Trojaner-Board - mehrere Win32:TrojanX-gen und Win32:Trojan-gen meldungen

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

Trojaner-Board (https://www.trojaner-board.de/)

- Log-Analyse und Auswertung (https://www.trojaner-board.de/log-analyse-auswertung/)

- - mehrere Win32:TrojanX-gen und Win32:Trojan-gen meldungen (https://www.trojaner-board.de/200562-mehrere-win32-trojanx-gen-win32-trojan-gen-meldungen.html)

ilias2

11.12.2020 18:11

mehrere Win32:TrojanX-gen und Win32:Trojan-gen meldungen

Ich habe heute ein Trojaner eingefangen, welches im Hintergrund anscheinend etwas installiert hat. Habe es leider zu spät bermerkt, so dass ein vollständiger installationsvorgang durchgeführt wurde. Direkt danach startete ein zweiter Installationsvorgang an, welches ich mit Taskmanager abbrechen konnte. Kurz darauf bekomme ich auch mehrere Meldungen von meinem Antivirus mit Win32:TrojanX-gen und Win32:Trojan-gen. Die entsprechenden Dateinen wurden von meinem AV auch gelöscht bzw. in Quarantäne verschoben. Ich habe in C:\ einen neuen Ordner gefunden namens UmsTqPwOUmsTqPwO und in C:\Windows\System32 die Dateien perfc007.dat, perfc009.dat, perfh007.dat und perfh009.dat gefunden Hab den Pc danach auf einen ältern Wiederherstellungspunkt wiedergesetzt und gerade läuft auch ein Antivirus Tiefen Scan.
Im folgenden findet Ihr die Ergebnisse meines OTL Scans welches ich kurz vor dem Tiefen Scan durchgeführt habe.

Danke im Voraus

ilias2

11.12.2020 18:12

Extras.txt

OTL EXTRAS Logfile:

Code:

OTL Extras logfile created on: 11.12.2020 17:26:04 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = H:\Downloads\Programs

64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.11.19041.0)

Locale: 00000407 | Country:  | Language: DEU | Date Format: dd.MM.yyyy

 

15,95 Gb Total Physical Memory | 8,96 Gb Available Physical Memory | 56,16% Memory free

25,95 Gb Paging File | 16,04 Gb Available in Paging File | 61,83% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 231,56 Gb Total Space | 124,38 Gb Free Space | 53,71% Space Free | Partition Type: NTFS

Drive G: | 1863,01 Gb Total Space | 66,30 Gb Free Space | 3,56% Space Free | Partition Type: NTFS

Drive H: | 931,51 Gb Total Space | 14,59 Gb Free Space | 1,57% Space Free | Partition Type: NTFS

 

Computer Name: FRIDAY | User Name: ilias | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 1 Day

 
 ========== Extra Registry (SafeList) ==========

 

 
 ========== File Associations ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.html[@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

.url[@ = InternetShortcut] -- C:\WINDOWS\SysNative\rundll32.exe (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<extension>]

.cpl [@ = cplfile] -- C:\WINDOWS\SysWow64\control.exe (Microsoft Corporation)

.html [@ = htmlfile] -- C:\Program Files\Internet Explorer\IEXPLORE.EXE (Microsoft Corporation)

 
 ========== Shell Spawning ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)

htmlfile [opennew] -- Reg Error: Key error.

htmlfile [print] -- "C:\WINDOWS\system32\rundll32.exe" "C:\WINDOWS\system32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)

inffile [install] -- Reg Error: Key error.

InternetShortcut [open] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\ieframe.dll",OpenURL %l (Microsoft Corporation)

InternetShortcut [print] -- "C:\Windows\System32\rundll32.exe" "C:\Windows\System32\mshtml.dll",PrintHTML "%1" (Microsoft Corporation)

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)

Directory [AddToPlaylistVLC] -- "G:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [Bridge] -- H:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "G:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation)

Directory [UpdateEncryptionSettings] -- Reg Error: Key error.

Directory [WSL] -- wsl.exe --cd "%V" (Microsoft Corporation)

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- "C:\Program Files\Internet Explorer\iexplore.exe" (Microsoft Corporation)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Classes\<key>\shell\[command]\command]

batfile [open] -- "%1" %*

cmdfile [open] -- "%1" %*

comfile [open] -- "%1" %*

cplfile [cplopen] -- %SystemRoot%\System32\control.exe "%1",%* (Microsoft Corporation)

exefile [open] -- "%1" %*

helpfile [open] -- Reg Error: Key error.

htmlfile [edit] -- Reg Error: Key error.

htmlfile [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)

htmlfile [opennew] -- Reg Error: Key error.

http [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)

https [open] -- "C:\Program Files\Internet Explorer\IEXPLORE.EXE" %1 (Microsoft Corporation)

inffile [install] -- Reg Error: Key error.

piffile [open] -- "%1" %*

regfile [merge] -- Reg Error: Key error.

scrfile [config] -- "%1"

scrfile [install] -- rundll32.exe desk.cpl,InstallScreenSaver %l

scrfile [open] -- "%1" /S

txtfile [edit] -- Reg Error: Key error.

Unknown [openas] -- %SystemRoot%\system32\OpenWith.exe "%1" (Microsoft Corporation)

Directory [AddToPlaylistVLC] -- "G:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --playlist-enqueue "%1" (VideoLAN)

Directory [Bridge] -- H:\Program Files\Adobe\Adobe Bridge CS6 (64 Bit)\Bridge.exe "%L" (Adobe Systems, Inc.)

Directory [cmd] -- cmd.exe /s /k pushd "%V" (Microsoft Corporation)

Directory [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Directory [PlayWithVLC] -- "G:\Program Files\VideoLAN\VLC\vlc.exe" --started-from-file --no-playlist-enqueue "%1" (VideoLAN)

Directory [Powershell] -- powershell.exe -noexit -command Set-Location -literalPath '%V' (Microsoft Corporation)

Directory [UpdateEncryptionSettings] -- Reg Error: Key error.

Directory [WSL] -- wsl.exe --cd "%V"

Folder [open] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Folder [explore] -- Reg Error: Value error.

Drive [find] -- %SystemRoot%\Explorer.exe (Microsoft Corporation)

Applications\iexplore.exe [open] -- "C:\Program Files\Internet Explorer\iexplore.exe" %1 (Microsoft Corporation)

CLSID\{871C5380-42A0-1069-A2EA-08002B30309D} [OpenHomePage] -- Reg Error: Value error.

 
 ========== Security Center Settings ==========

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

"cval" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Monitoring]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av]

"DataMigrated" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{18A975F9-A60C-37D8-E30B-4BEF31AD3411}]

"GUID" = {18A975F9-A60C-37D8-E30B-4BEF31AD3411}

"DISPLAYNAME" = AVG Antivirus

"STATE" = 266240

"PRODUCTEXE" = C:\Program Files\AVG\Antivirus\wsc_proxy.exe -- (AVG Technologies CZ, s.r.o.)

"REPORTINGEXE" = C:\Program Files\AVG\Antivirus\wsc_proxy.exe -- (AVG Technologies CZ, s.r.o.)

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av\{D68DDC3A-831F-4fae-9E44-DA132C1ACF46}]

"GUID" = {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

"DISPLAYNAME" = Microsoft Defender Antivirus

"STATE" = 393472

"PRODUCTEXE" = windowsdefender://

"REPORTINGEXE" = %ProgramFiles%\Windows Defender\MsMpeng.exe -- (Microsoft Corporation)

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw]

"DataMigrated" = 1

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

"VistaSp1" = 21 7E 77 48 E5 35 D6 01  [binary data]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]

"UpgradeTime" =  [binary data]

 
 64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Vol]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Feature]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Av]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\CBP]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\DPA]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\Fw]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Provider\SecurityApp\WebProtection]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc]

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Security Center\Svc\Upgrade]

"UpgradeTime" = Reg Error: Unknown registry data type -- File not found

 
 ========== Firewall Settings ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\DomainProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile]

"DisableNotifications" = 0

"EnableFirewall" = 1

 
 ========== Authorized Applications List ==========

 

 
 ========== Vista Active Open Ports Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{00D52345-1403-49F2-8BC9-DA69C497FD52}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0208A22B-0C03-4DF3-ACEB-04DDF745AAF1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{02C12C4E-1514-4540-9A40-F1F8C2258F11}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{030D7BC9-C9C5-4E89-A92B-7E7C3717D5DE}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{04484E54-35CA-4CD2-8562-3B5E824836E4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{046D3204-C914-42BE-B56A-EF8AF9E48903}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0509F46A-5613-412A-9200-F761252C73ED}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0543F3AC-07FB-41C1-BE36-EA297CFD3258}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{06598DB5-C76B-472E-8977-16F3ECD792F0}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{06760A6B-4BD9-4C8D-88E0-16A7B261DC62}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{07389942-80F1-4123-B88F-79EE5A44E7F8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{093B834C-2C0F-4545-9DDE-8E835519F4C8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{09ABCFFD-E654-4863-91A7-CE227CEE67F4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0A15C446-9831-4EED-864A-21129DEB6130}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0A52F091-B959-4862-92B4-2E023793F300}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0A707DFE-79D6-47C7-BD8D-E7D7F3210BBD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0A74855A-7364-4283-B408-C6886CEA9A3B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0A788C13-0189-48F1-890B-E06369E7DEF4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0C23F0E1-76F2-4B50-B8A2-A9CE75A0C88A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0CA452AA-CCB6-4648-8DCF-A95F1C277B85}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0E762191-4784-4B9B-AD14-8880ECF23EFE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{0F605486-019C-4DFA-86B3-72B058759F14}" = rport=139 | protocol=6 | dir=out | app=system | 

"{0F745A3D-2648-4DAE-BD4A-689129CEFA2A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{10713C94-AE25-4D74-B62C-F415C66B003C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{10C28EED-B248-4AAB-86B9-B421D124EE84}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{10EC20FD-6BEE-48EA-80AA-7F082D38C427}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{10FCB8AC-9F39-4C36-B92C-B176DAFEB1FC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1171263F-3B4D-4F31-92B1-6E00C2996E59}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{119A234C-0970-4EBD-A866-F675EDE4AD79}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{12059972-E222-4862-9C07-B4A00710AD2D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{123809A6-483D-4CE9-8C4C-F560C7D85A2D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{124C864A-F31E-4660-97A4-D564DB412703}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{12605487-706C-4A72-BC94-E80EBF4AAF28}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1274570E-F929-4371-9B91-92EECC0EE6B5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{133B78F4-D967-434D-8AA3-0C4B9C5C6155}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1342BC9F-73EA-45EA-8010-D95EA1C88D60}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{153D3772-D01F-4F04-8EA1-8EBFDB67F1B8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{16863DDD-CCA1-4238-8BCD-37E2342E2B68}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{16A61BCE-69A5-41A7-9112-EB1BEF2459AA}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1797903C-E973-4A1C-B756-B4DAA03E15FF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{17EDAB59-8FAE-4CAC-B3A0-8B61DB44A5DA}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{182D2CEB-4845-40E4-92E8-C0383931C817}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{18425415-E593-49D6-A15C-F904E8C0A79A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{18598FC2-DAA7-4C26-BF8B-715C396394E9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1920091C-16C5-4FF9-993D-411EA8E6C4F7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{19BEFEDA-6530-4BEF-890D-8B3E67C52AAD}" = lport=48010 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | 

