\Programme\BetterHash\Cores\ccminer-x64\ccminer-x64.exe () [Datei ist nicht signiert]
FirewallRules: [{022F0B74-44D4-477A-A391-D59DF4AE1342}] => (Allow) G:\Programme\BetterHash\Cores\ccminer-x64\ccminer-x64.exe () [Datei ist nicht signiert]
FirewallRules: [{C4D0F7A7-9C92-4C1A-B30C-9AB2EDFB417F}] => (Allow) G:\Programme\BetterHash\Cores\claymore-xmr\NsGpuCNMiner.exe () [Datei ist nicht signiert]
FirewallRules: [{B650287A-6DB0-410C-AB41-24DC5F2FCDEF}] => (Allow) G:\Programme\BetterHash\Cores\claymore-xmr\NsGpuCNMiner.exe () [Datei ist nicht signiert]
FirewallRules: [{407CEE8A-BD63-4749-AD06-06FC0A4837E6}] => (Allow) G:\Programme\BetterHash\Cores\ewbf\miner.exe () [Datei ist nicht signiert]
FirewallRules: [{7EA784C1-9A22-4A6A-9514-FE6BCFC3C77B}] => (Allow) G:\Programme\BetterHash\Cores\ewbf\miner.exe () [Datei ist nicht signiert]
FirewallRules: [{7AA2E822-FB84-4DA6-8C9F-F2D43193218C}] => (Allow) G:\Programme\BetterHash\Cores\claymore-dual\EthDcrMiner64.exe () [Datei ist nicht signiert]
FirewallRules: [{B36BF1C4-6340-4F07-8421-D4E2AE82FD4F}] => (Allow) G:\Programme\BetterHash\Cores\claymore-dual\EthDcrMiner64.exe () [Datei ist nicht signiert]
FirewallRules: [{CE659653-E8DD-4BF1-BF7F-28906BF0F86F}] => (Allow) G:\Programme\BetterHash\Cores\equihash\powercore-main-g.exe () [Datei ist nicht signiert]
FirewallRules: [{B0DD98A9-8DCF-47BF-95BC-C230C4ACC5BB}] => (Allow) G:\Programme\BetterHash\Cores\equihash\powercore-main-g.exe () [Datei ist nicht signiert]
FirewallRules: [{D65D5FB1-BCE8-4035-9E51-34C8DC2FA3BF}] => (Allow) G:\Programme\BetterHash\Cores\xmr-stak-cpu\powercore-main.exe () [Datei ist nicht signiert]
FirewallRules: [{9C2B90A5-67BB-405B-9AC9-66324862763E}] => (Allow) G:\Programme\BetterHash\Cores\xmr-stak-cpu\powercore-main.exe () [Datei ist nicht signiert]
FirewallRules: [{B457E74A-DA16-4CE8-BA82-3475A86CC3B0}] => (Allow) G:\Programme\Steam\SteamApps\common\HITMAN2\Launcher.exe (IO INTERACTIVE A/S -> )
FirewallRules: [{A0482C7B-729F-40D8-BEFD-CE5A10BACB12}] => (Allow) G:\Programme\Steam\SteamApps\common\HITMAN2\Launcher.exe (IO INTERACTIVE A/S -> )
FirewallRules: [{D5D9D43C-990B-4E00-B016-3B05F9723E0E}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{EC14C5B7-F796-4B06-88C3-4C7FB312BFE1}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{92289831-5E81-4A68-A03C-DD9555918ECE}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{461A0E35-EE60-469A-ACD7-EC97F8C35F73}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [UDP Query User{B31B5AF3-DD22-4C9B-A6E1-648F683E778B}G:\programme\rise of the triad (2013)\binaries\win32\rott.exe] => (Allow) G:\programme\rise of the triad (2013)\binaries\win32\rott.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{61569A93-DD16-4A14-A1D1-6AAE9E925B9B}G:\programme\rise of the triad (2013)\binaries\win32\rott.exe] => (Allow) G:\programme\rise of the triad (2013)\binaries\win32\rott.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{2EFD2C16-8E29-41F7-8425-3CFFEDAB242B}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{9E78D5EA-3EFF-4323-A6BF-C221017BE6DF}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DyingLightGame.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{ACB71350-E26C-4921-BFF1-302293EF66CD}] => (Allow) G:\Programme\Steam\SteamApps\common\House Flipper\HouseFlipper.exe () [Datei ist nicht signiert]
FirewallRules: [{CBFB9E95-1402-4F9E-A371-E6C9BC5FD068}] => (Allow) G:\Programme\Steam\SteamApps\common\House Flipper\HouseFlipper.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{140CF92A-4870-43FD-B9CD-96BD91B97FFC}G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe] => (Allow) G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3495B6CE-338C-43D3-8825-2B349A3AB215}G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe] => (Allow) G:\programme\steam\steamapps\common\downward\downward\binaries\win64\downward.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{C23912C5-C24E-4CEA-9FDE-74B6A9389CF4}] => (Allow) G:\Programme\Steam\SteamApps\common\Downward\Downward.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> ) [Datei ist nicht signiert]
FirewallRules: [{97E34A02-F903-4627-AC60-83781E0A1D56}] => (Allow) G:\Programme\Steam\SteamApps\common\Downward\Downward.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> ) [Datei ist nicht signiert]
FirewallRules: [{C52EB5AE-30AB-448B-9CD8-4A26A826DEA5}] => (Allow) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{70B9CA79-11C1-4631-BD84-369700B4DB60}] => (Allow) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)
FirewallRules: [{FD0112DE-9D8E-466F-9FC7-416CF7027ECF}] => (Allow) G:\Programme\Steam\SteamApps\common\Ultimate Doom\base\dosbox.exe (DOSBox Team) [Datei ist nicht signiert]
FirewallRules: [{5E357744-2823-4E2D-96C3-B4D4D494992D}] => (Allow) G:\Programme\Steam\SteamApps\common\Ultimate Doom\base\dosbox.exe (DOSBox Team) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{DADB0B6B-98F6-48D9-BA72-B1DF1B0F10C0}G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe (Alex Olinkiwicz) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{A108F632-EFAC-498F-9321-DE01E26511D2}G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\frostbite deadly climate\frostbite_alexo\binaries\win64\frostbite_alexo-win64-shipping.exe (Alex Olinkiwicz) [Datei ist nicht signiert]
FirewallRules: [{ADB50D83-DBD5-4699-AEF7-6F0FA5C2A7FC}] => (Allow) G:\Programme\Steam\SteamApps\common\FROSTBITE Deadly Climate\Frostbite_AlexO.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> ) [Datei ist nicht signiert]
FirewallRules: [{10B8D9F9-1E0C-4C3A-9CB5-18739102B0AB}] => (Allow) G:\Programme\Steam\SteamApps\common\FROSTBITE Deadly Climate\Frostbite_AlexO.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> ) [Datei ist nicht signiert]
FirewallRules: [{14DA6731-B77A-4DE2-A04A-A0566630A533}] => (Allow) G:\Programme\Steam\SteamApps\common\Lovely Planet\LovelyPlanet.exe () [Datei ist nicht signiert]
FirewallRules: [{D470AD00-7DE9-42C2-A3E8-027FB3317E9E}] => (Allow) G:\Programme\Steam\SteamApps\common\Lovely Planet\LovelyPlanet.exe () [Datei ist nicht signiert]
FirewallRules: [{531A4412-7F9E-45D4-8735-0C9D69BAB63E}] => (Allow) G:\Programme\Steam\SteamApps\common\DeadCore\DeadCore.exe () [Datei ist nicht signiert]
FirewallRules: [{991CA1BE-A278-49E8-959E-745DD3EA4695}] => (Allow) G:\Programme\Steam\SteamApps\common\DeadCore\DeadCore.exe () [Datei ist nicht signiert]
FirewallRules: [{3DC23397-3D57-4651-A22A-9D7B3F74AE81}] => (Allow) G:\Programme\Steam\SteamApps\common\Aim Lab\aimlab_tb.exe () [Datei ist nicht signiert]
FirewallRules: [{AE04D025-A00E-4D35-9E83-8B98A895E091}] => (Allow) G:\Programme\Steam\SteamApps\common\Aim Lab\aimlab_tb.exe () [Datei ist nicht signiert]
FirewallRules: [{A66FA46C-4387-4FB6-8B9B-B56636418C1A}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{E7F86514-1BD2-4C61-920F-5B82E0046DA8}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{AF2671FC-3CE7-4A64-8C3F-5059BE2E7FEC}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\ArcadeEditor64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{D902D336-A527-4CFF-846A-D75D97F1B1D8}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 5\bin\FarCry5.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{470F45FB-9F65-4EAD-983C-77169D3B0A5D}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe (Nicolaudie) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{9C444022-7137-4275-846E-6AAB3E6FB923}C:\slmev\easyview.exe] => (Allow) C:\slmev\easyview.exe (Nicolaudie) [Datei ist nicht signiert]
FirewallRules: [{4FAE1028-175E-402D-B2B0-4D0E1CDB238C}] => (Allow) G:\Programme\Origin\_Downloads\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe (Electronic Arts -> Maxis, a division of Electronic Arts Inc.)
FirewallRules: [{10D23750-4541-49D8-B57D-0E67EEA75ECC}] => (Allow) G:\Programme\Origin\_Downloads\The Sims 2 Ultimate Collection\Fun with Pets\SP9\TSBin\Sims2EP9.exe (Electronic Arts -> Maxis, a division of Electronic Arts Inc.)
FirewallRules: [UDP Query User{3615F735-4BF9-4175-B713-0D0403C9D8C2}G:\programme\bpm studio\bpm.exe] => (Allow) G:\programme\bpm studio\bpm.exe (AlcaTech) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{426C1645-4182-4C6A-ABB5-16549E10D97C}G:\programme\bpm studio\bpm.exe] => (Allow) G:\programme\bpm studio\bpm.exe (AlcaTech) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{53B1B492-1FEA-4F35-B39C-478ACFF73814}G:\programme\cameod4\hardwaremanager\hardwaremanager.exe] => (Allow) G:\programme\cameod4\hardwaremanager\hardwaremanager.exe (LightingSoft AG -> LightingSoft AG)
FirewallRules: [TCP Query User{64D6307F-75BD-4A80-8A69-905D9F8E2F18}G:\programme\cameod4\hardwaremanager\hardwaremanager.exe] => (Allow) G:\programme\cameod4\hardwaremanager\hardwaremanager.exe (LightingSoft AG -> LightingSoft AG)
FirewallRules: [UDP Query User{8655827B-5AC0-4586-AB87-65357AC5EDCB}G:\programme\cameod4\easyview2\easyview2.exe] => (Allow) G:\programme\cameod4\easyview2\easyview2.exe (LightingSoft) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{AC0D505F-3E47-4E84-A5A6-35DC5D5E7054}G:\programme\cameod4\easyview2\easyview2.exe] => (Allow) G:\programme\cameod4\easyview2\easyview2.exe (LightingSoft) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{C48E5AFD-D1CF-4776-A543-34D86677448B}G:\programme\cameod4\cameod4\cameod4.exe] => (Allow) G:\programme\cameod4\cameod4\cameod4.exe (Nicolaudie Europe) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{1CB0C073-5B06-4511-BC0E-2BC0EB4BAB28}G:\programme\cameod4\cameod4\cameod4.exe] => (Allow) G:\programme\cameod4\cameod4\cameod4.exe (Nicolaudie Europe) [Datei ist nicht signiert]
FirewallRules: [{CB602DAA-68E2-4503-9A00-ED72C990260F}] => (Allow) LPort=12452
FirewallRules: [{C05762C4-781C-4A1D-97BB-FCEAC57DE9A7}] => (Allow) LPort=12451
FirewallRules: [{7A63E4A5-2BC2-4788-BBC3-023DC89EC944}] => (Allow) LPort=12352
FirewallRules: [{24DA065E-EE23-4ADA-A010-EBC5DE86797A}] => (Allow) LPort=12351
FirewallRules: [UDP Query User{831D8398-0703-4937-96DF-691C7CC78945}G:\programme\dmxcontrol3\kernel\lumos.exe] => (Allow) G:\programme\dmxcontrol3\kernel\lumos.exe (DMXControl Projects e.V. -> DMXControl Projects e.V.)
FirewallRules: [TCP Query User{75415325-7B6A-4098-97FF-C87E824B77A5}G:\programme\dmxcontrol3\kernel\lumos.exe] => (Allow) G:\programme\dmxcontrol3\kernel\lumos.exe (DMXControl Projects e.V. -> DMXControl Projects e.V.)
FirewallRules: [UDP Query User{59FBAA36-A465-4E93-9BE9-3FF53B3F9E0A}G:\programme\minihost\minihostmodular_x64.exe] => (Allow) G:\programme\minihost\minihostmodular_x64.exe (Image Line -> Image-Line) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{A8764EF5-2B22-48FD-950E-F2E2B6A0245D}G:\programme\minihost\minihostmodular_x64.exe] => (Allow) G:\programme\minihost\minihostmodular_x64.exe (Image Line -> Image-Line) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{5CFF200B-0C1F-49D5-BF09-3009556AD516}G:\programme\slmev\easyview.exe] => (Allow) G:\programme\slmev\easyview.exe (Nicolaudie) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{53F29DA5-1613-4785-9EA4-A766AA4F40FA}G:\programme\slmev\easyview.exe] => (Allow) G:\programme\slmev\easyview.exe (Nicolaudie) [Datei ist nicht signiert]
FirewallRules: [{C8DA38AA-B804-4FD5-86A0-63421E2DAEB0}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry Primal\bin\FCPrimal.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{F5694051-A863-484A-9F68-5B0D89AB7DEA}] => (Allow) G:\Programme\Steam\SteamApps\common\Dishonored2\Dishonored2.exe (Arkane Studios) [Datei ist nicht signiert]
FirewallRules: [{F8A52C5E-8CD5-4A38-9B7C-9022C10E5320}] => (Allow) G:\Programme\Steam\SteamApps\common\Dishonored2\Dishonored2.exe (Arkane Studios) [Datei ist nicht signiert]
FirewallRules: [{7BA7F556-B71B-4ACF-B744-FD805C065C4C}] => (Block) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games) [Datei ist nicht signiert]
FirewallRules: [{4E09696D-D05D-4440-A196-B7704D391288}] => (Block) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{43FE3775-7798-49D9-85EC-DD0EAFD94102}G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{D5475D3A-CC4D-49F7-8501-82E1F6B5C7B5}G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\sword with sauce alpha\swordwithsauce\binaries\win64\swordwithsauce-win64-shipping.exe (Diatomic Games) [Datei ist nicht signiert]
FirewallRules: [{177B36D0-A5CC-420B-AAD1-649DB815AADA}] => (Allow) G:\Programme\Steam\SteamApps\common\Saints Row 2\SR2_pc.exe () [Datei ist nicht signiert]
FirewallRules: [{FC146E65-E2A2-43A9-9CD4-4DA0AC15E160}] => (Allow) G:\Programme\Steam\SteamApps\common\Saints Row 2\SR2_pc.exe () [Datei ist nicht signiert]
FirewallRules: [{EE93EB43-D96F-4232-976D-489A0BD15559}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Setup.exe () [Datei ist nicht signiert]
FirewallRules: [{C125C009-B1B6-4FD6-80EA-1DF4517B3033}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Setup.exe () [Datei ist nicht signiert]
FirewallRules: [{C1210A68-CEB6-47FA-80C3-CD15376099AF}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Hitman.Exe () [Datei ist nicht signiert]
FirewallRules: [{3F554ADC-3DBC-415B-9061-DF9557F11E17}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Codename 47\Hitman.Exe () [Datei ist nicht signiert]
FirewallRules: [{CC2D0337-FCA2-432F-BEF1-D335B2BF2AC7}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{F4B04DC7-3962-4E05-A594-AF4BDC68E927}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{BB113CC8-7FC6-4314-94F2-55BDD2DDC3CE}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{8F96FFEA-AA13-4EC2-85FC-9393E1EBAC02}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{A0AFCBE7-6814-4237-928B-CE3B146BDBA3}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\config.exe () [Datei ist nicht signiert]
FirewallRules: [{3A34BADD-6F1C-4574-8142-EAA0A418C655}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\config.exe () [Datei ist nicht signiert]
FirewallRules: [{36973EAC-D8C2-4030-A84C-811B79BF7E67}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\hitman2.exe (IO Interactive) [Datei ist nicht signiert]
FirewallRules: [{38883E99-3664-4224-A5DF-05B25DD143F0}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman 2 Silent Assassin\hitman2.exe (IO Interactive) [Datei ist nicht signiert]
FirewallRules: [{4D65573D-31FF-4A45-8A6E-397B4C19CD15}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Contracts\HitmanContracts.exe (IO Interactive) [Datei ist nicht signiert]
FirewallRules: [{0F0E348F-67C4-4A16-842E-93F880422DC5}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Contracts\HitmanContracts.exe (IO Interactive) [Datei ist nicht signiert]
FirewallRules: [{69D0AEF1-4C83-4714-9B8B-36E96D9A0D3F}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\configure.exe () [Datei ist nicht signiert]
FirewallRules: [{4B89DA37-E664-4DAB-9A4C-F91879E96926}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\configure.exe () [Datei ist nicht signiert]
FirewallRules: [{68610AF1-B1B6-4FE6-AE67-93E9EB821734}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\HitmanBloodMoney.exe () [Datei ist nicht signiert]
FirewallRules: [{5E1BC5EB-1D18-464D-A20C-7AE35D5B0A18}] => (Allow) G:\Programme\Steam\SteamApps\common\Hitman Blood Money\HitmanBloodMoney.exe () [Datei ist nicht signiert]
FirewallRules: [{A9003B2A-5766-4B0F-89B1-5218BB6DA08E}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe (Sony DADC Austria AG -> Sony DADC Austria AG) [Datei ist nicht signiert]
FirewallRules: [{C96DBA13-68A2-4B7F-8CC2-AAF1C42B3D1E}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV\GTAIV\LaunchGTAIV.exe (Sony DADC Austria AG -> Sony DADC Austria AG) [Datei ist nicht signiert]
FirewallRules: [{A5B50B31-5482-48C4-8722-466E1908928D}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe () [Datei ist nicht signiert]
FirewallRules: [{D19C6E25-E814-466E-B151-0B045D76EDE3}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto Vice City\gta-vc.exe () [Datei ist nicht signiert]
FirewallRules: [{18F5000D-4BDD-4BC1-8C3C-E98F1F6681CF}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto 3\gta3.exe () [Datei ist nicht signiert]
FirewallRules: [{479B25E1-D158-4A2B-A4D6-972A576882CD}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto 3\gta3.exe () [Datei ist nicht signiert]
FirewallRules: [{44302C0D-D95C-4F89-AE41-0A5C9C9D4ADA}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV Episodes from Liberty City\EFLC\LaunchEFLC.exe (Sony DADC Austria AG -> Sony DADC Austria AG)
FirewallRules: [{D534019C-56AF-4F81-A7DF-B38376C79AFF}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto IV Episodes from Liberty City\EFLC\LaunchEFLC.exe (Sony DADC Austria AG -> Sony DADC Austria AG)
FirewallRules: [{28F2BD0B-7DE5-4576-A807-F9E79910AD9E}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe () [Datei ist nicht signiert]
FirewallRules: [{72CFCA32-4CB1-401C-ABA9-5FC828C2525B}] => (Allow) G:\Programme\Steam\SteamApps\common\Grand Theft Auto San Andreas\gta-sa.exe () [Datei ist nicht signiert]
FirewallRules: [{AC1736BB-8101-4805-AE7D-8A01EC9892E4}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Syndicate\ACS.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{983668BE-79F8-43E7-AFB7-BBD7E1020E0D}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{AEDFE4DC-2C6F-4057-8227-27C150FF2323}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{D9B6FBD0-B227-4EA4-B057-68DF845AB5E5}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{7F2895AE-C05F-407D-A9FB-7961EE443F83}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield 1\bf1Trial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{021658A2-A2CA-4CBE-A2D1-FF1D2D373AB0}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{F19E6490-3AE1-4BE0-956E-C42F0E4805FA}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{3E708617-2CE2-4BD6-8D65-9176FAE02619}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{C8EA3EE5-83A1-4D9A-918E-AA0796A8EE78}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\IGE_WPF64.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{AD839073-7DB9-4F44-ADD0-2A1191D118F4}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{37F8614D-6B58-476D-B725-CF0410F31F06}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{597E3C6F-42AB-4623-8470-6394755823C7}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{51BDB8B9-19BA-4706-9008-956B1DB88DEC}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Far Cry 4\bin\FarCry4.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{1631D4CD-1361-427B-8FE9-C6499CABF078}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Trials of the Blood Dragon\datapack\trialsblooddragon.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{4A13F5FE-4051-4DE2-8E58-E8A3FD04A054}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{6F3EA8CD-F633-4219-B292-1B545742C3EB}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{D9C97866-C8FD-4D46-B3FF-29C4B952CE4E}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{4080FEB2-9C9A-4DC6-9055-A120311EA578}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa.exe (Electronic Arts -> Electronic Arts Inc.)
FirewallRules: [{AD9B6176-387D-48DB-A1E3-EC120B8B692D}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa_setup.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{0E1AEAA8-2B2A-46A1-9D1D-3B0731BA13EA}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Pacific Assault\mohpa_setup.exe (Electronic Arts Inc.) [Datei ist nicht signiert]
FirewallRules: [{A3BD9375-1285-44C2-A005-0756CC7FDD31}] => (Block) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive) [Datei ist nicht signiert]
FirewallRules: [{BD67EA93-5AE2-4416-98D3-8792C8B67A6D}] => (Block) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{3829D102-96F8-4BAA-B125-EAA1484F272D}G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe] => (Allow) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{6C5ACCCA-EBB6-4588-8A83-E61E287FF6D5}G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe] => (Allow) G:\programme\bethesda.net launcher\games\quakechampions\client\bin\pc\quakechampions.exe (Saber Interactive) [Datei ist nicht signiert]
FirewallRules: [{4913E67E-C756-424D-9794-E13212C5E1AC}] => (Allow) G:\Programme\Steam\SteamApps\common\18 Wheels of Steel American Long Haul\alh.exe () [Datei ist nicht signiert]
FirewallRules: [{0409CF1A-D3DF-4827-AE96-27606B54B735}] => (Allow) G:\Programme\Steam\SteamApps\common\18 Wheels of Steel American Long Haul\alh.exe () [Datei ist nicht signiert]
FirewallRules: [{72C656DA-0757-494F-830E-27F6CF629877}] => (Allow) G:\Programme\Steam\SteamApps\common\Snik\snik.exe (Unity Technologies SF -> ) [Datei ist nicht signiert]
FirewallRules: [{69776348-9985-4112-882B-BF4428BB2A3C}] => (Allow) G:\Programme\Steam\SteamApps\common\Snik\snik.exe (Unity Technologies SF -> ) [Datei ist nicht signiert]
FirewallRules: [{43FE3A9E-D29F-42A6-9524-1C0331468E23}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Datei ist nicht signiert]
FirewallRules: [{7579B346-0C9E-4EE6-8014-634CFAD06B35}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Datei ist nicht signiert]
FirewallRules: [{46D92DD4-AE58-4D6B-876D-F8F84768F9CC}] => (Allow) LPort=22
FirewallRules: [{EC68C6ED-2A47-4D02-A805-08C392E3EFDD}] => (Allow) G:\Programme\Steam\SteamApps\common\Tony Hawk's Pro Skater HD\Binaries\Win32\THHDGame.exe (Activision Publishing, Inc.) [Datei ist nicht signiert]
FirewallRules: [{121D693B-6993-4703-A0C7-B41DE5BC1627}] => (Allow) G:\Programme\Steam\SteamApps\common\Tony Hawk's Pro Skater HD\Binaries\Win32\THHDGame.exe (Activision Publishing, Inc.) [Datei ist nicht signiert]
FirewallRules: [{F9726EBA-A73E-4B73-A9F6-F073E095F7E5}] => (Allow) G:\Programme\Steam\SteamApps\common\Marcus Level\MarcusLevel.exe () [Datei ist nicht signiert]
FirewallRules: [{CF16AB88-C7A7-43EE-A085-842B24B3F3A1}] => (Allow) G:\Programme\Steam\SteamApps\common\Marcus Level\MarcusLevel.exe () [Datei ist nicht signiert]
FirewallRules: [{AAC0C748-B9B3-4CEC-9B4B-2CAA06C47EEA}] => (Allow) G:\Programme\Steam\SteamApps\common\What'sunderyourblanket!\game.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 ->  ) [Datei ist nicht signiert]
