Trojaner-Board - TR/Agent Virus Minecraft.exe ist befallen

FRST Logfile:

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:15-09-2015

durchgeführt von SimonsZocken (Administrator) auf SIMONSZOCKEN-PC (19-09-2015 20:08:03)

Gestartet von C:\Users\SimonsZocken\Desktop

Geladene Profile: SimonsZocken (Verfügbare Profile: SimonsZocken)

Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: FF)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe

(Hi-Rez Studios) C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe

(Microsoft Corporation) C:\Windows\vVX1000.exe

(Spotify Ltd) C:\Users\SimonsZocken\AppData\Roaming\Spotify\SpotifyWebHelper.exe

(Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe

(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe

(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe

(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jucheck.exe

(TeamSpeak Systems GmbH) C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\ts3client_win32.exe

(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

() C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe

(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avscan.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7540440 2014-02-11] (Realtek Semiconductor)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2462536 2014-10-04] (NVIDIA Corporation)

HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart

HKLM\...\Run: [VX1000] => C:\Windows\vVX1000.exe [762224 2009-06-30] (Microsoft Corporation)

HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [782008 2015-08-27] (Avira Operations GmbH & Co. KG)

HKLM-x32\...\Run: [mbot_de_325] => [X]

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [334896 2015-06-08] (Oracle Corporation)

HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5579624 2015-08-03] (LogMeIn Inc.)

HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66936 2015-08-13] (Avira Operations GmbH & Co. KG)

Winlogon\Notify\GoToAssist Express Customer: C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\715\g2ax_winlogonx64.dll (Citrix Online, a division of Citrix Systems, Inc.)

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Spotify Web Helper] => C:\Users\SimonsZocken\AppData\Roaming\Spotify\SpotifyWebHelper.exe [2018360 2015-08-13] (Spotify Ltd)

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Spotify] => C:\Users\SimonsZocken\AppData\Roaming\Spotify\Spotify.exe [7675448 2015-08-13] (Spotify Ltd)

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [53735968 2015-08-07] (Skype Technologies S.A.)

CHR HKLM\SOFTWARE\Policies\Google: Beschränkung <======= ACHTUNG
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Tcpip\..\Interfaces\{18F74978-CA94-49AE-B84D-E54D4E64E95F}: [NameServer] 8.8.4.4,8.8.8.8

Tcpip\..\Interfaces\{18F74978-CA94-49AE-B84D-E54D4E64E95F}: [DhcpNameServer] 192.168.0.1
 

Internet Explorer:

==================

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Beschränkung <======= ACHTUNG

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hppp

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxp://www.istartsurf.com/?type=hppp

HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp

HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Search Page = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkMUjxjieFQHKIp2m4CNQ,,&q={searchTerms}

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxp://youtube.com/

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://de.msn.com/?ocid=iehp

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Search Bar = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkMUjxjieFQHKIp2m4CNQ,,&q={searchTerms}

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxp://www.istartsurf.com/?type=hppp

SearchScopes: HKLM -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

SearchScopes: HKLM -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

SearchScopes: HKLM-x32 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

SearchScopes: HKLM-x32 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://feed.helperbar.com/?p=mKO_AwFzXIpYRbkHo3StLKYZZHUxozG7WbG8M4ZbpPFmdMdnxsM5TEzN82Kkel9nZA2T-gRu8eyB5nDzyBqSNOIernSR0pf91MZEmbZClptB8-DqvQyh12jhgTxXYmnZ-YBkpaHDxrt6pP5Qsvwfw1_r_YLVC4QxjVZhM7ZUUXdHYVC6dxhbjx6iwWfdWCRYKToDBoxAupkL5cdg9xO6SWRLdE_HOw,,&q={searchTerms}

SearchScopes: HKLM-x32 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://isearch.omiga-plus.com/web/?type=ds&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> DefaultScope {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=dspp&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {006ee092-9658-4fd6-bd8e-a21a348e59f5} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {2023ECEC-E06A-4372-A1C7-0B49F9E0FFF0} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {33BB0A4E-99AF-4226-BDF6-49120163DE86} URL = hxxp://www.istartsurf.com/web/?type=dspp&q={searchTerms}

SearchScopes: HKU\S-1-5-21-1749110370-1768304781-627677907-1000 -> {E733165D-CBCF-4FDA-883E-ADEF965B476C} URL = hxxp://do-search.com/web/?utm_source=b&utm_medium=&utm_campaign=install_ie&utm_content=ds&from=&uid=ST500DM002-1BC142_W2A27G6AXXXXW2A27G6A&ts=1420373293&type=default&q={searchTerms}

BHO: MediaPlayersvideos  1.1 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-bho64.dll Keine Datei

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29] (Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29] (Oracle Corporation)

BHO-x32: MediaPlayersvideos  1.1 -> {11111111-1111-1111-1111-110611791113} -> C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-bho.dll Keine Datei

BHO-x32: IETabPage Class -> {3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C} -> C:\Program Files (x86)\XTab\SupTab.dll Keine Datei

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\ssv.dll [2015-07-29] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\jp2ssv.dll [2015-07-29] (Oracle Corporation)

Toolbar: HKLM - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  Keine Datei

Toolbar: HKLM-x32 - Kein Name - {ae07101b-46d4-4a98-af68-0333ea26e113} -  Keine Datei

Filter: application/octet-stream - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei

Filter: application/x-complus - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei

Filter: application/x-msdownload - {1E66F26B-79EE-11D2-8710-00C04F79ED0D} - mscoree.dll Keine Datei

StartMenuInternet: IEXPLORE.EXE - C:\Program Files\Internet Explorer\iexplore.exe hxxp://isearch.omiga-plus.com/?type=sc&ts=1417193064&from=tugs&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP
 

FireFox:

========

FF ProfilePath: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141

FF NewTab: chrome://quick_start/content/index.html

FF DefaultSearchEngine: istartsurf

FF SelectedSearchEngine: istartsurf

FF Homepage: hxxp://www.istartsurf.com/?type=hppp

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_232.dll [2015-08-12] ()

FF Plugin: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-29] (Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-29] (Oracle Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_232.dll [2015-08-12] ()

FF Plugin-x32: @java.com/DTPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\dtplugin\npDeployJava1.dll [2015-07-29] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.51.2 -> C:\Program Files (x86)\Java\jre1.8.0_51\bin\plugin2\npjp2.dll [2015-07-29] (Oracle Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-02-05] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-02-05] (NVIDIA Corporation)

FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.25.11\npGoogleUpdate3.dll [2014-11-16] (Google Inc.)

FF Plugin-x32: @WildTangent.com/GamesAppPresenceDetector,Version=1.0 -> C:\Program Files (x86)\WildTangent Games\App\BrowserIntegration\Registered\2\NP_wtapp.dll [2014-11-15] ()

FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @citrixonline.com/appdetectorplugin -> C:\Users\SimonsZocken\AppData\Local\Citrix\Plugins\104\npappdetector.dll [2014-08-14] (Citrix Online)

FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @nsroblox.roblox.com/launcher -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\\NPRobloxProxy.dll [2013-01-01] ( ROBLOX Corporation)

FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @nsroblox.roblox.com/launcher64 -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\\NPRobloxProxy64.dll [2013-01-01] ( ROBLOX Corporation)

FF Plugin HKU\S-1-5-21-1749110370-1768304781-627677907-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\SimonsZocken\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-06-16] (Unity Technologies ApS)

FF user.js: detected! => C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\user.js [2015-08-13]

FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\google-images.xml [2014-10-01]

FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\google-maps.xml [2014-10-01]

FF SearchPlugin: C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\searchplugins\istartsurf.xml [2015-09-19]

FF SearchPlugin: C:\Program Files (x86)\mozilla firefox\browser\searchplugins\omiga-plus.xml [2014-11-28]

FF Extension: Default SearchProtected  - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\Extensions\defsearchp@gmail.com.xpi [2015-08-01]

FF Extension: Adblock Plus - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-12-03]

FF HKLM-x32\...\Firefox\Extensions: [{d9a96531-b093-4d07-9e4c-9704a365c441}] - C:\Program Files (x86)\Mozilla Firefox\extensions\{d9a96531-b093-4d07-9e4c-9704a365c441}

FF HKLM-x32\...\Firefox\Extensions: [faststartff@gmail.com] - C:\Users\SimonsZocken\AppData\Roaming\Mozilla\Firefox\Profiles\77di6hnk.default-1411299271141\extensions\faststartff@gmail.com
 

Chrome: 

=======

CHR dev: Chrome dev build erkannt! <======= ACHTUNG

CHR Profile: C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (Avira Browserschutz) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2014-09-20]

CHR Extension: (Deezify) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\kpkbhaapafmlmgodhicgpngihalhepll [2014-11-28]

CHR Extension: (mihcahmgecmbnbcchbopgniflfhgnkff) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\mihcahmgecmbnbcchbopgniflfhgnkff [2014-12-02]

CHR Extension: (ofiahdodpoomdjoegkmibpmgejobfpcn) - C:\Users\SimonsZocken\AppData\Local\Google\Chrome\User Data\Default\Extensions\ofiahdodpoomdjoegkmibpmgejobfpcn [2014-12-02]

CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - hxxps://clients2.google.com/service/update2/crx

StartMenuInternet: Google Chrome - C:\Program Files (x86)\Google\Chrome\Application\chrome.exe hxxp://www.delta-homes.com/?type=sc&ts=1429789534&from=ient04230&uid=ST2000DM001-1CH164_W1E74YHPXXXXW1E74YHP
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [887128 2015-07-24] (Avira Operations GmbH & Co. KG)

R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG)

R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [461672 2015-08-27] (Avira Operations GmbH & Co. KG)

S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1213072 2015-08-27] (Avira Operations GmbH & Co. KG)

R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [228104 2015-08-13] (Avira Operations GmbH & Co. KG)

S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [238376 2015-07-04] (EasyAntiCheat Ltd)

S3 GamesAppIntegrationService; C:\Program Files (x86)\WildTangent Games\App\GamesAppIntegrationService.exe [373824 2015-05-17] (WildTangent)

R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1148744 2014-10-04] (NVIDIA Corporation)

S2 GoToAssist Remote Support Customer; C:\Program Files (x86)\Citrix\GoToAssist Remote Support Customer\715\g2ax_service.exe [610888 2014-08-14] (Citrix Online, a division of Citrix Systems, Inc.)

R2 HiPatchService; C:\Program Files (x86)\Hi-Rez Studios\HiPatchService.exe [9216 2015-01-07] (Hi-Rez Studios) [Datei ist nicht signiert]

S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\11\Intel 32\IDriverT.exe [69632 2005-04-04] (Macrovision Corporation) [Datei ist nicht signiert]

R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-08-03] (LogMeIn, Inc.)