"{1C26207A-A8E4-425D-BA45-8FF854AC8A93}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1C6DF141-7D53-4D23-B713-2926E4B84C2A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1E28815A-ECA4-437A-9A2F-B37B939AABCD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1EAF73EE-F1B3-4E40-AA00-08C3459BD57A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{1F455AEB-C2EC-4821-AC7F-5B3C8E74AADF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{20229675-488C-47A1-BA8C-872AFBECF00E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{20AB9A4B-E953-47E9-BF54-F581ECE229E4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{20F30550-43F8-4C2E-B616-093EA22D65F0}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2152E9D9-6A7F-493F-B133-CE52714DE524}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{21E8B3AD-84CE-474A-855E-F8E02505AA59}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2269EC4F-4351-4123-B082-BE1878E02837}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2271A30C-FF29-40D1-A7ED-738FED189A3D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{230FA1FA-90E8-4224-8C59-F2071BAAC89B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{23831084-6F55-47D7-BA70-611C57C47AFD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{23F1FCF6-D340-4C7F-9A6F-D95F60383A9C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{23F29C1B-7213-4FA1-AC0A-FCB8020E1E8D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2453CC66-2ED7-4451-A2C9-AE77792D4065}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{24BED14F-ACEF-4770-8337-FC704AC84BD3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{24D22571-BA95-4C02-9826-C7DE60DBE5E3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2584C026-7BF8-4B87-AFD8-3FB8CC57DD9F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{263E2E95-A836-46BB-9A1D-E14C5586B83B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{26C20AEF-BD2D-491B-A067-3F4851939276}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{26FAC9F2-0943-4189-AA21-96794B2D7AA3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{276A4A59-7174-48F5-AA3D-03A50C8AF9BF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{28D55537-8EF4-4913-B3FA-DDAEFB2B48FD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{290A0F71-7DB1-4C65-A87C-98C2EE42984D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{29282BB5-BA4A-4B01-93DD-CD614C4D2AFD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{295E8900-1F3D-4199-8804-E4E16139D308}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{298444CD-4F5D-44D1-A78B-81FD66B05E92}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2994E284-A0BC-489A-98BB-CFE4890338D8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2A00541F-E9DB-478B-A4FA-95502773AAC1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2A1FDF6D-CDA1-4662-9CAE-3F47407DAE2A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2B8F2737-5552-4C27-B5E7-5845D07C5AFB}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2BB73D0F-A28A-4629-97BC-F7FE2F91492A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2CBE5144-5521-4151-9959-2087CF58B131}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2CCC1F91-7F72-4D15-A2B8-1F47BC9D1233}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2D7BAD1D-1489-494A-A623-5F4C89A9D998}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2EC281BA-0F4B-4832-A162-5D977E5F9869}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{2FCFCC1F-96D6-4A8C-98BA-2F904F83E2D5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{303F2D41-08A8-4403-A031-E1D974750BB0}" = lport=137 | protocol=17 | dir=in | app=system | 

"{313DD029-0170-4028-BBDF-AA39AF187908}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3257E1C0-E035-46F5-95C8-BB203AD797C2}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{32777281-C16F-49E4-9A3E-701C8217457B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{32E7A7CB-3833-435A-B181-94EC250C604A}" = lport=80 | protocol=6 | dir=in | app=h:\programme\uplay\games\assassin's creed origins\acorigins_plus.exe | 

"{334F5ABA-96A5-4AF6-9598-FF64BD5F366B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{336BEA9B-BF7D-4E49-9F1E-C78BE0AA5B96}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{339DE54B-0F39-4DDF-81C8-FC7B884073BC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{34B503B2-F927-4F88-BEBB-F0B96AE1C509}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{350BD6AF-9EAC-4C89-B91D-3D17F6D47DF6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{35B9EF1D-D0EE-4943-AB6E-72A808688AEF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{36C1CE74-5400-4108-B20E-0BBCA1F1650C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3770FD15-5B33-40EA-BC19-EBAFDDC062F2}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3775C925-8205-41C2-8EAF-B263CA3B52B7}" = lport=80 | protocol=6 | dir=in | app=g:\programme\uplay\assassin's creed odyssey\acodyssey_plus.exe | 

"{3838EDAA-0AB3-4C64-AA02-8EF5CCF57FF4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{38497A56-3196-4F86-8E1E-154F42FAA7D3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{387988D9-766F-4F3B-9ACB-D83BFC009280}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{38AB4A76-A973-4ED8-9E06-A528F73E2D5B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{39A4F60A-36B7-481E-AB97-7B92C07ECFF3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{39BBA9B3-BAA3-4BD5-87E8-CA01E36CCA0C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{39E5249B-6E84-4C31-898D-0D676F464C6D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3A320DA6-F912-4BFD-9707-23B2B11A84C8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3AC845A9-026F-4A02-BAF2-F9A7A36A906E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3BD60476-133B-46E8-8229-5F5C294AE233}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3BE2B281-98E5-420C-9BF4-2755FAC94BB3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3C381993-E7FB-45E1-92E7-E1B39F25D249}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3C458199-E8D5-47D4-915D-E0B6CE784E49}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3F4F6B64-901A-4B25-A468-933AE8507EB4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{3F8A1CCA-C298-4DE8-AEFD-5645D6A5F716}" = lport=rpc-epmap | protocol=6 | dir=in | svc=rpcss | app=%systemroot%\system32\svchost.exe | 

"{4000C567-593B-4444-86F1-5E5F982FA105}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{423E12D6-0D79-4E08-A4E7-F6B5A7DAC5EE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{43F0F9CF-1D18-4803-9485-013AE8D61DB5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4437032A-A84D-4446-B2E4-E376156E3FA7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{457DE54F-6E38-4D34-A3FF-26B8F93FAF54}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{46571334-AA20-4217-B4BE-21EAC4F4F5A3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{47167BB2-DB19-4F8E-8FA5-668C7A962FE5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{48367F9E-45A5-4807-BE8C-AB0C8E92A225}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4A237A44-59C5-4F4A-9A5C-3C4626B02DBC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4A6CF62E-A374-46CC-81BD-2A1D8B6BE888}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4A74DA9F-7EEB-400A-B3C4-B7F5813C70A7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4A8C8987-CF43-4A57-87FD-4E57785D198A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4AE806B5-B721-4A9C-8671-042F75B34908}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4B39B479-9339-4477-9AD5-609D8A5FDC7A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4B9F807B-689A-4BFD-A730-96BEE239A564}" = lport=5355 | protocol=17 | dir=in | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{4BACDBCD-84E1-4E91-BECB-24970AEBA7B3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4C3E6C68-643D-44E2-976C-BFD6AF83879C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4D17AEAA-F858-4C0B-B8F8-34AB17A584B3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4DC846C7-943A-4A2F-BBEB-282F08D8B471}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4E2DF05E-A687-4151-8D16-D9AB53B9BD15}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{4E3AE518-57EC-4907-A69B-C468C65FF1C5}" = lport=9103 | protocol=17 | dir=in | app=h:\programme\uplay\games\assassin's creed origins\acorigins_plus.exe | 

"{4FECC383-A40A-4AA9-BE82-C59619A370C9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{500043C5-D2D9-4AAA-8B5E-369AAC125985}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{50F77767-A997-4E4B-9BB3-A7ABD9A4BA6A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{517540C0-A4FB-4936-A8C6-F37E53040F77}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{51DA6998-7245-4E88-9A56-133C5B3EA00C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{5207F52F-EA83-49A3-892A-4FDE46C054AE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{53CE5125-FDC2-43E6-AF58-223CAA2A4F8F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{54074D1C-D06B-48BB-B0B7-40EF4849A32F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{540C48AD-2635-4F95-984C-9949129C1BF7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{54C21C80-B054-4099-9E76-19F198F065A6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{55BB64EC-2EDC-47EB-8ECA-30F8F8F3BD59}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{5647784A-286B-4287-8A4C-9B43D2EE6427}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{56E60533-054A-4BCB-AA39-5AC520E4A2B9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{59362B8C-B63A-4A98-9866-4521F6D1F8E1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{59F2FD82-6BD0-4139-B874-7786F3222AA7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{5AB0CA45-9DFA-4418-ABE0-00DC1FC6FBCD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{5AB6FA1F-282A-4D03-971B-1613B37D69A8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{5AF7EE4C-8E9D-4337-97DC-117C775BCD98}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{5B775EF8-5344-4800-B3B7-96CC205070A0}" = rport=138 | protocol=17 | dir=out | app=system | 

"{5BF11EAD-2B25-42E7-A719-BF214DB6160F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6233A909-02E2-4441-BC45-52BC23EC49D7}" = lport=5353 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | 

"{629EFD93-35A6-465D-9455-023C587B7286}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{646E9AE4-288F-4E98-985B-9B2649DA747E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{649204E0-8FF7-4482-8C16-50A502B7CEBD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6499315F-D645-4164-9B5E-3225EFA52C36}" = lport=47995 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 

"{64FC1124-B27C-474A-8240-0C8C5E57C0F9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{659FB545-E6E0-48BE-9F29-587E522B878A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6653C6AB-652C-4448-8389-D476501673A1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{665FF16B-2402-4E78-B20C-E59C3093A21F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6715DBFF-A385-4979-9B78-06E0D1236B05}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{68FD928D-20E7-4559-9911-4A450FA2EBC0}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6AF6A2BA-1AD8-47FA-BABB-FF472A23F98A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6BA14A00-0E55-4FDD-8176-A60B0AB0312D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6C1B6F87-D969-4350-9DB7-08B8A2A55420}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6CEE1229-C96D-42E3-A191-A00B1746C818}" = lport=80 | protocol=6 | dir=in | name=xampp | 