FirewallRules: [{A03BE86A-6AD9-420C-AC58-15902F29975D}] => (Allow) G:\Programme\Steam\SteamApps\common\What'sunderyourblanket!\game.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 ->  ) [Datei ist nicht signiert]
FirewallRules: [{5AFF9752-80E3-4232-A364-F45FEE47CF11}] => (Allow) G:\Programme\Origin\_Downloads\BFH\BFHWebHelper.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{A5F46A03-F061-41AD-BBBE-26F138A32735}] => (Allow) G:\Programme\Origin\_Downloads\BFH\BFHWebHelper.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{FBFAE41F-966B-49F0-84C4-83BD702A6997}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird_DX11.exe (Valve Corp. -> THQ Inc.) [Datei ist nicht signiert]
FirewallRules: [{0A93FB2B-7EB3-49FE-B225-B1DE983C8CCB}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird_DX11.exe (Valve Corp. -> THQ Inc.) [Datei ist nicht signiert]
FirewallRules: [{921D84AF-B648-491B-811E-ACE4CA282032}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird.exe (Valve Corp. -> THQ Inc.) [Datei ist nicht signiert]
FirewallRules: [{6EEE38C6-F354-43D1-8024-5C9019DD67E9}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\SaintsRowTheThird.exe (Valve Corp. -> THQ Inc.) [Datei ist nicht signiert]
FirewallRules: [{339FE63F-229D-48FD-9459-4C870CE8556E}] => (Allow) G:\Programme\Steam\SteamApps\common\Defy Gravity\DefyGravity.exe (GRP) [Datei ist nicht signiert]
FirewallRules: [{2EAD955E-EA0A-4895-8750-D677A868B5DF}] => (Allow) G:\Programme\Steam\SteamApps\common\Defy Gravity\DefyGravity.exe (GRP) [Datei ist nicht signiert]
FirewallRules: [{779DCB47-8C80-4A3B-A7B1-4FF5C0E6BAA4}] => (Allow) G:\Programme\Steam\SteamApps\common\Fotonica\FOTONICA.exe () [Datei ist nicht signiert]
FirewallRules: [{A119ABFF-4B36-4BE8-A399-F4FAFCB4D904}] => (Allow) G:\Programme\Steam\SteamApps\common\Fotonica\FOTONICA.exe () [Datei ist nicht signiert]
FirewallRules: [{1FD6F85B-CD4D-46FB-BAD7-8912F034EF20}] => (Allow) G:\Programme\Origin\_Downloads\Need for Speed(TM) Most Wanted\NFS13.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{9F688CCD-5B86-4893-B37D-3FC3F2550DB8}] => (Allow) G:\Programme\Origin\_Downloads\Need for Speed(TM) Most Wanted\NFS13.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{D722DF0C-70FF-432B-9A63-A2E27A356660}] => (Allow) G:\Programme\Steam\SteamApps\common\Dusk 12\dusk.exe (Orion) [Datei ist nicht signiert]
FirewallRules: [{71EA59A1-C9D3-4A51-86E8-42FF00D1CDE5}] => (Allow) G:\Programme\Steam\SteamApps\common\Dusk 12\dusk.exe (Orion) [Datei ist nicht signiert]
FirewallRules: [{36BAC272-E642-4C04-AF9F-205797050983}] => (Allow) G:\Programme\Steam\SteamApps\common\Statues\Statues.exe (Unity Technologies SF -> ) [Datei ist nicht signiert]
FirewallRules: [{2347B67B-7014-46CA-906B-4F55D408C324}] => (Allow) G:\Programme\Steam\SteamApps\common\Statues\Statues.exe (Unity Technologies SF -> ) [Datei ist nicht signiert]
FirewallRules: [{18DD5A8E-E4B1-4834-8F83-444FCBC2266B}] => (Allow) G:\Programme\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe (Io Interactive A/S) [Datei ist nicht signiert]
FirewallRules: [{59C046F3-D513-4E9E-BC2A-DE6D8B0FE4DA}] => (Allow) G:\Programme\Steam\SteamApps\common\Kane and Lynch Dead Men\Launcher.exe (Io Interactive A/S) [Datei ist nicht signiert]
FirewallRules: [{70710B5D-B4A2-409F-9CC7-CB9CD5C41A78}] => (Allow) G:\Programme\Steam\SteamApps\common\Just Cause 3\JustCause3.exe () [Datei ist nicht signiert]
FirewallRules: [{086A48EE-9B96-428C-A62C-E8165DCBAF47}] => (Allow) G:\Programme\Steam\SteamApps\common\Just Cause 3\JustCause3.exe () [Datei ist nicht signiert]
FirewallRules: [{C79CA1D8-1415-46F2-8E87-3377248D658B}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOT\SUPERHOT.exe (SUPERHOT Sp z o.o.) [Datei ist nicht signiert]
FirewallRules: [{E6462DAC-5D24-4970-BD93-3660ABE8486B}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOT\SUPERHOT.exe (SUPERHOT Sp z o.o.) [Datei ist nicht signiert]
FirewallRules: [{7D40F4EC-E605-425F-9457-84361ED4AF5C}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcepswx.exe (Lexmark International, Inc. -> )
FirewallRules: [{C80173BA-9B4C-4855-84CA-E926D3BAC1AD}] => (Allow) C:\Windows\System32\spool\drivers\x64\3\lxcepswx.exe (Lexmark International, Inc. -> )
FirewallRules: [{9E69CE8B-9A0A-4536-BFBE-B59537934415}] => (Allow) G:\Programme\Steam\SteamApps\common\iambread\IamBread.exe (Unity Technologies SF -> ) [Datei ist nicht signiert]
FirewallRules: [{16E161DE-25BE-43DA-88E8-108BDBD729E3}] => (Allow) G:\Programme\Steam\SteamApps\common\iambread\IamBread.exe (Unity Technologies SF -> ) [Datei ist nicht signiert]
FirewallRules: [{5770138E-4BDD-4C5C-BFEA-05EA8A91D973}] => (Allow) G:\Programme\Origin\_Downloads\Zuma's Revenge\ZumasRevenge.exe (Electronic Arts -> PopCap Games, Inc.)
FirewallRules: [{0E3683CB-C4BB-446C-A8FE-8AA66B13920F}] => (Allow) G:\Programme\Origin\_Downloads\Zuma's Revenge\ZumasRevenge.exe (Electronic Arts -> PopCap Games, Inc.)
FirewallRules: [{49E0E3E8-37C9-4072-B95A-D40663F921BC}] => (Allow) G:\Programme\Origin\_Downloads\BFH\bfh.exe (Electronic Arts -> Visceral Games)
FirewallRules: [{06C54A07-CE5F-478D-B0C7-C030ABE571A6}] => (Allow) G:\Programme\Origin\_Downloads\BFH\bfh.exe (Electronic Arts -> Visceral Games)
FirewallRules: [{A3683AC0-C91B-46FE-96ED-846613F4E74E}] => (Allow) G:\Programme\Steam\SteamApps\common\Portal Stories Mel\portal2.exe () [Datei ist nicht signiert]
FirewallRules: [{F44982E1-9B9A-4DFE-B5ED-F4A5510BA971}] => (Allow) G:\Programme\Steam\SteamApps\common\Portal Stories Mel\portal2.exe () [Datei ist nicht signiert]
FirewallRules: [{B40AD8F0-67E8-4818-B25E-EF114B047D03}] => (Allow) G:\Programme\Steam\SteamApps\common\Grass Simulator\Grass Simulator.exe () [Datei ist nicht signiert]
FirewallRules: [{60ED1A10-B5CF-4286-B285-02CE60880AE7}] => (Allow) G:\Programme\Steam\SteamApps\common\Grass Simulator\Grass Simulator.exe () [Datei ist nicht signiert]
FirewallRules: [{9F0A9E95-8E02-4AA0-A95F-EDCD895815A3}] => (Allow) G:\Programme\Steam\SteamApps\common\Magnetic Cage Closed\Magnetic.exe () [Datei ist nicht signiert]
FirewallRules: [{D9AD4A23-B67C-4EE6-A7E5-B12F14659DFB}] => (Allow) G:\Programme\Steam\SteamApps\common\Magnetic Cage Closed\Magnetic.exe () [Datei ist nicht signiert]
FirewallRules: [{F365CEC4-84FB-4362-9B9C-03352C0249CC}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\Win64\Hatred-Win64-Shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{4A2DB197-E143-4A0C-992A-A3E7966921F3}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\Win64\Hatred-Win64-Shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{C67148D5-7C0A-430C-875C-CFA2AD1C499B}] => (Allow) G:\Programme\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe () [Datei ist nicht signiert]
FirewallRules: [{71C9D954-40A5-4288-8D9F-38BC4AD7CB48}] => (Allow) G:\Programme\Steam\SteamApps\common\Clicker Heroes\Clicker Heroes.exe () [Datei ist nicht signiert]
FirewallRules: [{CC10C36C-A43F-4D0F-83CD-05AD3A5FF556}] => (Allow) G:\Programme\Steam\SteamApps\common\Kill The Bad Guy\KillTheBadGuy.exe () [Datei ist nicht signiert]
FirewallRules: [{118DA636-4064-45B6-B7ED-CA592EEFC45B}] => (Allow) G:\Programme\Steam\SteamApps\common\Kill The Bad Guy\KillTheBadGuy.exe () [Datei ist nicht signiert]
FirewallRules: [{D34F9DB3-4ECC-422E-B70A-7DAEA47EB97D}] => (Allow) G:\Programme\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{445AB26F-75AC-45D3-A786-3C59D824BD8C}] => (Allow) G:\Programme\Steam\SteamApps\common\GoatSimulator\Binaries\Win32\GoatGame-Win32-Shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{82A85425-F254-459A-AA27-987D1222D67B}] => (Allow) G:\Programme\Origin\_Downloads\Ultima 8\Game\Game\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{9B74867C-5F21-45D6-AC31-07D1215BF1BA}] => (Allow) G:\Programme\Origin\_Downloads\Ultima 8\Game\Game\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{3A1CC453-2778-4539-9779-70B7139F0E9E}] => (Allow) G:\Programme\Steam\SteamApps\common\FSX\fsx.exe (RailSimulator T/A Dovetail -> Microsoft Corp.)
FirewallRules: [{592DD891-944C-4322-8798-9E731524E1C2}] => (Allow) G:\Programme\Steam\SteamApps\common\FSX\fsx.exe (RailSimulator T/A Dovetail -> Microsoft Corp.)
FirewallRules: [{863115C8-B708-42CC-AF2E-84578BF32303}] => (Allow) G:\Programme\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe () [Datei ist nicht signiert]
FirewallRules: [{7C80DB33-8EC2-423A-95F4-7F662140DE5D}] => (Allow) G:\Programme\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{9FF23C6F-ED8E-4C0E-8B06-DC2E2B4D94B6}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [TCP Query User{90E31DFB-1E1F-4314-BB28-A7C7A656CD50}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{8CCC455A-08D9-4F09-9B59-4735697A14FD}] => (Allow) G:\Programme\Steam\SteamApps\common\Outlast\OutlastLauncher.exe (Red Barrels Inc.) [Datei ist nicht signiert]
FirewallRules: [{1B393E8B-E164-45AE-8AE6-3E05F9DEA0A3}] => (Allow) G:\Programme\Steam\SteamApps\common\Outlast\OutlastLauncher.exe (Red Barrels Inc.) [Datei ist nicht signiert]
FirewallRules: [{716A3B82-7005-4FB3-8997-CEBD897F6ACF}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{2E603094-7EC0-40D1-B361-3C652004ECE9}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{207AD6DC-8990-4EB4-B307-20A0789D9C03}] => (Allow) G:\Programme\Origin\_Downloads\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe (Electronic Arts -> )
FirewallRules: [{165D9B44-048C-49EA-A860-DC0D1F992890}] => (Allow) G:\Programme\Origin\_Downloads\Syndicate (1993)\data\Game\DOSBox\LAUNCHER.exe (Electronic Arts -> )
FirewallRules: [{D36B7024-7D60-4D4E-8F17-F6E22277C168}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Rogue\ACC.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{8731631F-86BE-4A90-97E3-2A3DDAEB9035}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Rogue\ACC.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [UDP Query User{98F19232-492D-4C3F-A90A-E5BB2EB0191D}G:\programme\gta episodes from liberty city\eflc\eflc.exe] => (Allow) G:\programme\gta episodes from liberty city\eflc\eflc.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [TCP Query User{0332F899-B794-4B67-8371-BDE031827877}G:\programme\gta episodes from liberty city\eflc\eflc.exe] => (Allow) G:\programme\gta episodes from liberty city\eflc\eflc.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [UDP Query User{3189AFB7-2C3C-4815-AE92-BA40BF39326F}G:\programme\gta iv\grand theft auto iv\gtaiv.exe] => (Allow) G:\programme\gta iv\grand theft auto iv\gtaiv.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [TCP Query User{02BEB3D4-286B-44DB-85A6-604092CC39D8}G:\programme\gta iv\grand theft auto iv\gtaiv.exe] => (Allow) G:\programme\gta iv\grand theft auto iv\gtaiv.exe (Take-Two Interactive Software, Inc. -> Take-Two Interactive Software, Inc.)
FirewallRules: [{4196082A-4C82-44CA-932B-297C192D1CC4}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\The Crew (Worldwide)\TheCrew.exe (Shanghai Ubi Computer Software Co Ltd -> UBISoft)
FirewallRules: [{F61DE192-FF41-4F38-B995-25C5B34023C7}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\The Crew (Worldwide)\TheCrew.exe (Shanghai Ubi Computer Software Co Ltd -> UBISoft)
FirewallRules: [{1CC8DE84-EF0C-4F20-8B54-41977909CDD2}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam 2\Bin\Sam2.exe () [Datei ist nicht signiert]
FirewallRules: [{E6627837-9C4B-4387-90BE-636E278F98FC}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam 2\Bin\Sam2.exe () [Datei ist nicht signiert]
FirewallRules: [{5C7AA1C3-3ABB-4349-9F55-066B30202E29}] => (Allow) G:\Programme\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe () [Datei ist nicht signiert]
FirewallRules: [{15F5FE5A-394D-4A63-9EEF-64DA580517AF}] => (Allow) G:\Programme\Steam\SteamApps\common\RaceTheSun\RaceTheSun.exe () [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0ED37D11-274B-49CC-AF4C-2D087E84B54A}G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe] => (Allow) G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [TCP Query User{751311E0-C197-49B5-BC9F-61457ABCA5EF}G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe] => (Allow) G:\programme\steam\steamapps\common\watch_dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [UDP Query User{3A18A5CA-EC07-4808-A90D-9388C4347865}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [TCP Query User{2DB24DFC-89BB-44D0-BCF2-C7F986B9BB4F}C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe] => (Allow) C:\users\michael\appdata\roaming\dropbox\bin\dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
FirewallRules: [{C6DCD891-3FE5-4275-8C4B-B1A7BF57B287}] => (Allow) G:\Programme\Steam\SteamApps\common\Octodad Dadliest Catch\OctodadDadliestCatch.exe () [Datei ist nicht signiert]
FirewallRules: [{A9238CD0-7D20-4F00-9445-B8D6441D1AFA}] => (Allow) G:\Programme\Steam\SteamApps\common\Octodad Dadliest Catch\OctodadDadliestCatch.exe () [Datei ist nicht signiert]
FirewallRules: [{48791405-73CF-4FC2-AB9A-54380CA512FC}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\game_launcher.exe (THQ Inc.) [Datei ist nicht signiert]
FirewallRules: [{D32576E9-7EF9-44D4-A794-E06341A69656}] => (Allow) G:\Programme\Steam\SteamApps\common\saints row the third\game_launcher.exe (THQ Inc.) [Datei ist nicht signiert]
FirewallRules: [{D2895DD1-A173-4C69-8CC3-E1F57B822D08}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe (GSC Game World -> )
FirewallRules: [{814D52A8-E6DB-49AF-90DB-40E37BCD681F}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\dedicated\xrEngine.exe (GSC Game World -> )
FirewallRules: [{140B8844-6C43-46D8-8845-F3266FE67335}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe (GSC Game World -> )
FirewallRules: [{12FDC862-A430-4307-9FDB-62F0F07281CA}] => (Allow) G:\Programme\S.T.A.L.K.E.R. - Clear Sky\bin\xrEngine.exe (GSC Game World -> )
FirewallRules: [UDP Query User{B14DB619-9F14-4936-89A2-29DC3BDB2C1E}G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe (Red Barrels Inc.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{DCD89A5C-3A90-452C-BA29-3005487D929B}G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) G:\programme\steam\steamapps\common\outlast\binaries\win64\olgame.exe (Red Barrels Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{CEB9F4D3-7F3E-4298-9361-B194023BDE18}G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe (Eidos Plc -> Io Interactive A/S)
FirewallRules: [TCP Query User{E7F1BA68-5A8B-4DB0-93FE-556528FEFAC8}G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe] => (Allow) G:\programme\steam\steamapps\common\kane and lynch dead men\kaneandlynch.exe (Eidos Plc -> Io Interactive A/S)
FirewallRules: [UDP Query User{AE101A10-E2BD-4CD5-B1DB-8487D7547E44}G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{079AA4EE-4CDC-41A0-9207-B16B6B20C7E8}G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\goatsimulator\binaries\win32\goatgame-win32-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{5C4EADEB-EE22-4822-A5DF-DE3E6D96E075}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{7EE7C196-DAE2-4F2D-B9DD-13706935D677}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{579BE34E-ED30-40EC-9759-A26BE5938383}] => (Allow) G:\Programme\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe (Valve Corp. -> )
FirewallRules: [{461BA46F-69D4-4854-BEC2-07576BF08BB7}] => (Allow) G:\Programme\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe (Valve Corp. -> )
FirewallRules: [UDP Query User{EE23DC8F-9B37-488D-A477-BEE63B561447}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{B87A68CF-043A-42AA-9889-9A67A4FA61E7}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{A165A510-B391-4775-B734-48A1CDBA19C3}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed Liberation HD\ac3lhd_32.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{1650BFF8-EEB9-46E1-8EBB-CB54564D15F1}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{6A608558-D247-429E-8EA2-E0B173B4089D}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFMP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{F1FF8D57-4B5F-4518-806A-C39027DAC8A0}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{998A42C6-FCF6-4B23-920F-DA551118F02D}] => (Allow) G:\Programme\Ubisoft Game Launcher\_Downloads2\Assassin's Creed IV Black Flag\AC4BFSP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{4141ECA6-25D7-45D1-BFD9-F455B4DC669A}] => (Allow) G:\Programme\Assassins Creed III\AssassinsCreed3.exe (Ubisoft Entertainment SA -> Ubisoft)
FirewallRules: [{1C6C0E37-E158-438D-85EF-CD20F725A1C2}] => (Allow) G:\Programme\Assassins Creed III\AssassinsCreed3.exe (Ubisoft Entertainment SA -> Ubisoft)
FirewallRules: [{2A4DF289-F2EF-4C39-AEB7-FD701A04B8FE}] => (Allow) G:\Programme\Assassins Creed III\AC3MP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{D35EC7FC-B6D2-4E08-B3AA-E0D3F6ECB6B6}] => (Allow) G:\Programme\Assassins Creed III\AC3MP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{6A177206-669F-4D26-95A0-D9ED202E7C96}] => (Allow) G:\Programme\Assassins Creed III\AC3SP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{3F35A8C2-ABC4-43D4-ABAB-0B55014B4810}] => (Allow) G:\Programme\Assassins Creed III\AC3SP.exe (Ubisoft Entertainment SA -> )
FirewallRules: [{50EA5B26-6792-489F-84C5-500C71795ECB}] => (Allow) G:\Programme\Assassins Creed II\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{D3ABE1E7-F401-457D-9F15-C3EDA7F3DFE3}] => (Allow) G:\Programme\Assassins Creed II\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{BEDFD3FA-272F-4927-83FB-03FC0ED15290}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedII.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{493D7BF6-A7F3-48D8-A89F-6C71DABBF53A}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedII.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{8BA9F119-CF6C-4CC6-B816-5FA1739DD2E2}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedIIGame.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{A2EEEF59-DA46-48EA-AC1C-37B89BCEE9E5}] => (Allow) G:\Programme\Assassins Creed II\AssassinsCreedIIGame.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{B67449E7-A6E1-4001-8630-934A93B48999}] => (Allow) G:\Programme\Assassins Creed Brotherhood\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{9C989768-AFA2-43F9-80A1-F9356F9CCF87}] => (Allow) G:\Programme\Assassins Creed Brotherhood\UPlayBrowser.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{66DCC7E6-006A-4BB2-9418-0F2B73E3C7EB}] => (Allow) G:\Programme\Assassins Creed Brotherhood\AssassinsCreedBrotherhood.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{69D56FBC-8919-4C1A-9CFD-02AD241B2550}] => (Allow) G:\Programme\Assassins Creed Brotherhood\AssassinsCreedBrotherhood.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{B0EEE457-8118-46A8-A4BC-9433AD623259}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{61A58714-391B-4318-9B82-B8C2F57457FC}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{B33BF06A-B220-4F7A-97EA-D3DCC1093816}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{97C4369A-9655-4B8F-9A07-E50A5367D68E}] => (Allow) G:\Programme\Assassins Creed Brotherhood\ACBSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{85DED472-D32F-4458-B676-D57626E2BF15}] => (Allow) G:\Programme\Assassins Creed Revelations\AssassinsCreedRevelations.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{3DF1A996-7D7D-4397-BD69-2CB7C317B34F}] => (Allow) G:\Programme\Assassins Creed Revelations\AssassinsCreedRevelations.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft)
FirewallRules: [{BC03F208-CE0F-4699-A252-F5E70710A6A7}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{558F8C2E-73A1-451F-AE46-FC50808AA954}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRMP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{145F0FA8-7569-4D21-B578-6151CCC0F1C2}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{91CF8AAD-3D7A-476E-BD57-C621E9DA631E}] => (Allow) G:\Programme\Assassins Creed Revelations\ACRSP.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{BE398A30-0FB1-4DA7-992B-F1EAEADDA74E}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{AAA88C41-D19D-4E12-9690-F38BB11E43C1}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForeverLauncher.exe () [Datei ist nicht signiert]
FirewallRules: [{6B933768-1D9A-4982-943B-8B8FF6568E22}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe () [Datei ist nicht signiert]
FirewallRules: [{921C19AB-DCEC-4F65-BA8C-8F99C247FED1}] => (Allow) G:\Programme\Steam\SteamApps\common\TrackMania Nations Forever\TmForever.exe () [Datei ist nicht signiert]
FirewallRules: [{3E5B04AD-D653-47A6-8EE1-D01BDC23AD9F}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield Bad Company 2\BFBC2Game.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{C0F248F7-28DD-4C75-9BA4-B0436A058ACB}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield Bad Company 2\BFBC2Game.exe (Electronic Arts -> EA Digital Illusions CE AB)
FirewallRules: [{4ADFCB4E-95EF-44AD-B997-FA057DB6B9A1}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Warfighter\MOHW.exe (Electronic Arts -> Danger Close Games)
FirewallRules: [{79451383-660B-4F53-9437-89BF663EDC16}] => (Allow) G:\Programme\Origin\_Downloads\Medal of Honor Warfighter\MOHW.exe (Electronic Arts -> Danger Close Games)
FirewallRules: [{52CFB23A-5D65-46DA-9F40-7F9BBBAABA89}] => (Allow) G:\Programme\Origin\_Downloads\Peggle Deluxe\Peggle.exe (Electronic Arts -> )
FirewallRules: [{D538E0B3-AD64-42F0-B806-9D2A4E163A51}] => (Allow) G:\Programme\Origin\_Downloads\Peggle Deluxe\Peggle.exe (Electronic Arts -> )
FirewallRules: [{3B2C7EAD-5154-4357-B2CF-F4424AA58543}] => (Allow) G:\Programme\Origin\_Downloads\Plants vs. Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [{E85120DE-1250-4DFA-8E37-91EAB406C9F0}] => (Allow) G:\Programme\Origin\_Downloads\Plants vs. Zombies\PlantsVsZombies.exe (PopCap Games -> )