R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1795912 2014-10-04] (NVIDIA Corporation)

R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [19439944 2014-10-04] (NVIDIA Corporation)

R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5495056 2015-06-01] (TeamViewer GmbH)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S3 BstHdAndroidSvc; "C:\Program Files (x86)\BlueStacks\HD-Service.exe" BstHdAndroidSvc Android [X]

S3 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [X]

S2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [X]

S2 IHProtect Service; C:\Program Files (x86)\XTab\ProtectService.exe [X]

R3 WinHttpAutoProxySvc; winhttp.dll [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162528 2015-08-13] (Avira Operations GmbH & Co. KG)

R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [141416 2015-08-13] (Avira Operations GmbH & Co. KG)

R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-07-23] (Avira Operations GmbH & Co. KG)

R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [44088 2015-08-13] (Avira Operations GmbH & Co. KG)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2013-08-28] (Intel Corporation)

R3 ISCT; C:\Windows\System32\DRIVERS\ISCTD64.sys [46568 2013-08-02] ()

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [99288 2013-09-16] (Intel Corporation)

R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19272 2014-10-04] (NVIDIA Corporation)

R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38048 2014-09-04] (NVIDIA Corporation)

S2 BstHdDrv; \??\C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [X]

S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]

S3 MSICDSetup; \??\E:\CDriver64.sys [X]

S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

S1 wpnfd_1_10_0_2; system32\drivers\wpnfd_1_10_0_2.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-19 20:08 - 2015-09-19 20:08 - 00023723 _____ C:\Users\SimonsZocken\Desktop\FRST.txt

2015-09-19 20:07 - 2015-09-19 20:08 - 00000000 ____D C:\FRST

2015-09-19 20:07 - 2015-09-19 20:07 - 02191360 _____ (Farbar) C:\Users\SimonsZocken\Desktop\FRST64.exe

2015-09-19 19:51 - 2015-09-19 19:57 - 00000961 _____ C:\Users\Public\Desktop\Minecraft.lnk

2015-09-19 19:50 - 2015-09-19 19:50 - 02314240 _____ C:\Users\SimonsZocken\Desktop\MinecraftInstaller.msi

2015-09-17 19:30 - 2015-09-17 19:52 - 00097994 ____R C:\Users\SimonsZocken\Desktop\isaac-ng.CT

2015-09-16 15:12 - 2015-09-16 15:12 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\SKIDROW

2015-09-14 00:32 - 2015-09-14 00:33 - 00000000 ____D C:\Users\SimonsZocken\Documents\Ein neuer Anfang

2015-09-11 11:40 - 2015-09-11 11:40 - 00000222 _____ C:\Users\SimonsZocken\Desktop\Toribash.url

2015-09-11 02:05 - 2015-09-11 02:05 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Construct2

2015-09-11 02:04 - 2015-09-11 02:04 - 00000939 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Construct 2.lnk

2015-09-11 02:04 - 2015-09-11 02:04 - 00000843 _____ C:\Users\Public\Desktop\Construct 2.lnk

2015-09-11 02:04 - 2015-09-11 02:04 - 00000000 ____D C:\Program Files\Construct 2

2015-09-10 17:57 - 2015-09-10 17:57 - 00209029 _____ C:\Users\SimonsZocken\Downloads\MyCommand.jar

2015-09-09 12:17 - 2015-08-05 19:56 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2015-09-09 12:17 - 2015-08-05 19:56 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2015-09-09 12:17 - 2015-08-05 19:40 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll

2015-09-09 12:16 - 2015-09-02 05:04 - 00100864 _____ (Microsoft Corporation) C:\Windows\system32\fontsub.dll

2015-09-09 12:16 - 2015-09-02 05:04 - 00046080 _____ (Adobe Systems) C:\Windows\system32\atmlib.dll

2015-09-09 12:16 - 2015-09-02 05:04 - 00041984 _____ (Microsoft Corporation) C:\Windows\system32\lpk.dll

2015-09-09 12:16 - 2015-09-02 05:04 - 00014336 _____ (Microsoft Corporation) C:\Windows\system32\dciman32.dll

2015-09-09 12:16 - 2015-09-02 04:48 - 00070656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\fontsub.dll

2015-09-09 12:16 - 2015-09-02 04:48 - 00034304 _____ (Adobe Systems) C:\Windows\SysWOW64\atmlib.dll

2015-09-09 12:16 - 2015-09-02 04:48 - 00010240 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dciman32.dll

2015-09-09 12:16 - 2015-09-02 04:47 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\lpk.dll

2015-09-09 12:16 - 2015-09-02 03:51 - 03209216 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2015-09-09 12:16 - 2015-09-02 03:47 - 00372736 _____ (Adobe Systems Incorporated) C:\Windows\system32\atmfd.dll

2015-09-09 12:16 - 2015-09-02 03:33 - 00299520 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\atmfd.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 03165696 _____ (Microsoft Corporation) C:\Windows\system32\wucltux.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 02606080 _____ (Microsoft Corporation) C:\Windows\system32\wuaueng.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 00696320 _____ (Microsoft Corporation) C:\Windows\system32\wuapi.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 00192000 _____ (Microsoft Corporation) C:\Windows\system32\wuwebv.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 00098304 _____ (Microsoft Corporation) C:\Windows\system32\wudriver.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 00037888 _____ (Microsoft Corporation) C:\Windows\system32\wups2.dll

2015-09-09 12:16 - 2015-08-26 20:07 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\wups.dll

2015-09-09 12:16 - 2015-08-26 20:06 - 00139776 _____ (Microsoft Corporation) C:\Windows\system32\wuauclt.exe

2015-09-09 12:16 - 2015-08-26 20:06 - 00091136 _____ (Microsoft Corporation) C:\Windows\system32\WinSetupUI.dll

2015-09-09 12:16 - 2015-08-26 20:06 - 00037376 _____ (Microsoft Corporation) C:\Windows\system32\wuapp.exe

2015-09-09 12:16 - 2015-08-26 20:06 - 00012288 _____ (Microsoft Corporation) C:\Windows\system32\wu.upgrade.ps.dll

2015-09-09 12:16 - 2015-08-26 19:56 - 00566784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapi.dll

2015-09-09 12:16 - 2015-08-26 19:56 - 00173056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuwebv.dll

2015-09-09 12:16 - 2015-08-26 19:56 - 00093184 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wudriver.dll

2015-09-09 12:16 - 2015-08-26 19:56 - 00030208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wups.dll

2015-09-09 12:16 - 2015-08-26 19:55 - 00034816 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wuapp.exe

2015-09-09 12:16 - 2015-08-18 03:42 - 00393304 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2015-09-09 12:16 - 2015-08-18 03:14 - 00344168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2015-09-09 12:16 - 2015-08-15 08:48 - 25190400 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2015-09-09 12:16 - 2015-08-15 08:34 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2015-09-09 12:16 - 2015-08-15 08:33 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2015-09-09 12:16 - 2015-08-15 08:18 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2015-09-09 12:16 - 2015-08-15 08:18 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2015-09-09 12:16 - 2015-08-15 08:17 - 02886144 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2015-09-09 12:16 - 2015-08-15 08:17 - 00585216 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2015-09-09 12:16 - 2015-08-15 08:17 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2015-09-09 12:16 - 2015-08-15 08:17 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2015-09-09 12:16 - 2015-08-15 08:10 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2015-09-09 12:16 - 2015-08-15 08:09 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2015-09-09 12:16 - 2015-08-15 08:06 - 19856896 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2015-09-09 12:16 - 2015-08-15 08:06 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2015-09-09 12:16 - 2015-08-15 08:04 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2015-09-09 12:16 - 2015-08-15 08:04 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2015-09-09 12:16 - 2015-08-15 08:04 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2015-09-09 12:16 - 2015-08-15 08:04 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2015-09-09 12:16 - 2015-08-15 08:00 - 05923328 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2015-09-09 12:16 - 2015-08-15 07:57 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2015-09-09 12:16 - 2015-08-15 07:53 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2015-09-09 12:16 - 2015-08-15 07:53 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2015-09-09 12:16 - 2015-08-15 07:46 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2015-09-09 12:16 - 2015-08-15 07:42 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2015-09-09 12:16 - 2015-08-15 07:41 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2015-09-09 12:16 - 2015-08-15 07:40 - 00504832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2015-09-09 12:16 - 2015-08-15 07:40 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2015-09-09 12:16 - 2015-08-15 07:39 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2015-09-09 12:16 - 2015-08-15 07:39 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2015-09-09 12:16 - 2015-08-15 07:39 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2015-09-09 12:16 - 2015-08-15 07:38 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2015-09-09 12:16 - 2015-08-15 07:35 - 02279424 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2015-09-09 12:16 - 2015-08-15 07:33 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2015-09-09 12:16 - 2015-08-15 07:32 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2015-09-09 12:16 - 2015-08-15 07:30 - 00479232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2015-09-09 12:16 - 2015-08-15 07:29 - 00665600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2015-09-09 12:16 - 2015-08-15 07:29 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2015-09-09 12:16 - 2015-08-15 07:29 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2015-09-09 12:16 - 2015-08-15 07:24 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2015-09-09 12:16 - 2015-08-15 07:23 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2015-09-09 12:16 - 2015-08-15 07:22 - 02126336 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2015-09-09 12:16 - 2015-08-15 07:22 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2015-09-09 12:16 - 2015-08-15 07:21 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2015-09-09 12:16 - 2015-08-15 07:16 - 14451712 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2015-09-09 12:16 - 2015-08-15 07:16 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2015-09-09 12:16 - 2015-08-15 07:14 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2015-09-09 12:16 - 2015-08-15 07:12 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2015-09-09 12:16 - 2015-08-15 07:11 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2015-09-09 12:16 - 2015-08-15 07:10 - 04520448 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2015-09-09 12:16 - 2015-08-15 07:07 - 02427392 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2015-09-09 12:16 - 2015-08-15 07:04 - 12857344 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2015-09-09 12:16 - 2015-08-15 07:02 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2015-09-09 12:16 - 2015-08-15 07:01 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2015-09-09 12:16 - 2015-08-15 07:01 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2015-09-09 12:16 - 2015-08-15 06:55 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2015-09-09 12:16 - 2015-08-15 06:43 - 01951232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2015-09-09 12:16 - 2015-08-15 06:43 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2015-09-09 12:16 - 2015-08-15 06:39 - 01310720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2015-09-09 12:16 - 2015-08-15 06:37 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2015-09-09 12:16 - 2015-08-05 19:56 - 01110016 _____ (Microsoft Corporation) C:\Windows\system32\schedsvc.dll

2015-09-09 12:16 - 2015-08-04 20:03 - 00692672 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2015-09-09 12:16 - 2015-08-04 20:00 - 00616360 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2015-09-09 12:16 - 2015-08-04 19:56 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2015-09-09 12:16 - 2015-08-04 19:56 - 00059392 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2015-09-09 12:16 - 2015-08-04 19:56 - 00032768 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2015-09-09 12:16 - 2015-08-04 19:55 - 00147456 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2015-09-09 12:16 - 2015-08-04 19:55 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2015-09-09 12:16 - 2015-08-04 19:47 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2015-09-09 12:16 - 2015-08-04 18:58 - 00061440 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2015-09-09 12:16 - 2015-07-15 05:17 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2015-09-09 12:16 - 2015-07-15 04:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2015-09-05 20:40 - 2015-09-06 10:23 - 00000000 ____D C:\Users\SimonsZocken\Desktop\items

2015-09-05 20:39 - 2015-09-05 20:39 - 00000000 ____D C:\Users\SimonsZocken\Desktop\assets