"{6D288172-E941-444A-A18C-5A01735E9554}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6D32D14C-1F7B-4B3A-BC9A-BA7751CE1E77}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6F44C766-B4AC-4496-A149-1E8B8E03704A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6F8BC16D-0C27-4E81-9291-716E336845E4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6FB6C9E9-9468-4C07-96AE-96C234EC9D1C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{6FF09F31-68B5-4FD6-81BE-467020294980}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{70A148D2-EC84-44BE-925F-5C7869E7FCBE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{70E69257-630E-4CAE-B394-50B2A5F8C725}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{71652B94-8D03-4E8D-9E5E-FDD09E09ABD9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{71DA14A0-C1F9-4CC4-9CB7-07CF6916E11A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{722CBD6E-4BCB-424F-8C33-D0ADB0E76605}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{72B9AA28-1076-48FE-A2A6-D2FA815D8A1F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{73111904-FC32-442C-A1C5-83F271630428}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7321BAE3-5279-4D84-9610-C887763C5789}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7343CF5D-79DD-43C0-8907-36C42B2E86C9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7478E4D0-0C93-4335-A355-A0018E660F60}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{74C2CC5F-B2F4-4DDB-B72F-1375AC1384DC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{74DCAE55-5ECE-478A-8C6A-735820525C5B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7531BF36-52D3-4554-92E0-D96C89A2F611}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\microsoft\edge\application\msedge.exe | 

"{7558928D-63E2-4718-8141-71ABF2DD86BD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{75A4087C-E563-4D0C-BE60-23630E43E14D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7763BD91-1F1D-451A-8570-2F7E3F7F0CC1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{776C6B29-8999-42F1-BE34-377AD0295116}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{77BD1EB1-2F04-4064-831E-40FFAC211787}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{77F7029E-5DCF-4924-94D9-4C69E885973D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{78868E05-8EBC-4917-8C8B-235F9DD08690}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{78A8E1DE-41CD-4B12-88FC-D3C4ABB2BB31}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{797DB6DE-990F-4A71-98EA-BC44E09B35E8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{79F958CA-7658-464F-AD6D-B57E92AA87C6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7B5A16C2-03C8-437A-91F8-888B020401E3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7B648AB0-9D5D-46C0-8E93-9202F0CD8A68}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7B7C164C-7698-4937-91FA-16DDF623FDA5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7C027969-982F-45C9-B03F-DC52E1E072F7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7C1B9F43-4F85-498B-BFA2-4BD1D7FFE53C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7DDDC26B-89AF-4329-B0AA-6A8A9A433C26}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7E58BA1D-4BE8-421C-A119-1A6DACD770D6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7EEB199B-2474-4FEC-B4E8-048D4D2C9A89}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7F59DC3F-D8CA-44E9-8B27-B93CAAFF1978}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7FAA19FA-AB6A-47E1-9A83-F95DEB13A8DE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{7FC16E3D-3728-41B6-BD87-6D12E5AA0026}" = lport=138 | protocol=17 | dir=in | app=system | 

"{80513380-7748-4F98-99FB-00A23CC8642B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8155DD57-9746-4846-BA26-CBDF93926B2E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{826571B4-AD43-4555-9565-606B8D1C96EC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8423AC61-EF99-49B1-9750-C1B3F6F6CE8A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{84613B71-181C-452F-9D00-FC53A6FCA31A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{85726FFC-5921-4D01-B508-29DE0D40AE02}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{862F156B-60DB-4A0A-BDDC-BE25873846FC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{86F7C0F0-59DB-4B3A-B91A-8AC234D2AB57}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{883691ED-79C4-4C55-9930-47E727FCDE9A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8844F677-8A28-4AFF-BB8D-36C715E786C2}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{89D7626B-8331-4775-86F8-598C41A2A979}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8A95BADA-C539-4E36-878D-0FC83CD039B8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8B411965-2AD6-4417-9959-B62A7EB5D536}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8B8F9B53-6D76-44B0-BE8D-07F2270C5231}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8C18C03E-BC22-4418-B6F6-E53BD9D37C35}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8C445951-DDA3-4012-BE57-33CD2FB1BC45}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8C9C5FBA-EBCA-4298-97F2-829568403AF9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8D6AE2D4-FDAA-4DA8-AFA5-CB78C1F54278}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8E6323E3-7481-48B8-A6C5-6929545D4348}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8F8A5180-FD08-4631-A7A9-F8AEE9AD3819}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{8FA726A7-61BE-46AE-97CB-B60C29471293}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{901609A1-24C2-42D2-B02E-EB0B6C6A2583}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{902CCB86-526F-4C35-A60E-B9BD8CC82DBF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{905132DB-173B-437D-80BE-866B249D805D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9052F49F-751D-4D4F-A699-C55374F0720D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{91E6759A-758A-4EDB-A369-ABC3CF8F54D4}" = lport=80 | protocol=6 | dir=in | app=h:\programme\uplay\games\assassin's creed syndicate\acs.exe | 

"{92A762F5-71D4-480C-AFFD-1EFF1A88F178}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{933EA8E6-CCE8-44B7-A944-BC63F2ED99A2}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9609A2A0-7545-490D-AC7E-7E25F002EF59}" = rport=445 | protocol=6 | dir=out | app=system | 

"{960C54B6-8DD6-4DFB-B0D4-92D81F808828}" = rport=137 | protocol=17 | dir=out | app=system | 

"{9651F030-D1E6-406B-9897-5AFAEAA1D429}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9790BAF2-101E-43A0-93C2-14420C73258F}" = lport=rpc | protocol=6 | dir=in | svc=spooler | app=%systemroot%\system32\spoolsv.exe | 

"{97930381-2451-46F2-8BE4-EBD7D24DB8F9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9829E6ED-D0BC-4852-9D05-01066CFD3374}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{98579FAF-90A3-4459-B8EB-3439AFD0B49A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{98987678-49BC-402B-9256-DF66E18CF71B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{98F98AB7-E277-48D9-8E6A-9AFC802B5D22}" = lport=445 | protocol=6 | dir=in | app=system | 

"{9958AF36-41DB-4526-9502-98B57ED63366}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9984CACD-8722-4B4C-B1DA-11C721DEDF47}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9A60008D-F16F-4924-BC50-FA10EB101101}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9B45757D-38B2-42EE-B25A-71F52AD796C2}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9B5B8FA4-5ECC-457A-AA48-802BF2D8CB1C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9CA6CD96-9658-48B7-AD9E-C252EAD2BDB0}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9CC8AC29-BAB1-4AB8-A2A5-E8B21E4FB5C3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9DE3BFB7-4066-4458-BF82-A0243E23C031}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9DF5ADAB-A78C-4288-B7EE-DF82177F59B3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{9EEDB966-BC01-4CEB-A48B-5B13F80EB056}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{A07A76B5-06AE-4357-8E27-D51E507B9B69}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{A53CDD86-DF9D-44BE-B309-210A6879869B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{A654C92C-F202-4402-B02B-6A3C9F1AF739}" = lport=47998 | protocol=17 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | 

"{A73D8F82-E203-4943-9274-7A2F72FB2C7A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{A8CDC7C0-9AC6-45C1-A50B-EED3CEE41834}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{A9A16F19-6878-4356-A6F3-18D2BCFAD9DB}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{A9EDA5FF-316F-4637-8DD2-5E7F3AAA517E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AA259895-23A8-4638-805D-1EAE06BBD5BD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{ACB11644-9D84-4B56-B781-54000F97F9C4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AE129111-D405-483C-A43B-D7CC4F8BC550}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AEB75F9E-16D9-4742-B600-2D32FDE8EB5D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AF340386-CB3C-4705-9B50-4D34F517D474}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AF357AE8-BC03-45B0-BECE-CDF254A86EF5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AF67C518-4FDD-43BE-9120-548D932849CF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{AF68E724-E020-4F6B-A026-349C1CBAE12A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B0C52258-1F31-4AA7-B8E3-5F132240EF7C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B0F494FC-3211-4705-AFBE-7654896D98E9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B1409BBA-4E37-4333-8582-923CCD4B8F6A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B22319EB-71F4-4854-A694-EDCFEBA84A68}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B2C82F77-17A0-4AE4-9247-49EF80A32AAE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B46BBFF9-7472-4B08-9610-97AE3165D0B9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B4AF0129-BEC0-4F98-BDA8-1550049EDA37}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B634680D-29BE-4184-A686-8962295DB8A6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B78BB03D-0D62-4625-BC5C-E32EB9C89524}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B8797BCB-C345-4B3B-A17A-2EE6D335825E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B88AB3AA-20E5-4627-AB4B-422CFA83741C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{B8B1B2D3-A1CC-4A25-81D6-9F6CB9BD8CF8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BBCC23F3-D543-4DD2-B1A5-B645643123DA}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BBDA2AA3-D30A-457A-AB0F-711DA960A60B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BBE9D50C-E652-49EB-95AE-3DC9DEF3F34E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BCB17D5B-80F3-491E-BD8F-8C25CB2414D0}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BD0CF392-6D73-46CD-BFB9-2533CE95C359}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BE45E5F6-7D71-49CB-B397-5D94566B33E9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BE712C6E-F468-4FF1-B449-B8DB94B7959B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BED43A43-1E1A-4537-8F06-F9F718D4EB25}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BEF1DFA3-B825-4095-A67F-D60864226C19}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BFE7515F-4EBE-4095-B3C4-425AA1C2B023}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{BFF448E9-8CA7-4533-B79D-B34ACA0BFB46}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C088EBAE-FE2F-4A7C-909B-02D15FBC8F5F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C0DA0D50-A282-4DC2-8A66-27B4F788726F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C18C1CE6-3C94-4FB2-8677-DA1B98781729}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C1FDFAA9-2D0C-4B7F-AA22-BAC16DDDD975}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C64AAD90-8DDC-4102-9548-3652A9401107}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C6FDECDC-7BFF-4398-8779-A9B1C976F477}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C8546D42-67C4-4930-89C5-51C4F26FCDA1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{C97A7AEA-DD0A-410B-9332-8E0A4E070F54}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CB953820-00B6-4890-82B1-6C9F9F24AD29}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CC471296-97B6-42E9-843A-4D70F078F6FD}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CD0CCEB7-0155-49CB-8D4E-3C743676BC69}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CD26041B-8C5B-478A-94BE-E7F46A9CD02B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CDF246BE-D52A-4BB3-9026-D9BE252CE1D5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CE301B76-1CDB-4C47-8CC8-5964812A5726}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CE44F4A0-E747-4270-8107-E059216C635F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{CF11565B-CA51-46C3-B677-BF0296848677}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D0B2F476-A286-4D72-8277-9F48849E5DCE}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D14AC5A1-CFFB-4C41-A210-9096E8E8B3A6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D151D9B4-69AB-49C6-A1CC-7FA20CE42159}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D2D0D84F-2713-4D48-97BE-49BAD0D7AC65}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D4E33953-CB8D-4DDA-B0B7-49ABFF98376C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D80B3F1C-FFDF-4BF6-A95C-79ED20D657EF}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D81723F0-799E-4FA9-93F9-019325772670}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D8B799AF-57B3-49FF-9C5C-16BB4ADC87F6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D947EB54-FD26-4F6B-A8C7-76E4347CBE25}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{D94D92B1-A4A3-493F-A0FE-FCA8B2ECB72B}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{DB080CB2-DBAC-4FAF-8A4C-F091CA7930DB}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{DB9FB736-7271-42F1-9A19-7EF4F35004CC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{DBF265BF-89D1-40AA-8EDB-CF49F29C1CD7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{DFCE7B1B-A0C3-41A0-9BF8-D76045534B4E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E0879C28-E438-4948-A68B-16ABF9E34825}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E2B7545F-F8F2-452A-883D-DA1B8C5C14D7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E3D3BC2D-89CF-4FEA-AC34-BD0FB1C1FB3F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E4677943-4809-41F4-AA1B-7386B1BDD8B9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E468DEC2-9E1F-4D14-9280-C5A2C0673B6D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E4FB5E86-94A6-4F5B-A384-FC9908DE3B5E}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E585C08C-AAC7-47CB-8D65-2F8A060309BA}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E6DF3F11-D621-470A-ACA7-9CBD8414951F}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E71EE8D8-F343-4C28-BBA1-2DD299F0BFB8}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E8304080-290B-4617-BEA2-D55A0AEDE061}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E886355F-7504-4955-AA73-98021821A3DC}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E89AF2BA-C7D6-427E-94CD-3446AE5C0C9D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{E9269052-FE64-44E4-BC31-5899E47CD50D}" = lport=47984 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvcontainer\nvcontainer.exe | 