FirewallRules: [UDP Query User{107F2BC2-BC9A-4FF0-811B-993D228F1779}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [TCP Query User{1433B0AE-EC7D-403E-9764-0A00C1177F13}C:\users\michael\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\michael\appdata\roaming\spotify\spotify.exe (Spotify AB -> Spotify Ltd)
FirewallRules: [{F80E4FCF-1C34-4001-B381-8C8FB634853B}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Low.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{6BEC037A-F486-4FCB-8241-4B30E127EC6A}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Low.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{30A2058E-F21C-490E-BCA4-A1B9D1B07A51}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Hi.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{B5296167-2D9D-4252-A184-F3D007505A3A}] => (Allow) G:\Programme\Alarm für Cobra 11 - Das Syndikat - DEMO\CrashTime4Hi.exe (dtp entertainment AG -> Synetic)
FirewallRules: [{F297D99C-085D-46B1-9290-76768FA7BA47}] => (Allow) G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{81897A87-6DB5-485E-9257-CD65F8D721C5}] => (Allow) G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)
FirewallRules: [{A5D6B316-6538-4632-95D1-048BE5A89A7F}] => (Allow) G:\Programme\Steam\SteamApps\common\Showerdad\SHOWERDAD.exe () [Datei ist nicht signiert]
FirewallRules: [{9CD3D5AA-0E01-4B11-A2D0-6A3B4A65ECE3}] => (Allow) G:\Programme\Steam\SteamApps\common\Showerdad\SHOWERDAD.exe () [Datei ist nicht signiert]
FirewallRules: [{ADD1BB43-6718-43B6-BE51-59C60BA322AA}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\HatredConfig.exe (Destructive Creations) [Datei ist nicht signiert]
FirewallRules: [{19DB0ED1-B4B7-4C60-AD27-C7BEFD76EE2B}] => (Allow) G:\Programme\Steam\SteamApps\common\Hatred\Hatred\Binaries\HatredConfig.exe (Destructive Creations) [Datei ist nicht signiert]
FirewallRules: [{8D030F37-C80E-4789-AD59-CEDA64E0B05F}] => (Allow) G:\Programme\Origin\_Downloads\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{57E38B66-A27D-469E-88B3-EE4F7E04DC28}] => (Allow) G:\Programme\Origin\_Downloads\Theme Hospital\data\Game\DOSBox\EALaunchHelper.exe (Electronic Arts -> Electronic Arts)
FirewallRules: [{229363AB-EA6A-498D-A15A-9A15DE7D84C0}] => (Allow) G:\Programme\Origin\_Downloads\Command and Conquer Red Alert II\RA2Launcher.exe (Kalloc Studios, Inc. -> Kalloc Studios) [Datei ist nicht signiert]
FirewallRules: [{9D638FD1-A9CC-4644-8FD1-F6A44892EB71}] => (Allow) G:\Programme\Origin\_Downloads\Command and Conquer Red Alert II\RA2Launcher.exe (Kalloc Studios, Inc. -> Kalloc Studios) [Datei ist nicht signiert]
FirewallRules: [{54347EF9-085C-4C8E-A271-7F744A0E5A4E}] => (Allow) G:\Programme\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8E501D08-7F02-4CE9-9F03-B36EF9139DE6}] => (Allow) G:\Programme\Winamp\winamp.exe (Nullsoft Inc. -> Nullsoft, Inc.)
FirewallRules: [{8C06E058-E52F-4D5D-82AC-4FBA82CFDBC7}] => (Allow) G:\Programme\Steam\SteamApps\common\Crazy Chicken - Invasion\mh_invasion.exe () [Datei ist nicht signiert]
FirewallRules: [{1B7E1D9A-4323-47C7-868F-40174FE50E90}] => (Allow) G:\Programme\Steam\SteamApps\common\Crazy Chicken - Invasion\mh_invasion.exe () [Datei ist nicht signiert]
FirewallRules: [{3035ECCB-276A-4C14-9C7C-6AF0CDFED64A}] => (Allow) G:\Programme\Steam\SteamApps\common\CrazyChicken\MoorhuhnDeluxe.exe () [Datei ist nicht signiert]
FirewallRules: [{07D1882F-6F1F-4062-B8F3-225C9CCC8914}] => (Allow) G:\Programme\Steam\SteamApps\common\CrazyChicken\MoorhuhnDeluxe.exe () [Datei ist nicht signiert]
FirewallRules: [{AB088B6F-A1FA-45FF-8D7B-2342669511E4}] => (Allow) G:\Programme\Origin\_Downloads\Dungeon Keeper\DATA\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{C941AECE-79A0-4465-B93B-C73B205022A0}] => (Allow) G:\Programme\Origin\_Downloads\Dungeon Keeper\DATA\DOSBox\DOSBox.exe (Electronic Arts -> DOSBox Team)
FirewallRules: [{60151ADB-6A09-4731-8AE1-D83C2AEF8A09}] => (Allow) G:\Programme\Steam\SteamApps\common\Homefront_The_Revolution\Bin64\Homefront2_Release.exe (Dambuster Studios) [Datei ist nicht signiert]
FirewallRules: [{B7646C81-EB4E-4E00-8857-F30305F63C37}] => (Allow) G:\Programme\Steam\SteamApps\common\Homefront_The_Revolution\Bin64\Homefront2_Release.exe (Dambuster Studios) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{AC8F5FF3-D567-46E4-AEC6-9EB1F964ADC7}G:\programme\gigatribe\gigatribe.exe] => (Allow) G:\programme\gigatribe\gigatribe.exe (Gigatribe -> Gigatribe)
FirewallRules: [UDP Query User{3FFBA312-7910-411D-9714-802AEEABA88E}G:\programme\gigatribe\gigatribe.exe] => (Allow) G:\programme\gigatribe\gigatribe.exe (Gigatribe -> Gigatribe)
FirewallRules: [{A80B511B-FE60-4225-945E-2398B1A850D0}] => (Allow) G:\Programme\Steam\SteamApps\common\QuantumBreak\dx11\QuantumBreak.exe () [Datei ist nicht signiert]
FirewallRules: [{65535CBF-04BA-4B17-9C20-F43C57183880}] => (Allow) G:\Programme\Steam\SteamApps\common\QuantumBreak\dx11\QuantumBreak.exe () [Datei ist nicht signiert]
FirewallRules: [{4B437AA5-B4A4-49BC-A2DF-19F818B3A16E}] => (Allow) G:\Programme\Steam\SteamApps\common\Sword With Sauce Alpha\SwordWithSauce.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> ) [Datei ist nicht signiert]
FirewallRules: [{F59A259D-937F-4E1C-A618-D602A8AE7C99}] => (Allow) G:\Programme\Steam\SteamApps\common\Sword With Sauce Alpha\SwordWithSauce.exe (Error3: CryptCATAdminCalcHashFromFileHandle failed to return cbHash, #2 -> ) [Datei ist nicht signiert]
FirewallRules: [{7BEF0E01-F808-4A70-AB18-6E9AB412B19B}] => (Allow) G:\Programme\Steam\SteamApps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe (CI Games S.A.) [Datei ist nicht signiert]
FirewallRules: [{93CFCE7E-2DD8-4E07-A618-BB105CD0B955}] => (Allow) G:\Programme\Steam\SteamApps\common\Sniper Ghost Warrior 3\win_x64\SGW3.exe (CI Games S.A.) [Datei ist nicht signiert]
FirewallRules: [{AC84F096-3D9D-46B0-9E24-E4D7A3FF0649}] => (Allow) G:\Programme\Origin\_Downloads\Mass Effect 2\Binaries\MassEffect2.exe (Electronic Arts -> BioWare)
FirewallRules: [{B7F25524-20D2-4063-8756-0DD2BE63CF2F}] => (Allow) G:\Programme\Origin\_Downloads\Mass Effect 2\Binaries\MassEffect2.exe (Electronic Arts -> BioWare)
FirewallRules: [TCP Query User{02BFB883-DA8E-4283-913D-687D233FAF9A}G:\programme\personal backup 5\persbackup.exe] => (Allow) G:\programme\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{9B0C7B38-24EC-4063-B898-94FA06A72F56}G:\programme\personal backup 5\persbackup.exe] => (Allow) G:\programme\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
FirewallRules: [{7127E82C-63C8-4AE0-89AA-B4655DDF725C}] => (Allow) G:\Programme\Steam\SteamApps\common\Steep\steep.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{1A989C6B-D3BC-4B03-B067-548BD98176DE}] => (Allow) G:\Programme\Steam\SteamApps\common\Steep\steep.exe (UBISOFT ENTERTAINMENT INC. -> )
FirewallRules: [{74C47F92-05FE-4C7F-8721-AA23DF4DEA60}] => (Allow) G:\Programme\Steam\SteamApps\common\Agents of Mayhem\aom\AOM_Release_Final.exe () [Datei ist nicht signiert]
FirewallRules: [{F0DA23E1-C7C4-4A15-9A2B-D275AE170597}] => (Allow) G:\Programme\Steam\SteamApps\common\Agents of Mayhem\aom\AOM_Release_Final.exe () [Datei ist nicht signiert]
FirewallRules: [{B2D6BB57-F022-4E8C-B225-0095B8BE2927}] => (Allow) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{36114247-EB1B-45C3-B1AF-B9F7E58C6635}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOTMCD\SUPERHOTMCD.exe (SUPERHOT Sp z o.o.) [Datei ist nicht signiert]
FirewallRules: [{DA95258B-040E-40BF-89E9-5409F03F305B}] => (Allow) G:\Programme\Steam\SteamApps\common\SUPERHOTMCD\SUPERHOTMCD.exe (SUPERHOT Sp z o.o.) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{DF52C5D2-12C7-418C-B380-B68632E51ED1}C:\program files\personal backup 5\persbackup.exe] => (Allow) C:\program files\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{78CB2A62-6E51-44B0-83FC-C74285F1C6C1}C:\program files\personal backup 5\persbackup.exe] => (Allow) C:\program files\personal backup 5\persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
FirewallRules: [{706B81C1-352F-4105-8F37-B5482D803AED}] => (Allow) G:\Programme\Steam\SteamApps\common\ECHO\Echo.exe () [Datei ist nicht signiert]
FirewallRules: [{5219E6E5-1014-42D4-8CCC-24471DC3A2E7}] => (Allow) G:\Programme\Steam\SteamApps\common\ECHO\Echo.exe () [Datei ist nicht signiert]
FirewallRules: [TCP Query User{6AC42703-FB73-406D-A6DB-197F20A827BA}G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{0ED095CE-6563-46DC-B5CF-0CB6456DFCBC}G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe] => (Allow) G:\programme\steam\steamapps\common\echo\echo\binaries\win64\echo-win64-shipping.exe (Epic Games, Inc.) [Datei ist nicht signiert]
FirewallRules: [{8DB0DA07-0355-4395-9FCA-27822DA84A84}] => (Allow) G:\Programme\Origin\_Downloads\Dead Space\Dead Space.exe (Electronic Arts, Inc. -> )
FirewallRules: [{30EE185D-609F-443E-AA20-DE2689B9445A}] => (Allow) G:\Programme\Origin\_Downloads\Dead Space\Dead Space.exe (Electronic Arts, Inc. -> )
FirewallRules: [{0C2740B6-7656-4E93-B478-569D0D5BE349}] => (Allow) G:\Programme\Origin\_Downloads\NOX\NOX.exe (Electronic Arts, Inc. -> )
FirewallRules: [{6CDCBAAA-94F5-4C58-AFEB-271ACA7D48E4}] => (Allow) G:\Programme\Origin\_Downloads\NOX\NOX.exe (Electronic Arts, Inc. -> )
FirewallRules: [{70BA2575-E456-4CDC-BDFC-63DA442D2339}] => (Allow) G:\Programme\Origin\_Downloads\NOX\Game.exe (Electronic Arts, Inc. -> )
FirewallRules: [{969F2315-07EF-42F5-AFF0-E238D7F2C8CD}] => (Allow) G:\Programme\Origin\_Downloads\NOX\Game.exe (Electronic Arts, Inc. -> )
FirewallRules: [{F26FA441-F89D-4F7F-A722-73C63FB28397}] => (Allow) C:\Program Files (x86)\BlueStacks\HD-Player.exe (BlueStack Systems, Inc. -> BlueStack Systems, Inc.)
FirewallRules: [{28B34CD2-3071-4ACA-90E2-4254925E99B6}] => (Allow) G:\Programme\Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [{018C65D7-0CAC-437B-A3B5-0CF3FC1FC95D}] => (Allow) G:\Programme\Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)
FirewallRules: [TCP Query User{BD986AFB-7A79-4FD7-BF61-AD9355C4C941}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{8B94EFDF-C593-4DB9-9EBA-9DF8765B9964}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{3FFEAA4E-489B-430D-839D-D5B8A69A4AD6}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{8E05D4F8-9548-4B55-915C-90F59D1FB917}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [{2DA87A23-6CF5-4B3C-A308-2CD451F137BA}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [{DE617DB1-2830-4875-A1AC-91757D7A7112}] => (Allow) C:\Users\Michael\AppData\Roaming\uTorrent\uTorrent.exe (BitTorrent Inc -> BitTorrent Inc.)
FirewallRules: [TCP Query User{69793F51-8FBD-45ED-8A23-4EA1E293B8B3}G:\programme\softperfect network scanner\netscan.exe] => (Allow) G:\programme\softperfect network scanner\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [UDP Query User{AA616F58-0EBD-45B2-98DF-F8A32F6C5EB8}G:\programme\softperfect network scanner\netscan.exe] => (Allow) G:\programme\softperfect network scanner\netscan.exe (SoftPerfect Pty. Ltd. -> SoftPerfect)
FirewallRules: [TCP Query User{78AD9386-4F65-4667-90F2-FDB5F4517F8D}G:\programme\minihost\minihostmodular.exe] => (Block) G:\programme\minihost\minihostmodular.exe (Image Line -> Image-Line) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{BA3D12A0-11C2-4882-8263-0D5998D741D3}G:\programme\minihost\minihostmodular.exe] => (Block) G:\programme\minihost\minihostmodular.exe (Image Line -> Image-Line) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{856FC02B-B0C6-4CD4-A9F6-FA2E11BA774B}C:\windows\system32\openssh\ssh.exe] => (Allow) C:\windows\system32\openssh\ssh.exe (Microsoft Windows -> )
FirewallRules: [UDP Query User{F2D2EB63-7784-4A12-852A-760680617225}C:\windows\system32\openssh\ssh.exe] => (Allow) C:\windows\system32\openssh\ssh.exe (Microsoft Windows -> )
FirewallRules: [{5AEC6348-6287-4F1D-98D1-F20DCB966B6D}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{423068E8-9AC5-420A-BCEF-98F7BE2C76DB}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{25E8B6E7-2424-43C4-B6C8-C9FDD6016213}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{D8FBA490-F683-47BE-BE56-8D76F59591C8}] => (Allow) G:\Programme\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe (SCS Software s.r.o. -> SCS Software)
FirewallRules: [{FFA4EA00-5C77-490F-AEA1-5F13087D4783}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{3BE0BD1D-6E01-4C24-AB81-8A63CC4E2993}] => (Allow) G:\Programme\Origin\_Downloads\Dead in Bermuda\Dead In Bermuda.exe (Electronic Arts, Inc. -> )
FirewallRules: [{85A08BAD-DD88-4AF5-95C8-D5E88C652BA6}] => (Allow) G:\Programme\Steam\SteamApps\common\Deus Ex Mankind Divided\retail\DXMD.exe () [Datei ist nicht signiert]
FirewallRules: [{FC4A334F-5B0D-4AA1-96D8-7FD679BDB344}] => (Allow) G:\Programme\Steam\SteamApps\common\Deus Ex Mankind Divided\retail\DXMD.exe () [Datei ist nicht signiert]
FirewallRules: [{617C113C-87C7-49F1-B3C5-809CD7DC8A24}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{CC2001E8-524B-4406-B98E-F6193C0E95C9}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{4150B0AF-A195-4F0D-AE09-E3716EEB7452}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{EA7185E6-E00E-4C1B-99FE-143B1D2F2CC9}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{12B7469D-19C3-4DA9-978B-F44D8E5EE30F}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{9B1B4144-1D89-4276-B711-E53F36348B1C}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{09E9646E-45E7-481E-BAE0-8BAC906106E9}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [{697BF52A-4B9E-4D92-B0AC-80CB19BC0B80}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [TCP Query User{FAF6DD5F-0E27-45CC-A994-F63506F58298}Y:\_tor zeugs\tox\utox64.exe] => (Block) Y:\_tor zeugs\tox\utox64.exe Keine Datei
FirewallRules: [UDP Query User{2D840A3B-58A7-491C-AB45-79443295D8C7}Y:\_tor zeugs\tox\utox64.exe] => (Block) Y:\_tor zeugs\tox\utox64.exe Keine Datei
FirewallRules: [TCP Query User{3595AEE3-ACFD-4982-8848-838DCE23F878}O:\_tor\tox\utox64.exe] => (Allow) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [UDP Query User{E084C790-59D3-44B7-88EB-CC17DA6B5681}O:\_tor\tox\utox64.exe] => (Allow) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [{6E938AB2-BC2A-4A7A-B48C-06B17E5AD07F}] => (Block) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [{E9EF94F8-1A0E-4B5F-ACD8-F164EF68CABA}] => (Block) O:\_tor\tox\utox64.exe Keine Datei
FirewallRules: [TCP Query User{C03EE5CE-729D-4A68-8024-C8F9372E6F17}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software) [Datei ist nicht signiert]
FirewallRules: [UDP Query User{45D488AE-2D6A-42CC-BFAF-9A7FA0A5843F}G:\programme\allmytube\allmytube.exe] => (Allow) G:\programme\allmytube\allmytube.exe (Shenzhen Wondershare Information Technology Co., Ltd. -> Wondershare Software) [Datei ist nicht signiert]
FirewallRules: [TCP Query User{4B3CDB3E-DBBE-4001-A146-3B47E93EAEE6}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [UDP Query User{66C35A46-F2C8-4BA4-9BFB-2F77AF87B96A}G:\programme\allmytube\urlreqservice.exe] => (Allow) G:\programme\allmytube\urlreqservice.exe (Wondershare Technology Co.,Ltd -> Wondershare)
FirewallRules: [{F752CD99-4D7F-4449-A1E4-EF0EDEBA30AE}] => (Allow) G:\Programme\Steam\SteamApps\common\Alien Isolation\AI.exe () [Datei ist nicht signiert]
FirewallRules: [{7088FA85-DDB7-423C-ACC4-FD8F554A0314}] => (Allow) G:\Programme\Steam\SteamApps\common\Alien Isolation\AI.exe () [Datei ist nicht signiert]
FirewallRules: [{D031A860-93C3-4485-89C3-677175EA80DC}] => (Allow) G:\Programme\Steam\SteamApps\common\F.E.A.R. 3\F.E.A.R. 3.exe (Valve Corp. -> Day 1 Studios, LLC)
FirewallRules: [{61D21C29-D571-4F9B-98AE-6246FB956989}] => (Allow) G:\Programme\Steam\SteamApps\common\F.E.A.R. 3\F.E.A.R. 3.exe (Valve Corp. -> Day 1 Studios, LLC)
FirewallRules: [{BC810E15-BA49-4FB2-8F6C-4C7CEB743389}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{1DF53109-3EEE-4FB3-A658-6061F81B1D71}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch_BE.exe (BattlEye Innovations e.K. -> BattlEye Innovations)
FirewallRules: [{6A20E07A-68CD-426F-AAC4-9B301C19280C}] => (Allow) G:\Programme\Steam\SteamApps\common\Ring of Elysium\SLauncher.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{122A2369-DBD5-4784-B328-3FF2B51FE722}] => (Allow) G:\Programme\Steam\SteamApps\common\Ring of Elysium\SLauncher.exe (Tencent Technology(Shenzhen) Company Limited -> )
FirewallRules: [{CCF1F94E-6F0B-4234-9C6D-73E1CBF585F2}] => (Allow) C:\Program Files\iTunes\iTunes.exe (Apple Inc. -> Apple Inc.)
FirewallRules: [{A07A1855-2523-4AA9-AF8E-3A0653719274}] => (Allow) G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{CD30F855-D3DC-4873-B568-019E96EC3CDE}] => (Allow) G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
FirewallRules: [{DF519B2E-FEDC-4FC5-981E-814110282605}] => (Allow) G:\Programme\Steam\SteamApps\common\Vampyr\AVGame\Binaries\Win64\AVGame-Win64-Shipping.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{AC0BBC92-837F-41AD-B0FC-C52296833B9D}] => (Allow) G:\Programme\Steam\SteamApps\common\Vampyr\AVGame\Binaries\Win64\AVGame-Win64-Shipping.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{FCDC61CB-4334-4A72-A1BF-AE4AC3C90BEE}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch.exe (Define Human Studios LLC -> Define Human Studios) [Datei ist nicht signiert]
FirewallRules: [{8F942CF6-84A3-4727-995B-ABF25BFEEECB}] => (Allow) G:\Programme\Steam\SteamApps\common\Islands of Nyne Battle Royale\IONBranch\Binaries\Win64\IONBranch.exe (Define Human Studios LLC -> Define Human Studios) [Datei ist nicht signiert]
FirewallRules: [{4BA0ECBE-125B-481E-AFB6-502E0A8A7A28}] => (Allow) G:\Programme\Steam\SteamApps\common\Metro Last Light\MetroLL.exe (Koch Media GmbH -> 4A Games)
FirewallRules: [{A8669C2D-95F5-49A4-ACEA-8992FC5A3E19}] => (Allow) G:\Programme\Steam\SteamApps\common\Metro Last Light\MetroLL.exe (Koch Media GmbH -> 4A Games)
FirewallRules: [{977563A3-BEDC-41EC-B80E-FBFACB4D9C5A}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{56AF5911-11FB-49A6-99CD-90371F6E75CC}] => (Allow) G:\Programme\Steam\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe (Techland Sp. z o.o. -> Techland)
FirewallRules: [{21708D00-96B3-4D90-A6D7-35D404F85C5D}] => (Allow) G:\Programme\Steam\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{7E42BDD8-1E39-422C-BDB3-35E5BE9CAEE3}] => (Allow) G:\Programme\Steam\SteamApps\common\Watch_Dogs\bin\watch_dogs.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)
FirewallRules: [{F1687312-6FEB-473D-92B6-66EBD282067F}] => (Allow) G:\Programme\Steam\SteamApps\common\Slender - The Arrival\Slender - The Arrival.exe () [Datei ist nicht signiert]
FirewallRules: [{578C2FAD-548B-4F83-8B03-03B8E3D7D441}] => (Allow) G:\Programme\Steam\SteamApps\common\Slender - The Arrival\Slender - The Arrival.exe () [Datei ist nicht signiert]
FirewallRules: [{814F49DA-9732-405A-AC48-AA4E11949E2E}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Datei ist nicht signiert]
FirewallRules: [{63A7EF5D-8EAC-4CB7-8E06-A03ACC302AF8}] => (Allow) G:\Programme\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe (DONTNOD Entertainment) [Datei ist nicht signiert]
FirewallRules: [{E7ACF5B2-10A8-4986-AF84-EE55A3A4EE51}] => (Allow) G:\Programme\Steam\SteamApps\common\Magrunner\Binaries\Win32\Magrunner.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{ED89AD27-45FF-4BF4-9E62-045D3A3EBCC5}] => (Allow) G:\Programme\Steam\SteamApps\common\Magrunner\Binaries\Win32\Magrunner.exe (Focus Home Interactive -> Focus Home Interactive)
FirewallRules: [{09184F2D-20ED-4AF6-A25F-CC7E68984BF0}] => (Allow) G:\Programme\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{99E89A62-5C76-4EB3-B91C-D3E5A303F73D}] => (Allow) G:\Programme\Todo Backup\bin\TbService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{6560545C-C44B-4A47-AE12-BB7CC68BBE39}] => (Allow) G:\Programme\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{07B68213-5B3D-4D2B-B971-9F1D945E2D4A}] => (Allow) G:\Programme\Todo Backup\bin\TBConsoleUI.exe (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
FirewallRules: [{29B728AB-8252-42A0-AAAE-9BC5A813992E}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{7FD87189-EE4D-4494-9629-FC91B146C2A6}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [OpenSSH-Server-In-TCP] => (Allow) %SystemRoot%\system32\OpenSSH\sshd.exe (Microsoft Windows -> )
FirewallRules: [{41243DF6-C57C-4332-9AEE-81B4322CEC08}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{836E79CB-6699-4C59-ACF2-150F06F80EF0}] => (Allow) G:\Programme\Todo Backup\bin\TodoBackupService.exe (CHENGDU YIWO Tech Development Co., Ltd. -> )
FirewallRules: [{E0C46B7D-A117-44DE-8F48-75785074B424}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google Inc.)
FirewallRules: [{09E435D7-E314-49F5-92F4-24C2F134DD15}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{019A91EA-3B00-47B9-BD98-AA1ADBE73CBC}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017.exe (GHI Media LLC -> Croteam)
FirewallRules: [{3993C3FE-D58E-4368-8A4D-1A3F695B4B11}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [{03AE6F9C-8836-4DF9-9D10-E0C1CB47FC7E}] => (Allow) G:\Programme\Steam\SteamApps\common\Serious Sam Fusion 2017\Bin\x64\Sam2017_Unrestricted.exe (GHI Media LLC -> Croteam)
FirewallRules: [{C19669B6-452A-4E92-93E8-18A1461C421B}] => (Allow) G:\Programme\Steam\SteamApps\common\Flower\Flower.exe () [Datei ist nicht signiert]
FirewallRules: [{942FC2D7-471F-49FC-B431-B37EF9CD4A7E}] => (Allow) G:\Programme\Steam\SteamApps\common\Flower\Flower.exe () [Datei ist nicht signiert]
FirewallRules: [{D53A4F4D-78AF-4BA9-AE53-DEEB49DF2039}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{CF61BC5F-057A-4BE2-A911-D05A058A66FF}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfvTrial.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{F615156F-E5F5-45F7-A813-6E4A1256693B}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)
FirewallRules: [{DE840458-F8D1-42F3-81DC-812834AE1FEE}] => (Allow) G:\Programme\Origin\_Downloads\Battlefield V\bfv.exe (Electronic Arts, Inc. -> EA Digital Illusions CE AB)