2015-09-05 20:36 - 2015-09-05 20:36 - 00001300 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\paint.net.lnk

2015-09-05 20:36 - 2015-09-05 20:36 - 00001288 _____ C:\Users\Public\Desktop\paint.net.lnk

2015-09-05 20:36 - 2015-09-05 20:36 - 00000000 ____D C:\Program Files\paint.net

2015-09-05 20:35 - 2015-09-05 20:40 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\paint.net

2015-09-02 23:38 - 2015-09-02 23:38 - 06520208 _____ (Tim Kosse) C:\Users\SimonsZocken\Downloads\FileZilla_3.13.1_win64-setup.exe

2015-09-02 23:33 - 2015-09-04 14:57 - 00000000 ____D C:\Users\SimonsZocken\Desktop\mc-2

2015-09-02 23:10 - 2015-09-05 00:03 - 00004776 _____ C:\Users\SimonsZocken\Desktop\Boss-MobCommands.txt

2015-09-02 15:57 - 2015-09-02 15:58 - 19538382 _____ C:\Users\SimonsZocken\Downloads\craftbukkit-1.8-R0.1-SNAPSHOT.jar

2015-09-02 15:57 - 2015-09-02 15:57 - 07641600 _____ (Bertware) C:\Users\SimonsZocken\Downloads\BukkitGUI.exe

2015-08-31 14:13 - 2015-08-31 14:13 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype

2015-08-30 14:31 - 2015-08-30 14:31 - 00001176 _____ C:\Users\SimonsZocken\Downloads\pssfa2_n.schematic

2015-08-30 14:31 - 2015-08-30 14:31 - 00000929 _____ C:\Users\SimonsZocken\Downloads\public_lupf.schematic

2015-08-30 14:31 - 2015-08-30 14:31 - 00000742 _____ C:\Users\SimonsZocken\Downloads\public_arti.schematic

2015-08-30 14:31 - 2015-08-30 14:31 - 00000644 _____ C:\Users\SimonsZocken\Downloads\public_stich_s.schematic

2015-08-30 00:55 - 2015-09-05 19:32 - 00000000 ____D C:\Users\SimonsZocken\Desktop\SC2 Maps

2015-08-29 13:24 - 2015-09-19 08:52 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\.minecraft

2015-08-28 10:15 - 2015-08-29 10:52 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2015-09-19 20:04 - 2014-09-13 20:48 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2015-09-19 20:02 - 2014-09-20 14:37 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2015-09-19 20:02 - 2014-09-20 14:37 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2015-09-19 19:57 - 2015-06-20 13:10 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft

2015-09-19 19:57 - 2015-06-20 13:10 - 00000000 ____D C:\Program Files (x86)\Minecraft

2015-09-19 19:45 - 2014-12-11 17:48 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\LogMeIn Hamachi

2015-09-19 19:44 - 2014-08-14 16:38 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Skype

2015-09-19 18:47 - 2014-08-14 16:02 - 01776470 _____ C:\Windows\WindowsUpdate.log

2015-09-19 17:46 - 2014-11-28 18:46 - 00003488 _____ C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1.job

2015-09-19 17:46 - 2014-11-28 18:46 - 00002128 _____ C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2.job

2015-09-19 17:45 - 2014-08-14 21:29 - 00000000 ____D C:\Program Files (x86)\Steam

2015-09-19 16:43 - 2015-08-13 18:36 - 00000000 ____D C:\Users\SimonsZocken\Desktop\Steam

2015-09-19 08:59 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2015-09-19 08:59 - 2009-07-14 06:45 - 00021840 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2015-09-19 08:46 - 2014-09-26 20:45 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Spotify

2015-09-19 08:46 - 2014-09-26 20:45 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\Spotify

2015-09-19 08:44 - 2014-08-14 16:34 - 00000000 ____D C:\ProgramData\NVIDIA

2015-09-19 08:44 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2015-09-19 08:44 - 2009-07-14 06:51 - 00112356 _____ C:\Windows\setupact.log

2015-09-18 22:18 - 2014-10-12 15:26 - 00000000 ____D C:\Program Files (x86)\Diablo III

2015-09-18 21:20 - 2014-09-24 18:54 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Roblox

2015-09-18 21:18 - 2014-10-12 15:25 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\Battle.net

2015-09-18 21:18 - 2014-10-12 15:25 - 00000000 ____D C:\Program Files (x86)\Battle.net

2015-09-18 21:16 - 2015-04-10 22:36 - 00000000 ____D C:\Program Files (x86)\Heroes of the Storm

2015-09-17 20:46 - 2015-06-16 18:19 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\YGOPro DevPro

2015-09-16 20:29 - 2014-08-17 14:01 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Audacity

2015-09-16 15:12 - 2014-08-14 22:38 - 00000000 ____D C:\Users\SimonsZocken\Documents\My Games

2015-09-12 15:43 - 2014-11-02 14:58 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\FileZilla

2015-09-12 12:12 - 2014-10-19 13:59 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\CrashDumps

2015-09-11 11:43 - 2014-08-15 14:18 - 00000000 ____D C:\ProgramData\Package Cache

2015-09-10 14:09 - 2014-08-14 22:33 - 00144049 _____ C:\Windows\DirectX.log

2015-09-10 13:30 - 2015-08-15 20:28 - 00000000 ____D C:\Users\SimonsZocken\Desktop\mcrcon-0.0.5-bin-windows

2015-09-10 12:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2015-09-10 10:55 - 2009-07-14 06:45 - 00338640 _____ C:\Windows\system32\FNTCACHE.DAT

2015-09-10 10:53 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal

2015-09-10 10:53 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions

2015-09-10 02:12 - 2014-08-14 18:53 - 00000000 ____D C:\Windows\system32\MRT

2015-09-08 10:07 - 2014-08-15 14:16 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira

2015-09-08 09:55 - 2010-11-21 05:47 - 00503800 _____ C:\Windows\PFRO.log

2015-09-04 21:15 - 2015-06-16 18:19 - 00000000 ____D C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YGOPro DevPro

2015-08-31 14:13 - 2014-08-14 16:38 - 00000000 ___RD C:\Program Files (x86)\Skype

2015-08-31 14:13 - 2014-08-14 16:38 - 00000000 ____D C:\ProgramData\Skype

2015-08-29 19:10 - 2015-04-10 21:20 - 00000000 ____D C:\Users\SimonsZocken\Documents\StarCraft II

2015-08-29 13:11 - 2014-11-09 19:35 - 00000000 ____D C:\Program Files (x86)\Hearthstone

2015-08-29 10:53 - 2009-07-14 07:08 - 00032640 _____ C:\Windows\Tasks\SCHEDLGU.TXT

2015-08-29 10:52 - 2014-09-08 13:44 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2015-08-28 00:26 - 2014-08-20 11:27 - 00000000 ____D C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client

2015-08-26 18:37 - 2014-08-14 18:53 - 134753440 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2014-10-22 20:24 - 2014-11-22 22:08 - 0000097 _____ () C:\Users\SimonsZocken\AppData\Roaming\LauncherSettings_live.cfg

2014-11-22 10:45 - 2015-05-08 14:48 - 0000441 _____ () C:\Users\SimonsZocken\AppData\Roaming\MinecraftClickerSave.txt

2014-11-28 18:44 - 2014-11-28 18:44 - 1857496 _____ (HQ VideoV28.11) C:\Users\SimonsZocken\AppData\Roaming\MMUJI.exe

2014-11-28 18:45 - 2014-11-28 18:45 - 1857496 _____ (Enter) C:\Users\SimonsZocken\AppData\Roaming\OGLG.exe

2014-10-23 17:04 - 2014-10-23 17:04 - 0008144 _____ () C:\Users\SimonsZocken\AppData\Roaming\TheHunterSettings_live.bin

2015-03-09 17:48 - 2015-03-09 17:48 - 0040960 ___SH () C:\Users\SimonsZocken\AppData\Roaming\Thumbs.db

2014-11-28 18:46 - 2014-11-28 18:46 - 1535448 _____ (HQ VideoV28.11) C:\Users\SimonsZocken\AppData\Roaming\TM.exe

2014-11-28 18:46 - 2014-11-28 18:46 - 1535448 _____ (Enter) C:\Users\SimonsZocken\AppData\Roaming\WDFYUBZ.exe

2014-11-28 19:54 - 2014-11-28 19:54 - 0628496 _____ (CMI Limited) C:\Users\SimonsZocken\AppData\Local\nsa74AD.tmp

2015-07-31 10:57 - 2015-08-15 20:21 - 0000600 _____ () C:\Users\SimonsZocken\AppData\Local\PUTTY.RND

2015-08-16 05:09 - 2015-08-16 05:09 - 0002104 _____ () C:\Users\SimonsZocken\AppData\Local\recently-used.xbel

2014-08-14 17:48 - 2014-08-14 17:48 - 0000000 ____H () C:\ProgramData\DP45977C.lfl
 

Einige Dateien in TEMP:

====================

C:\Users\SimonsZocken\AppData\Local\Temp\avgnt.exe

C:\Users\SimonsZocken\AppData\Local\Temp\BullseyeCoverage-2-x86.dll

C:\Users\SimonsZocken\AppData\Local\Temp\devcon64.exe

C:\Users\SimonsZocken\AppData\Local\Temp\drm_dialogs.dll

C:\Users\SimonsZocken\AppData\Local\Temp\drm_dyndata_7400008.dll

C:\Users\SimonsZocken\AppData\Local\Temp\fp_pl_pfs_installer.exe

C:\Users\SimonsZocken\AppData\Local\Temp\HiPatchSelfUpdateWindow.exe

C:\Users\SimonsZocken\AppData\Local\Temp\HiRezLauncherControls.dll

C:\Users\SimonsZocken\AppData\Local\Temp\ICSharpCode.SharpZipLib.dll

C:\Users\SimonsZocken\AppData\Local\Temp\Installer.exe

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-1343543407322120933.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-238329836124738100.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-3365330378586126933.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-5193640500515359623.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-0a645a2-8171894015821889474.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.6.4-R2.0-b2918jnks.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.3-56-g3779cff-b3072jnks.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.2-R0.3-b3020jnks.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.1-10-g8688bd4-b3092jnks.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-1.7.9-R0.2-11-g3fd9db2-b3098jnks.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-1512374936573016778.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-1744232142253645131.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3261719090937640218.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3470107198358187167.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-397091771528305221.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-3982136512997162608.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-4511803116025988274.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5047948624743418102.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5385809942258672043.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5806029061823537793.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5903323399846814354.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-5991621273645016773.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6056074404322815342.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6412964357349152929.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6472183450542454474.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-649047008773354403.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6549758609594149016.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6565206762538792243.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6647646490544346695.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6713297519027044306.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6955666785049800781.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-6973134385895982404.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7072675254096131220.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7264940990901904890.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7495142713063067959.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-7644747225610167787.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Bukkit-61ef214-768229924774051002.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-32-git-Spigot-1649.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-4073286446991539302.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-458874702202751746.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-5536207071792889188.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-5544614261553966182.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-6757111243856382035.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-33d5de3-7837874448066176117.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Bukkit-jenkins-CraftBukkit-173.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-MCPC-Plus-jenkins-MCPC-Plus-Legacy-617.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jansi-64-git-Spigot-1649.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jline_git-Bukkit-1_8_1-R4-7-g22f18a2-b1425jnks.dll

C:\Users\SimonsZocken\AppData\Local\Temp\jre-8u25-windows-au.exe

C:\Users\SimonsZocken\AppData\Local\Temp\nvSCPAPI.dll

C:\Users\SimonsZocken\AppData\Local\Temp\nvStInst.exe

C:\Users\SimonsZocken\AppData\Local\Temp\OptimizerPro.exe

C:\Users\SimonsZocken\AppData\Local\Temp\setup.exe

C:\Users\SimonsZocken\AppData\Local\Temp\SkypeSetup.exe

C:\Users\SimonsZocken\AppData\Local\Temp\smt_istartsurf.exe

C:\Users\SimonsZocken\AppData\Local\Temp\sqlite-3.7.2-sqlitejdbc.dll

C:\Users\SimonsZocken\AppData\Local\Temp\swt-win32-3349.dll

C:\Users\SimonsZocken\AppData\Local\Temp\xmlUpdater.exe

C:\Users\SimonsZocken\AppData\Local\Temp\YgoUpdater.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

ACHTUNG: ==> Auf den BCD konnte nicht zugegriffen werden. 
 