"{EA2AF9DB-AAA8-4DF3-9B52-DA1C4A622B99}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EA430E3D-8104-430A-9386-205BCD166483}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EB0F0988-50AF-47AE-A132-581E29BDFB74}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EB3603CA-F786-4711-A74E-6F18A7528218}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EB3B11F7-4173-4169-8173-339E6B283E16}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EBA797CB-F355-4959-9BF9-C83F057924C5}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EC40403D-65B3-4FCF-A61E-80BE788EFBF6}" = lport=139 | protocol=6 | dir=in | app=system | 

"{EC77EBAF-554C-484F-B364-6F46243BA51A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{ED9A5ABA-A271-4E82-B252-EAE99C1109DB}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EE8904A4-275D-44CB-AEFA-0C97458FF105}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EED15B78-6086-4DCF-8A6F-9813B27CDF21}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EF463F9B-102D-4A1E-B0E0-5C6BBE8948F1}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{EF6D7BBD-12E2-4087-AC19-13221B5D0E52}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F01F9145-2B89-445F-A4C7-BFF41E98F682}" = rport=5355 | protocol=17 | dir=out | svc=dnscache | app=%systemroot%\system32\svchost.exe | 

"{F09514B6-1E6A-4487-A0FC-3D491B3D295E}" = lport=47995 | protocol=6 | dir=in | app=c:\program files\nvidia corporation\nvstreamsrv\nvstreamer.exe | 

"{F0FCA94B-2DAD-4164-9C10-0E45B0803F47}" = lport=5353 | protocol=17 | dir=in | app=c:\program files (x86)\google\chrome\application\chrome.exe | 

"{F1D5B639-4A0E-43AE-B1D1-EE1C57E2EFE7}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F238437D-94F2-4657-BF0E-886F77F217A4}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F24147DC-5C0D-4118-A2F9-BFEEEBA9F80D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F46FFAAC-EF19-4E2B-89D4-3D0706A201D9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F5327578-8ABD-45BD-9777-06FD91D43380}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F599E881-A26A-45D1-9AD7-78148130619C}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F5C7F79B-0FCB-4B42-9243-43E0C169AE84}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F65F57DA-48F1-4403-A469-1A816C1EDA68}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F6F33401-293B-4F8D-AAFC-7B6F5C4E1948}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F743F4E2-991E-47D5-8AF3-EDC27E70BF31}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F78DB957-7379-4E96-9018-A21CCD7D0C0A}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F7F54016-1A1E-4830-89AF-F9A8CEDFC8C6}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F8441524-0FC2-4B58-8620-D25FBB8BF5A9}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{F86E22EB-8CF4-4705-8200-9E7F85B8D54D}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{FA40DA03-697A-4BC8-802C-189E111B7521}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{FCDF7798-1206-4109-B228-EE7ED48C787F}" = lport=9103 | protocol=17 | dir=in | app=g:\programme\uplay\assassin's creed odyssey\acodyssey_plus.exe | 

"{FCECE2A5-8655-4E13-9A61-DD278CD8E7B3}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{FD3AAC5E-2BC2-487C-8C2B-91792EE0E69E}" = lport=6004 | protocol=17 | dir=in | app=c:\program files\microsoft office\root\office16\outlook.exe | 

"{FE266EC5-971A-484B-9BF3-17CDCCC25B90}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{FF505FD8-7377-45E3-82C7-4F85D5F92858}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

"{FFA17206-E769-43F6-BDCF-D33465CE9A83}" = lport=9009 | protocol=6 | dir=in | name=allow 9009 | 

 
 ========== Vista Active Application Exception List ==========

 

[HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\FirewallRules]

"{016BDD9B-A569-4860-917C-AB0951818E59}" = protocol=6 | dir=in | app=h:\program files (x86)\steam\steamapps\common\sid meier's civilization vi\launchpad\launchpad.exe | 

"{0226AC2D-A837-499C-8D92-7E04E218312A}" = dir=out | name=@{microsoft.bingweather_4.46.23151.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 

"{06A786FC-BF23-471D-B45B-51B43383FD68}" = dir=out | name=@{microsoft.storepurchaseapp_12011.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | 

"{07713F05-D133-43B3-B75E-527B4A6C5C88}" = dir=out | name=@{microsoft.windowsstore_12011.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 

"{08285F87-8A2B-483D-B1BD-E1BA126F051F}" = dir=out | name=microsoft pay | 

"{08539CC7-1EE9-41E8-8D30-5E5E3CB4EEC6}" = dir=in | name=onenote for windows 10 | 

"{0A2DC5BC-7C07-440D-B47D-359A0BB4A057}" = dir=out | name=@{microsoft.zunemusic_10.20092.10311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 

"{0C4A2D6A-4D0D-4092-B870-3149E7B024B2}" = dir=out | name=@{microsoft.zunevideo_10.20092.14511.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 

"{0CB9A455-D46F-4547-9FE8-622FA8E434F2}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 

"{0E191866-05B0-4805-98CB-F06F8BFF74CE}" = dir=out | name=@{microsoft.windowsmaps_10.2011.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 

"{0E4B8310-D4C6-45AD-BAD6-FACE249BD8E7}" = dir=in | app=g:\programme\steamlibrary\steamapps\common\allods online my.com\allods online de\bin\launcher.exe | 

"{0F109C04-2AD2-4D0C-BF4F-076C686BADFD}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 

"{0F15FEC3-0EE0-4F41-8556-1A7064B2A426}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\allods online my.com\allodsmycomsteamloader.exe | 

"{0F9EDB70-D78E-4F08-A9E5-257FF4CF1225}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | 

"{1036D65D-031A-4AA4-B916-84A6302A73EF}" = dir=out | name=@{microsoft.getstarted_9.13.33161.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 

"{10D42B82-D1BB-4016-B299-9F4C7700DCBC}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\wreckfest\wreckfest.exe | 

"{1134D6E0-3173-4FAB-BF1F-109C6188C905}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 

"{1393DCA5-64A8-41BB-880E-9E4646DFD0AA}" = dir=out | name=xbox game bar | 

"{139DE86F-AFC7-4B73-B0B2-CCFDD92486E3}" = dir=in | name=@{microsoft.windows.photos_2020.20090.1002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 

"{16F04710-90A9-48D1-907E-480C549A1774}" = dir=out | name=@{microsoft.windowscalculator_10.2010.0.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | 

"{1730AC81-1750-4CD0-96BE-7F8654C94C2F}" = protocol=17 | dir=in | app=g:\programme\uplay\watch_dogs2\bin_plus\watchdogs2.exe | 

"{17E93FC6-DC97-416B-81A7-829F8BA7CA57}" = dir=in | app=h:\program files (x86)\plex\plex media server\plex dlna server.exe | 

"{180CCB2A-7E38-4C63-9DEA-4E4ADA2EECBD}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1907.3152.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 

"{182E4102-68EC-4AF3-AB20-E3B9C3A8CC3D}" = dir=out | name=skype | 

"{1970723B-F2F0-4E31-8CA0-0590E9F26530}" = dir=out | name=@{microsoft.desktopappinstaller_1.4.3161.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 

"{1BD59888-7DE8-4216-8E19-6C89DF3077D3}" = dir=out | name=@{microsoft.win32webviewhost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | 

"{1CA5645B-04B2-4F5B-9A73-25A7639C0009}" = dir=out | name=microsoft solitaire collection | 

"{1D197497-63F4-4DE3-AC23-64C39D724C89}" = dir=in | name=@{microsoft.yourphone_1.20104.23.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | 

"{1E82349B-7870-44A1-800B-4DE6C661A138}" = dir=in | app=g:\program files (x86)\vmware\vmware workstation\vmware-hostd.exe | 

"{1EA491F0-DF46-4055-BF07-392277A2DA36}" = dir=in | name=@{microsoft.microsoftedge_44.19041.423.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 

"{1EC0934D-2B47-41B2-818C-B1CE30C9C5D3}" = dir=out | name=@{microsoft.lockapp_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 

"{20D38CE1-E254-4B11-90EB-5C159DBAC589}" = dir=out | name=@{microsoft.todos_2.32.33291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.todos/resources/app_name_ms_todo} | 

"{225B8CFD-7DE9-4977-A108-BD0A7D72D525}" = dir=in | name=microsoft solitaire collection | 

"{23424473-5315-410B-B146-2B0775CD8C7C}" = dir=in | name=cortana | 

"{25BB3974-B8E4-4BA5-BBC9-14912A20DAA5}" = dir=out | name=@{microsoft.lockapp_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.lockapp/resources/appdisplayname} | 

"{26D9079D-3FEE-4597-A932-FAC89CA9FBDC}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 

"{27DEAD8C-1074-4CD3-8356-145D2B147ED3}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\beamng.drive\beamng.drive.exe | 

"{27E26B33-9D2B-4BB8-A2C1-D463F93EAACA}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 

"{288D04AC-3308-4DCC-8F01-00886BB77447}" = dir=out | name=@{microsoft.windows.cloudexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 

"{2AC5B5D0-D899-45DE-AC66-D8CB82A91829}" = dir=out | name=@{microsoft.windows.startmenuexperiencehost_10.0.19041.610_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | 

"{2E132007-944D-4A53-A460-99376130BDCF}" = dir=in | app=h:\programme\uplay\games\assassin's creed liberation hd\ac3lhd_32.exe | 