==================== Wiederherstellungspunkte =========================

06-02-2019 18:10:29 Installed Oracle VM VirtualBox 6.0.4
13-02-2019 15:39:45 Windows Update
21-02-2019 23:26:03 Geplanter Prüfpunkt

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: TunnelBear Adapter V9
Description: TunnelBear Adapter V9
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: TunnelBear Provider V9
Service: tap-tb-0901
Problem: : This device is disabled. (Code 22)
Resolution: In Device Manager, click "Action", and then click "Enable Device". This starts the Enable Device wizard. Follow the instructions.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (02/25/2019 12:25:13 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Michael\Desktop\Bereinigungsprogramme\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_05b53be2071f46b6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_4d6272b91b9b6fbc.manifest.

Error: (02/25/2019 12:22:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Michael\Desktop\Bereinigungsprogramme\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_05b53be2071f46b6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_4d6272b91b9b6fbc.manifest.

Error: (02/24/2019 05:25:52 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Michael\Desktop\Bereinigungsprogramme\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_05b53be2071f46b6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_4d6272b91b9b6fbc.manifest.

Error: (02/24/2019 02:05:14 AM) (Source: SideBySide) (EventID: 78) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\Michael\Desktop\Bereinigungsprogramme\esetsmartinstaller_deu.exe". Fehler in Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_05b53be2071f46b6.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.17763.316_none_4d6272b91b9b6fbc.manifest.

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 24

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 23

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 22

Error: (02/24/2019 12:55:26 AM) (Source: Bonjour Service) (EventID: 100) (User: )
Description: ERROR: handle_resolve_request bad interfaceIndex 21


Systemfehler:
=============
Error: (02/25/2019 07:23:46 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID 
Windows.SecurityCenter.WscBrokerManager
 und der APPID 
Nicht verfügbar
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/25/2019 07:23:46 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID 
Windows.SecurityCenter.WscDataProtection
 und der APPID 
Nicht verfügbar
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/25/2019 07:23:46 PM) (Source: DCOM) (EventID: 10016) (User: NT-AUTORITÄT)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "NT-AUTORITÄT\SYSTEM" (SID: S-1-5-18) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Start" für die COM-Serveranwendung mit der CLSID 
Windows.SecurityCenter.SecurityAppBroker
 und der APPID 
Nicht verfügbar
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/25/2019 07:23:05 PM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/25/2019 07:22:37 PM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/25/2019 07:22:13 PM) (Source: DCOM) (EventID: 10016) (User: Michael-PC)
Description: Durch die Berechtigungseinstellungen für "Anwendungsspezifisch" wird dem Benutzer "Michael-PC\Michael" (SID: S-1-5-21-2862775871-2864016982-4179919401-1000) unter der Adresse "LocalHost (unter Verwendung von LRPC)" keine Berechtigung vom Typ "Lokal Aktivierung" für die COM-Serveranwendung mit der CLSID 
{2593F8B9-4EAF-457C-B68A-50F6B8EA6B54}
 und der APPID 
{15C20B67-12E7-4BB6-92BB-7AFF07997402}
 im Anwendungscontainer "Nicht verfügbar" (SID: Nicht verfügbar) gewährt. Die Sicherheitsberechtigung kann mit dem Verwaltungstool für Komponentendienste geändert werden.

Error: (02/25/2019 07:21:39 PM) (Source: SNMP) (EventID: 1500) (User: )
Description: Beim Zugreifen auf den Registrierungsschlüssel SYSTEM\CurrentControlSet\Services\SNMP\Parameters\TrapConfiguration ist ein Fehler aufgetreten.

Error: (02/25/2019 07:21:32 PM) (Source: VBoxNetLwf) (EventID: 12) (User: )
Description: Der Treiber hat einen internen Treiberfehler auf \Device\VBoxNetLwf gefunden.


Windows Defender:
===================================
Date: 2019-02-18 15:51:55.452
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {99D4EB30-61E2-4652-B742-C8C55E10E3E0}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-12 21:12:24.083
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {4E3E7511-AF97-4BFF-AD5C-A73BE28E5031}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-09 16:14:02.600
Description: 
Von Windows Defender Antivirus wurde Schadsoftware oder andere potenziell unerwünschte Software erkannt.
Weitere Informationen:
https://go.microsoft.com/fwlink/?linkid=37020&name=Virus:DOS/EICAR_Test_File&threatid=2147519003&enterprise=0
Name: Virus:DOS/EICAR_Test_File
ID: 2147519003
Schweregrad: Schwerwiegend
Kategorie: Virus
Pfad: containerfile:_C:\Users\Michael\Desktop\eicar.zip; file:_C:\Users\Michael\Desktop\eicar.zip->eicar.com
Erkennungsursprung: Lokaler Computer
Erkennungstyp: Konkret
Erkennungsquelle: System
Benutzer: NT-AUTORITÄT\SYSTEM
Prozessname: Unknown
Signaturversion: AV: 1.285.1195.0, AS: 1.285.1195.0, NIS: 1.285.1195.0
Modulversion: AM: 1.1.15600.4, NIS: 1.1.15600.4

Date: 2019-02-09 15:59:34.009
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {DD7410E2-FBC3-49F4-B79D-482230511674}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-09 11:26:03.848
Description: 
Die Windows Defender Antivirus-Überprüfung wurde vor ihrem Abschluss beendet.
Überprüfungs-ID: {90099CA8-F267-4AF7-9A42-B2F9EBAE3DEF}
Überprüfungstyp: Antimalware
Überprüfungsparameter: Schnellüberprüfung
Benutzer: NT-AUTORITÄT\SYSTEM

Date: 2019-02-18 16:05:31.109
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

Date: 2019-02-18 01:40:32.646
Description: 
Fehler von Windows Defender Antivirus beim Aktualisieren von Signaturen.
Neue Signaturversion: 
Vorherige Signaturversion: 1.287.189.0
Updatequelle: Microsoft Update-Server
Signaturtyp: AntiVirus
Updatetyp: Voll
Benutzer: NT-AUTORITÄT\SYSTEM
Aktuelle Modulversion: 
Vorherige Modulversion: 1.1.15700.8
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 

Date: 2019-02-18 01:30:30.949
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

Date: 2019-02-05 01:25:12.904
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Bei Zugriff
Fehlercode: 0x8007043c
Fehlerbeschreibung: Der Dienst kann nicht im abgesicherten Modus gestartet werden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

Date: 2019-02-04 16:37:34.944
Description: 
Fehler des Windows Defender Antivirus-Echtzeitschutz-Features.
Feature: Verhaltensüberwachung
Fehlercode: 0x80508023
Fehlerbeschreibung: Auf dem Gerät wurde keine Schadsoftware oder andere potenziell unerwünschte Software gefunden. 
Ursache: Die Antischadsoftware wurde aus unbekanntem Grund beendet. Möglicherweise kann das Problem durch einen Neustart des Diensts behoben werden.

CodeIntegrity:
===================================

Date: 2019-02-25 00:39:00.185
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-25 00:38:40.561
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-25 00:38:39.565
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-25 00:38:22.980
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-24 23:54:22.411
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-24 23:53:41.355
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-24 23:53:33.642
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

Date: 2019-02-24 23:53:29.722
Description: 
Code Integrity determined that a process (\Device\HarddiskVolume5\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe) attempted to load \Device\HarddiskVolume5\Program Files\Microsoft Silverlight\xapauthenticodesip.dll that did not meet the Custom 3 / Antimalware signing level requirements.

==================== Speicherinformationen =========================== 

Prozessor: Intel(R) Core(TM) i7-3770K CPU @ 3.50GHz
Prozentuale Nutzung des RAM: 21%
Installierter physikalischer RAM: 16312.69 MB
Verfügbarer physikalischer RAM: 12802.87 MB
Summe virtueller Speicher: 20024.69 MB
Verfügbarer virtueller Speicher: 15131.34 MB

==================== Laufwerke ================================

Drive c: (Windows) (Fixed) (Total:233.11 GB) (Free:111.95 GB) NTFS
Drive d: (System-reserviert) (Fixed) (Total:0.1 GB) (Free:0.06 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive e: (Fresslatte) (Fixed) (Total:931.5 GB) (Free:784.54 GB) NTFS
Drive f: (ICloud, Filme, TOR) (Fixed) (Total:298.09 GB) (Free:22.09 GB) NTFS
Drive g: (Platte) (Fixed) (Total:2794.52 GB) (Free:1089.91 GB) NTFS ==>[System mit Startkomponenten (eingeholt von Laufwerk)]
Drive h: (Gekrackte Spiele) (Fixed) (Total:279.46 GB) (Free:127.94 GB) NTFS

\\?\Volume{86c62333-0000-0000-0000-304d3a000000}\ () (Fixed) (Total:0 GB) (Free:0 GB) 
\\?\Volume{86c62333-0000-0000-0000-30823b000000}\ () (Fixed) (Total:0 GB) (Free:0 GB) 

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (Size: 931.5 GB) (Disk ID: E94FE94F)
Partition 1: (Active) - (Size=931.5 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (Size: 2794.5 GB) (Disk ID: 0D146A27)

Partition: GPT.

========================================================
Disk: 2 (MBR Code: Windows 7/8/10) (Size: 238.5 GB) (Disk ID: 86C62333)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=233.1 GB) - (Type=07 NTFS)
Partition 3: (Not Active) - (Size=510 MB) - (Type=27)
Partition 4: (Not Active) - (Size=450 MB) - (Type=07 NTFS)

========================================================
Disk: 3 (Size: 298.1 GB) (Disk ID: B8000000)
Partition 1: (Active) - (Size=298.1 GB) - (Type=07 NTFS)

========================================================
Disk: 4 (MBR Code: Windows XP) (Size: 279.5 GB) (Disk ID: A7A7A7A7)
Partition 1: (Not Active) - (Size=279.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================

M-K-D-B · 25.02.2019, 20:21

Servus,

und jetzt versuchen wir das Teil mit einem FRST-Fix wegzubekommen:

Schritt 1

Kopiere den gesamten Inhalt der folgenden Code-Box:

Code:

ATTFilter

Start::
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [] => [X]
BHO-x32: Wondershare AllMyTube 4.9.0 -> {067DF9EC-26B7-40DC-8DB8-CD8BE85AE367} -> Keine Datei
Handler: WSAllMyTubechrome - {0A0C95CF-A116-4C74 -  Keine Datei
FF SearchPlugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\searchplugins\bing-lavasoft-ff59.xml [2018-05-22]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [AllMyTube@Wondershare.com] - C:\ProgramData\Wondershare\AllMyTube\AllMyTube@Wondershare.com_xpi => nicht gefunden
GroupPolicy: Beschränkung ? <==== ACHTUNG
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Managed Extension Settings\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Preferences
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
HKLM\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo
HKLM\Software\Wow6432Node\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo
HKCU\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo
HKCU\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings|npdicihegicnhaangkdmcgbjceoemeo
CHR NewTab: Default ->  Active:"chrome-extension://npdicihegicnhaangkdmcgbjceoemeoo/newtab.html"
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile\preferences
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile\Secure Preferences
GroupPolicy: Beschränkung ? <==== ACHTUNG
ExportKey: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions
CMD: ipconfig /flushdns
CMD: netsh winsock reset
RemoveProxy:
EmptyTemp:
End::

Starte nun FRST und klicke direkt den Entfernen Button. Wichtig: Du brauchst den Inhalt der Code-Box nirgends einfügen, da sich FRST den Code aus der Zwischenablage holt!
Das Tool führt die gewünschten Schritte aus und erstellt eine fixlog.txt im selben Verzeichnis, in dem sich die FRST/FRST64.exe befindet.
Gegebenenfalls muss dein Rechner dafür neu gestartet werden.
Poste mir den Inhalt der fixlog.txt mit deiner nächsten Antwort.

Schritt 2

Starte die FRST.exe erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort

die Logdatei des FRST-Fix (fixlog.txt),
die beiden neuen Logdateien von FRST (FRST.txt und Addition.txt).

computerfrea · 26.02.2019, 10:01

Das hier schreibe ich mit Firefox und die *.txt habe ich erstellen lassen bevor ich gerade testweise Chrome gestartet habe.
Er hat mir mitgeteilt dass er 4 Extensions installiert hat und das blöde Yahoo Ding war natürlich wieder dabei.
(Auch zwei Extensions von Avira. Ich nutze inzwischen nur noch den Windows 10 internen Schutz und die beknackten Browsererweiterungen von Avira sowieso nicht daher dürfen die gerne komplett mitverschwinden falls möglich. Falls nicht werde ich mich danach halt selbst auf die Suche machen.)

Fixlog.txt:

Code:

ATTFilter

Entfernungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25.02.2019 01
durchgeführt von Michael (26-02-2019 09:40:22) Run:1
Gestartet von C:\Users\Michael\Desktop
Geladene Profile: Michael (Verfügbare Profile: Michael & sshd)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
CloseProcesses:
HKLM\...\Run: [] => [X]
HKLM-x32\...\Run: [] => [X]
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [] => [X]
BHO-x32: Wondershare AllMyTube 4.9.0 -> {067DF9EC-26B7-40DC-8DB8-CD8BE85AE367} -> Keine Datei
Handler: WSAllMyTubechrome - {0A0C95CF-A116-4C74 -  Keine Datei
FF SearchPlugin: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\searchplugins\bing-lavasoft-ff59.xml [2018-05-22]
FF HKLM-x32\...\Firefox\Extensions: [{ABDE892B-13A8-4d1b-88E6-365A6E755758}] - C:\ProgramData\RealNetworks\RealDownloader\BrowserPlugins\Firefox\Ext => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [netsight@nielsen.com] - C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\netsight@nielsen.xpi => nicht gefunden
FF HKLM-x32\...\Firefox\Extensions: [AllMyTube@Wondershare.com] - C:\ProgramData\Wondershare\AllMyTube\AllMyTube@Wondershare.com_xpi => nicht gefunden
GroupPolicy: Beschränkung ? <==== ACHTUNG
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Managed Extension Settings\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\npdicihegicnhaangkdmcgbjceoemeo
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Preferences
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences
HKLM\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo
HKLM\Software\Wow6432Node\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo
HKCU\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo
HKCU\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings|npdicihegicnhaangkdmcgbjceoemeo
CHR NewTab: Default ->  Active:"chrome-extension://npdicihegicnhaangkdmcgbjceoemeoo/newtab.html"
CHR HKLM-x32\...\Chrome\Extension: [npdicihegicnhaangkdmcgbjceoemeoo] - hxxps://clients2.google.com/service/update2/crx
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile\preferences
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile\Secure Preferences
GroupPolicy: Beschränkung ? <==== ACHTUNG
ExportKey: HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions
CMD: ipconfig /flushdns
CMD: netsh winsock reset
RemoveProxy:
EmptyTemp:

*****************

Prozesse erfolgreich geschlossen.
"HKLM\Software\Microsoft\Windows\CurrentVersion\Run\\" => erfolgreich entfernt
"HKLM\Software\WOW6432Node\Microsoft\Windows\CurrentVersion\Run\\" => erfolgreich entfernt
"HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Windows\CurrentVersion\Run\\" => erfolgreich entfernt
HKLM\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{067DF9EC-26B7-40DC-8DB8-CD8BE85AE367} => erfolgreich entfernt
HKLM\Software\Wow6432Node\Classes\CLSID\{067DF9EC-26B7-40DC-8DB8-CD8BE85AE367} => erfolgreich entfernt
HKLM\Software\Classes\PROTOCOLS\Handler\WSAllMyTubechrome => erfolgreich entfernt
C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\searchplugins\bing-lavasoft-ff59.xml => erfolgreich verschoben
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\{ABDE892B-13A8-4d1b-88E6-365A6E755758}" => erfolgreich entfernt
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\netsight@nielsen.com" => erfolgreich entfernt
"HKLM\Software\Wow6432Node\Mozilla\Firefox\Extensions\\AllMyTube@Wondershare.com" => erfolgreich entfernt
C:\Windows\system32\GroupPolicy\Machine => erfolgreich verschoben
C:\Windows\system32\GroupPolicy\GPT.ini => erfolgreich verschoben
C:\Windows\SysWOW64\GroupPolicy\GPT.ini => erfolgreich verschoben
"C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Extensions\npdicihegicnhaangkdmcgbjceoemeo" => nicht gefunden
"C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Local Extension Settings\npdicihegicnhaangkdmcgbjceoemeo" => nicht gefunden
"C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Managed Extension Settings\npdicihegicnhaangkdmcgbjceoemeo" => nicht gefunden
"C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Storage\ext\npdicihegicnhaangkdmcgbjceoemeo" => nicht gefunden
"C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Sync Extension Settings\npdicihegicnhaangkdmcgbjceoemeo" => nicht gefunden
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Preferences => erfolgreich verschoben
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences => erfolgreich verschoben
HKLM\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
HKLM\Software\Wow6432Node\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
HKCU\Software\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeo => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
HKCU\Software\Google\Chrome\PreferenceMACs\Default\extensions.settings|npdicihegicnhaangkdmcgbjceoemeo => Fehler: Kein automatisierter Fix für diesen Eintrag gefunden.
"NewTab" => nicht gefunden
HKLM\SOFTWARE\Wow6432Node\Google\Chrome\Extensions\npdicihegicnhaangkdmcgbjceoemeoo => erfolgreich entfernt
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile\preferences => erfolgreich verschoben
C:\Users\Michael\AppData\Local\Google\Chrome\User Data\System Profile\Secure Preferences => erfolgreich verschoben
"C:\Windows\system32\GroupPolicy\Machine" => nicht gefunden
================== ExportKey: ===================

[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Extensions]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Paths]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\Processes]
[HKLM\SOFTWARE\Microsoft\Windows Defender\Exclusions\TemporaryPaths]

=== Ende von ExportKey ===

========= ipconfig /flushdns =========


Windows-IP-Konfiguration

Der DNS-Aufl”sungscache wurde geleert.