 

LastRegBack: 2015-09-03 17:41
 

==================== Ende von FRST.txt ============================

--- --- ---

FRST Additions Logfile:

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:15-09-2015

durchgeführt von SimonsZocken (2015-09-19 20:09:13)

Gestartet von C:\Users\SimonsZocken\Desktop

Windows 7 Home Premium Service Pack 1 (X64) (2014-08-14 14:02:58)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1749110370-1768304781-627677907-500 - Administrator - Disabled)

Gast (S-1-5-21-1749110370-1768304781-627677907-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1749110370-1768304781-627677907-1004 - Limited - Enabled)

SimonsZocken (S-1-5-21-1749110370-1768304781-627677907-1000 - Administrator - Enabled) => C:\Users\SimonsZocken
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}

AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Flash Player 18 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 18.0.0.232 - Adobe Systems Incorporated)

Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.232 - Adobe Systems Incorporated)

AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)

AirMech (HKLM-x32\...\Steam App 206500) (Version:  - Carbon Games)

Audacity 2.0.5 (HKLM-x32\...\Audacity_is1) (Version: 2.0.5 - Audacity Team)

Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.12.420 - Avira Operations GmbH & Co. KG)

Avira Launcher (HKLM-x32\...\{315dd168-0794-4cf1-8355-f195cde642fc}) (Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG)

Avira Launcher (x32 Version: 1.1.45.11819 - Avira Operations GmbH & Co. KG) Hidden

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)

BlueStacks Notification Center (HKLM-x32\...\{4FCF716C-CEB4-499D-AFB8-A5375105EC2A}) (Version: 0.9.30.9239 - BlueStack Systems, Inc.)

Böse Nachbarn 2 (HKLM-x32\...\{706EC84C-6966-45EB-AEB9-EE6DCEA8CA3A}) (Version: 1.0 - JoWooD Studio Vienna)

Bridge Constructor Medieval (HKLM-x32\...\Steam App 319850) (Version:  - ClockStone)

Build and Shoot Launcher 1.2 (HKLM-x32\...\Build and Shoot Launcher) (Version: 1.2 - Buld Then Snip, LLC)

Camtasia Studio 8 (HKLM-x32\...\{6BED66AA-1DC6-474B-AC70-205CC3A68A39}) (Version: 8.4.4.1859 - TechSmith Corporation)

Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version:  - Cheat Engine)

Construct 2 r212.2 (HKLM\...\Construct 2_is1) (Version: 1.0.212.2 - Scirra)

Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)

Craften Terminal 4.0.2 (HKLM-x32\...\{4e7c3936-7c06-4ef0-928b-c5d92f372578}_is1) (Version: 4.0.2 - Craften.de)

Cubetractor (HKLM-x32\...\Steam App 235720) (Version:  - Ludochip)

DeepBurner 1.9.0.228 (HKLM-x32\...\{F0A8E94F-1AD1-4428-873E-36CEEABA5FED}_is1) (Version: 1.9.0.228 - Astonsoft Ltd.)

Depth Hunter 2: Deep Dive (HKLM-x32\...\Steam App 248530) (Version:  - Biart Company LLC)

Diablo III (HKLM-x32\...\Diablo III) (Version:  - Blizzard Entertainment)

Die*Sims™*3 (HKLM-x32\...\{C05D8CDB-417D-4335-A38C-A0659EDFD6B8}) (Version: 1.0.631 - Electronic Arts)

EE-ZDE (HKLM-x32\...\{B49C924C-A651-4378-94F6-5D9BF44A959F}) (Version:  - )

Empire Earth (HKLM-x32\...\{2447500B-22D7-47BD-9B13-1A927F43A267}) (Version:  - )

FileZilla Client 3.11.0.2 (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\FileZilla Client) (Version: 3.11.0.2 - Tim Kosse)

FL Studio 11 (HKLM-x32\...\FL Studio 11) (Version:  - Image-Line)

FlowStone FL 3.0 (HKLM-x32\...\FlowStone) (Version:  - )

Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )

Frozen Hearth (HKLM-x32\...\Steam App 257890) (Version:  - Epiphany Games)

GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 39.0.2171.65 - Google Inc.)

GoToAssist Customer 2.1.0.715 (HKLM-x32\...\GoToAssist Express Customer) (Version: 2.1.0.715 - Citrix Online)

Hacker Evolution Duality (HKLM-x32\...\Steam App 70120) (Version:  - exosyphen studios)

Hearthstone (HKLM-x32\...\Hearthstone) (Version:  - Blizzard Entertainment)

Heroes of the Storm (HKLM-x32\...\Heroes of the Storm) (Version:  - Blizzard Entertainment)

Hi-Rez Studios Authenticate and Update Service (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF1FC}) (Version: 3.0.0.0 - Hi-Rez Studios)

Java 8 Update 51 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418051F0}) (Version: 8.0.510 - Oracle Corporation)

Java 8 Update 51 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218051F0}) (Version: 8.0.510 - Oracle Corporation)

Java SE Development Kit 8 Update 20 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180200}) (Version: 8.0.200.26 - Oracle Corporation)

Java SE Development Kit 8 Update 51 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180510}) (Version: 8.0.510.16 - Oracle Corporation)

K-Lite Codec Pack 6.0.4 (Basic) (HKLM-x32\...\KLiteCodecPack_is1) (Version: 6.0.4 - )

League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games )

League of Legends (x32 Version: 3.0.1 - Riot Games ) Hidden

LEGO® Star Wars™: Die Komplette Saga (HKLM-x32\...\InstallShield_{D596980D-17BE-4425-B8F0-5640719AADE9}) (Version: 1.00.0000 - LucasArts)

LEGO® Star Wars™: The Complete Saga (x32 Version: 1.00.0000 - LucasArts) Hidden

LibreOffice 4.3.5.1 (HKLM-x32\...\{DB19C830-14B7-4301-B4F2-A69FBDEE9A70}) (Version: 4.3.5.1 - The Document Foundation)

Lock On: Modern Air Combat (HKLM-x32\...\{E90DCEE9-DC27-401B-A7AC-B0AFF5B34E4D}) (Version: 1.00.000 - )

LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.383 - LogMeIn, Inc.)

LogMeIn Hamachi (x32 Version: 2.2.0.383 - LogMeIn, Inc.) Hidden

Magicka: Wizard Wars (HKLM-x32\...\Steam App 202090) (Version:  - Paradox North)

Melissa K. and the Heart of Gold Collector's Edition (HKLM-x32\...\Steam App 321150) (Version:  - SDP Games)

Microsoft .NET Framework 4.5 DEU Language Pack (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50709 - Microsoft Corporation)

Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation)

Microsoft Age of Empires II (HKLM-x32\...\Age of Empires 2.0) (Version:  - )

Microsoft Age of Empires II: The Conquerors Expansion (HKLM-x32\...\Age of Empires II: The Conquerors Expansion 1.0) (Version:  - )

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)

Microsoft_VC100_CRT_x86 (HKLM-x32\...\{6FDDB201-2CA0-42BD-973F-7B2C4A61EA3F}) (Version: 1.0.0 - Microsoft)

Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)

Monkey Island™ Special Edition Collection (HKLM-x32\...\MISEC) (Version: 1.0.0.0 - LucasArts)

Mozilla Firefox 40.0.3 (x86 de) (HKLM-x32\...\Mozilla Firefox 40.0.3 (x86 de)) (Version: 40.0.3 - Mozilla)

Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 40.0.3.5716 - Mozilla)

My Lands (HKLM-x32\...\Steam App 290730) (Version:  - Gravvit Ltd)

No Man's Land (HKLM-x32\...\No Man's Land) (Version:  - )

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.5 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 344.46 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 344.46 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 347.52 - NVIDIA Corporation)

NVIDIA GeForce Experience 2.1.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.1.3 - NVIDIA Corporation)

NVIDIA Grafiktreiber 347.52 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 347.52 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)

NVIDIA PhysX (HKLM-x32\...\{80407BA7-7763-4395-AB98-5233F1B34E65}) (Version: 9.13.1220 - NVIDIA Corporation)

Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )

Pahelika: Revelations HD (HKLM-x32\...\Steam App 333650) (Version:  - Ironcode Gaming)

paint.net (HKLM\...\{DF3A46D9-67B3-44B2-9D01-25C8BA772C8A}) (Version: 4.0.6 - dotPDN LLC)

Pivot Stickfigure Animator version 2.2.7 (HKLM-x32\...\Pivot Stickfigure Animator_is1) (Version: 2.2.7 - )

PlanetSide 2 (HKLM-x32\...\Steam App 218230) (Version:  - Sony Online Entertainment)

PlanetSide 2 (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\SOE-PlanetSide 2) (Version:  - Sony Online Entertainment)

Plants vs. Zombies 1.0.4.7924 (by Scar) (HKLM-x32\...\{0DE8527A-FE3E-4FCA-A023-D57EF0B796C9}_is1) (Version:  - PopCap Games)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7173 - Realtek Semiconductor Corp.)

RGSS-RTP Standard (HKLM-x32\...\RGSS-RTP Standard_is1) (Version: 1.04 - Enterbrain)

ROBLOX Player for SimonsZocken (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{373B1718-8CC5-4567-8EE2-9033AD08A680}) (Version:  - ROBLOX Corporation)

Robocraft (HKLM-x32\...\Steam App 301520) (Version:  - Freejam)

RollerCoaster Tycoon 3 (HKLM-x32\...\RollerCoaster Tycoon 3_is1) (Version:  - Atari)

RPG Maker VX Ace Lite (HKLM-x32\...\Steam App 224280) (Version:  - Enterbrain)

RPG Maker XP (HKLM-x32\...\Steam App 235900) (Version:  - Degica)

Rush for Glory (HKLM-x32\...\Steam App 303470) (Version:  - Parseh Game Studio)

SHIELD Streaming (Version: 3.1.1000 - NVIDIA Corporation) Hidden

SHIELD Wireless Controller Driver (Version: 16.13.56 - NVIDIA Corporation) Hidden

ShootMania Storm Demo (HKLM-x32\...\Steam App 233050) (Version:  - Nadeo)

Sigils of Elohim (HKLM-x32\...\Steam App 321480) (Version:  - Croteam)

Skype™ 7.8 (HKLM-x32\...\{6A0549A9-1B96-498C-ACBC-3943001FEB19}) (Version: 7.8.102 - Skype Technologies S.A.)