"{2E2DF32B-C6D1-4364-A769-D3178BE1E7FA}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\rocketleague\binaries\win64\rocketleague.exe | 

"{2E743466-C370-4A5B-9AD4-0332285BA91D}" = dir=in | app=h:\program files (x86)\plex\plex media server\plex tuner service.exe | 

"{319B8D5A-CE8D-43A7-8808-B7494A3E9CBE}" = dir=out | name=ncsiuwpapp | 

"{32E35034-D783-4E00-B60C-E02ABA9D3DD0}" = dir=out | name=onenote for windows 10 | 

"{346034A4-C411-4F0C-B02B-BB42FF38A6C8}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 

"{3724F6E2-8E64-4DBC-96F1-88C07D1B8DF2}" = dir=in | name=netflix | 

"{37DB9966-F0C0-4EE4-BA2A-D91CA1A99BF7}" = dir=out | name=onenote for windows 10 | 

"{3A55B6DA-6786-4059-8F30-4FB4DA5A3345}" = protocol=17 | dir=in | app=g:\programme\uplay\watch dogs legion\bin\watchdogslegion.exe | 

"{3B565DF7-53BD-43FC-8DD2-C304EF8B3C84}" = dir=out | name=@{microsoft.windowsfeedbackhub_1.1907.3152.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsfeedbackhub/resources/appstorename} | 

"{3E3FA7C2-6680-41C9-9CB6-0F45DD65BEA8}" = protocol=6 | dir=in | app=h:\program files (x86)\steam\steamapps\common\among us\among us.exe | 

"{3E48FF0C-D3A6-4744-9400-5430D50AEDFA}" = dir=in | name=skype | 

"{3EDC1276-8EF2-4B44-9685-7303162F0D85}" = protocol=17 | dir=in | app=h:\program files (x86)\steam\steamapps\common\batman arkham knight\binaries\win64\batmanak.exe | 

"{3F9DE2F1-CA4E-4A33-BE9C-556A650C4FD9}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\dead by daylight\deadbydaylight.exe | 

"{3FF6B4AD-7853-4B57-BCEA-D166B30CD6B4}" = protocol=17 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer_service.exe | 

"{413B53A1-3E13-4B32-BD59-751DC44218C2}" = dir=out | name=@{microsoft.windows.search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.search/resources/packagedisplayname} | 

"{41AFF113-3D49-43FE-8D12-9F8B39755813}" = protocol=6 | dir=in | app=g:\programme\uplay\watch_dogs2\bin\watchdogs2.exe | 

"{41EC163D-FBDF-4BF9-9A08-7F846DA6F645}" = dir=in | name=@{microsoft.microsoftstickynotes_3.7.142.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftstickynotes/resources/stickynotesstoreappname} | 

"{422C03B4-BED2-4086-8BD2-E2F2248EC75E}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 

"{4238A560-8AA9-4999-B7FF-B21258D3FBA4}" = protocol=6 | dir=in | app=h:\program files (x86)\steam\bin\cef\cef.win7x64\steamwebhelper.exe | 

"{430AECD8-FAC2-4280-B941-E64A501BCE3F}" = dir=out | name=cortana | 

"{4586B0FE-F101-4DD4-9CA2-527D242F0920}" = dir=out | name=xbox game bar plugin | 

"{462C5AB3-3E0F-4878-BB90-92A82954EC08}" = dir=in | name=xbox game bar | 

"{48001033-9119-43D6-9926-41E0131D1A27}" = protocol=6 | dir=in | app=c:\program files\microsoft office\root\office16\ucmapi.exe | 

"{4821384B-6F20-48B0-BEA0-2B2AA2BFE209}" = dir=out | name=@{microsoft.xboxidentityprovider_12.67.21001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | 

"{49AEFF8E-0466-4C8A-A8E9-C50855040A36}" = dir=in | name=@{microsoft.windowsstore_12011.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 

"{4A6BA015-1596-4A95-B131-340F084CDF2E}" = dir=in | app=c:\program files (x86)\gigabyte\appcenter\gcupd.exe | 

"{4AEA242F-4724-44BF-B58D-C0CF88E42BF6}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\beamng.drive\beamng.drive.exe | 

"{4C736B25-C183-4110-B110-2EB260B94125}" = dir=out | name=@{microsoft.zunemusic_10.20092.10311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 

"{4D0021A3-43E0-4E3C-870A-D680DA94072A}" = dir=out | name=@{microsoft.windowscamera_2020.504.60.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/lenssdk/resources/appstorename} | 

"{4DBDD82D-D712-4224-9F83-DB375D1178A7}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\payday 2\payday2_win32_release.exe | 

"{4DD71E7C-2548-439D-9CC7-B1C66A89500D}" = dir=out | name=@{microsoft.mixedreality.portal_2000.20081.1312.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mixedreality.portal/resources/pkgdisplayname} | 

"{4E19996F-8EED-4377-A3AA-6195A832F5B0}" = dir=out | name=@{microsoft.accountscontrol_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 

"{4EAF0110-442D-4731-94CE-84C37A6A3D5C}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 

"{54C5FD28-8A46-4E7C-A3FB-E0D12918EE3D}" = dir=in | name=@{microsoft.windows.startmenuexperiencehost_10.0.19041.610_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | 

"{5752B291-ACAA-438B-B16F-0D008BFC8417}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.13228.41011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 

"{5888BB5C-B506-4FF1-8D9D-1AB20C13E101}" = protocol=58 | dir=out | app=system | 

"{5899171C-B1D3-4286-ACCF-446E76D692E1}" = dir=out | name=@{microsoft.gethelp_10.2004.31291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | 

"{58A21FAB-DFDD-411B-A8B9-419ED7A05CE2}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | 

"{5C12FE61-258E-412D-B7CA-4DE887A2BA6C}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\call of duty black ops iii\blackops3.exe | 

"{5C2085E4-6F47-484B-8AC8-63243BE559D8}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 

"{5CE0DB93-2883-406F-AA47-2FF549D73668}" = dir=out | name=xbox tcui | 

"{5D8A2C99-F7DA-4243-96CF-20C03F2BD064}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 

"{5E24B4FE-8DBA-4FD1-BB93-2A951450AAF5}" = dir=in | name=@{microsoft.desktopappinstaller_1.4.3161.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 

"{5EC72408-9005-4CBF-BB03-FA5A0AD6C0E4}" = protocol=58 | dir=in | app=system | 

"{5ECD9456-BAE5-49CF-80BE-202009E6D589}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\wreckfest\wreckfest_x64.exe | 

"{5FD4D251-712B-43BD-9FCC-AB1A942FA6A1}" = protocol=6 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer.exe | 

"{62720B79-55E6-48DD-8888-2A89E24C950B}" = dir=out | name=@{microsoft.windowscamera_2020.504.60.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscamera/lenssdk/resources/appstorename} | 

"{6417D02F-1236-4E39-8ABD-2979B9D09303}" = dir=out | name=xbox game bar plugin | 

"{6466400F-23B6-4DAE-A260-956355B62CB9}" = dir=out | name=@{microsoft.windows.search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.search/resources/packagedisplayname} | 

"{65BBB087-658F-4FD4-9381-0C485A85CC7F}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | 

"{674561F6-6745-45AE-8FCA-48BA4FFD15D7}" = dir=in | name=microsoft solitaire collection | 

"{67AF3586-FFFC-4F4B-9FBD-744D151BF6C2}" = protocol=17 | dir=in | app=c:\program files\microsoft office\root\office16\ucmapi.exe | 

"{68785FF3-F573-4BD0-9F78-9DA7311D2148}" = dir=in | name=@{microsoft.zunevideo_10.20092.14511.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 

"{68CF966A-3018-43ED-9B8C-6CDD16748FDF}" = dir=out | name=amazon music | 

"{6A914D08-6884-447C-8286-DF37B76294AA}" = dir=out | name=@{microsoft.windows.search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.search/resources/packagedisplayname} | 

"{6AB88638-B0AF-4021-9D7A-ABA0FBA7FAA7}" = protocol=17 | dir=in | app=h:\program files (x86)\steam\steam.exe | 

"{6ACBF067-C968-48A5-98BC-DCF3E49983E5}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\payday 2\payday2_win32_release.exe | 

"{6AE5D535-0227-4F86-9653-7F5AD6B17498}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 

"{6B92393A-49C8-4152-9950-3CB147776CA3}" = dir=in | name=@{microsoft.windows.search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.search/resources/packagedisplayname} | 

"{6BF11FC8-7540-4B84-B931-63112997DDEB}" = dir=out | name=@{microsoft.microsoftedge_44.19041.423.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 

"{6C26076E-B9AF-42D2-A2F7-ED9DA5A0CC78}" = dir=in | name=@{microsoft.yourphone_1.20111.125.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | 

"{703AA02F-A5AA-4D5F-9DB7-7BB8407B2931}" = dir=in | app=h:\program files (x86)\plex\plex media server\plex media server.exe | 

"{70AE13B4-E1BA-4CD2-8431-EB57A13D22BF}" = dir=out | name=@{microsoft.windows.photos_2020.20090.1002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 

"{715084A9-3B08-4B5F-8780-BB62BF73D198}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 

"{71C259EB-8369-4AEE-84C0-C6AD4C83E469}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.13228.41011.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 

"{73A037D6-AA68-4BE5-8023-093CF12D6DF0}" = protocol=6 | dir=in | app=g:\programme\uplay\watch_dogs2\eac.exe | 

"{7459A16F-9FB3-48D1-9DB9-C03F81F2E16A}" = protocol=17 | dir=in | app=c:\program files\windowsapps\microsoft.skypeapp_15.66.77.0_x86__kzf8qxf38zg5c\skype\skype.exe | 

"{760C9839-A253-438A-8887-F6A0D7AF45BA}" = dir=out | name=@{microsoft.microsoftedge_44.19041.423.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 

"{786BC53E-C1B7-4BA8-B66F-4164F14B8546}" = dir=in | name=edgedevtoolsplugin | 

"{787848F6-2191-4031-8669-47B55C16BC6E}" = dir=out | name=edgedevtoolsplugin | 

"{79D86693-D51E-4262-9828-8AECD1943FAD}" = dir=out | name=@{microsoft.storepurchaseapp_12011.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.storepurchaseapp/resources/displaytitle} | 

"{7AB82544-1B57-4300-B527-D54877A16F59}" = dir=out | name=@{microsoft.microsoftedge_44.19041.423.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 

"{7AD85ACA-0D91-4770-A511-8946D0A5A20A}" = dir=in | app=g:\program files (x86)\vmware\vmware workstation\vmware-hostd.exe | 

"{7AFAEA7D-0589-457B-BD9B-855699C3DDB9}" = dir=out | name=@{microsoft.xboxapp_48.70.21001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | 