========= Ende von CMD: =========


========= netsh winsock reset =========


Der Winsock-Katalog wurde zurckgesetzt.
Sie mssen den Computer neu starten, um den Vorgang abzuschlieáen.


========= Ende von CMD: =========


========= RemoveProxy: =========

HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer => erfolgreich entfernt
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Policies\Microsoft\Internet Explorer => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\.DEFAULT\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-19\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt
"HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\DefaultConnectionSettings" => erfolgreich entfernt
"HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Internet Settings\Connections\\SavedLegacySettings" => erfolgreich entfernt


========= Ende von RemoveProxy: =========


=========== EmptyTemp: ==========

BITS transfer queue => 11558912 B
DOMStore, IE Recovery, AppCache, Feeds Cache, Thumbcache, IconCache => 19604634 B
Java, Flash, Steam htmlcache => 706529406 B
Windows/system/drivers => 3335413 B
Edge => 2502008 B
Chrome => 105024053 B
Firefox => 23734462 B
Opera => 0 B

Temp, IE cache, history, cookies, recent:
Default => 12838 B
Users => 0 B
ProgramData => 0 B
Public => 0 B
systemprofile => 0 B
systemprofile32 => 0 B
LocalService => 0 B
LocalService => 0 B
NetworkService => 1184 B
NetworkService => 0 B
Michael => 10886356 B
sshd => 12838 B

RecycleBin => 2433650 B
EmptyTemp: => 844.6 MB temporäre Dateien entfernt.

================================


Das System musste neu gestartet werden.

==== Ende von Fixlog 09:40:38 ====

FRST:

Code:

ATTFilter

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 25.02.2019 01
durchgeführt von Michael (Administrator) auf MICHAEL-PC (26-02-2019 09:43:03)
Gestartet von C:\Users\Michael\Desktop\Frst
Geladene Profile: Michael (Verfügbare Profile: Michael & sshd)
Platform: Windows 10 Home Version 1809 17763.316 (X64) Sprache: Deutsch (Deutschland)
Standard-Browser: Edge
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\WinSxS\amd64_microsoft-windows-servicingstack_31bf3856ad364e35_10.0.17763.164_none_7e114a3d4d0589d4\TiWorker.exe
(Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(Adobe Systems, Incorporated -> Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe
(ICEpower a/s -> ICEpower) C:\Windows\System32\ICEsoundService64.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\Bonjour\mDNSResponder.exe
(TEFINCOM S.A. -> ) C:\Program Files (x86)\NordVPN\nordvpn-service.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\snmp.exe
(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\MsMpEng.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\mqsvc.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd) G:\Programme\Todo Backup\bin\Agent.exe
(ProtonVPN AG -> ) G:\Programme\ProtonVPN\ProtonVPNService.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe
(Microsoft Corporation -> Microsoft Corporation) C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.1902.2-0\NisSrv.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Google Inc -> Google Inc.) C:\Program Files (x86)\Google\Update\1.3.33.23\GoogleCrashHandler64.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\vds.exe
(Microsoft Corporation -> Microsoft Corporation) C:\Windows\SystemApps\Microsoft.MicrosoftEdge_8wekyb3d8bbwe\MicrosoftEdge.exe
() [Datei ist nicht signiert] C:\Program Files\WindowsApps\Microsoft.YourPhone_1.0.20453.0_x64__8wekyb3d8bbwe\YourPhone.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\browser_broker.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeCP.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MicrosoftEdgeSH.exe
(CHENGDU YIWO Tech Development Co., Ltd. -> ) G:\Programme\Todo Backup\bin\TodoBackupService.exe
(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe
(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iTunes\iTunesHelper.exe
(WhatPulse -> ) C:\Program Files (x86)\WhatPulse2\whatpulse.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files\iPod\bin\iPodService.exe
(Spotify AB -> Spotify Ltd) C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\APSDaemon.exe
(Noriyuki Miyazaki -> Crystal Dew World) G:\Programme\CrystalDiskInfo\DiskInfo32.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe
(Apple Inc. -> Apple Inc.) C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe
(Dropbox, Inc -> Dropbox, Inc.) C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
(Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\Persbackup.exe
(Oracle America, Inc. -> Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Apple Inc. -> Apple, Inc.) C:\Program Files (x86)\Common Files\Apple\Apple Application Support\secd.exe
(Valve -> Valve Corporation) G:\Programme\Steam\Steam.exe
(WhatPulse -> ) C:\Program Files (x86)\WhatPulse2\whatpulse-watchdog.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Malwarebytes Corporation -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMWsc.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe
(Valve -> Valve Corporation) G:\Programme\Steam\bin\cef\cef.win7x64\steamwebhelper.exe

==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [9279520 2019-01-11] (Realtek Semiconductor Corp. -> Realtek Semiconductor)
HKLM\...\Run: [iTunesHelper] => C:\Program Files\iTunes\iTunesHelper.exe [302904 2019-01-18] (Apple Inc. -> Apple Inc.)
HKLM-x32\...\Run: [Wondershare Helper Compact.exe] => C:\Program Files (x86)\Common Files\Wondershare\Wondershare Helper Compact\WSHelper.exe [2133216 2017-03-23] (Wondershare Technology Co.,Ltd -> Wondershare)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [601424 2018-12-16] (Oracle America, Inc. -> Oracle Corporation)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [whatpulse] => C:\Program Files (x86)\WhatPulse2\whatpulse.exe [3377376 2018-11-16] (WhatPulse -> )
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Spotify] => C:\Users\Michael\AppData\Roaming\Spotify\Spotify.exe [26118888 2019-02-13] (Spotify AB -> Spotify Ltd)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudServices] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudServices.exe [67384 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [iCloudDrive] => C:\Program Files (x86)\Common Files\Apple\Internet Services\iCloudDrive.exe [110392 2018-10-01] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [ApplePhotoStreams] => C:\Program Files (x86)\Common Files\Apple\Internet Services\ApplePhotoStreams.exe [67896 2019-01-15] (Apple Inc. -> Apple Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [Dropbox Update] => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe [143144 2016-10-07] (Dropbox, Inc -> Dropbox, Inc.)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Run: [TunnelBear] => G:\Programme\TunnelBear\TunnelBear.UI.exe [1047936 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Policies\Explorer: [NoSecurityTab] 1
HKLM\...\Drivers32: [VIDC.FPS1] => C:\WINDOWS\system32\frapsv64.dll [71680 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\system32\vorbis.acm [1470976 2015-03-11] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.FPS1] => C:\Windows\SysWOW64\frapsvid.dll [65536 2013-02-26] (Beepa P/L) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.vorbis] => C:\WINDOWS\SysWOW64\vorbis.acm [1554944 2009-09-15] (HMS hxxp://hp.vector.co.jp/authors/VA012897/) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.voxacm160] => C:\Windows\SysWOW64\vct3216.acm [82944 2003-05-21] (Voxware, Inc.) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.scg726] => C:\Windows\SysWOW64\scg726.acm [13239 2000-03-14] (SHARP Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.alf2cd] => C:\Windows\SysWOW64\alf2cd.acm [38912 2003-05-21] (NCT Company) [Datei ist nicht signiert]
HKLM\...\Drivers32: [msacm.ac3acm] => C:\Windows\SysWOW64\AC3ACM.acm [81920 2004-02-04] (fccHandler) [Datei ist nicht signiert]
HKLM\...\Drivers32-x32: [msacm.lame] => lame.ax
HKLM\...\Drivers32: [vidc.dvsd] => C:\Windows\SysWOW64\mcdvd_32.dll [261632 2003-05-21] (MainConcept) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mpg4] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp42] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.mp43] => C:\Windows\SysWOW64\mpg4c32.dll [413760 2002-08-19] (Microsoft Corporation) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.xvid] => C:\Windows\SysWOW64\xvidvfw.dll [139264 2004-07-03] () [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.DIVX] => C:\Windows\SysWOW64\DivX.dll [638976 2003-05-22] (DivXNetworks, Inc.) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP60] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP61] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.VP62] => C:\Windows\SysWOW64\vp6vfw.dll [438272 2004-12-10] (On2.com) [Datei ist nicht signiert]
HKLM\...\Drivers32: [vidc.LAGS] => C:\Windows\SysWOW64\lagarith.dll [216064 2011-12-07] ( ) [Datei ist nicht signiert]
HKLM\...\Drivers32: [VIDC.ZMBV] => C:\Windows\SysWOW64\zmbv.dll [94208 2010-04-09] () [Datei ist nicht signiert]
HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\72.0.3626.119\Installer\chrmstp.exe [2019-02-26] (Google LLC -> Google Inc.)
HKLM\Software\...\Authentication\Credential Providers: [{503739d0-4c5e-4cfd-b3ba-d881334f0df2}] -> 
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\GigaTribe.lnk [2017-01-03]
ShortcutTarget: GigaTribe.lnk -> G:\Programme\GigaTribe\gigatribe.exe (Gigatribe -> Gigatribe)
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Persbackup.lnk [2017-12-28]
ShortcutTarget: Persbackup.lnk -> C:\Program Files\Personal Backup 5\Persbackup.exe (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert]
Startup: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Steam.lnk [2014-07-21]
ShortcutTarget: Steam.lnk -> G:\Programme\Steam\Steam.exe (Valve -> Valve Corporation)

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{81299b37-ca74-45f0-bb98-ac773480681d}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.microsoft.com/isapi/redir.dll?prd=ie&ar=iesearch
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://de.yahoo.com/?fr=yset_ie_syc_oracle&type=orcl_hpset
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKLM-x32 -> DefaultScope Wert fehlt
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
SearchScopes: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxps://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02&pc=UE04
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_201\bin\ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_201\bin\jp2ssv.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
DPF: HKLM-x32 {6C269571-C6D7-4818-BCA4-32A035E8C884} hxxp://files.creative.com/Web/softwareupdate/su/ocx/15102/CTSUEng.cab
DPF: HKLM-x32 {D4B68B83-8710-488B-A692-D74B50BA558E} hxxp://ccfiles.creative.com/Web/softwareupdate/ocx/15113/CTPIDPDE.cab
DPF: HKLM-x32 {E705A591-DA3C-4228-B0D5-A356DBA42FBF} hxxp://files.creative.com/Web/softwareupdate/su2/ocx/20015/CTSUEng.cab
DPF: HKLM-x32 {F6ACF75C-C32C-447B-9BEF-46B766368D29} hxxp://files.creative.com/Web/softwareupdate/ocx/150323/CTPID.cab

Edge: 
======
Edge Session Restore: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000 -> ist aktiviert.

FireFox:
========
FF ProfilePath: C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default [2019-02-26]
FF Homepage: Mozilla\Firefox\Profiles\s12ar7zc.default -> hxxp://www.google.de
FF NetworkProxy: Mozilla\Firefox\Profiles\s12ar7zc.default -> backup.ftp", "127.0.0.1"
FF Session Restore: Mozilla\Firefox\Profiles\s12ar7zc.default -> ist aktiviert.
FF Extension: (Bookmarks Organizer) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\bookmarksorganizer@agenedia.com.xpi [2019-01-27]
FF Extension: (HTTPS Everywhere) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\https-everywhere@eff.org.xpi [2019-02-01]
FF Extension: (ProxTube) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\ich@maltegoetz.de.xpi [2018-09-13]
FF Extension: (PDF Mage) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\jid1-GeRCnsiDhZiTvA@jetpack.xpi [2018-12-28]
FF Extension: (404 Bookmarks) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{5f8d31ba-47fb-4b70-bf8d-d2113f6da22f}.xpi [2018-09-15]
FF Extension: (Adblock Plus - kostenloser Adblocker) - C:\Users\Michael\AppData\Roaming\Mozilla\Firefox\Profiles\s12ar7zc.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2019-01-24]
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_32_0_0_142.dll [2019-02-14] (Adobe Systems Incorporated -> )
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (Electronic Arts -> EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\dtplugin\npDeployJava1.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.201.2 -> C:\Program Files\Java\jre1.8.0_201\bin\plugin2\npjp2.dll [2019-01-20] (Oracle America, Inc. -> Oracle Corporation)
FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.2.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.3 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.4 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin: @videolan.org/vlc,version=3.0.6 -> G:\Programme\VLC\npvlc.dll [2019-01-10] (VideoLAN -> VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_32_0_0_142.dll [2019-02-14] (Adobe Systems Incorporated -> )
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (Electronic Arts -> EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google Inc -> Google)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\5.1.50918.0\npctrl.dll [2018-10-23] (Microsoft Corporation ->  Microsoft Corporation)
FF Plugin-x32: @nielsen/FirefoxTracker -> C:\Program Files (x86)\NetRatingsNetSight\NetSight\meter1\FirefoxAddOns\npfirefoxtracker.dll [Keine Datei]
FF Plugin-x32: @nullsoft.com/winampDetector;version=1 -> G:\Programme\Winamp Detect\npwachk.dll [2013-12-13] (Nullsoft, Inc.) [Datei ist nicht signiert]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.33.23\npGoogleUpdate3.dll [2018-12-19] (Google Inc -> Google Inc.)
FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2019-02-01] (Adobe Systems, Incorporated -> Adobe Systems Inc.)
StartMenuInternet: Firefox-E6D11708B02F97DD - G:\Programme\Firefox\firefox.exe

Chrome: 
=======
CHR HKLM\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx
CHR HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\SOFTWARE\Google\Chrome\Extensions\...\Chrome\Extension: [lmjegmlicamnimmfhcmpkclmigmmcbeh] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [caljgklbbfbcjjanaijlacgncafpegll] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [efaidnbmnnnibpcajpcglclefindmkaj] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [fabhkdeopjkcpkmofliimbjckmocfiom] - hxxps://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

Opera: 
=======
StartMenuInternet: (HKLM) Opera - C:\Program Files\Opera x64\Opera.exe

==================== Dienste (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 Apple Mobile Device Service; C:\Program Files\Common Files\Apple\Mobile Device Support\AppleMobileDeviceService.exe [85304 2018-10-16] (Apple Inc. -> Apple Inc.)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [6893704 2018-07-15] (BattlEye Innovations e.K. -> )
S4 BetterHashPrelogin; G:\Programme\BetterHash\prelogin.exe [621640 2018-02-16] (Innovative Solutions Grup SRL -> )
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-07-19] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2008-11-18] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 EaseUS Agent; G:\Programme\Todo Backup\bin\Agent.exe [40080 2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [779392 2018-06-24] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)
R2 ICEsoundService; C:\Windows\system32\ICEsoundService64.exe [807808 2019-01-11] (ICEpower a/s -> ICEpower)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1050\Intel 32\IDriverT.exe [73728 2004-10-22] (Macrovision Corporation) [Datei ist nicht signiert]
R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\mbamservice.exe [6562472 2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
S4 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [50688 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 nordvpn-service; C:\Program Files (x86)\NordVPN\nordvpn-service.exe [184784 2018-12-04] (TEFINCOM S.A. -> )
S3 Origin Client Service; G:\Programme\Origin\OriginClientService.exe [2298688 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S2 Origin Web Helper Service; G:\Programme\Origin\OriginWebHelperService.exe [3171144 2019-01-24] (Electronic Arts, Inc. -> Electronic Arts)
S4 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [66048 2013-05-16] (Hewlett-Packard) [Datei ist nicht signiert]
R2 ProtonVPN Service; G:\Programme\ProtonVPN\ProtonVPNService.exe [38664 2018-10-17] (ProtonVPN AG -> )
S3 rpcapd; C:\Program Files (x86)\WinPcap\rpcapd.exe [118520 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R2 SNMP; C:\Windows\System32\snmp.exe [53248 2018-12-08] (Microsoft Windows -> Microsoft Corporation)
S3 sshd; C:\Windows\System32\OpenSSH\sshd.exe [974848 2018-12-08] (Microsoft Windows -> )
S3 TunnelBearMaintenance; G:\Programme\TunnelBear\TBear.Maintenance.exe [38272 2016-12-09] (TunnelBear, Inc. -> TunnelBear)
S3 VBoxSDS; G:\Programme\OracleVM VirtualBox\VBoxSDS.exe [690424 2019-01-25] (Oracle Corporation -> Oracle Corporation)
R3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\NisSrv.exe [4098064 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MsMpEng.exe [113992 2019-02-23] (Microsoft Corporation -> Microsoft Corporation)
R2 NVDisplay.ContainerLocalSystem; "C:\Program Files\NVIDIA Corporation\Display.NvContainer\NVDisplay.Container.exe" -s NVDisplay.ContainerLocalSystem -f "C:\ProgramData\NVIDIA\NVDisplay.ContainerLocalSystem.log" -l 3 -d "C:\Program Files\NVIDIA Corporation\Display.NvContainer\plugins\LocalSystem" -r -p 30000 
R2 NvTelemetryContainer; "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\NvTelemetryContainer.exe" -s NvTelemetryContainer -f "C:\ProgramData\NVIDIA\NvTelemetryContainer.log" -l 3 -d "C:\Program Files (x86)\NVIDIA Corporation\NvTelemetry\plugins" -r

===================== Treiber (Nicht auf der Ausnahmeliste) ======================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R3 AmUStor; C:\Windows\system32\drivers\AmUStor.SYS [109504 2018-11-28] (Alcorlink Corp. -> )
S0 asahci64; C:\Windows\System32\drivers\asahci64.sys [36448 2011-01-30] (ASMedia Technology Inc. -> Asmedia Technology)
R0 asstahci64; C:\Windows\System32\drivers\asstahci64.sys [98696 2019-02-03] (ASMedia Technology Inc. -> Asmedia Technology)
S3 avmaura; C:\Windows\System32\drivers\avmaura.sys [116480 2015-11-20] (AVM Computersysteme Vertriebs GmbH -> AVM Berlin)
S3 BstkDrv; C:\Program Files (x86)\BlueStacks\BstkDrv.sys [269408 2018-01-09] (Bluestack Systems, Inc. -> Bluestack System Inc. )
S3 epmntdrv; C:\Windows\system32\epmntdrv.sys [34496 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> )
R0 EPMVolFlt; C:\Windows\System32\drivers\EPMVolFlt.sys [30416 2018-10-18] (CHENGDU YIWO Tech Development Co., Ltd. -> Windows (R) Codename Longhorn DDK provider)
R1 ESProtectionDriver; C:\Windows\system32\drivers\mbae64.sys [153328 2019-01-08] (Malwarebytes Corporation -> Malwarebytes)
R0 EUBAKUP; C:\Windows\System32\drivers\eubakup.sys [73328 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R0 EUBKMON; C:\Windows\System32\drivers\EUBKMON.sys [53360 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> )
R1 EUDSKACS; C:\Windows\system32\drivers\eudskacs.sys [22640 2018-05-15] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
R1 EUFDDISK; C:\Windows\system32\drivers\EuFdDisk.sys [341104 2018-07-28] (Microsoft Windows Hardware Compatibility Publisher -> CHENGDU YIWO Tech Development Co., Ltd)
S3 EuGdiDrv; C:\Windows\system32\EuGdiDrv.sys [10848 2018-10-24] (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Datei ist nicht signiert]
R3 EuMusDesignVirtualAudioCableWdm; C:\Windows\system32\DRIVERS\vrtaucbl.sys [110368 2014-05-30] (Muzychenko Evgenii Viktorovich -> Eugene V. Muzychenko)
R0 hotcore3; C:\Windows\System32\DRIVERS\hotcore3.sys [33968 2015-08-26] (Paragon Software GmbH -> Paragon Software Group)
R1 HWiNFO32; C:\WINDOWS\SysWOW64\drivers\HWiNFO64A.SYS [27552 2017-05-31] (Martin Malik - REALiX -> REALiX(tm))
S4 IObitUnlocker; G:\Programme\IObit Unlocker\IObitUnlocker.sys [66824 2017-06-15] (IObit Information Technology -> IObit)
R1 ISODrive; G:\Programme\UltraISO\drivers\ISODrv64.sys [115448 2013-11-21] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
S3 jakstaVA; C:\Windows\system32\DRIVERS\jaksta_va.sys [103816 2017-02-23] (Jaksta Technologies Pty Ltd -> e2eSoft)
S3 KMWDFILTER; C:\Windows\System32\drivers\KMWDFILTER.sys [30208 2009-04-29] (MLK Technologies Limited -> Windows (R) Codename Longhorn DDK provider)
R2 lirsgt; C:\Windows\System32\DRIVERS\lirsgt.sys [43168 2014-07-23] (Tages SA -> )
R2 MBAMChameleon; C:\Windows\System32\Drivers\MbamChameleon.sys [198512 2019-02-25] (Malwarebytes Corporation -> Malwarebytes)
S0 MbamElam; C:\Windows\System32\DRIVERS\MbamElam.sys [20936 2019-02-01] (Microsoft Windows Early Launch Anti-Malware Publisher -> Malwarebytes)
R3 MBAMFarflt; C:\Windows\System32\DRIVERS\farflt.sys [127136 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMProtection; C:\Windows\system32\DRIVERS\mbam.sys [72864 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\System32\Drivers\mbamswissarmy.sys [274416 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R3 MBAMWebProtection; C:\Windows\system32\DRIVERS\mwac.sys [114040 2019-02-26] (Malwarebytes Corporation -> Malwarebytes)
R2 npf; C:\WINDOWS\system32\drivers\npf.sys [36600 2013-03-01] (Riverbed Technology, Inc. -> Riverbed Technology, Inc.)
R3 nvlddmkm; C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_01c064f3d89f92be\nvlddmkm.sys [20424640 2019-01-20] (NVIDIA Corporation -> NVIDIA Corporation)
R3 P17; C:\Windows\system32\drivers\P17.sys [1289216 2009-08-03] (Microsoft Windows Hardware Compatibility Publisher -> Creative Technology Ltd.)
S3 pmxdrv; C:\WINDOWS\system32\drivers\pmxdrv.sys [31152 2017-11-25] (PAIPTAC  Driver -> )
R3 rt640x64; C:\Windows\System32\drivers\rt640x64.sys [1122200 2019-01-11] (Realtek Semiconductor Corp. -> Realtek )
S3 semav6msr64; C:\WINDOWS\system32\drivers\semav6msr64.sys [21984 2016-10-18] (Intel(R) Code Signing External -> )
R0 speedfan; C:\Windows\SysWow64\speedfan.sys [28664 2012-12-29] (SOKNO S.R.L. -> Almico Software)
S3 tap-tb-0901; C:\Windows\System32\drivers\tap-tb-0901.sys [38656 2016-10-17] (TunnelBear, Inc. -> The OpenVPN Project)
R3 tap0901; C:\Windows\System32\drivers\tap0901.sys [27136 2016-04-21] (OpenVPN Technologies, Inc. -> The OpenVPN Project)
R3 tapnordvpn; C:\Windows\System32\drivers\tapnordvpn.sys [44896 2018-06-13] (TEFINCOM S.A. -> The OpenVPN Project)
R3 tapprotonvpn; C:\Windows\System32\drivers\tapprotonvpn.sys [44976 2018-06-01] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)
S3 teVirtualMIDI64; C:\Windows\system32\DRIVERS\teVirtualMIDI64.sys [41016 2016-08-31] (Tobias Erichsen -> Tobias Erichsen)
R1 UimBus; C:\Windows\System32\drivers\UimBus.sys [102576 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_DEVIM; C:\Windows\System32\drivers\uim_devim.sys [25904 2015-08-26] (Paragon Software GmbH -> )
R1 Uim_IM; C:\Windows\System32\drivers\uim_im.sys [701232 2015-08-26] (Paragon Software GmbH -> )
S3 USBAAPL64; C:\Windows\System32\Drivers\usbaapl64.sys [54784 2015-06-10] (Microsoft Windows Hardware Compatibility Publisher -> Apple, Inc.)
R3 USBPcap; C:\Windows\system32\DRIVERS\USBPcap.sys [41720 2016-04-05] (Wireshark Foundation, Inc. -> USBPcap)
R3 VBAudioVMVAIOMME; C:\Windows\system32\DRIVERS\vbaudio_vmvaio64_win7.sys [41192 2017-10-12] (Vincent Burel -> Windows (R) Win 7 DDK provider)
R3 VBoxNetAdp; C:\Windows\system32\DRIVERS\VBoxNetAdp6.sys [235832 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 VBoxNetLwf; C:\Windows\system32\DRIVERS\VBoxNetLwf.sys [247216 2019-01-28] (Oracle Corporation -> Oracle Corporation)
R1 veracrypt; C:\Windows\System32\drivers\veracrypt.sys [828776 2018-09-23] (IDRIX -> IDRIX)
S0 WdBoot; C:\Windows\System32\drivers\wd\WdBoot.sys [46472 2019-02-23] (Microsoft Windows Early Launch Anti-Malware Publisher -> Microsoft Corporation)
S3 WDC_SAM; C:\Windows\System32\drivers\wdcsam64.sys [26880 2015-11-12] (WDKTestCert wdclab,130885612892544312 -> Western Digital Technologies, Inc.)
R0 WdFilter; C:\Windows\System32\drivers\wd\WdFilter.sys [333792 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WdNisDrv; C:\Windows\System32\drivers\wd\WdNisDrv.sys [62432 2019-02-23] (Microsoft Windows -> Microsoft Corporation)
R3 WsAudioDevice_383; C:\Windows\system32\drivers\VirtualAudio.sys [39112 2017-03-29] (Wondershare Technology Co.,Ltd -> Wondershare)
U3 idsvc; kein ImagePath