Smite (HKLM-x32\...\{3C87E0FF-BC0A-4F5E-951B-68DC3F8DF017}) (Version: 1.0.2477.0 - Hi-Rez Studios)

SPORE™ (HKLM-x32\...\{9DF0196F-B6B8-4C3A-8790-DE42AA530101}) (Version: 1.00.0000 - Electronic Arts)

Spotify (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\Spotify) (Version: 1.0.11.134.ga37df67b - Spotify AB)

Star Conflict (HKLM-x32\...\Steam App 212070) (Version:  - Star Gem Inc.)

Star Wars Battlefront II (HKLM-x32\...\{3D374523-CFDE-461A-827E-2A102E2AB365}) (Version: 1.0 - LucasArts)

Star Wars Empire at War (HKLM-x32\...\{99AE7207-8612-4DBA-A8F8-BAE5C633390D}) (Version: 1.0 - LucasArts)

StarCraft II (HKLM-x32\...\StarCraft II) (Version:  - Blizzard Entertainment)

Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)

Stranded II 1.0.0.1 (HKLM-x32\...\{CE0900ED-C76A-40C0-8DB4-0F68D825B283}_is1) (Version:  - Unreal Software)

Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)

TeamSpeak 3 Client (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.43174 - TeamViewer)

The Binding of Isaac (HKLM-x32\...\Steam App 113200) (Version:  - Edmund McMillen and Florian Himsl)

The Binding of Isaac: Rebirth (HKLM-x32\...\Steam App 250900) (Version:  - Nicalis, Inc.)

The Culling Of The Cows (HKLM-x32\...\Steam App 297020) (Version:  - Decaying Logic)

The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)

theHunter (HKLM-x32\...\Steam App 253710) (Version:  - Expansive Worlds)

TmNationsForever (HKLM-x32\...\TmNationsForever_is1) (Version:  - Nadeo)

Toribash (HKLM-x32\...\Steam App 248570) (Version:  - Nabi Studios)

Trove (HKLM-x32\...\Steam App 304050) (Version:  - Trion Worlds)

Unity (HKLM-x32\...\Unity) (Version: 5.0.0f4 - Unity Technologies ApS)

Unity Web Player (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\UnityWebPlayer) (Version: 4.5.3f3 - Unity Technologies ApS)

Unturned (HKLM-x32\...\Steam App 304930) (Version:  - Nelson Sexton)

Update Installer for WildTangent Games App (x32 Version:  - WildTangent) Hidden

Virtual Villagers 4 - The Tree of Life (x32 Version: 2.2.0.97 - WildTangent) Hidden

Waldmeister Sause XXL - Winteredition (HKLM-x32\...\Waldmeister Sause XXL - Winteredition_is1) (Version:  - media Verlagsgesellschaft mbH)

Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)

WildTangent Games App (x32 Version: 4.0.11.14 - WildTangent) Hidden

WildTangent-Spiele (HKLM-x32\...\WildTangent wildgames Master Uninstall) (Version: 1.0.4.0 - WildTangent)

WinRAR 5.10 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.10.0 - win.rar GmbH)

World of Tanks (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C812EU}_is1) (Version:  - Wargaming.net)

World of Warships (HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\{1EAC1D02-C6AC-4FA6-9A44-96258C37C814eu}_is1) (Version:  - Wargaming.net)

YGOPro DevPro (HKLM-x32\...\{A115F80F-2B26-464E-97A3-8B13EC533C3D}) (Version: 2.1.2 - DevPro, LLC)

YouTube Song Downloader (HKLM-x32\...\{4281435C-AD1D-4C8A-B9C0-3961C11EF142}_is1) (Version: 10.3 - Abelssoft)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1749110370-1768304781-627677907-1000_Classes\CLSID\{DEE03C2B-0C0C-41A9-9877-FD4B4D7B6EA3}\InprocServer32 -> C:\Users\SimonsZocken\AppData\Local\Roblox\Versions\version-fb01b3a6c61a40f6\RobloxProxy64.dll (ROBLOX Corporation)
 

==================== Wiederherstellungspunkte =========================
 

10-09-2015 14:08:07 DirectX wurde installiert

11-09-2015 11:42:21 Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

11-09-2015 11:42:56 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

15-09-2015 13:41:30 Windows Update

18-09-2015 13:54:39 Windows Update
 

==================== Hosts Inhalt: ===============================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2009-06-10 23:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {2F57269B-1E09-4E2D-AB1E-B0FDAC7D279C} - \Microsoft\Windows\WindowsBackup\ConfigNotification -> Keine Datei <==== ACHTUNG

Task: {315030D9-AB7C-49D7-ADD0-B90395FAE25B} - System32\Tasks\APSnotifierPP1 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG

Task: {374AF5F3-734D-4B6F-90D7-9712E084DF13} - System32\Tasks\APSnotifierPP2 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG

Task: {51C03CF9-8689-438E-9B36-40E7F0806453} - System32\Tasks\APSnotifierPP3 => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG

Task: {52A5826A-AA29-4A0E-9003-1B305B5D81BF} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-08-12] (Adobe Systems Incorporated)

Task: {7A966CAF-639A-49D5-9A68-CEECE95C2212} - System32\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1 => C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-codedownloader.exe <==== ACHTUNG

Task: {80E38280-1FC7-4649-81D1-B6654E675CAA} - System32\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2 => C:\Program Files (x86)\MediaPlayersvideos  1.1\db0c2744-7b35-44bc-938a-10d890bcbc53-2.exe <==== ACHTUNG

Task: {A63EFB14-8DB6-4FB4-AC6E-B7DA7B7D149C} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.)

Task: {AC4E5ACF-89F7-4220-BA21-81EE183975E2} - \Microsoft\Windows\Application Experience\AitAgent -> Keine Datei <==== ACHTUNG

Task: {C3905DAC-465F-4F6C-9B1C-DD5F1C317C36} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2014-09-20] (Google Inc.)

Task: {CEE64558-E1A7-4D9D-80A7-2001912BE5B5} - \Microsoft\Windows\MemoryDiagnostic\CorruptionDetector -> Keine Datei <==== ACHTUNG

Task: {E3163C33-301D-4730-A266-5518C5ED3967} - System32\Tasks\Microsoft\Windows\Bluetooth\UninstallDeviceTask => BthUdTask.exe

Task: {FA2BC0A6-8D4B-458A-85C8-2B8C72487513} - \Microsoft\Windows\MemoryDiagnostic\DecompressionFailureDetector -> Keine Datei <==== ACHTUNG
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\APSnotifierPP1.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG

Task: C:\Windows\Tasks\APSnotifierPP2.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG

Task: C:\Windows\Tasks\APSnotifierPP3.job => C:\Program Files (x86)\AnyProtectEx\AnyProtect.exe <==== ACHTUNG

Task: C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-1.job => C:\Program Files (x86)\MediaPlayersvideos  1.1\MediaPlayersvideos  1.1-codedownloader.exe <==== ACHTUNG

Task: C:\Windows\Tasks\db0c2744-7b35-44bc-938a-10d890bcbc53-2.job => C:\Program Files (x86)\MediaPlayersvideos  1.1\db0c2744-7b35-44bc-938a-10d890bcbc53-2.exe <==== ACHTUNG

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2014-08-14 16:34 - 2015-02-05 21:07 - 00117576 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2015-09-10 13:38 - 2015-09-10 13:38 - 00103424 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe

2014-02-28 15:33 - 2015-08-28 00:26 - 00153576 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\quazip.dll

2014-08-04 15:43 - 2015-08-28 00:26 - 00090088 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\soundbackends\directsound_win32.dll

2014-08-04 15:43 - 2015-08-28 00:26 - 00103400 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\soundbackends\windowsaudiosession_win32.dll

2014-08-04 15:45 - 2015-08-28 00:26 - 00260072 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\plugins\clientquery_plugin.dll

2014-08-04 15:45 - 2015-08-28 00:26 - 00369640 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\plugins\teamspeak_control_plugin.dll

2014-06-05 15:35 - 2015-08-28 00:26 - 00271360 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\ssleay32.dll

2014-06-05 15:35 - 2015-08-28 00:26 - 01300992 _____ () C:\Users\SimonsZocken\AppData\Local\TeamSpeak 3 Client\LIBEAY32.dll

2014-08-14 21:30 - 2015-07-03 18:12 - 00778240 _____ () C:\Program Files (x86)\Steam\SDL2.dll

2015-02-02 18:31 - 2015-07-03 18:12 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll

2015-02-02 18:31 - 2015-07-03 18:12 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll

2015-02-02 18:31 - 2015-07-03 18:12 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll

2014-08-14 21:30 - 2015-08-19 22:39 - 02413248 _____ () C:\Program Files (x86)\Steam\video.dll

2014-08-29 10:12 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll

2014-08-29 10:12 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll

2014-08-29 10:12 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll

2014-08-29 10:12 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll

2014-08-29 10:12 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll

2014-08-14 21:30 - 2015-08-19 22:39 - 00704192 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL

2015-07-25 10:09 - 2015-07-27 03:13 - 00171008 _____ () C:\Program Files (x86)\Steam\bin\openvr_api.dll

2015-09-19 17:45 - 2015-09-19 17:45 - 00155232 ___HT () C:\Users\SimonsZocken\AppData\Local\Temp\~C2DB.tmp

2014-08-14 21:30 - 2015-07-03 18:12 - 39553928 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00198144 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\launcher.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00317440 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\tier0.dll

2015-09-10 13:38 - 2015-09-16 14:41 - 00203776 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\vstdlib.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00389120 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\filesystem_stdio.dll

2015-09-10 13:37 - 2015-09-18 19:04 - 06686208 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\engine.dll

2015-09-10 13:38 - 2015-09-16 14:41 - 00156160 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\inputsystem.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 01174016 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vphysics.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 01240064 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\materialsystem.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00351744 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\datacache.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00607744 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\studiorender.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00164864 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\soundemittersystem.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00708096 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vscript.dll

2015-09-10 13:38 - 2015-09-16 14:41 - 00134656 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\valve_avi.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 01336320 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vguimatsurface.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00394752 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vgui2.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 03192320 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\scaleformui.dll

2015-09-10 13:37 - 2015-09-17 15:15 - 01762816 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\shaderapidx9.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00143360 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\localize.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00230912 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dbg.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00996864 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\stdshader_dx9.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00582144 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\matchmaking.dll

2015-09-10 13:37 - 2015-09-19 10:39 - 12464640 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\client.dll

2015-09-10 13:37 - 2015-09-18 19:04 - 09998336 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\csgo\bin\server.dll

2015-09-10 13:37 - 2015-09-16 14:41 - 00094208 _____ () C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\bin\scenefilecache.dll