"{7BA34BAB-84FC-4E05-AC16-280CFA7378B1}" = dir=in | app=g:\program files (x86)\vmware\vmware workstation\vmware-authd.exe | 

"{7BD39D05-D215-4CFF-9BF9-307CF80BE827}" = dir=out | name=@{microsoft.zunevideo_10.20092.14511.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 

"{7D2D1975-15EE-40D2-B2DC-F8F2C1D5830C}" = dir=out | name=@{microsoft.people_10.1909.10841.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 

"{7E5A5078-A793-442A-BA71-FDC0F35C4340}" = dir=out | name=@{microsoft.win32webviewhost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | 

"{7E9EEBB3-B284-4B0C-A4DC-736344DC2978}" = protocol=17 | dir=in | app=h:\program files (x86)\steam\steamapps\common\sid meier's civilization vi\launchpad\launchpad.exe | 

"{7F8AA965-8883-4DCB-A9EF-298E2DF8FE19}" = protocol=6 | dir=in | app=h:\programme\uplay\games\watch_dogs\bin\watch_dogs.exe | 

"{808A97C9-19E5-4AC4-A947-DD934A1E62B5}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 

"{80C37001-2052-42A7-9980-0B4C71F85BB2}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | 

"{8509D49A-6B35-4FC5-9E46-FABB2C219A61}" = dir=in | name=onenote for windows 10 | 

"{871E0FCB-7659-4244-98CA-FA1F2963080F}" = dir=out | name=nvidia control panel | 

"{87A71489-6C6E-4ED1-B67A-50FCE55F4216}" = dir=out | name=amazon prime video for windows | 

"{884ADA83-A667-4B8B-A28F-6FC912E29B66}" = protocol=6 | dir=in | app=h:\program files (x86)\steam\steam.exe | 

"{884CC68A-3CCA-4347-9985-CF9CE45A6EBA}" = dir=in | name=@{microsoft.xboxapp_48.70.21001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | 

"{8856F5CB-6A89-40D7-8FD9-950AC6D634F6}" = dir=out | name=@{microsoft.windows.startmenuexperiencehost_10.0.19041.610_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | 

"{8953D7FC-E6A6-478A-90A0-192C1EC81428}" = protocol=17 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 

"{89C27047-0265-4D30-A9B3-A2F700E38227}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\allods online my.com\allodsmycomsteamloader.exe | 

"{89C5EC4C-D64A-4540-BBA9-785E3C2FF6D5}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 

"{89CB9AD8-FED3-43B2-B285-836A7495805A}" = protocol=17 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer.exe | 

"{8BDA71B4-F631-434A-8C1A-DC63131CE5D5}" = dir=out | name=windows feature experience pack | 

"{8D82BEE0-7808-4500-9F5D-FE0200F345B6}" = dir=out | name=@{microsoft.windows.sechealthui_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.sechealthui/resources/packagedisplayname} | 

"{8DFFB167-17D3-41EF-9C8A-4ACDA96A67A9}" = dir=in | name=@{microsoft.windowscommunicationsapps_16005.13426.20316.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 

"{8EBB9437-8FCE-467D-B48C-307A52B6DF4E}" = dir=out | name=@{microsoft.microsoftstickynotes_3.7.142.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftstickynotes/resources/stickynotesstoreappname} | 

"{909974B3-FA4F-4159-8484-196A6C18A110}" = dir=in | app=h:\programme\uplay\games\assassin's creed liberation hd\ac3lhd_64.exe | 

"{93196550-C506-41C0-8052-73A348B6CC42}" = dir=out | name=@{microsoft.windows.parentalcontrols_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.parentalcontrols/resources/displayname} | 

"{936E0D70-C796-467B-8944-9AAC910BED39}" = dir=out | name=windows_ie_ac_001 | 

"{938962E1-ED51-403D-BD4E-090DA32FE30B}" = dir=out | name=windows feature experience pack | 

"{93AE7A1A-D3F5-4BF9-A032-23E68995E3E1}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} | 

"{947DD9A7-E8AF-4B0A-AEDE-CDDF4E59D5CA}" = dir=out | name=microsoft pay | 

"{94C3C4B4-BD1A-44EF-B14E-E41495A88F7E}" = protocol=17 | dir=in | app=c:\program files\microsoft office\root\office16\lync.exe | 

"{956F87C5-6305-4071-8323-D42AAC462F81}" = dir=in | name=edgedevtoolsplugin | 

"{95812E4C-0D15-4176-8DE2-FA95ACFEA11F}" = dir=in | name=@{microsoft.microsoftedge_44.19041.423.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 

"{99FAD3C6-6EB7-4D84-A89C-4C15D449238F}" = dir=in | name=@{microsoft.windows.photos_2020.20090.1002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 

"{9A0F51AA-C58D-48BE-BA0A-572DE26B23D6}" = protocol=6 | dir=in | app=c:\program files\windowsapps\amazonmobilellc.amazonmusic_8.0.0.0_x86__kc6t79cpj4tp0\amazon music helper.exe | 

"{9A9F9476-3878-49CC-9F33-01C399BA9E8A}" = protocol=17 | dir=in | app=h:\program files (x86)\steam\steamapps\common\among us\among us.exe | 

"{9B39CC8B-6878-46ED-A39A-6A38417F03D1}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 

"{9B884AAF-A314-48E4-8061-33E96AE7FEF6}" = dir=out | name=@{microsoft.people_10.1909.10841.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.people/resources/appstorename} | 

"{9E1C9D18-A17E-4822-A5ED-68713DAB55DF}" = protocol=17 | dir=in | app=g:\programme\uplay\watch_dogs2\eac.exe | 

"{9E7048E4-683C-4D76-B648-029A012DCEF1}" = dir=out | name=@{microsoft.aad.brokerplugin_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 

"{9F1C4D51-EF49-4254-8A72-4CB575A32822}" = dir=in | app=h:\program files (x86)\plex\plex media server\plexscripthost.exe | 

"{A1BE7037-E86F-4206-9621-F052DC08B154}" = dir=out | name=@{microsoft.gethelp_10.2004.31291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.gethelp/resources/appdisplayname} | 

"{A21B38AD-4976-4F94-A93E-1350888A32CE}" = protocol=17 | dir=in | app=h:\programme\uplay\games\watch_dogs\bin\watch_dogs.exe | 

"{A37F0574-8815-43DD-9B7A-B51DE6101B90}" = dir=in | name=@{microsoft.win32webviewhost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | 

"{A3A5CAEE-A7A2-4239-BEE5-60DDA98BCE85}" = protocol=17 | dir=out | app=c:\program files\windowsapps\microsoft.skypeapp_15.66.77.0_x86__kzf8qxf38zg5c\skype\skype.exe | 

"{A3A87C31-624B-4300-876C-63C70765A23E}" = dir=in | name=@{microsoft.windowsstore_12011.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 

"{A4C491AB-9C55-4D6B-81B8-8ABF16EEA7B6}" = protocol=17 | dir=in | app=h:\program files (x86)\steam\bin\cef\cef.win7x64\steamwebhelper.exe | 

"{A6142C16-1DDC-479F-8A9C-26F5F003AE73}" = dir=in | name=@{microsoft.microsoftedge_44.19041.423.0_neutral__8wekyb3d8bbwe?ms-resource://microsoft.microsoftedge/resources/appname} | 

"{A7D1A36E-F96C-4D31-B74B-10F46D758F89}" = dir=out | name=@{microsoft.accountscontrol_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.accountscontrol/resources/displayname} | 

"{A95F6B91-1FC3-436D-AFB1-12183EA2A51E}" = dir=out | name=@{microsoft.windows.peopleexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.peopleexperiencehost/resources/pkgdisplayname} | 

"{A96FDFE4-FAE8-4838-B2D0-28702693F6D7}" = dir=out | name=@{microsoft.yourphone_1.20111.125.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | 

"{A9E4729F-4531-4D79-B77A-095B27885C7F}" = dir=out | name=@{microsoft.mixedreality.portal_2000.20081.1312.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mixedreality.portal/resources/pkgdisplayname} | 

"{AA0671F6-F75D-4E5A-A5B4-FEF6621B93A2}" = dir=out | name=@{microsoft.windowscalculator_10.2009.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscalculator/resources/appstorename} | 

"{AAE1B9FB-406D-48DC-8E91-2981C53D3D03}" = dir=in | name=@{microsoft.windows.search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.search/resources/packagedisplayname} | 

"{AB2E7005-675B-486A-A07A-B1C781A0646C}" = protocol=58 | dir=out | name=@iphlpsvc.dll,-503 | 

"{ABA7653C-CA3C-4FEB-9698-65CC5D935B67}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\tomb raider\tombraider.exe | 

"{ADF955C6-C458-4D8A-A099-66B2C92B85FE}" = dir=out | name=ncsiuwpapp | 

"{AE11FAE6-E03E-4947-BCCF-9018418F9260}" = dir=out | name=microsoft solitaire collection | 

"{AE161101-E3A0-4C33-8403-A40B62AE832E}" = dir=in | name=cortana | 

"{AE30BA02-BBE3-4D29-9340-B4201DBC048D}" = dir=out | name=@{microsoft.mspaint_6.2009.30067.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | 

"{AE8BA026-9403-4FD7-92DD-EC445DEF32AA}" = dir=in | name=@{microsoft.zunemusic_10.20092.10311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 

"{AEA1637E-FDF7-41EA-B318-52980F992E5C}" = dir=in | name=@{microsoft.desktopappinstaller_1.4.3161.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 

"{AEE1DF78-731F-49A9-9064-990E95B5CC82}" = dir=in | app=c:\program files (x86)\gigabyte\appcenter\apcent.exe | 

"{AF4C50D8-18FD-415D-8465-8DB2041121CD}" = dir=out | name=@{microsoft.mspaint_6.2009.30067.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.mspaint/resources/appname} | 

"{AF9718C3-BFEE-430B-BF40-9C36EC88A8CE}" = dir=out | name=office | 

"{B10A27C3-5699-4820-AD43-5DD38AC6C2B0}" = protocol=17 | dir=in | app=c:\windows\syswow64\pnkbstrb.exe | 

"{B3092905-0718-4140-8BE8-E3CCE0356976}" = dir=in | name=@{microsoft.zunevideo_10.20092.14511.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunevideo/resources/ids_manifest_video_app_name} | 

"{B3506CE9-057A-423F-B740-69463DA6553F}" = protocol=6 | dir=out | app=c:\program files\windowsapps\microsoft.skypeapp_15.66.77.0_x86__kzf8qxf38zg5c\skype\skype.exe | 

"{B43D0E78-8AE4-4B35-B180-937FA915E441}" = dir=in | name=@{microsoft.windows.startmenuexperiencehost_10.0.19041.610_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.startmenuexperiencehost/startmenuexperiencehost/pkgdisplayname} | 