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat (erstellte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-02-26 09:42 - 2019-02-26 09:43 - 000000000 ____D C:\Users\Michael\Desktop\Frst
2019-02-26 09:41 - 2019-02-26 09:41 - 000274416 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamswissarmy.sys
2019-02-26 09:41 - 2019-02-26 09:41 - 000127136 _____ (Malwarebytes) C:\Windows\system32\Drivers\farflt.sys
2019-02-26 09:41 - 2019-02-26 09:41 - 000114040 _____ (Malwarebytes) C:\Windows\system32\Drivers\mwac.sys
2019-02-26 09:41 - 2019-02-26 09:41 - 000072864 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2019-02-25 19:21 - 2019-02-25 19:21 - 000198512 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamChameleon.sys
2019-02-24 23:52 - 2019-02-24 23:52 - 000000000 ____D C:\Users\Michael\AppData\Local\mbam
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\Users\Michael\AppData\Local\mbamtray
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes
2019-02-24 23:51 - 2019-02-24 23:51 - 000000000 ____D C:\ProgramData\Malwarebytes
2019-02-24 23:51 - 2019-02-01 11:20 - 000020936 _____ (Malwarebytes) C:\Windows\system32\Drivers\MbamElam.sys
2019-02-24 23:51 - 2019-01-08 15:32 - 000153328 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbae64.sys
2019-02-24 05:37 - 2019-02-26 09:43 - 000000000 ____D C:\FRST
2019-02-23 09:02 - 2019-02-23 09:02 - 002870767 _____ C:\Users\Michael\Desktop\RathausRevue-Nr22_final.pdf
2019-02-23 01:08 - 2019-02-23 01:08 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Dropbox
2019-02-22 21:47 - 2019-02-22 21:47 - 000000000 ____D C:\Users\Michael\AppData\Local\IsolatedStorage
2019-02-21 00:16 - 2019-02-21 00:16 - 000000000 ____D C:\Users\Michael\Documents\Flower
2019-02-19 00:38 - 2019-02-19 00:38 - 000000000 ____D C:\Users\Michael\OnionShare
2019-02-13 15:44 - 2019-02-13 15:44 - 026807296 _____ (Microsoft Corporation) C:\Windows\system32\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 023439360 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 020812288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\edgehtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 019023872 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 007883776 _____ (Microsoft Corporation) C:\Windows\system32\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006540424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 006070272 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Chakra.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 005086208 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004885504 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004688896 _____ (Microsoft Corporation) C:\Windows\system32\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 004627456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003922944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msi.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 003743744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002927120 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\tcpip.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002626592 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ntfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 002469648 _____ (Microsoft Corporation) C:\Windows\system32\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 002323696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msmpeg2vdec.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001969680 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 001700864 _____ (Microsoft Corporation) C:\Windows\system32\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001671864 _____ (Microsoft Corporation) C:\Windows\system32\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001484800 _____ (Microsoft Corporation) C:\Windows\SysWOW64\GdiPlus.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001467560 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32full.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001387520 _____ (Microsoft Corporation) C:\Windows\system32\bcastdvruserservice.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msjet40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 001309696 _____ (Microsoft Corporation) C:\Windows\system32\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000982032 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\refsv1.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000972288 _____ (Microsoft Corporation) C:\Windows\system32\StorSvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000912384 _____ (Microsoft Corporation) C:\Windows\system32\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000833536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webplatstorageserver.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000769536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srv2.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000663040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\EdgeManager.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000577536 _____ (Microsoft Corporation) C:\Windows\system32\netprofmsvc.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000475152 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\FWPKCLNT.SYS
2019-02-13 15:44 - 2019-02-13 15:44 - 000421904 _____ (Microsoft Corporation) C:\Windows\system32\MSAudDecMFT.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000352768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd3x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000340480 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000313344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrd2x40.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000293376 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\srvnet.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000100352 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cdfs.sys
2019-02-13 15:44 - 2019-02-13 15:44 - 000059392 _____ (Microsoft Corporation) C:\Windows\system32\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000044032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mf3216.dll
2019-02-13 15:44 - 2019-02-13 15:44 - 000039936 _____ (Microsoft Corporation) C:\Windows\system32\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:44 - 009683984 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 007645600 _____ (Microsoft Corporation) C:\Windows\system32\Windows.Media.Protection.PlayReady.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 003662336 _____ (Microsoft Corporation) C:\Windows\system32\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002721280 _____ (Microsoft Corporation) C:\Windows\SysWOW64\win32kfull.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 002437552 _____ (Microsoft Corporation) C:\Windows\system32\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 002021584 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml6.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 001255736 _____ (Microsoft Corporation) C:\Windows\system32\hvix64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050936 _____ (Microsoft Corporation) C:\Windows\system32\hvax64.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 001050624 _____ (Microsoft Corporation) C:\Windows\system32\MPSSVC.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000982576 _____ (Microsoft Corporation) C:\Windows\system32\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000765960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\winhttp.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000543744 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000463672 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000461824 _____ (Microsoft Corporation) C:\Windows\system32\WpAXHolder.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000419128 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\fastfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000402944 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\exfat.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000387384 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000090424 _____ (Microsoft Corporation) C:\Windows\system32\hvloader.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000047136 _____ (Microsoft Corporation) C:\Windows\system32\browser_broker.exe
2019-02-13 15:43 - 2019-02-13 15:43 - 000046080 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\hidparse.sys
2019-02-13 15:43 - 2019-02-13 15:43 - 000039304 _____ (Microsoft Corporation) C:\Windows\system32\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000033056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\NtlmShared.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\npmproxy.dll
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth8.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth7.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth6.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth5.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth4.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth3.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth2.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000315 _____ C:\Windows\system32\DrtmAuth1.bin
2019-02-13 15:43 - 2019-02-13 15:43 - 000000072 _____ C:\Windows\system32\edgehtmlpluginpolicy.bin
2019-02-10 21:36 - 2019-02-10 21:36 - 000626634 _____ C:\Users\Michael\Desktop\dl-praesentation.pdf
2019-02-07 02:13 - 2019-02-08 11:34 - 023578051 _____ C:\Users\Michael\Desktop\Stefan Nixdorf - Commodus Part 2 The Menace.mp4
2019-02-06 18:17 - 2019-02-06 18:20 - 000000000 ____D C:\Users\Michael\VirtualBox VMs
2019-02-06 18:10 - 2019-02-06 18:10 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Oracle VM VirtualBox
2019-02-06 18:04 - 2019-02-06 18:04 - 001779329 _____ C:\Users\Michael\Desktop\Anhang_Themendienst_ETCS-data.pdf
2019-02-06 15:39 - 2019-02-06 15:39 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\EaseUS Todo Backup 11.5
2019-02-06 15:38 - 2018-08-14 09:40 - 000026256 _____ (CHENGDU YIWO Tech Development Co., Ltd) C:\Windows\system32\fbnative.exe
2019-02-05 08:05 - 2019-02-24 00:47 - 000017525 _____ C:\Users\Michael\Desktop\_Stundennachweis - Abrechung Ausdruck ZVMC.ods
2019-02-05 07:46 - 2019-02-05 07:47 - 000000000 ____D C:\Program Files\Recuva
2019-02-05 07:46 - 2019-02-05 07:46 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Recuva
2019-02-05 01:25 - 2019-02-18 01:30 - 000000214 _____ C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job
2019-02-03 08:06 - 2019-02-03 08:06 - 000098696 _____ (Asmedia Technology) C:\Windows\system32\Drivers\asstahci64.sys
2019-02-01 14:04 - 2019-02-01 14:04 - 000000000 ____D C:\Users\Michael\Desktop\Spiele
2019-01-29 06:49 - 2019-01-29 06:49 - 000001948 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ATTO Disk Benchmark.lnk
2019-01-28 02:14 - 2019-01-28 02:14 - 000247216 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetLwf.sys
2019-01-28 02:14 - 2019-01-28 02:14 - 000235832 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxNetAdp6.sys

==================== Ein Monat (geänderte) ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2019-02-26 09:42 - 2015-01-31 23:20 - 000000000 ____D C:\Users\Michael\AppData\Local\whatpulse
2019-02-26 09:42 - 2015-01-25 00:49 - 000000000 ___RD C:\Users\Michael\iCloudDrive
2019-02-26 09:42 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Spotify
2019-02-26 09:41 - 2018-12-08 19:07 - 000000006 ____H C:\Windows\Tasks\SA.DAT
2019-02-26 09:41 - 2018-09-15 08:33 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft
2019-02-26 09:41 - 2018-09-15 08:31 - 000000000 ____D C:\Windows\INF
2019-02-26 09:41 - 2017-07-25 15:37 - 000000000 ____D C:\ProgramData\NVIDIA
2019-02-26 09:41 - 2015-11-26 23:20 - 000000008 __RSH C:\ProgramData\ntuser.pol
2019-02-26 09:40 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\GroupPolicy
2019-02-26 09:40 - 2018-09-15 07:09 - 000524288 _____ C:\Windows\system32\config\BBI
2019-02-26 09:40 - 2009-07-14 04:20 - 000000000 ___HD C:\Windows\system32\GroupPolicy
2019-02-26 09:37 - 2018-12-08 18:57 - 000000000 ____D C:\Windows\system32\SleepStudy
2019-02-26 02:21 - 2018-12-08 19:07 - 000004166 _____ C:\Windows\System32\Tasks\User_Feed_Synchronization-{B0378A27-122D-4BCB-88AD-AA674EF080DB}
2019-02-26 01:21 - 2018-12-08 16:28 - 000000000 ___DC C:\Windows\Panther
2019-02-26 01:21 - 2016-11-25 15:01 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\Mozilla
2019-02-26 01:18 - 2014-07-19 21:37 - 000002259 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2019-02-25 19:22 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Spotify
2019-02-25 19:14 - 2015-11-22 19:23 - 000000600 _____ C:\Users\Michael\AppData\Local\PUTTY.RND
2019-02-25 18:42 - 2017-09-15 21:09 - 000000000 ____D C:\Users\Michael\AppData\Local\PingPlotter 5
2019-02-25 17:50 - 2018-09-15 08:33 - 000000000 ___HD C:\Program Files\WindowsApps
2019-02-25 17:50 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\AppReadiness
2019-02-24 23:51 - 2018-09-15 08:33 - 000000000 ___HD C:\Windows\ELAMBKUP
2019-02-24 23:48 - 2019-01-02 09:00 - 000000000 ____D C:\Users\Michael\AppData\Roaming\IObit
2019-02-24 23:48 - 2017-05-31 23:54 - 000000000 ____D C:\ProgramData\ProductData
2019-02-24 02:11 - 2014-07-23 15:16 - 000000000 ____D C:\Users\Michael\Desktop\Bereinigungsprogramme
2019-02-24 02:08 - 2018-12-08 19:07 - 000003928 _____ C:\Windows\System32\Tasks\CCleaner Update
2019-02-24 02:06 - 2014-07-22 01:05 - 000000000 ____D C:\ProgramData\Origin
2019-02-24 02:05 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Origin
2019-02-24 02:04 - 2018-12-11 22:34 - 000000000 ____D C:\Users\Michael\AppData\Roaming\OnionShare
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files\OBS
2019-02-24 02:04 - 2015-04-08 21:05 - 000000000 ____D C:\Program Files (x86)\OBS
2019-02-24 00:50 - 2018-03-02 05:42 - 000000000 ____D C:\Users\Michael\.VirtualBox
2019-02-24 00:44 - 2019-01-02 10:36 - 000000000 ____D C:\ProgramData\VirtualBox
2019-02-23 19:42 - 2018-05-18 04:35 - 000000000 ____D C:\Windows\system32\Drivers\wd
2019-02-23 01:08 - 2014-07-20 12:33 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Dropbox
2019-02-22 21:47 - 2016-12-08 18:26 - 000000000 ____D C:\Users\Michael\AppData\Roaming\TunnelBear
2019-02-22 09:20 - 2017-01-06 22:05 - 000000000 ____D C:\Users\Michael\AppData\Roaming\vlc
2019-02-21 20:37 - 2017-11-16 03:31 - 000002457 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk
2019-02-20 01:01 - 2014-07-20 12:28 - 000000000 ____D C:\Users\Michael\AppData\Local\Ubisoft Game Launcher
2019-02-19 00:38 - 2018-12-08 19:01 - 000000000 ____D C:\Users\Michael
2019-02-18 15:23 - 2017-09-15 22:03 - 000000827 _____ C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Firefox.lnk
2019-02-18 01:35 - 2018-09-15 08:23 - 000000000 ____D C:\Windows\CbsTemp
2019-02-18 01:28 - 2014-07-21 20:47 - 000000000 ____D C:\Users\Michael\Desktop\Icons
2019-02-18 01:11 - 2019-01-02 09:05 - 000000000 ____D C:\Users\Michael\AppData\LocalLow\IObit
2019-02-18 01:11 - 2019-01-02 09:00 - 000000000 ____D C:\ProgramData\IObit
2019-02-14 16:04 - 2018-12-08 19:07 - 000004534 _____ C:\Windows\System32\Tasks\Adobe Flash Player PPAPI Notifier
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\SysWOW64\Macromed
2019-02-14 16:04 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\Macromed
2019-02-14 15:51 - 2018-12-08 19:07 - 000004636 _____ C:\Windows\System32\Tasks\Adobe Flash Player NPAPI Notifier
2019-02-13 21:29 - 2018-12-08 18:57 - 000585952 _____ C:\Windows\system32\FNTCACHE.DAT
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\appraiser
2019-02-13 20:53 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\bcastdvr
2019-02-13 15:42 - 2014-07-19 22:02 - 000000000 ____D C:\Windows\system32\MRT
2019-02-13 15:39 - 2014-07-19 22:02 - 129330784 ____C (Microsoft Corporation) C:\Windows\system32\MRT.exe
2019-02-12 13:57 - 2018-12-08 19:07 - 000004562 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task
2019-02-11 23:26 - 2018-09-15 18:34 - 000000000 ____D C:\Windows\system32\OpenSSH
2019-02-09 10:29 - 2016-10-07 17:09 - 000001254 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job
2019-02-09 10:29 - 2016-10-07 17:09 - 000001202 _____ C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job
2019-02-08 12:26 - 2015-01-25 23:39 - 000000000 ____D C:\Users\Michael\AppData\Roaming\PersBackup5
2019-02-08 10:51 - 2018-12-08 19:07 - 000004408 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3
2019-02-08 10:51 - 2018-12-08 19:07 - 000004032 _____ C:\Windows\System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318
2019-02-07 16:42 - 2016-07-28 17:12 - 000000000 ____D C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Cain
2019-02-06 18:12 - 2017-10-24 03:54 - 000000000 ____D C:\Users\Michael\Documents\PersBackup
2019-02-06 15:39 - 2018-03-02 21:30 - 000000000 ____D C:\ProgramData\SystemAcCrux
2019-02-04 16:40 - 2017-05-15 13:48 - 000000000 ____D C:\ProgramData\Package Cache
2019-02-04 16:40 - 2014-07-20 01:28 - 000000000 ____D C:\ProgramData\Avira
2019-02-04 16:39 - 2018-09-15 07:09 - 000032768 _____ C:\Windows\system32\config\ELAM
2019-02-04 16:30 - 2018-12-08 19:09 - 001968014 _____ C:\Windows\system32\PerfStringBackup.INI
2019-02-04 16:30 - 2018-09-15 18:33 - 000805258 _____ C:\Windows\system32\perfh007.dat
2019-02-04 16:30 - 2018-09-15 18:33 - 000172634 _____ C:\Windows\system32\perfc007.dat
2019-02-04 15:55 - 2018-09-15 08:33 - 000000000 ___RD C:\Program Files\Windows Defender
2019-02-04 15:45 - 2010-11-21 04:27 - 000592616 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2019-02-03 14:39 - 2018-05-18 04:45 - 000000000 ____D C:\Users\Michael\AppData\Local\D3DSCache
2019-02-01 23:31 - 2018-09-15 08:36 - 000835480 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2019-02-01 23:31 - 2018-09-15 08:36 - 000179600 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2019-02-01 17:01 - 2018-09-15 08:33 - 000000000 ____D C:\Windows\system32\NDF
2019-01-31 18:29 - 2018-07-10 01:40 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\IsoBuster
2019-01-31 18:22 - 2014-07-19 18:30 - 000000000 ____D C:\ProgramData\Mozilla
2019-01-28 02:14 - 2019-01-02 10:36 - 001021768 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxDrv.sys
2019-01-28 02:14 - 2019-01-02 10:36 - 000185960 _____ (Oracle Corporation) C:\Windows\system32\Drivers\VBoxUSBMon.sys

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2017-01-14 12:37 - 2017-01-14 12:37 - 002174976 _____ (Advanced Micro Devices Inc.) C:\Program Files (x86)\Common Files\atimpenc.dll
2015-03-09 23:37 - 2015-03-09 23:37 - 000000095 _____ () C:\Users\Michael\AppData\Roaming\LauncherSettings_live.cfg
2017-08-09 00:04 - 2017-08-09 00:09 - 000000166 _____ () C:\Users\Michael\AppData\Roaming\nuvotonISP.lua
2015-03-09 23:36 - 2015-03-09 23:36 - 000000040 _____ () C:\Users\Michael\AppData\Roaming\TheHunterSettings_steam_live.cfg
2017-10-12 23:37 - 2018-06-03 23:07 - 000004402 _____ () C:\Users\Michael\AppData\Roaming\VoiceMeeterDefault.xml
2014-07-20 12:33 - 2014-01-13 13:37 - 000000074 _____ () C:\Users\Michael\AppData\Roaming\WB.CFG
2014-07-20 12:28 - 2013-01-04 22:20 - 000000095 _____ () C:\Users\Michael\AppData\Local\fusioncache.dat
2015-11-22 19:23 - 2019-02-25 19:14 - 000000600 _____ () C:\Users\Michael\AppData\Local\PUTTY.RND
2017-03-19 00:04 - 2017-03-19 00:04 - 000007606 _____ () C:\Users\Michael\AppData\Local\Resmon.ResmonCfg
2014-07-21 23:42 - 2014-07-21 23:42 - 000828671 _____ () C:\Users\Michael\AppData\Local\Tempmusic.ogg
2014-07-20 12:28 - 2012-09-21 19:12 - 000017408 _____ () C:\Users\Michael\AppData\Local\WebpageIcons.db
2012-09-10 12:49 - 2012-09-10 12:49 - 000001050 ____H () C:\Users\Michael\AppData\Local\{793FD447-37EB-4083-B222-2E447297AF07}

==================== Bamital & volsnap ======================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\dllhost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\dllhost.exe => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert

==================== Ende von FRST.txt ============================

computerfrea · 26.02.2019, 10:04

Addition.txt Teil 1:

Code:

ATTFilter

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 25.02.2019 01
durchgeführt von Michael (26-02-2019 09:44:33)
Gestartet von C:\Users\Michael\Desktop\Frst
Windows 10 Home Version 1809 17763.316 (X64) (2018-12-08 18:07:40)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-2862775871-2864016982-4179919401-500 - Administrator - Disabled)
ASPNET (S-1-5-21-2862775871-2864016982-4179919401-1005 - Limited - Enabled)
DefaultAccount (S-1-5-21-2862775871-2864016982-4179919401-503 - Limited - Disabled)
Gast (S-1-5-21-2862775871-2864016982-4179919401-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-2862775871-2864016982-4179919401-1044 - Limited - Enabled)
Michael (S-1-5-21-2862775871-2864016982-4179919401-1000 - Administrator - Enabled) => C:\Users\Michael
WDAGUtilityAccount (S-1-5-21-2862775871-2864016982-4179919401-504 - Limited - Disabled)