2015-09-10 13:38 - 2015-09-16 14:41 - 00084992 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_miles.dll

2015-09-10 13:37 - 2015-09-10 13:37 - 00071680 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssmp3.asi

2015-09-10 13:37 - 2015-09-10 13:37 - 00012800 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\mssds3d.flt

2015-09-10 13:37 - 2015-09-10 13:37 - 00055808 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\msseax.flt

2015-09-10 13:37 - 2015-09-16 14:41 - 00972800 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\serverbrowser.dll

2015-09-10 13:38 - 2015-09-16 14:41 - 00173568 _____ () c:\program files (x86)\steam\steamapps\common\counter-strike global offensive\bin\vaudio_celt.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\GoToAssist Remote Support Customer => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
 

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\clonewarsadventures.com -> clonewarsadventures.com

IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\freerealms.com -> freerealms.com

IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\soe.com -> soe.com

IE trusted site: HKU\S-1-5-21-1749110370-1768304781-627677907-1000\...\sony.com -> sony.com
 
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1749110370-1768304781-627677907-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\SimonsZocken\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 8.8.4.4 - 8.8.8.8

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{2F726ED7-4A9D-4550-B90C-CE3B82C29E19}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [{D784F753-56F0-41B0-B96D-BCF95200226B}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{58DFA857-69F3-4655-9540-88813050921A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe

FirewallRules: [{7917AE98-62DD-4300-8EAB-9E90163D91E3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe

FirewallRules: [{2D0C18B1-F5EE-418D-B10A-850CF58EEAAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Unturned\Unturned.exe

FirewallRules: [{EE2C622F-A4BF-47E1-8955-EF0C36945F1D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [{0956CB22-6272-4D6C-A129-C509FD55583D}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{123728DE-A5A9-4BF9-ADEB-299D07E9154E}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [UDP Query User{39BF0AD8-7F4F-4C6A-A01B-7D7E92FEAFD4}C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe] => (Allow) C:\program files (x86)\hi-rez studios\hirezgames\smite\binaries\win32\smite.exe

FirewallRules: [TCP Query User{32A060E1-C363-4369-86DF-F608DE6D272B}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{3A1389C2-025B-431A-A110-1E3BE525E701}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe

FirewallRules: [{200C306E-ABF3-4C79-AD87-C98CCDE0FB1F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [{BF254D3A-E5D7-4599-8ECB-F8158009E8BF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Team Fortress 2\hl2.exe

FirewallRules: [TCP Query User{45DD3608-9CF2-4AC1-A225-DCE3E2786590}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe

FirewallRules: [UDP Query User{3DC89CA1-D5CD-4F7D-845F-EA94BBC0C24A}C:\program files (x86)\tmnationsforever\tmforever.exe] => (Allow) C:\program files (x86)\tmnationsforever\tmforever.exe

FirewallRules: [TCP Query User{8C232603-0CE4-4D76-AA82-BDF20A849F8D}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe

FirewallRules: [UDP Query User{915796F5-4394-4FC0-856E-F86D220D8DB0}C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\age2_x1\age2_x1.exe

FirewallRules: [TCP Query User{58C79CAE-498C-49B0-AF37-A3BA11B9C8C5}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [UDP Query User{1516ED9E-27E0-4AAB-8FEC-BFDC7756348D}C:\windows\syswow64\dplaysvr.exe] => (Allow) C:\windows\syswow64\dplaysvr.exe

FirewallRules: [{AFF25DEA-D331-4F4F-912A-86369A25A98F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe

FirewallRules: [{FAE4C5EA-33AE-4966-BC4D-FAD0F5DE53AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Robocraft\Robocraft.exe

FirewallRules: [TCP Query User{F551757D-E4D2-49E5-8043-A7B276A1F2F0}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{0F57F22D-543A-43F3-B558-4F219775056A}C:\program files (x86)\java\jre7\bin\java.exe] => (Allow) C:\program files (x86)\java\jre7\bin\java.exe

FirewallRules: [TCP Query User{8F4676B1-882A-4EBE-9A57-D55DABCAFB0F}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [UDP Query User{32F88CD4-B0C6-46C9-BAA0-BFF3AE5D8ACF}C:\program files\java\jre7\bin\javaw.exe] => (Allow) C:\program files\java\jre7\bin\javaw.exe

FirewallRules: [{DFF93F8B-BE5A-4023-9B87-666F42A5EAEF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleNations\bin\battlenations.exe

FirewallRules: [{8FE9286F-E77B-425D-9B0D-1DA226434228}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BattleNations\bin\battlenations.exe

FirewallRules: [{F764258B-A6F0-4A9C-8BA4-29049B3F2FB7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefall\system\bin\FirefallClient.exe

FirewallRules: [{963D743C-DB2E-443B-940B-EBB96248E38B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Firefall\system\bin\FirefallClient.exe

FirewallRules: [TCP Query User{55586366-8CA6-4337-8260-90142508C734}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{A5BEFF69-143D-4342-9406-B922505BEDAB}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Allow) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe

FirewallRules: [TCP Query User{58EF501E-2D67-428C-A23F-5CAE82B1B2FE}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe

FirewallRules: [UDP Query User{2F395C6C-5441-44D1-B5AE-35F6226F747C}C:\users\simonszocken\appdata\roaming\spotify\spotify.exe] => (Block) C:\users\simonszocken\appdata\roaming\spotify\spotify.exe

FirewallRules: [{CA81FABF-AB24-4201-89B3-3991251F5C00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MyLands\ClientAir.exe

FirewallRules: [{DA6C07E1-01DB-4E73-B54B-7BC0CCDC363D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MyLands\ClientAir.exe

FirewallRules: [{6F726BEA-A1CD-4278-87B1-B6527C190450}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe

FirewallRules: [{0E907AA9-76AE-44B9-A498-AF17C4CED9DA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlanetSide 2\LaunchPad.exe

FirewallRules: [TCP Query User{1D093274-E11E-4FC1-ABA5-40D65C10B182}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe

FirewallRules: [UDP Query User{80007B90-99F9-44EB-91E8-811CEC1D39FA}C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Block) C:\program files (x86)\steam\steamapps\common\planetside 2\planetside2_x64.exe

FirewallRules: [{B1E4CA0F-99B4-499F-83A7-AD59C7B55101}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{B40CADC5-6219-4320-AC70-0F6B408F7A00}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe

FirewallRules: [{D30D30CC-4402-4DA9-9C22-5C69B2591949}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{9300198A-89C9-4FF8-A68B-B60A738434DF}] => (Allow) C:\Program Files (x86)\Battle.net\Battle.net.exe

FirewallRules: [{795B04B2-7BAA-477A-AF1B-6437A109B5C7}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe

FirewallRules: [{DC74349A-911C-424A-BBBC-19ED85D74041}] => (Allow) C:\Program Files (x86)\Diablo III\Diablo III.exe

FirewallRules: [TCP Query User{ADDF3F93-7B12-4C05-9F76-42F1ABFE093C}C:\program files\bin\javaw.exe] => (Allow) C:\program files\bin\javaw.exe

FirewallRules: [UDP Query User{B6D8CD5C-4467-4746-9282-2FA7AF8D200E}C:\program files\bin\javaw.exe] => (Allow) C:\program files\bin\javaw.exe

FirewallRules: [TCP Query User{E258B353-9255-42AE-A597-8B9000C9355F}C:\pylo\mcreator149\jdk\bin\java.exe] => (Allow) C:\pylo\mcreator149\jdk\bin\java.exe

FirewallRules: [UDP Query User{328AA47C-FDD0-472E-9064-BDC4AFD6B68B}C:\pylo\mcreator149\jdk\bin\java.exe] => (Allow) C:\pylo\mcreator149\jdk\bin\java.exe

FirewallRules: [TCP Query User{A67C1F31-DBDA-43F6-B58A-AB0CB2594C9C}C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe] => (Allow) C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe

FirewallRules: [UDP Query User{FEC00150-F0D3-498D-8535-0F33EA35416F}C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe] => (Allow) C:\users\simonszocken\desktop\mcreator151\jdk\bin\java.exe

FirewallRules: [{8386F9A9-3C5C-47B6-87BC-5A1B1C02D99E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sigils of Elohim\Sigils.exe

FirewallRules: [{D4703125-BB1B-4B2F-8CB6-D6A57EB145D3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sigils of Elohim\Sigils.exe

FirewallRules: [TCP Query User{3FDB0236-39E9-4C64-84B9-6F0D0F184C8D}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{3FFB7F58-EFDE-4B37-8DB9-AF2D30787593}C:\program files\java\jre1.8.0_25\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\javaw.exe

FirewallRules: [TCP Query User{3AB34498-5806-4BE1-B733-ED437C1E0266}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe

FirewallRules: [UDP Query User{9C65700E-F032-41A9-97C0-F9E8B40B2DF3}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Block) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe

FirewallRules: [{1EB9CC70-9A17-48A3-AABF-FC94D9F7F1EB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe

FirewallRules: [{98EBADA9-7E63-4F03-BE4F-1EA873A5E40B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AirMech\AirMech.exe

FirewallRules: [{0A89F39C-8F39-4ABD-A1A0-CEDC0AD4FB01}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe

FirewallRules: [{644B4B90-ACC1-458A-B8AD-627106A6156C}] => (Allow) C:\Program Files (x86)\LucasArts\Star Wars Empire at War\GameData\sweaw.exe

FirewallRules: [TCP Query User{8237B478-7432-49A2-9ECF-CECC01AA3613}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe

FirewallRules: [UDP Query User{A9C8B693-186C-49BF-899C-19E59A4845BF}C:\games\world_of_tanks\wotlauncher.exe] => (Allow) C:\games\world_of_tanks\wotlauncher.exe

FirewallRules: [TCP Query User{5063DA2A-C62A-4A03-AAFA-93AB6B573D7E}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe

FirewallRules: [UDP Query User{35C4217A-0E3E-4341-BB33-0D75512EF5DC}C:\games\world_of_tanks\worldoftanks.exe] => (Allow) C:\games\world_of_tanks\worldoftanks.exe

FirewallRules: [{6D311860-A659-4105-AD6F-C74B44EEDC64}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{3FB27387-5105-4AF6-8E13-18DC0CAB8095}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe

FirewallRules: [{EE2A542C-88F6-47B4-9364-6421FF86FD12}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

FirewallRules: [{30661C10-19FB-4C7A-B118-E4A23E9DB5DC}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe

FirewallRules: [{9CE9228F-3A9E-495D-B1A6-833F5133D1CD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{97DDA423-D10F-4F01-AD70-D75A724E1C98}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe

FirewallRules: [{EC85A608-57FE-42DF-BB85-7EE6870044B3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{93DF7F64-7654-4720-BDCD-9D6CB359CABB}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe

FirewallRules: [{0BE80142-15C2-4EF2-B94E-D412CC5B6121}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{7E338786-3CBB-4CFB-B00D-54904E573C29}] => (Allow) C:\Program Files (x86)\Hearthstone\Hearthstone.exe

FirewallRules: [{BEDFAF1E-0961-4F0F-975D-A869C92EF88B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe

FirewallRules: [{7A99108B-DA19-4835-A1F8-C38959AB339C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe

FirewallRules: [{D685866B-E021-448D-BC88-E0DAB6708178}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{ADB0694A-67DB-4C68-8D35-5C9F7A3DCBDA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\VillagersAndHeroes\AMysticalLandSAC\VillagersAndHeroes.exe

FirewallRules: [{C29A59CA-58B7-4F9D-B134-B0DD0995629B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\VillagersAndHeroes\AMysticalLandSAC\VillagersAndHeroes.exe

FirewallRules: [TCP Query User{14FF171B-7027-48E7-8771-7174224A1348}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [UDP Query User{778F87D3-FDB5-4B60-B105-9BD24CE7CA49}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcher.exe

FirewallRules: [TCP Query User{28D5FAD7-386E-4E0E-A1BB-D33193CC611A}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [UDP Query User{416C18DE-637A-44E6-84CA-BDAECD74AC15}C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe] => (Allow) C:\riot games\league of legends\rads\projects\lol_patcher\releases\0.0.0.14\deploy\lolpatcherux.exe

FirewallRules: [TCP Query User{E5DBA3B3-48EA-49C4-A23F-A47339D5EEC1}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [UDP Query User{3348B724-F2A6-4A7C-AE82-3B35C283C5BA}C:\program files\java\jre7\bin\java.exe] => (Allow) C:\program files\java\jre7\bin\java.exe

FirewallRules: [{77C8B80A-C652-4C32-AA4D-0462363EEBC6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe

FirewallRules: [{B37B497B-9E9C-4B72-92CB-F761A2BAB530}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe

FirewallRules: [{268D2283-8AA2-4803-B576-B3DD1627122D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe

FirewallRules: [{54F67AC1-B752-4012-8409-FA1B86BF0B62}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe

FirewallRules: [{B757227C-0E50-43D9-93E8-32E5D1AE894B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe

FirewallRules: [{168EFC4B-5393-4B80-85E2-4D51F7B3D0A1}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe

FirewallRules: [TCP Query User{5AF7541F-651E-43F6-BF08-9D02BABA1F82}C:\sierra\empire earth\empire earth.exe] => (Allow) C:\sierra\empire earth\empire earth.exe

FirewallRules: [UDP Query User{F53267DC-7E41-495B-B837-37ED19F6911F}C:\sierra\empire earth\empire earth.exe] => (Allow) C:\sierra\empire earth\empire earth.exe

FirewallRules: [TCP Query User{CFB5A3C9-BF2D-4924-A149-6B54C1203C3A}C:\sierra\ee-zde\ee-aoc.exe] => (Allow) C:\sierra\ee-zde\ee-aoc.exe

FirewallRules: [UDP Query User{A147E709-56BC-4770-ABCF-29EC58D122D4}C:\sierra\ee-zde\ee-aoc.exe] => (Allow) C:\sierra\ee-zde\ee-aoc.exe

FirewallRules: [{7F657E3C-4C7D-48BC-976E-8F464241A26A}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{398C6842-ECFB-47F0-8C0E-D8E22C485E10}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe

FirewallRules: [{6B055FEF-316F-49AB-A551-7884F674FFDE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe

FirewallRules: [{59E897ED-2D08-4254-857C-063F2CFEA75F}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3688\Agent.exe

FirewallRules: [{93DF153E-C89F-4961-BFB6-B89F89C3051E}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe

FirewallRules: [{9941B03D-B848-4BF0-8C95-E46F023891DF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe

FirewallRules: [TCP Query User{0EF787C7-83FF-437A-80F3-5DFBE61EEF5F}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe

FirewallRules: [UDP Query User{9E2ED2BC-EAAB-4674-BD01-E96376DF2441}C:\program files\java\jre1.8.0_25\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_25\bin\java.exe

FirewallRules: [TCP Query User{264A36FA-C754-49F9-B191-CB901A9E9D27}C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe

FirewallRules: [UDP Query User{4FA3B020-3FE3-417E-BFAF-09986477B8AD}C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2client.exe

FirewallRules: [TCP Query User{98AE15A8-561F-412A-88CE-92954B2D60A3}C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin

FirewallRules: [UDP Query User{AD8113C0-7BD4-4E28-BA5E-6D84A7E56C1C}C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin] => (Allow) C:\users\simonszocken\desktop\2011 client for 1678files\metin2.bin

FirewallRules: [TCP Query User{DE669AAE-30E2-4C8F-AC45-DEF28AD9EE47}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [UDP Query User{872DF301-F55A-4CAD-ADB8-9A1317A30680}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe

FirewallRules: [TCP Query User{27393D7F-5FE1-4E03-B885-32774193A0C9}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe

FirewallRules: [UDP Query User{65ACA6E4-77AC-4946-8568-E367D0A26575}C:\program files\unity\editor\unity.exe] => (Allow) C:\program files\unity\editor\unity.exe

FirewallRules: [{FA5086A2-70BC-4F5B-BC8C-2B6AA6D2FD05}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{5DDBCC12-D323-4F19-ABFC-A0597066072B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{CC14C9A6-C852-476A-8B14-3E75EFE4670A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{A7637826-3E45-497C-BC63-4788B6C12A1A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{043BC74E-5452-4BCB-9FFA-4FF0AE2AE9E5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe

FirewallRules: [{E123B6F3-4C9B-4EE8-A618-EAD08B287083}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe

FirewallRules: [{92EB6915-5964-4C4F-A6B5-2DC65F22BCBF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{3B2BF885-C443-4418-A39E-DDE483DDD331}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{337DF535-8595-4F33-B532-63505E30AAF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe

FirewallRules: [{80F0747D-BBC7-45AC-84FE-8C1198F3163C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe

FirewallRules: [{2B51188A-D59A-4E92-A7B4-82E8BF556EFD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe

FirewallRules: [{7684015A-B618-4D6B-A692-04130FEB346D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe

FirewallRules: [TCP Query User{AEAC2B55-5792-4848-813C-30606C546C57}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe

FirewallRules: [UDP Query User{7E08674A-AE2B-4947-852C-91AAF6B6E690}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe

FirewallRules: [TCP Query User{5E77DCCF-9FEA-4D9B-901D-D63146EFACA1}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe

FirewallRules: [UDP Query User{8A243591-D39F-4696-AE1C-DB7C65823EA7}C:\program files (x86)\java\jre1.8.0_40\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\java.exe

FirewallRules: [{4466584F-7D7B-46DC-ADA6-752C9AD3AE8E}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe

FirewallRules: [{29C37AD5-23BB-4775-A667-D4B58956B880}] => (Allow) C:\Program Files (x86)\StarCraft II\StarCraft II.exe

FirewallRules: [TCP Query User{F842B238-7DC5-4DB2-BC7A-C15738AC3AFC}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe

FirewallRules: [UDP Query User{E0F113EA-49A3-4B2D-849A-D58495CFF8C5}C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe] => (Allow) C:\program files (x86)\starcraft ii\versions\base32283\sc2.exe

FirewallRules: [TCP Query User{46F49C6F-DB73-4881-A6A8-0CA1B0E1DCC6}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{BE169B55-C441-4D3A-8082-31BD7F8CFBAA}C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base34846\heroesofthestorm_x64.exe

FirewallRules: [{63DB4D6B-276F-4649-BF21-C02D4FADAEB0}] => (Allow) LPort=8317

FirewallRules: [TCP Query User{8B707C4C-6416-4F7B-AE88-63725429F9BD}C:\program files\java\jdk1.8.0_20\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.8.0_20\bin\javaw.exe

FirewallRules: [UDP Query User{566C9349-E633-46FE-B9FC-531CD1697F1D}C:\program files\java\jdk1.8.0_20\bin\javaw.exe] => (Allow) C:\program files\java\jdk1.8.0_20\bin\javaw.exe

FirewallRules: [{8774AE70-6619-4737-8405-F4001580A0BB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPG Maker VX Ace Lite\RPGVXAceLite.exe

FirewallRules: [{CC19F6B5-623D-497A-86B4-2E0835AFDBBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPG Maker VX Ace Lite\RPGVXAceLite.exe

FirewallRules: [{66BC2096-EF75-4AD2-9261-2CF27DB94607}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPGXP\RPGXP.exe

FirewallRules: [{5BB2782F-38AC-4B1B-9F23-225C6BB923E7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\RPGXP\RPGXP.exe

FirewallRules: [TCP Query User{996945A8-E5AE-4047-8788-AFDE9821FB71}C:\program files (x86)\starcraft ii\support\sc2editor.exe] => (Allow) C:\program files (x86)\starcraft ii\support\sc2editor.exe

FirewallRules: [UDP Query User{B9260334-AACA-46AC-AB81-A37320A4AD38}C:\program files (x86)\starcraft ii\support\sc2editor.exe] => (Allow) C:\program files (x86)\starcraft ii\support\sc2editor.exe

FirewallRules: [TCP Query User{58DBE857-49F7-4DDE-8DE1-7CA9F3E078AB}C:\program files (x86)\no man's land\run\no man's land.exe] => (Allow) C:\program files (x86)\no man's land\run\no man's land.exe

FirewallRules: [UDP Query User{2FFB8F78-CEAC-4608-B590-E302C0074AD5}C:\program files (x86)\no man's land\run\no man's land.exe] => (Allow) C:\program files (x86)\no man's land\run\no man's land.exe

FirewallRules: [TCP Query User{B882810C-3728-4C71-B71D-A7C55165B93A}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [UDP Query User{A04F4B5E-DF13-4933-91C7-C68D21360FD6}C:\windows\syswow64\dpnsvr.exe] => (Allow) C:\windows\syswow64\dpnsvr.exe

FirewallRules: [{F1F9B650-7AF5-4A51-851A-92B39EE53BE0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe

FirewallRules: [{A2204E5F-0F64-436E-94B7-A8AB9A69F33A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\AdVenture Capitalist\adventure-capitalist.exe

FirewallRules: [TCP Query User{7B75A489-FB05-45AA-A39B-D2BBEC7FB9C1}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{57CB02DE-DD96-4EA0-9C57-E2866AD5E83D}C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base35702\heroesofthestorm_x64.exe

FirewallRules: [TCP Query User{4A223B7E-7D30-4B41-BC28-9A61FDFF53D8}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe

FirewallRules: [UDP Query User{FE2A0640-0392-4700-9107-A49C8FC4BA48}C:\program files (x86)\java\jre1.8.0_45\bin\java.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\java.exe

FirewallRules: [TCP Query User{0555506F-FE6B-4D40-B4C7-E9E5FF53ACF2}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [UDP Query User{CDF60FC9-95FB-4C13-B344-776F06AF3721}C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\program files (x86)\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe

FirewallRules: [{16E449D0-A8C3-4AF6-990A-32468841D94A}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{F9F142AC-BC35-49F6-A411-5F7814457420}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe

FirewallRules: [{15C3D140-BD93-4781-AB38-67904DA670CE}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [{53CCA546-9903-4095-B8F4-8032EF71D3CF}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

FirewallRules: [TCP Query User{72B96AD4-A215-4BE5-89B7-97F74E939106}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{4E959108-BDD6-4D15-9929-3E9A01620C28}C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base36144\heroesofthestorm_x64.exe