"{B483D0BD-9B6B-4716-8D3D-69EDAA86417E}" = dir=out | name=@{microsoft.windows.photos_2020.20090.1002.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windows.photos/resources/appstorename} | 

"{B5E38287-9854-4133-806D-0F7B8E00062B}" = protocol=1 | dir=in | app=system | 

"{B6C9EBE8-8DB2-4EDA-BB19-BA910A898A53}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\assassin's creed unity\acu.exe | 

"{B6F06ACE-1105-46BB-BF21-DA188A49E134}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\dead by daylight\deadbydaylight.exe | 

"{B769692B-4E38-42C0-B5A8-AB58A649F489}" = protocol=17 | dir=in | app=g:\programme\uplay\watch_dogs2\bin\watchdogs2.exe | 

"{B8007968-D965-461D-A9F5-5BE9A48339EF}" = protocol=17 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer_service.exe | 

"{BB070AAD-6B52-42EC-8E38-934E6DA54915}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\besiege\besiege.exe | 

"{C0D74F91-3E05-4D16-AA01-5FBB01D3447D}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\assassin's creed unity\acu.exe | 

"{C0F307DD-7F9F-4D8B-861F-23BA801A3ECE}" = protocol=6 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer.exe | 

"{C118424B-21BF-4BAD-BE84-BEF93867C465}" = dir=in | name=@{microsoft.microsoftstickynotes_3.7.142.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftstickynotes/resources/stickynotesstoreappname} | 

"{C271ABFC-434D-4914-9361-C575F25CCF70}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\wreckfest\wreckfest_x64.exe | 

"{C47E1AED-02B5-4A9C-9382-83B7EDFEA7DD}" = protocol=58 | dir=in | app=system | 

"{C5C8287C-866C-4D01-8126-F4CB1BD1BE61}" = dir=out | name=@{microsoft.microsoftstickynotes_3.7.142.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoftstickynotes/resources/stickynotesstoreappname} | 

"{C60C5437-4AA9-4558-BEE2-BDA2200AC77A}" = protocol=6 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer_service.exe | 

"{C6F39370-68AB-499F-9E8A-AFC6B7EBB7D3}" = dir=out | name=edgedevtoolsplugin | 

"{C83C367C-2433-47F5-AB78-FC02F48F049C}" = dir=out | name=xbox game bar | 

"{C842A5DE-0D43-41F2-B624-C7579A943852}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe | 

"{C88A5877-DA68-4B05-ADFD-3F8C4BF2963A}" = dir=in | name=@{microsoft.todos_2.32.33291.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.todos/resources/app_name_ms_todo} | 

"{C91EA612-7CE3-49FC-B74B-072ECBF5CE04}" = dir=out | name=@{microsoft.windowsstore_12011.1001.1.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsstore/resources/storetitle} | 

"{C9C5ABCF-5AA4-4F84-A697-7F42C466AA45}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\rocketleague\binaries\win64\rocketleague.exe | 

"{CA10E080-9D2B-416E-A6CB-7B16CDF33CB9}" = dir=out | name=netflix | 

"{CACD8413-E65B-4060-AADE-CDFC27486E73}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\call of duty black ops iii\blackops3.exe | 

"{CADEAA8D-FA7F-4178-95D9-71841612D3A4}" = protocol=6 | dir=in | app=g:\programme\uplay\watch dogs legion\bin\watchdogslegion.exe | 

"{CAF55EB5-ED8F-4DBF-935A-049BB0A09848}" = protocol=1 | dir=out | app=system | 

"{CBE8EC1F-AB28-469E-B059-D5697B02C384}" = protocol=6 | dir=in | app=h:\program files (x86)\steam\steamapps\common\batman arkham knight\binaries\win64\batmanak.exe | 

"{CC067E32-4E89-4D7A-BAF4-659B4E9E6320}" = dir=out | name=@{microsoft.xboxapp_48.70.21001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | 

"{CD276B12-4AD6-4F46-A620-C869659E279C}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\besiege\besiege.exe | 

"{CD655D27-EE12-4F43-8349-411302EE893C}" = dir=in | app=g:\program files (x86)\vmware\vmware workstation\vmware-authd.exe | 

"{CE258CEE-6668-4C68-8F90-15FDDE53F61F}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\tomb raider\tombraider.exe | 

"{CEF61FFE-680B-4713-A775-4F0F0E398F34}" = dir=out | name=@{microsoft.microsoft3dviewer_7.2009.29132.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | 

"{D020BEF7-D1FE-490F-B28A-185678BBC212}" = protocol=17 | dir=in | app=c:\program files\windowsapps\amazonmobilellc.amazonmusic_8.0.0.0_x86__kc6t79cpj4tp0\amazon music helper.exe | 

"{D0CCB80E-0E4D-4A87-AB33-5E9DC12F9E1C}" = dir=in | name=@{microsoft.xboxapp_48.70.21001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxapp/xboxapp.resource/resources/app_title} | 

"{D29B1773-DF3C-4B19-83BB-C2662BC9AD64}" = dir=in | name=@{microsoft.win32webviewhost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://windows.win32webviewhost/resources/displayname} | 

"{D2C949DA-8081-4F46-B782-2710E335F9A6}" = protocol=6 | dir=in | app=c:\windows\syswow64\pnkbstra.exe | 

"{D4A3137A-4F0B-40F7-A90A-62EF6CAA7D38}" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\wreckfest\wreckfest.exe | 

"{D610A223-8F39-4297-A060-938E9F899430}" = dir=out | name=@{microsoft.windowscommunicationsapps_16005.13426.20316.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowscommunicationsapps/hxoutlookintl/appmanifest_outlookdesktop_displayname} | 

"{D619D246-E916-4FE4-8167-8C3899C9457B}" = dir=in | app=c:\program files (x86)\gigabyte\appcenter\gcupd.exe | 

"{D95D2CC7-B930-4B92-97B3-935A622F8F01}" = protocol=17 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer.exe | 

"{D9E3A425-38D4-44E4-A10D-27492E3C80AC}" = protocol=6 | dir=in | app=g:\program files (x86)\teamviewer\teamviewer_service.exe | 

"{DAE1B244-2654-4C22-9C03-8F75C38131C2}" = protocol=6 | dir=in | app=c:\program files\mozilla firefox\firefox.exe | 

"{DB59FEB2-CCAC-4507-9008-8D0C2AA99F67}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.19041.610_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 

"{DC9A95E3-DBDF-4F82-A168-6FB17B8D016E}" = dir=out | name=skype | 

"{E25D0CD7-ED3B-4BBE-B991-2AF39D30381F}" = dir=in | app=c:\users\ilias\appdata\roaming\zoom\bin\zoom.exe | 

"{E2C20904-1B54-4106-B6E9-805ABDA3B212}" = dir=in | name=@{microsoft.windows.cloudexperiencehost_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.cloudexperiencehost/resources/appdescription} | 

"{E39F3FA4-DC54-4A25-B0A9-A31712ED2CC0}" = dir=in | name=@{microsoft.zunemusic_10.20092.10311.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.zunemusic/resources/ids_manifest_music_app_name} | 

"{E48051BD-EE50-4560-8952-446B1986705E}" = protocol=6 | dir=in | app=c:\program files\windowsapps\microsoft.skypeapp_15.66.77.0_x86__kzf8qxf38zg5c\skype\skype.exe | 

"{E5450A86-AE43-4381-A7AA-802D68B53755}" = dir=out | name=@{microsoft.yourphone_1.20104.23.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.yourphone/resources/appname} | 

"{E66859C3-FD3D-4924-9E80-213AFA364A4C}" = protocol=6 | dir=in | app=g:\programme\uplay\tom clancy's the division\thedivision.exe | 

"{E7C50A8B-B6D6-4AC0-8017-6E39440D7D53}" = dir=out | name=@{microsoft.microsoft3dviewer_7.2010.15012.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.microsoft3dviewer/common.view.uwp/resources/storeappname} | 

"{E7EEB068-763A-4981-A3E5-DE54CAD90DE7}" = dir=out | name=@{microsoft.windows.narratorquickstart_10.0.19041.423_neutral_neutral_8wekyb3d8bbwe?ms-resource://microsoft.windows.narratorquickstart/resources/appdisplayname} | 

"{E89F7144-8877-45F2-A916-4AA8F78DDAA4}" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\counter-strike global offensive\csgo.exe | 

"{E976AB1A-A71D-4AB4-9805-96D1F282EDCE}" = dir=in | name=@{microsoft.aad.brokerplugin_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.aad.brokerplugin/resources/packagedisplayname} | 

"{EC66CB68-409C-458E-B106-0032E7714A26}" = dir=out | name=@{microsoft.desktopappinstaller_1.4.3161.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.desktopappinstaller/resources/appdisplayname} | 

"{EDBF839D-8A11-4F71-91C5-E9128B5F2772}" = dir=out | name=windows feature experience pack | 

"{EF6BD5E2-8357-478E-BE90-5B51401E7CB3}" = dir=in | app=c:\program files (x86)\gigabyte\appcenter\apcent.exe | 

"{EFAE99FC-CB5F-4626-A1DC-60EB7DD1716D}" = dir=out | name=@{microsoft.windows.secureassessmentbrowser_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.secureassessmentbrowser/resources/packagedisplayname} | 

"{EFBB43D7-2E2E-44CD-A46C-B12453FABA1E}" = dir=out | name=@{microsoft.windows.apprep.chxapp_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.apprep.chxapp/resources/displayname} | 

"{EFD9942B-8C50-46C8-99E4-C6E365BCE00E}" = dir=out | name=@{microsoft.windows.contentdeliverymanager_10.0.19041.423_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.contentdeliverymanager/resources/appdisplayname} | 

"{F0CDF1A2-FDF0-4259-9D24-D3D7DE1C4954}" = dir=out | name=xbox tcui | 

"{F1F0335B-277C-4164-B066-58E9CDC3B6F0}" = dir=out | name=@{microsoft.windowsmaps_10.2011.4.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.windowsmaps/resources/appstorename} | 

"{F38374B4-828E-4A8D-A692-C271AA9A55C8}" = dir=out | name=@{microsoft.windows.oobenetworkcaptiveportal_10.0.19041.423_neutral__cw5n1h2txyewy?ms-resource://microsoft.windows.oobenetworkcaptiveportal/resources/appdisplayname} | 

"{F41113D0-7C62-40B8-85F7-0E3B1F443DE8}" = dir=out | name=office | 

"{F4FC2456-6F33-408E-9004-4F4EACA24F08}" = dir=out | name=@{microsoft.xboxgamecallableui_1000.19041.423.0_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.xboxgamecallableui/resources/pkgdisplayname} | 