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\uTorrent) (Version: 3.5.3.44494 - BitTorrent Inc.)
4K Stogram 2.6 (HKLM\...\{CBD24523-4E64-4DFB-8311-05019EFD0D6B}) (Version: 2.6.14.1590 - Open Media LLC)
64 Bit HP CIO Components Installer (HKLM\...\{345F3F90-0505-4EDF-B7A9-5E3AC1AC6CE4}) (Version: 15.2.1 - Hewlett-Packard) Hidden
7-Zip 18.05 (x64) (HKLM\...\7-Zip) (Version: 18.05 - Igor Pavlov)
Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 19.010.20098 - Adobe Systems Incorporated)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 24.0.0.180 - Adobe Systems Incorporated)
Adobe Flash Player 32 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Adobe Flash Player 32 PPAPI (HKLM-x32\...\Adobe Flash Player PPAPI) (Version: 32.0.0.142 - Adobe Systems Incorporated)
Any Video Converter 6.2.3 (HKLM-x32\...\Any Video Converter) (Version: 6.2.3 - Anvsoft)
Apple Application Support (32-Bit) (HKLM-x32\...\{5A659BE5-849B-484E-A83B-DCB78407F3A4}) (Version: 7.3 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{F8060941-C0AB-4BCE-88AC-F2FDA2E9F286}) (Version: 7.3 - Apple Inc.)
Apple Mobile Device Support (HKLM\...\{5FA8C4BE-8C74-4B9C-9B49-EBF759230189}) (Version: 12.1.0.25 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{A30EA700-5515-48F0-88B0-9E99DC356B88}) (Version: 2.6.0.1 - Apple Inc.)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.14 - Michael Tippach)
Asmedia ASM106x SATA Host Controller Driver (HKLM-x32\...\{61942EF5-2CD8-47D4-869C-2E9A8BB085F1}) (Version: 1.1.9.000 - Asmedia Technology)
Assassin's Creed Brotherhood (HKLM-x32\...\{BE4BA698-8533-4F77-9559-C7F3F78C0B05}) (Version: 1.03 - Ubisoft)
Assassin's Creed II (HKLM-x32\...\{8570BEE8-0CA3-4977-9AB1-80ED93F0513C}) (Version: 1.01 - Ubisoft)
Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)
Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version:  - Ubisoft)
Assassin's Creed Revelations 1.03 (HKLM-x32\...\{33A22B2D-55BA-4508-B767-BF2E9C21A73F}) (Version: 1.03 - Ubisoft)
Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)
Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version: 1.51 - Ubisoft)
Assassin's Creed Unity (HKLM-x32\...\Uplay Install 720) (Version:  - Ubisoft)
Assassin's Creed(R) III v1.06 (HKLM-x32\...\{9D15E813-0C26-41E7-ABC5-3EB06FF1B3CF}) (Version: 1.06 - Ubisoft)
ATTO Disk Benchmark (HKLM-x32\...\{8D451ECC-F576-41CF-8059-150676D668EF}) (Version: 4.000.4002 - ATTO Technology)
AVS Image Converter 5.0.3 (HKLM-x32\...\AVS Image Converter_is1) (Version: 5.0.3.293 - Online Media Technologies Ltd.)
Backup and Sync from Google (HKLM\...\{693CADB0-962B-4AC1-A939-9524B258C997}) (Version: 3.43.2448.9071 - Google, Inc.)
Balabolka (HKLM-x32\...\Balabolka) (Version: 2.05 - Ilya Morozov)
Battlefield: Bad Company™ 2 (HKLM-x32\...\{3AC8457C-0385-4BEA-A959-E095F05D6D67}) (Version: 1.0.1.0 - Electronic Arts)
Battlefield™ 1 (HKLM-x32\...\{335B50BC-6130-4BAF-9A6A-F1561270587B}) (Version: 1.0.57.44284 - Electronic Arts)
Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.4.0.10 - Electronic Arts)
Battlefield™ V (HKLM-x32\...\{e26b382f-e945-4f70-9318-121b683f1d61}) (Version: 1.0.59.63793 - Electronic Arts)
Bethesda.net Launcher (HKLM-x32\...\{3448917E-E4FE-4E30-9502-9FD52EABB6F5}_is1) (Version: 1.18.5 - Bethesda Softworks)
BetterHash (HKLM-x32\...\BH1_is1) (Version: 2.41.0.203 - Innovative Solutions)
BlueJ (HKLM-x32\...\{7D66971C-652B-4065-A6B1-B3EE313C254B}) (Version: 3.1.1 - BlueJ Team)
BlueStacks App Player (HKLM-x32\...\BlueStacks) (Version: 3.55.70.1783 - BlueStack Systems, Inc.)
Bonjour (HKLM\...\{56DDDFB8-7F79-4480-89D5-25E1F52AB28F}) (Version: 3.1.0.1 - Apple Inc.)
BPM-Studio 4 Demo (HKLM-x32\...\{9CCB8F6D-33FC-4E79-8616-7BE5DF32A955}) (Version: 4.9.94 - AlcaTech)
Cain & Abel 4.9.56 (HKLM-x32\...\Cain & Abel 4.9.56) (Version:  - )
CameoD4 (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\{3b187530-f325-414e-85ac-b5b28c38ba65}) (Version: 1.0.0.0 - LightingSoft)
CCleaner (HKLM\...\CCleaner) (Version: 5.53 - Piriform)
Cobra 11 - Crash Time Demo (remove only) (HKLM-x32\...\CrashTime Demo) (Version:  - )
Cobra 11 - Nitro Demo (HKLM-x32\...\{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic) Hidden
Cobra 11 - Nitro Demo (HKLM-x32\...\InstallShield_{41F5ED14-FA4D-4090-A05B-6C6C5A90F8D5}) (Version: 2.1.1 - Synetic)
Command & Conquer™ Red Alert 2 and Yuri’s Revenge (HKLM-x32\...\{F5275D1C-D133-486D-8F07-D6C571F0A8EC}) (Version: 1.0.0.0 - Electronic Arts, Inc.)
CPUID CPU-Z 1.86 (HKLM\...\CPUID CPU-Z_is1) (Version: 1.86 - CPUID, Inc.)
Creative ALchemy (HKLM-x32\...\ALchemy) (Version: 1.45 - Creative Technology Limited)
Creative Audio-Systemsteuerung (HKLM-x32\...\AudioCS) (Version: 2.56 - Creative Technology Limited)
Creative Software AutoUpdate (HKLM-x32\...\Creative Software AutoUpdate) (Version: 1.40 - Creative Technology Limited)
Creative Sound Blaster Properties x64 Edition (HKLM-x32\...\Creative Sound Blaster Properties x64 Edition) (Version:  - )
Creative WaveStudio 7 (HKLM-x32\...\WaveStudio 7) (Version: 7.14 - Creative Technology Limited)
CrystalDiskInfo 7.5.1 (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 7.5.1 - Crystal Dew World)
Data Lifeguard Diagnostic for Windows 1.31 (HKLM-x32\...\{519C4DB6-B53B-4F5C-8297-89B2BE949FA5}_is1) (Version:  - Western Digital Corporation)
Dead in Bermuda (HKLM-x32\...\{FA6BAE37-E751-46A2-A26D-C6090ECCEBD3}) (Version: 4.7.0.2969 - Plug In Digital)
Dead Space (HKLM-x32\...\{9789E33B-317A-44B2-AF9A-FF8708AD93E0}) (Version: 3.0.0.222 - Electronic Arts)
D-Fend Reloaded 1.4.4 (deinstallieren) (HKLM-x32\...\D-Fend Reloaded) (Version: 1.4.4 - Alexander Herzog)
DMXControl 3.1 (HKLM-x32\...\DMXControl3) (Version: 3.1 - DMXControl Projects e.V.)
DriveImage XML (Private Edition) (HKLM-x32\...\{F7E1CA14-B39D-452A-960B-39423DDDD933}) (Version: 2.60.000 - Runtime Software)
Dropbox (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Dropbox) (Version: 68.3.92 - Dropbox, Inc.)
Dungeon Keeper (HKLM-x32\...\{B9E79070-56B6-4980-A7E9-C28D6480D050}) (Version: 1.0.0.1 - Electronic Arts)
EaseUS Partition Master 13.0 (HKLM-x32\...\EaseUS Partition Master_is1) (Version:  - EaseUS)
EaseUS Todo Backup Free 11.5 (HKLM-x32\...\EaseUS Todo Backup_is1) (Version: 11.5 - CHENGDU YIWO Tech Development Co., Ltd)
eLicenser Control (HKLM-x32\...\eLicenser Control) (Version:  - Steinberg Media Technologies GmbH)
Emperors New Groove (HKLM-x32\...\Emperors New Groove) (Version:  - )
ESET Online Scanner v3 (HKLM-x32\...\ESET Online Scanner) (Version:  - )
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version:  - Ubisoft)
Far Cry 5 (HKLM-x32\...\Uplay Install 1803) (Version:  - Ubisoft)
Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Fraps (HKLM-x32\...\Fraps) (Version:  - )
Fresco Logic USB3.0 Host Controller (HKLM\...\{6E9E1B70-59C4-403E-ABFB-C08012BC7F8A}) (Version: 3.0.89.14 - Fresco Logic Inc.)
Funfair Machines Break Dance No.1 V1.1 (HKLM-x32\...\Funfair Machines Break Dance No.1 V1.1) (Version:  - )
GameSpy Comrade (HKLM-x32\...\{5F4C776F-8CBD-4C4F-892F-B568ABDD70C8}) (Version: 1.5.0.156 - GameSpy)
GeoGebra 4.4 (HKLM-x32\...\GeoGebra 4.4) (Version: 4.4.40.0 - International GeoGebra Institute)
G-Force (HKLM-x32\...\G-Force) (Version: 5.1.2 - SoundSpectrum)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 72.0.3626.119 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.33.23 - Google Inc.) Hidden
gpedt.msc 1.0 (HKLM-x32\...\{10B9C608-BF7C-4CCF-A658-C01D969DCA21}_is1) (Version:  - Richard)
Gpg4win (3.1.4) (HKLM-x32\...\Gpg4win) (Version: 3.1.4 - The Gpg4win Project)
HashCalc 2.02 (HKLM-x32\...\HashCalc_is1) (Version:  - SlavaSoft Inc.)
iCloud (HKLM\...\{05D97028-FD26-4A3D-BADC-D1CA2E9F1214}) (Version: 7.10.0.9 - Apple Inc.)
IdleMaster (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\1d85483b1c982d8c) (Version: 1.4.0.0 - IdleMaster)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
IL Minihost Modular (HKLM-x32\...\IL Minihost Modular) (Version:  - Image-Line)
IL Shared Libraries (HKLM-x32\...\IL Shared Libraries) (Version:  - Image-Line)
ImageGlass (HKLM\...\{D539FBEF-4AA8-4415-B66F-6367DA5D0186}_is1) (Version: 4.5.11.27 - Duong Dieu Phap)
Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.10.4885 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
IObit Unlocker (HKLM-x32\...\IObit Unlocker_is1) (Version: 1.1.2.1 - IObit)
ISO to USB (HKLM-x32\...\{D08A30AC-A663-4EA8-8D81-B98E17F19F1C}_is1) (Version:  - isotousb.com)
IsoBuster 4.3 (HKLM-x32\...\IsoBuster_is1) (Version: 4.3 - Smart Projects)
iTunes (HKLM\...\{C704C598-39D0-4B12-BBFA-FF6D43C95BFD}) (Version: 12.9.3.3 - Apple Inc.)
Java 8 Update 201 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180201F0}) (Version: 8.0.2010.9 - Oracle Corporation)
Java SE Development Kit 8 Update 112 (HKLM-x32\...\{32A3A4F4-B792-11D6-A78A-00B0D0180112}) (Version: 8.0.1120.15 - Oracle Corporation)
L&H TTS3000 Deutsch (HKLM-x32\...\LHTTSGED) (Version:  - )
Magic 3D Easy View (HKLM-x32\...\Magic 3D Easy View_is1) (Version:  - Nicolaudie)
Malwarebytes Version 3.7.1.2839 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 3.7.1.2839 - Malwarebytes)
Manhunt 2 (HKLM-x32\...\Manhunt 2) (Version: 1.00.0000 - Rockstar Games)
Mass Effect™ 2 (HKLM-x32\...\{75D84EF7-0D8C-4e70-B3FA-7B42A5D4E0EB}) (Version: 1.2.1604.0 - Electronic Arts)
Mäx! (HKLM-x32\...\Maex) (Version:  - )
MeatCity 2 V2.03  (HKLM-x32\...\MeatCity 2) (Version: V2.03 - )
Medal of Honor: Pacific Assault™ (HKLM-x32\...\{56CFA833-F44F-4199-8C58-7F8B38F2BC7B}) (Version: 1.2.1.280 - Electronic Arts)
Medal of Honor™ Warfighter (HKLM-x32\...\{1040143F-FEFB-4B90-8E51-E47D40E14C4E}) (Version: 1.0.0.3 - Electronic Arts)
Melodyne 3.2 Demo (HKLM-x32\...\{EC9A0711-9823-4DD2-83C4-039886A3ECF6}) (Version: 3.2.0105 - Celemony Software GmbH) Hidden
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft Flight Simulator SimConnect Client v10.0.61259.0 (HKLM-x32\...\{D61CA184-3F6D-4A50-B2CC-7A18447D6A8D}) (Version: 10.0.61259.0 - Microsoft Corporation)
Microsoft Flight Simulator SimConnect Client v10.0.62615.0 (HKLM-x32\...\{33D89314-361A-4495-A1E1-0ACBCE08F78D}) (Version: 10.0.62615.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE (HKLM-x32\...\{F97E3841-CA9D-4964-9D64-26066241D26F}) (Version: 3.3.24.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{832D9DE0-8AFC-4689-9819-4DBBDEBD3E4F}) (Version: 3.5.92.0 - Microsoft Corporation)
Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.50918.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{071c9b48-7c32-4621-a0ac-3f809523288f}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6E8E85E8-CE4B-4FF5-91F7-04999C9FAE6A}) (Version: 8.0.50727.42 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.21022 (HKLM\...\{350AA351-21FA-3270-8B7A-835434E766AD}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{e6e75766-da0f-4ba2-9788-6ea593ce702d}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x64) - 14.10.25008 (HKLM-x32\...\{f1e7e313-06df-4c56-96a9-99fdfd149c51}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Visual C++ 2017 Redistributable (x86) - 14.10.25008 (HKLM-x32\...\{c239cea1-d49e-4e16-8e87-8c055765f7ec}) (Version: 14.10.25008.0 - Microsoft Corporation)
Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{B3B750C0-8C22-439D-B7CE-67F3ED99CC2B}) (Version: 1.20.146.0 - Microsoft)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation)
Mirror's Edge™ Catalyst (HKLM-x32\...\{12228a0d-f6ad-4691-82af-d2c643424468}) (Version: 1.0.3.47248 - Electronic Arts)
Mirror's Edge™ Catalyst Closed Beta (HKLM-x32\...\{A0F5340B-2F0B-4830-B746-1850B62B61E0}) (Version: 1.0.3.31690 - Electronic Arts)
Morphyre (HKLM-x32\...\Morphyre) (Version:  - )
Mozilla Firefox 58.0.2 (x64 de) (HKLM\...\Mozilla Firefox 58.0.2 (x64 de)) (Version: 58.0.2 - Mozilla)
Mozilla Firefox 65.0.1 (x64 de) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Mozilla Firefox 65.0.1 (x64 de)) (Version: 65.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 58.0.2 - Mozilla)
MSXML 4.0 SP2 Parser and SDK (HKLM-x32\...\{716E0306-8318-4364-8B8F-0CC4E9376BAC}) (Version: 4.20.9818.0 - Microsoft Corporation)
MSXML 4.0 SP3 Parser (KB2721691) (HKLM-x32\...\{355B5AC0-CEEE-42C5-AD4D-7F3CFD806C36}) (Version: 4.30.2114.0 - Microsoft Corporation)
NASA World Wind 1.4 (HKLM-x32\...\NASA World Wind 1.4) (Version:  - )
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
Next Generation Visualisations (HKLM-x32\...\{2E376AD9-5C49-4F7D-A0BA-6A44E8FA5A3B}) (Version: 1.0.0 -  Microsoft)
NirSoft ShellExView (HKLM-x32\...\NirSoft ShellExView) (Version:  - )
NordVPN (HKLM-x32\...\{F11DDED0-213C-41B7-B120-514E402A7B53}) (Version: 6.19.6 - NordVPN) Hidden
NordVPN (HKLM-x32\...\NordVPN 6.19.6) (Version: 6.19.6 - NordVPN)
NordVPN network TAP (HKLM-x32\...\{97DEC5D6-2BE9-45BB-BFC5-274B851B486B}) (Version: 1.0.1 - NordVPN)
NOX (HKLM-x32\...\{BF152F35-9708-452C-862C-F7E3B62DF732}) (Version: 2.0.0.22 - Electronic Arts, Inc.)
NVIDIA HD-Audiotreiber 1.3.38.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.4 - NVIDIA Corporation)
NVIDIA PhysX (HKLM-x32\...\{3F5C371F-8EA2-4F25-9D3D-D0B4526E3AEA}) (Version: 9.10.0513 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.17.0524 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.17.0524 - NVIDIA Corporation)
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.5 (HKLM-x32\...\{F0C909D7-D643-4628-8C6A-94073139F0CE}) (Version: 4.15.9789 - Apache Software Foundation)
Oracle VM VirtualBox 6.0.4 (HKLM\...\{9E2B30E6-2102-45C0-9EAF-B631EBCEC198}) (Version: 6.0.4 - Oracle Corporation)
Origin (HKLM-x32\...\Origin) (Version: 10.5.34.21025 - Electronic Arts, Inc.)
Paragon Backup and Recovery™ 14 Free (HKLM\...\{C268B5E1-A5DA-11DF-A289-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Paragon Partition Manager™ 2014 Free (HKLM-x32\...\{47E5588F-C3A0-11DE-9857-005056C00008}) (Version: 90.00.0003 - Paragon Software)
Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)
Personal Backup 5.9.4.10 (64-bit) (HKLM\...\Personal Backup 5_is1) (Version: 5.9.4.10 - Dr. J. Rathlev)
Pflanzen gegen Zombies™ (HKLM-x32\...\{5E6536C2-E79A-49CF-83EA-817AD81F9FC8}) (Version: 1.2.0.1093 - Electronic Arts, Inc.)
PingPlotter 5 (HKLM-x32\...\{F513FFE3-ED3B-4DC1-BB41-DABEBCAE2F6F}) (Version: 5.5.14.4908 - Pingman Tools, LLC) Hidden
PingPlotter 5 (HKLM-x32\...\PingPlotter 5 5.5.14.4908) (Version: 5.5.14.4908 - Pingman Tools, LLC)
Platform (HKLM-x32\...\{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.) Hidden
ProtonVPN (HKLM-x32\...\{ED11FFD4-61B3-4329-870E-8F4DAC7D5A0D}) (Version: 1.6.4 - ProtonVPN AG) Hidden
ProtonVPN (HKLM-x32\...\ProtonVPN 1.6.4) (Version: 1.6.4 - ProtonVPN AG)
ProtonVPNTap (HKLM-x32\...\{C23BCE3A-FD25-48BA-948E-2CE94576F983}) (Version: 1.0.1 - ProtonVPN AG)
Quake Champions (HKLM-x32\...\Quake Champions) (Version:  - Bethesda Softworks)
RealSpeak Solo fur Deutsch - Steffi (HKLM-x32\...\{BFBB91DB-9F0F-4A9C-9669-A97DA3512CF2}) (Version: 4.00.0000 - ScanSoft)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.75.827.2013 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.8549 - Realtek Semiconductor Corp.)
Recuva (HKLM\...\Recuva) (Version: 1.53 - Piriform)
Rename Master (HKLM-x32\...\Rename Master_is1) (Version:  - )
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation) Hidden
Renesas Electronics USB 3.0 Host Controller Driver (HKLM-x32\...\InstallShield_{5442DAB8-7177-49E1-8B22-09A049EA5996}) (Version: 2.0.32.0 - Renesas Electronics Corporation)
Rise of the Triad (HKLM-x32\...\1207659244_is1) (Version: 2.5.0.23 - GOG.com)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.0.6 - Rockstar Games)
Roll (HKLM-x32\...\RollerCoaster Tycoon Setup) (Version:  - )
Safari (HKLM-x32\...\{C779648B-410E-4BBA-B75B-5815BCEFE71D}) (Version: 5.34.57.2 - Apple Inc.)
Samsung Magician (HKLM-x32\...\{29AE3F9F-7158-4ca7-B1ED-28A73ECDB215}_is1) (Version: 5.2.0.1610 - Samsung Electronics)
SDFormatter (HKLM-x32\...\{179324FF-7B16-4BA8-9836-055CAAEE4F08}) (Version: 4.0.0 - SD Association)
SeaTools for Windows 1.4.0.6 (HKLM-x32\...\SeaTools for Windows) (Version: 1.4.0.6 - Seagate Technology)
SiudiDriver Version 2.3 (HKLM\...\SiudiDriver_is1) (Version: 2.3 - LightingSoft AG)
SlimDX Runtime .NET 4.0 x86 (January 2012) (HKLM-x32\...\{7EBD0E43-6AC0-4CA8-9990-00E50069AD29}) (Version: 2.0.13.43 - SlimDX Group)
Sniper Elite (HKLM-x32\...\{A979B2D8-E3EE-4523-A26C-4AF0A6809280}) (Version:  - )
SoftPerfect Network Scanner version 7.1.2 (HKLM\...\{8083C3D9-F400-48FA-B060-CF55F25E2D4B}_is1) (Version: 7.1.2 - SoftPerfect)
SoftSkies (HKLM-x32\...\SoftSkies) (Version: 2.1.2 - SoundSpectrum)
Spire-1.1 Plug-In (x64) (HKLM\...\{3F98118B-D5D1-455B-A899-E03C1D7B4E89}) (Version: 1.1.12.0 - Reveal Sound Ltd.)
Splice (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\splice) (Version: 3.2.28369 - Distributed Creation, Inc.)
Spotify (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Spotify) (Version: 1.1.0.237.g378f6f25 - Spotify AB)
Syndicate (HKLM-x32\...\{64CFBAAB-46F7-4628-8D9B-E656A8C11CDB}) (Version: 2.0.0.3 - Electronic Arts)
TAP-NordVPN 9.21.2 (HKLM\...\TAP-NordVPN) (Version: 9.21.2 - NordVPN.com)
TeamSpeak 3 Client (HKLM-x32\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH)
Technitium MAC Address Changer v6.0 (HKLM-x32\...\TMACv6.0) (Version: 6.0 - Technitium)
TechPowerUp GPU-Z (HKLM-x32\...\TechPowerUp GPU-Z) (Version:  - TechPowerUp)
Termius 3.0.10 (only current user) (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\4f53adaa-a4b2-50c1-b605-e304e4d14011) (Version: 3.0.10 - Crystalnix)
The Crew (Worldwide) (HKLM-x32\...\Uplay Install 413) (Version:  - Ubisoft)
The Sims 2: Ultimate Collection (HKLM-x32\...\{04450C18-F039-4B81-A621-70C3B0F523D5}) (Version: 1.0.0.1 - Electronic Arts)
The Train 1.0 (HKLM-x32\...\The Train 1.0) (Version: 1.0 - Cat-A-Cat)
Theme Hospital (HKLM-x32\...\{5118A4C2-C8A4-4CE5-AC37-F3E51C25402F}) (Version: 3.0.0.5 - Electronic Arts)
Total Overdose (HKLM-x32\...\GOGPACKTOTALOVERDOSE_is1) (Version: 2.0.0.2 - GOG.com)
Trials of the Blood Dragon (HKLM-x32\...\Uplay Install 2741) (Version:  - Ubisoft)
TrueCrypt (HKLM-x32\...\TrueCrypt) (Version: 7.1a - TrueCrypt Foundation)
TunnelBear (HKLM-x32\...\{1d805fba-7655-411e-a641-51f4f8e6bd5b}) (Version: 3.0.33.0 - TunnelBear)
TunnelBear (HKLM-x32\...\{C0A3B957-2B11-404F-9FFC-D97E7D175681}) (Version: 3.0.33.0 - TunnelBear) Hidden
Ultima 8 (HKLM-x32\...\{428C6B01-D292-46F9-9321-75668ED17DA2}) (Version: 1.0.0.1 - Electronic Arts)
Update for Windows 10 for x64-based Systems (KB4023057) (HKLM\...\{9CBA860F-7437-4A75-941C-8EF559F2D145}) (Version: 2.52.0.0 - Microsoft Corporation)
Uplay (HKLM-x32\...\Uplay) (Version: 4.6 - Ubisoft)
USBPcap 1.1.0.0-g794bf26-3 (HKLM\...\USBPcap) (Version: 1.1.0.0-g794bf26-3 - )
VeraCrypt (HKLM-x32\...\VeraCrypt) (Version: 1.23 - IDRIX)
VIA Plattform-Geräte-Manager (HKLM-x32\...\InstallShield_{20D4A895-748C-4D88-871C-FDB1695B0169}) (Version: 1.38 - VIA Technologies, Inc.)
Virtual Audio Cable 4.14 (HKLM\...\Virtual Audio Cable 4.14) (Version:  - )
Vistawinexit (HKLM-x32\...\{2FC1B08D-B4B6-42F4-B1BF-C913625EAC6C}_is1) (Version: 8 - hxxp://www.kurt-selzam.de/)
VLC media player (HKLM\...\VLC media player) (Version: 3.0.6 - VideoLAN)
Voicemeeter, The Virtual Mixing Console (HKLM-x32\...\VB:Voicemeeter {17359A74-1236-5467}) (Version:  - VB-Audio Software)
vs2015_redist x86 (HKLM-x32\...\{BD46163A-0331-4A61-B65A-7B66D7C93F8E}) (Version: 1.0.0.0 - Realnetworks) Hidden
Vulkan Run Time Libraries 1.0.61.0 (HKLM\...\VulkanRT1.0.61.0) (Version: 1.0.61.0 - LunarG, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{71B8842B-5C0D-4221-968D-8750D4F3DF63}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WD Drive Utilities (HKLM-x32\...\{cc96a3c1-3461-4e39-be96-50219a26ce18}) (Version: 1.4.1.51 - Western Digital Technologies, Inc.) Hidden
WestwoodOnline (HKLM-x32\...\{BBCD6D56-8A26-4DDE-9482-DBC9C7B7341D}) (Version: 1.0.0.0 - WestwoodOnline)
WhatPulse version 2.8.4 (HKLM-x32\...\{95CC8D5F-90A1-4285-9B2D-8D0FBCFD8D0D}_is1) (Version: 2.8.4 - WhatPulse)
WhiteCap (HKLM-x32\...\WhiteCap) (Version: 6.5 - SoundSpectrum)
Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Winamp Erkennungs-Plug-in (HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\Winamp Detect) (Version: 1.0.0.1 - Nullsoft, Inc)
Winamp Essentials Pack (HKLM-x32\...\Winamp Essentials Pack) (Version: v5.64 - Christoph Grether)
WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - Riverbed Technology, Inc.)
WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)
WinToUSB Version 3.9 (HKLM\...\WinToUSB_is1) (Version: 3.9 - Hasleo Software.)
Wireshark 2.4.2 32-bit (HKLM-x32\...\Wireshark) (Version: 2.4.2 - The Wireshark developer community, hxxps://www.wireshark.org)
Wondershare AllMyTube(Build 4.10.2.3) (HKLM-x32\...\Wondershare AllMyTube_is1) (Version: 4.10.2.3 - Wondershare Software)
Wondershare Helper Compact 2.5.3 (HKLM-x32\...\{5363CE84-5F09-48A1-8B6C-6BB590FFEDF2}_is1) (Version: 2.5.3 - Wondershare)
Zip Motion Block Video codec (Remove Only) (HKLM-x32\...\ZMBV) (Version:  - DOSBox Team)
Zumas Revenge (HKLM-x32\...\{0B153CAB-792B-4CA2-B2A5-AB0BBAF2FFA9}) (Version: 1.0.5.600 - PopCap Games)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{018D5C66-4533-4307-9B53-224DE2ED1FE6}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{9B57F475-CCB0-4C85-88A9-2AA9A6C0809A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1A}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{E31EA727-12ED-4702-820C-4B6445F28E1B}\InprocServer32 -> C:\Windows\system32\shell32.dll (Microsoft Windows -> Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE1-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FB314EE2-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000_Classes\CLSID\{FBC9D74C-AF55-4309-9FB2-C426E071637F}\InprocServer32 -> C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [  GoogleDriveBlacklisted] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D42} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSynced] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D40} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [  GoogleDriveSyncing] -> {81539FE6-33C7-4CE7-90C7-1C7B8F2F2D41} => C:\Program Files\Google\Drive\googledrivesync64.dll [2018-12-07] (Google Inc -> Google)
ShellIconOverlayIdentifiers: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ShellIconOverlayIdentifiers: [HardLinkMenu] -> {0A479751-02BC-11d3-A855-0004AC2568AA} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlayHardLink] -> {0A479751-02BC-11d3-A855-0004AC2568DD} =>  -> Keine Datei
ShellIconOverlayIdentifiers: [IconOverlaySymbolicLink] -> {0A479751-02BC-11d3-A855-0004AC2568EE} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive1] -> {BBACC218-34EA-4666-9D7A-C78F2274A524} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive2] -> {5AB7172C-9C11-405C-8DD5-AF20F3606282} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive3] -> {A78ED123-AB77-406B-9962-2A5D9D2F7F30} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive4] -> {F241C880-6982-4CE5-8CF7-7085BA96DA5A} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive5] -> {A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive6] -> {9AA2F32D-362A-42D9-9328-24A483E2CCC3} =>  -> Keine Datei
ShellIconOverlayIdentifiers-x32: [ OneDrive7] -> {C5FF006E-2AE9-408C-B85B-2DFDD5449D9C} =>  -> Keine Datei
ContextMenuHandlers1: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Balabolka] -> {6CB83A5A-AA68-4895-9F54-175E789AE149} => G:\Programme\Balabolka\BFileExt.dll [2012-04-06] (Ilya Morozov) [Datei ist nicht signiert]
ContextMenuHandlers1: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers1: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers1: [PhotoStreamsExt] -> {89D984B3-813B-406A-8298-118AFA3A22AE} => C:\Program Files\Common Files\Apple\Internet Services\ShellStreams64.dll [2019-01-15] (Apple Inc. -> Apple Inc.)
ContextMenuHandlers1: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers1: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1: [WinRAR] -> [CC]{B41DB860-64E4-11D2-9906-E49FADC173CA} =>  -> Keine Datei
ContextMenuHandlers1: [WinRAR32] -> [CC]{B41DB860-8EE4-11D2-9906-E49FADC173CA} =>  -> Keine Datei
ContextMenuHandlers2: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers2: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers2: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers4: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers4: [GDContextMenu] -> {BB02B294-8425-42E5-983F-41A1FA970CD6} => C:\Program Files\Google\Drive\contextmenu64.dll [2018-12-07] (Google Inc -> Google)
ContextMenuHandlers4: [SimpleShlExt] -> {45203D3B-3D73-4497-8AFE-D29950AC6C55} => G:\Programme\Todo Backup\bin\x64\ImageSh.dll [2018-08-14] (CHENGDU YIWO Tech Development Co., Ltd. -> CHENGDU YIWO Tech Development Co.,Ltd)
ContextMenuHandlers4: [UltraISO] -> [CC]{AD392E40-428C-459F-961E-9B147782D099} =>  -> Keine Datei
ContextMenuHandlers4: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers5: [Gadgets] -> {6B9228DA-9C15-419e-856C-19E768A13BDC} =>  -> Keine Datei
ContextMenuHandlers5: [igfxcui] -> {3AB1675A-CCFF-11D2-8B20-00A0C93CB1F4} =>  -> Keine Datei
ContextMenuHandlers5: [igfxDTCM] -> {9B5F5829-A529-4B12-814A-E81BCB8D93FC} =>  -> Keine Datei
ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\Windows\system32\nvshext.dll [2018-12-11] (NVIDIA Corporation -> NVIDIA Corporation)
ContextMenuHandlers6: [7-Zip] -> {23170F69-40C1-278A-1000-000100020000} => G:\Programme\7-Zip\7-zip.dll [2018-04-30] (Igor Pavlov) [Datei ist nicht signiert]
ContextMenuHandlers6: [Disk Mount Schell] -> {25D84CB2-7345-13D3-A4A1-0080C8ECFED4} =>  -> Keine Datei
ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2019-02-01] (Malwarebytes Corporation -> Malwarebytes)
ContextMenuHandlers6: [UltraISO] -> {AD392E40-428C-459F-961E-9B147782D099} => G:\Programme\UltraISO\isoshl64.dll [2014-01-02] (SHENZHEN YIBO DIGITAL SYSTEMS DEVELOPMENT CO. LTD. -> EZB Systems, Inc.)
ContextMenuHandlers6: [UnLockerMenu] -> {410BF280-86EF-4E0F-8279-EC5848546AD3} => G:\Programme\IObit Unlocker\IObitUnlockerExtension.dll [2018-05-17] (IObit Information Technology -> IObit)
ContextMenuHandlers1_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers4_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)
ContextMenuHandlers5_S-1-5-21-2862775871-2864016982-4179919401-1000: [DropboxExt] -> {ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C} => C:\Users\Michael\AppData\Roaming\Dropbox\bin\DropboxExt64.27.0.dll [2019-02-22] (Dropbox, Inc -> Dropbox, Inc.)