FirewallRules: [{0832F117-CB42-4FC6-A6D9-DB60DEDA6F9F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe

FirewallRules: [{9C743BB5-4100-4411-9CF1-5BEF441C28B7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\MagickaWizardWars\WizardWarsLauncher.exe

FirewallRules: [TCP Query User{598E3D36-851A-4638-B28A-DB90C82CA8AB}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe

FirewallRules: [UDP Query User{BD2297DD-DF53-4AA9-8831-473322ADC0A8}C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\magickawizardwars\bitsquid_win32_dev.exe

FirewallRules: [TCP Query User{58233860-5523-4808-85B4-6B7BB3AFF168}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [UDP Query User{7195C04B-88EF-49A3-AC25-F50D64B87202}C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_45\bin\javaw.exe

FirewallRules: [TCP Query User{2D43B713-4EF2-49AC-A782-4DA4C219EBBF}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe

FirewallRules: [UDP Query User{6391E82D-BEBB-49F1-AC83-1E2865CBB5EB}C:\games\world_of_warships\wowslauncher.exe] => (Allow) C:\games\world_of_warships\wowslauncher.exe

FirewallRules: [{2EF8885F-FBA1-4F88-9FC7-C905C11FE1D2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe

FirewallRules: [{3F728ED7-288B-44DF-98DE-D61F9CE99060}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Trove\GlyphClient.exe

FirewallRules: [TCP Query User{254B8670-E11B-4B6F-A76C-25571C173004}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe

FirewallRules: [UDP Query User{87A06178-1884-480A-B93B-E23A2593FE32}C:\program files\java\jre1.8.0_51\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\javaw.exe

FirewallRules: [TCP Query User{E5C786C2-506E-41A8-8EEF-A1A50875B061}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe

FirewallRules: [UDP Query User{AFBB9732-4EFD-4F46-BBEB-CE9835B07079}C:\program files\java\jre1.8.0_51\bin\java.exe] => (Allow) C:\program files\java\jre1.8.0_51\bin\java.exe

FirewallRules: [{FF207E3B-7EAB-4FBA-BBB8-3185177EC3C1}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe

FirewallRules: [{0AA63053-179F-4918-8A94-677213B9D9FB}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe

FirewallRules: [{946931B3-E955-4E0C-8D5F-AAD57DBF0622}] => (Block) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe

FirewallRules: [{C663C848-3CC2-4AED-8DFE-B2F52767C863}] => (Allow) %ProgramFiles% (x86)\TechSmith\Camtasia Studio 8\CamtasiaStudio.exe

FirewallRules: [{D25BF0AF-E525-481F-AA1C-964C4DD69302}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe

FirewallRules: [{713CDFD1-7853-4D3D-B9F6-8ECB30C0694B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Forest\TheForest.exe

FirewallRules: [TCP Query User{BBE327D4-33F2-4B51-A4B6-9F7088B2E87A}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe

FirewallRules: [UDP Query User{940C14B9-48B5-4D15-955F-66DD894B16FF}C:\program files (x86)\microsoft games\age of empires ii\empires2.exe] => (Allow) C:\program files (x86)\microsoft games\age of empires ii\empires2.exe

FirewallRules: [{8B892E02-320F-4B85-ADAC-10EA2F56D34D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DepthHunter2\dh2.exe

FirewallRules: [{6D952D6F-FA2A-47B5-85DF-BC8C1A954058}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DepthHunter2\dh2.exe

FirewallRules: [{8C7D35B8-9FE2-481C-9D2D-3CE3E6CEC46B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution Duality\Hacker Evolution Duality.exe

FirewallRules: [{E4F5FE9B-D893-4AA8-80BB-DE56D3B70D35}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Hacker Evolution Duality\Hacker Evolution Duality.exe

FirewallRules: [{4F49EF8A-7D57-43E9-9F40-D2D071FA2DBA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cubetractor\Cubetractor.exe

FirewallRules: [{9754D73C-1DF2-4F3F-AF50-DFABE5D92A37}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Cubetractor\Cubetractor.exe

FirewallRules: [{9ACE691F-54B6-4050-8A09-41F25A7E9927}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Melissa K and the Heart of Gold\MelissaK_Steam.exe

FirewallRules: [{3D5015AE-039D-4C87-9F70-E103F3999163}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Melissa K and the Heart of Gold\MelissaK_Steam.exe

FirewallRules: [{F40773A1-9244-44C9-92AA-78B7D48AD03E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PahelikaRV\PahelikaRVJNIRelease.exe

FirewallRules: [{14DA3B7B-5454-43DD-9FE1-6FFD723F68BE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PahelikaRV\PahelikaRVJNIRelease.exe

FirewallRules: [{B1AA9A96-F52A-4612-B61B-D0BDB9F56AFF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Culling Of The Cows\Culling Of The Cows.exe

FirewallRules: [{16174C44-7670-40CD-851C-BC728C689CEB}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Culling Of The Cows\Culling Of The Cows.exe

FirewallRules: [{8E68E757-9B47-4768-B80B-F22B989D1875}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe

FirewallRules: [{09585341-4D49-4506-B012-03675C5E0242}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\FrozenHearth\Application\Deploy\FrozenHearth.exe

FirewallRules: [{1096E7AE-1F0C-4B94-89DA-3E880386CEDF}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rush for Glory\RfG.exe

FirewallRules: [{0C02D692-A514-4849-9D43-BFCA2EFC77AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Rush for Glory\RfG.exe

FirewallRules: [{502C23F8-2C95-4C09-A00A-45CA27CC1731}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Bridge Constructor Medieval\Bridge_Constructor_Medieval.exe

FirewallRules: [{6AD92839-8CC4-4640-B670-2AD1ED0A283D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Bridge Constructor Medieval\Bridge_Constructor_Medieval.exe

FirewallRules: [TCP Query User{E24D4284-001F-4B5F-9E60-9DA6F0AC006C}C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{B149A0D6-AA01-4239-AF43-CF6936463F94}C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37117\heroesofthestorm_x64.exe

FirewallRules: [{FA94524A-6DA7-4698-AB94-3A7341AE5685}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe

FirewallRules: [{5087BF38-43B7-4D3E-ABA9-BA3D06B8254F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe

FirewallRules: [TCP Query User{09FC800A-1DE0-4B22-857E-854F303B6D5B}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe

FirewallRules: [UDP Query User{BC59956C-5ED5-43DB-918E-81190AC56AB9}C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe] => (Allow) C:\program files (x86)\heroes of the storm\versions\base37351\heroesofthestorm_x64.exe

FirewallRules: [{53445603-D5CF-436A-9749-13DE5E7559B5}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{73CED924-4294-40B2-82BF-A6B365386D00}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe

FirewallRules: [{4E5D5C95-1AEC-4CB4-9C7B-C76826871E99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe

FirewallRules: [{14DAD71E-3FE9-4505-AEE6-5DA5ABF73D99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\The Binding Of Isaac\Isaac.exe

FirewallRules: [{E8EC73D2-4510-477A-9E45-7E37D53DC62D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe

FirewallRules: [{ABB8DF44-6353-4B93-A65E-466B8B187DAD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Toribash\toribash.exe
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 

Name: wpnfd_1_10_0_2

Description: wpnfd_1_10_0_2

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: wpnfd_1_10_0_2

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 

Name: BlueStacks Hypervisor

Description: BlueStacks Hypervisor

Class Guid: {8ECC055D-047F-11D1-A537-0000F8753ED1}

Manufacturer: 

Service: BstHdDrv

Problem: : This device is not present, is not working properly, or does not have all its drivers installed. (Code 24)

Resolution: The device is installed incorrectly. The problem could be a hardware failure, or a new driver might be needed.

Devices stay in this state if they have been prepared for removal.

After you remove the device, this error disappears.Remove the device, and this error should be resolved.
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (09/19/2015 08:44:57 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: )

Description: NvStreamSvcNvVAD initialization failed [6]
 

Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: )

Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0]
 

Error: (09/19/2015 08:44:47 AM) (Source: NvStreamSvc) (EventID: 1) (User: )

Description: NvStreamSvcNvVAD endpoint registration failed [0]
 

Error: (09/18/2015 06:44:54 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/18/2015 01:47:12 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/17/2015 01:34:20 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/16/2015 03:16:36 PM) (Source: Application Hang) (EventID: 1002) (User: )

Description: Programm isaac-ng.exe, Version 0.0.0.0 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.
 

Prozess-ID: ab0
 

Startzeit: 01d0f081d5700597
 

Endzeit: 14
 

Anwendungspfad: C:\Users\SimonsZocken\Desktop\The Binding Of Isaac Rebirth\isaac-ng.exe
 

Berichts-ID: 23cdf068-5c75-11e5-85d3-448a5b97a961
 

Error: (09/16/2015 01:35:58 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (09/15/2015 01:35:26 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 
 

Systemfehler:

=============

Error: (09/19/2015 12:14:50 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 20.
 

Error: (09/19/2015 12:08:43 PM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 20.
 

Error: (09/19/2015 09:54:14 AM) (Source: bowser) (EventID: 8003) (User: )

Description: Der Hauptsuchdienst erhielt eine Serverankündigung vom Computer "ARI-PC",

der der Hauptsuchdienst der Domäne für den NetBT_Tcpip_{EED73D88-452A-4C7B-8FAD-BEF5D841CEE7}-Transport zu sein scheint.

Der Hauptsuchdienst wurde beendet oder es wird eine Auswahl erzwungen.
 

Error: (09/19/2015 08:56:35 AM) (Source: Schannel) (EventID: 4119) (User: NT-AUTORITÄT)

Description: Es wurde eine schwerwiegende Warnung empfangen: 20.
 

Error: (09/19/2015 08:45:37 AM) (Source: DCOM) (EventID: 10010) (User: )

Description: {995C996E-D918-4A8C-A302-45719A6F4EA7}
 

Error: (09/19/2015 08:44:56 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

wpnfd_1_10_0_2
 

Error: (09/19/2015 08:44:42 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "IHProtect Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (09/19/2015 08:44:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "BlueStacks Updater Service;gadgetDataDir=C:\ProgramData\BlueStacks\UserData\Gadget"" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (09/19/2015 08:44:32 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "BlueStacks Hypervisor" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%3
 

Error: (09/18/2015 06:44:54 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

wpnfd_1_10_0_2
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i5-4590 CPU @ 3.30GHz

Prozentuale Nutzung des RAM: 54%

Installierter physikalischer RAM: 8120.02 MB

Verfügbarer physikalischer RAM: 3722.93 MB

Summe virtueller Speicher: 16238.23 MB

Verfügbarer virtueller Speicher: 10689.36 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:1374.73 GB) (Free:1000.51 GB) NTFS

Drive d: () (Fixed) (Total:488.18 GB) (Free:487.78 GB) NTFS

Drive e: (AOE) (CDROM) (Total:5.1 GB) (Free:0 GB) CDFS
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 361F625A)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=488.2 GB) - (Type=07 NTFS)

Partition 3: (Not Active) - (Size=1374.7 GB) - (Type=07 NTFS)
 

==================== Ende von Addition.txt ============================

--- --- ---