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {01EA6A67-8822-46E0-BD96-FC08DB3D8BBB} - System32\Tasks\{89DD9B44-2F83-4197-996E-C8098428B644} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setupd.exe -d C:\Users\Michael\Desktop
Task: {059CD803-B78C-413D-BE1A-AA09A9445C32} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {07DDD542-132B-46BB-B3FC-F35BA76D0CA9} - System32\Tasks\CCleaner Update => G:\Programme\CCleaner\CCUpdate.exe (Piriform Software Ltd -> Piriform Software Ltd)
Task: {0B709BD2-E774-420A-A51B-BBD4DA2A66CF} - \Microsoft\Windows\Setup\gwx\refreshgwxconfigandcontent -> Keine Datei <==== ACHTUNG
Task: {17B66134-46E2-4A54-8BF9-990BA02C0C5C} - \Microsoft\Windows\Setup\GWXTriggers\Logon-5d -> Keine Datei <==== ACHTUNG
Task: {35A08F34-9552-4F46-B6F7-BF78570FA332} - System32\Tasks\Adobe Flash Player PPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_pepper.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {39029539-4295-4AEB-84D8-B523676A734A} - \Microsoft\Windows\Setup\gwx\launchtrayprocess -> Keine Datei <==== ACHTUNG
Task: {3CCB2340-05A8-41A1-A53E-071A229DDC24} - \Microsoft\Windows\Setup\GWXTriggers\Time-5d -> Keine Datei <==== ACHTUNG
Task: {4250DC96-7DDE-4BAE-A3DA-CCA4F32C9438} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {466FD5D0-FAFE-42D6-97D2-029ABBEB5A54} - \Microsoft\Windows\Setup\GWXTriggers\Telemetry-4xd -> Keine Datei <==== ACHTUNG
Task: {4B2485CD-C98B-4707-A57B-9B7E1B189B35} - System32\Tasks\CreateExplorerShellUnelevatedTask => C:\WINDOWS\Explorer.EXE /NOUACCHECK
Task: {5068825B-B75D-436A-AB39-5665687A7E9F} - \Microsoft\Windows\Setup\GWXTriggers\OutOfIdle-5d -> Keine Datei <==== ACHTUNG
Task: {5C072332-DBEA-42E8-A395-9E5CB91F6E15} - System32\Tasks\S-1-5-21-2862775871-2864016982-4179919401-1000\DataSenseLiveTileTask => C:\Windows\System32\DataUsageLiveTileTask.exe (Microsoft Windows -> Microsoft Corporation)
Task: {6485F8B2-6355-40E9-A653-5A9BF901A413} - \Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B -> Keine Datei <==== ACHTUNG
Task: {6656EB71-F08F-4A17-AAC4-3031825E49D0} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cache Maintenance => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {779C4E69-F3B3-4D22-A9B0-5ED017345E3D} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {8A9D0829-BB90-4472-B4C2-8A70FFEACCE4} - System32\Tasks\Adobe Flash Player NPAPI Notifier => C:\Windows\SysWOW64\Macromed\Flash\FlashUtil32_32_0_0_142_Plugin.exe (Adobe Systems Incorporated -> Adobe Systems Incorporated)
Task: {8B778A13-4A28-4427-A53D-95B6BA5CF98C} - System32\Tasks\SamsungMagician => G:\Programme\Samsung Magician\SamsungMagician.exe (Samsung Electronics Co., Ltd. -> Samsung Electronics Co. Ltd.)
Task: {8D512E7D-F4D8-47EE-A0BB-3C36FA78D4FB} - \Microsoft\Windows\Setup\GWXTriggers\OutOfSleep-5d -> Keine Datei <==== ACHTUNG
Task: {8F44A9F9-2DB8-4407-931D-725DAFFD0D24} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Cleanup => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {9D144209-4029-48FD-B10A-66A3ACDB35AE} - \Microsoft\Windows\Setup\gwx\refreshgwxconfig -> Keine Datei <==== ACHTUNG
Task: {A2F85536-A291-4FF9-88FE-6620A6DB6D91} - System32\Tasks\{1DE6E651-2507-43E3-9FF8-E287F4799876} => C:\Windows\system32\pcalua.exe -a C:\Users\Michael\Desktop\setup.exe -d C:\Users\Michael\Desktop
Task: {AED74002-9BE2-466E-86F1-9370F35F24AE} - \Microsoft\Windows\Setup\GWXTriggers\MachineUnlock-5d -> Keine Datei <==== ACHTUNG
Task: {B7ECBF71-5300-4273-9E5B-71C343957C32} - \CCleanerSkipUAC -> Keine Datei <==== ACHTUNG
Task: {B823C99B-068A-47F9-B8D6-E652C6620DF6} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\WINDOWS\system32\MRT.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {BDAB4FB8-B3EC-4598-A2A6-7C6654BD7B69} - \Microsoft\Windows\Setup\gwx\refreshgwxcontent -> Keine Datei <==== ACHTUNG
Task: {C4B78B46-40B0-463D-9841-2D8816553CD3} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Scheduled Scan => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {CE7BF8D7-4637-474F-A48C-7034C246B4D0} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe (Google Inc -> Google Inc.)
Task: {CED07631-1858-44D0-8F84-456AEBE2D6FC} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe (Apple Inc. -> Apple Inc.)
Task: {D6E2EDBA-DEDE-4893-87A1-61EEEACD3F99} - \Microsoft\Windows\UNP\RunCampaignManager -> Keine Datei <==== ACHTUNG
Task: {DB292475-781B-48F6-97C7-5694CF930CBA} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe (Adobe Systems, Incorporated -> Adobe Systems Incorporated)
Task: {E3CCB1BB-EFF6-4410-8E9F-8AAC2973C17B} - System32\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3 => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe (Dropbox, Inc -> Dropbox, Inc.)
Task: {E922B90C-F1EA-4D8C-BEAE-D573F342E45F} - System32\Tasks\Microsoft\Windows\Windows Defender\Windows Defender Verification => C:\ProgramData\Microsoft\Windows Defender\platform\4.18.1902.2-0\MpCmdRun.exe (Microsoft Corporation -> Microsoft Corporation)
Task: {EDD03E1B-FEAD-47F1-8388-2F27B94E3A7E} - System32\Tasks\CrystalDiskInfo => G:\Programme\CrystalDiskInfo\DiskInfo32.exe (Noriyuki Miyazaki -> Crystal Dew World)
Task: {FC158B24-ECDF-4F3F-8C9B-764B5078E035} - System32\Tasks\Tweaking.com - Registry Backup => G:\Programme\Registry Backup\TweakingRegistryBackup.exe

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\CreateExplorerShellUnelevatedTask.job => C:\Windows\explorer.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000Core1d220b52309b318.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe
Task: C:\Windows\Tasks\DropboxUpdateTaskUserS-1-5-21-2862775871-2864016982-4179919401-1000UA1d220b5230fbbf3.job => C:\Users\Michael\AppData\Local\Dropbox\Update\DropboxUpdate.exe

==================== Verknüpfungen & WMI ========================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)


ShortcutWithArgument: C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\Mosh.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google Inc.) ->  --profile-directory=Default --app-id=ooiklbnjmhbcgemelgfhaeaocllobloj

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2018-05-18 04:44 - 2008-11-18 13:15 - 000307200 ____N (Creative Technology Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
2018-08-17 06:50 - 2018-08-17 06:50 - 000300032 _____ () [Datei ist nicht signiert] G:\Programme\ProtonVPN\Resources\64-bit\firewall.dll
2017-12-12 02:50 - 2017-12-12 02:50 - 000865280 _____ (Apache Software Foundation) [Datei ist nicht signiert] G:\Programme\OpenOffice\program\shlxthdl\shlxthdl_x64.dll
2018-05-23 02:39 - 2018-04-30 13:00 - 000075776 _____ (Igor Pavlov) [Datei ist nicht signiert] G:\Programme\7-Zip\7-zip.dll
2017-12-14 00:27 - 2018-12-15 14:08 - 010770944 _____ (Dr. J. Rathlev, D-24222 Schwentinental) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\Persbackup.exe
2017-12-14 00:27 - 2018-03-27 21:41 - 002268160 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\libeay32.dll
2017-12-14 00:27 - 2018-03-27 21:41 - 000386560 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files\Personal Backup 5\ssleay32.dll
2018-05-24 13:45 - 2018-05-24 13:45 - 000250368 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\NordVPN\x86\Liberation.Native.Firewall.dll
2019-02-06 15:38 - 2017-02-21 17:19 - 000083136 _____ (CHENGDU YIWO Tech Development Co., Ltd. -> ) [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\CodeLog.dll
2019-02-06 15:38 - 2016-03-07 18:08 - 001291264 _____ () [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\libxml2.dll
2019-02-06 15:38 - 2004-10-05 03:08 - 000055808 _____ () [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\zlib1.dll
2019-02-06 15:38 - 2008-11-25 17:18 - 000892928 _____ (Free Software Foundation) [Datei ist nicht signiert] G:\Programme\Todo Backup\bin\iconv.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000438272 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5WinExtras.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 003084800 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Quick.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 005139968 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Gui.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 004571648 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Widgets.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 002950144 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Qml.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 002234880 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Network.dll
2019-02-24 23:51 - 2019-02-01 09:55 - 005010944 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Core.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 001181184 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\platforms\qwindows.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000124928 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\styles\qwindowsvistastyle.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000026112 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qico.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000020992 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\imageformats\qsvg.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000259584 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\Qt5Svg.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick.2\qtquick2plugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000729088 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Controls\qtquickcontrolsplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000073216 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Layouts\qquicklayoutsplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000179712 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Dialogs\dialogplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\Window.2\windowplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000014848 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQml\Models.2\modelsplugin.dll
2019-02-24 23:51 - 2019-02-01 09:56 - 000101888 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] C:\Program Files\Malwarebytes\Anti-Malware\QtQuick\PrivateWidgets\widgetsplugin.dll
2017-07-10 23:36 - 2017-02-25 23:03 - 004498944 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Widgets.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000039936 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\CrashRpt1402.dll
2017-07-10 23:36 - 2017-02-25 22:53 - 000155136 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Sql.dll
2017-07-10 23:36 - 2017-02-25 22:53 - 000848896 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Network.dll
2017-07-10 23:36 - 2017-02-25 22:58 - 004871680 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Gui.dll
2017-07-10 23:36 - 2017-02-25 22:51 - 004685824 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\Qt5Core.dll
2017-07-10 23:36 - 2017-02-26 17:42 - 001360896 _____ (winsparkle.org) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\WinSparkle.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000211280 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\MSVCP100.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000356176 _____ (Microsoft Corporation) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\MSVCR100.dll
2017-07-10 23:36 - 2017-02-26 17:42 - 000546816 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\libeay32.dll
2017-07-10 23:36 - 2017-02-25 23:07 - 001041920 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\platforms\qwindows.dll
2018-02-25 05:45 - 2018-01-06 21:35 - 000024576 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\imageformats\qgif.dll
2018-04-17 11:54 - 2017-02-25 23:06 - 000687104 _____ (The Qt Company Ltd) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\sqldrivers\qsqlite.dll
2017-07-10 23:36 - 2017-02-26 17:43 - 000119808 _____ (The OpenSSL Project, hxxp://www.openssl.org/) [Datei ist nicht signiert] C:\Program Files (x86)\WhatPulse2\ssleay32.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\ProgramData\TEMP:5C4F2F39 [111]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)

IE trusted site: HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\localhost -> localhost

==================== Hosts Inhalt: ===============================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2017-09-29 14:46 - 2014-07-24 15:14 - 000000027 _____ C:\Windows\system32\drivers\etc\hosts

127.0.0.1       localhost

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path: C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\ProgramData\Oracle\Java\javapath;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\system32\wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0;C:\Program Files (x86)\ATI Technologies\ATI.ACE\Core-Static;C:\Program Files (x86)\QuickTime\QTSystem;C:\Program Files (x86)\AMD\ATI.ACE\Core-Static;G:\Programme\IsoBuster;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;G:\Programme\cygwin_64\bin;G:\Programme\OpenSSH\bin;%SystemRoot%\system32;%SystemRoot%;%SystemRoot%\System32\Wbem;%SYSTEMROOT%\System32\WindowsPowerShell\v1.0\;%SYSTEMROOT%\System32\OpenSSH\;C:\Program Files (x86)\AOMEI Backupper
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Michael\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: Off)
HKLM\software\microsoft\Windows\CurrentVersion\Telephony\Providers => ProviderFileName2 -> ndptsp.tsp (Keine Datei)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.

MSCONFIG\Services: AntiVirMailService => 2
MSCONFIG\Services: AntiVirSchedulerService => 2
MSCONFIG\Services: AntiVirService => 2
MSCONFIG\Services: AntiVirWebService => 2
MSCONFIG\Services: Hamachi2Svc => 3
HKLM\...\StartupApproved\Run: => "StartCN"
HKLM\...\StartupApproved\Run32: => "Avira SystrayStartTrigger"
HKLM\...\StartupApproved\Run32: => "DelaypluginInstall"
HKLM\...\StartupApproved\Run32: => "Wondershare Helper Compact.exe"
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\StartupApproved\StartupFolder: => "GigaTribe.lnk"
HKU\S-1-5-21-2862775871-2864016982-4179919401-1000\...\StartupApproved\Run: => "TunnelBear"