"{F5F9DD23-9136-413B-819C-3F4ECF609960}" = dir=in | name=@{microsoft.windows.search_1.14.0.19041_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.search/resources/packagedisplayname} | 

"{F6401DCF-0AA0-4BF1-B4AD-1CC1B5DFBF32}" = protocol=6 | dir=in | app=g:\programme\uplay\watch_dogs2\bin_plus\watchdogs2.exe | 

"{F69665A2-2B24-4355-9E06-3569D87CC5EB}" = protocol=6 | dir=in | app=c:\program files\microsoft office\root\office16\lync.exe | 

"{F6FA9F55-0F79-4BB4-BF7A-4D09054EE9AF}" = dir=in | name=skype | 

"{F702703B-4DA4-4B05-B868-91E81CAA1A73}" = dir=out | name=nvidia control panel | 

"{F705945F-32C5-497A-BCE1-961AD30B39FB}" = dir=out | name=@{microsoft.windows.shellexperiencehost_10.0.19041.610_neutral_neutral_cw5n1h2txyewy?ms-resource://microsoft.windows.shellexperiencehost/resources/pkgdisplayname} | 

"{F74A1A1C-242D-4E85-8701-AF017716FC30}" = dir=out | name=@{microsoft.windows.narratorquickstart_10.0.19041.423_neutral_neutral_8wekyb3d8bbwe?ms-resource://microsoft.windows.narratorquickstart/resources/appdisplayname} | 

"{F76E4037-31D3-4DDC-B1C4-9B2C371286E9}" = dir=out | name=cortana | 

"{F9EAB72B-A536-41BA-BE21-129719743A02}" = dir=out | name=@{microsoft.bingweather_4.46.22742.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.bingweather/resources/applicationtitlewithbranding} | 

"{FEDA2D42-5EA6-4BB3-8643-AEFE04041A4E}" = dir=in | name=xbox game bar | 

"{FF145146-04D8-4EF2-A3A3-60393312A3E1}" = dir=out | name=@{microsoft.getstarted_9.12.32951.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.getstarted/resources/appstorename} | 

"{FF5FE488-404A-4CDA-930F-3038EE1D679C}" = dir=out | name=@{microsoft.xboxidentityprovider_12.67.21001.0_x64__8wekyb3d8bbwe?ms-resource://microsoft.xboxidentityprovider/resources/displayname} | 

"TCP Query User{1970B036-0320-4B58-A5FF-3622E74BCA3D}C:\program files (x86)\tautulli\tautulli.exe" = protocol=6 | dir=in | app=c:\program files (x86)\tautulli\tautulli.exe | 

"TCP Query User{1CCD513A-D05F-4DE7-A964-668BC97CDAB0}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe" = protocol=6 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe | 

"TCP Query User{2E6A6070-CCAA-4D83-AD54-64E3807CF8D6}H:\programme\uplay\games\far cry 3\bin\farcry3.exe" = protocol=6 | dir=in | app=h:\programme\uplay\games\far cry 3\bin\farcry3.exe | 

"TCP Query User{40F2E5B1-7CF1-4854-AF42-1CE0155D5BD1}H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe" = protocol=6 | dir=in | app=h:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe | 

"TCP Query User{4F2987B9-E54F-437F-9DFD-281A1E1C3B46}G:\program files (x86)\samsung dex\samsungdex.exe" = protocol=6 | dir=in | app=g:\program files (x86)\samsung dex\samsungdex.exe | 

"TCP Query User{5C47F3BA-2A49-43C9-BC11-F28D23192A1E}H:\programme\rockstar games\grand theft auto v\gta5.exe" = protocol=6 | dir=in | app=h:\programme\rockstar games\grand theft auto v\gta5.exe | 

"TCP Query User{68AC0099-9881-45D0-B2D9-ABF26FD4B350}G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe" = protocol=6 | dir=in | app=g:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe | 

"TCP Query User{698DF1BC-393E-47C6-A19C-3D96345DF257}G:\program files\epic games\totalwarsagatroy\troy.exe" = protocol=6 | dir=in | app=g:\program files\epic games\totalwarsagatroy\troy.exe | 

"TCP Query User{750959BD-167F-4B3C-BD44-1C66A5629413}G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe" = protocol=6 | dir=in | app=g:\program files (x86)\the sims 4\game\bin\ts4_x64.exe | 

"TCP Query User{77F09BE0-845B-47AA-9824-EDF96A67788D}G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe" = protocol=6 | dir=in | app=g:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe | 

"TCP Query User{8038F798-E538-458B-BBAB-6CA4DFF7C523}G:\program files (x86)\the knight\rage 2\rage2.exe" = protocol=6 | dir=in | app=g:\program files (x86)\the knight\rage 2\rage2.exe | 

"TCP Query User{A9E1CF12-2656-4B8A-B67C-984D441B4176}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe" = protocol=6 | dir=in | app=c:\users\ilias\appdata\local\gamecenter\gamecenter.exe | 

"TCP Query User{B5941CD9-D6B7-49F0-AF8F-CC74E054C46D}G:\program files\videolan\vlc\vlc.exe" = protocol=6 | dir=in | app=g:\program files\videolan\vlc\vlc.exe | 

"TCP Query User{BD216EDE-6A0C-4278-99C8-AAF8D861B52B}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe" = protocol=6 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe | 

"TCP Query User{C7E780B7-2916-459A-80A3-24A4EF243FB2}G:\program files\rockstar games\red dead redemption 2\rdr2.exe" = protocol=6 | dir=in | app=g:\program files\rockstar games\red dead redemption 2\rdr2.exe | 

"TCP Query User{CFB02508-51DD-4E0E-8A27-92D516143BF9}H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=6 | dir=in | app=h:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe | 

"TCP Query User{D52E00C1-A812-4F43-AC0B-BAB8C9BA21CD}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe" = protocol=6 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe | 

"TCP Query User{D8A56D9E-7FEF-45BA-B9F9-E1C610676C98}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe" = protocol=6 | dir=in | app=c:\users\ilias\appdata\local\gamecenter\gamecenter.exe | 

"TCP Query User{E4199A6A-DA0D-4C3C-A320-770B4F3EC150}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe" = protocol=6 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe | 

"TCP Query User{F0C934A0-B3F4-4D9A-8F2B-6B0502AF23A6}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe" = protocol=6 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe | 

"TCP Query User{F608652E-A605-410E-BAD2-43FA5CFA1C82}G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe" = protocol=6 | dir=in | app=g:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe | 

"UDP Query User{0A45418E-3CD3-4C46-8909-FBB139EF5281}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe" = protocol=17 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe | 

"UDP Query User{151EC62C-A23F-4B62-A3EB-CB86CEF63310}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe" = protocol=17 | dir=in | app=c:\users\ilias\appdata\local\gamecenter\gamecenter.exe | 

"UDP Query User{2D0544CE-01CA-4DF4-8D2F-07BD0A60961E}G:\program files (x86)\the knight\rage 2\rage2.exe" = protocol=17 | dir=in | app=g:\program files (x86)\the knight\rage 2\rage2.exe | 

"UDP Query User{2D31F209-16D4-4065-8A6B-F9060FA67C89}G:\program files\rockstar games\red dead redemption 2\rdr2.exe" = protocol=17 | dir=in | app=g:\program files\rockstar games\red dead redemption 2\rdr2.exe | 

"UDP Query User{3B8323FA-69CD-4EE7-8D1C-962EDD08C87E}G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe" = protocol=17 | dir=in | app=g:\program files (x86)\the sims 4\game\bin\ts4_x64.exe | 

"UDP Query User{3FCD227C-6102-4281-AF42-8CAE65421532}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe" = protocol=17 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe | 

"UDP Query User{45A82BE5-0D8A-4F77-A1A7-FD259C7392B2}G:\program files\videolan\vlc\vlc.exe" = protocol=17 | dir=in | app=g:\program files\videolan\vlc\vlc.exe | 

"UDP Query User{4AF40930-0DE9-441E-93A1-DDF69FDD44D7}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe" = protocol=17 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe | 

"UDP Query User{6666A672-8D84-4AC9-B4E1-FB0ABA950E00}G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe" = protocol=17 | dir=in | app=g:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe | 

"UDP Query User{6D966027-33B3-464D-9857-3D40F1877D2C}H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe" = protocol=17 | dir=in | app=h:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe | 

"UDP Query User{88B41455-C7B7-4CE1-BC17-D9D8CEF77A8F}H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe" = protocol=17 | dir=in | app=h:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe | 

"UDP Query User{94E85D38-CF7A-431C-A846-71475413A649}C:\program files (x86)\tautulli\tautulli.exe" = protocol=17 | dir=in | app=c:\program files (x86)\tautulli\tautulli.exe | 

"UDP Query User{A08F555D-810C-4C70-BE2C-8909612E1DBB}H:\programme\rockstar games\grand theft auto v\gta5.exe" = protocol=17 | dir=in | app=h:\programme\rockstar games\grand theft auto v\gta5.exe | 

"UDP Query User{A49FFB1E-EE35-4232-A6DB-8145D49ABAB3}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe" = protocol=17 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe | 

"UDP Query User{BE74110F-2F42-4B2A-9457-39F695E4E51D}G:\program files\epic games\totalwarsagatroy\troy.exe" = protocol=17 | dir=in | app=g:\program files\epic games\totalwarsagatroy\troy.exe | 

"UDP Query User{C88135CA-F1E0-4687-802E-BB3F76F8D211}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe" = protocol=17 | dir=in | app=g:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe | 

"UDP Query User{DC2926A0-F60F-4B0E-851F-5F2782E74326}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe" = protocol=17 | dir=in | app=c:\users\ilias\appdata\local\gamecenter\gamecenter.exe | 

"UDP Query User{E50D1F95-3391-4B8D-AF5A-CE0EF2D76C22}G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe" = protocol=17 | dir=in | app=g:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe | 

"UDP Query User{E56AFF91-3832-4A59-97F1-585242CE710C}H:\programme\uplay\games\far cry 3\bin\farcry3.exe" = protocol=17 | dir=in | app=h:\programme\uplay\games\far cry 3\bin\farcry3.exe | 

"UDP Query User{F33D234D-9ABB-434E-ACAB-B36E95094B76}G:\program files (x86)\samsung dex\samsungdex.exe" = protocol=17 | dir=in | app=g:\program files (x86)\samsung dex\samsungdex.exe | 

"UDP Query User{FEE53804-1CD7-4EA2-AFC6-846750D3EC76}G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe" = protocol=17 | dir=in | app=g:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe | 

 
 ========== HKEY_LOCAL_MACHINE Uninstall List ==========

 

64bit: [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{0886A906-0625-4A43-930D-AA92F6665AF4}" = Patriot Viper M2 SSD RGB

"{18E72D39-392C-419D-9B86-C4C633B4CED9}" = Windows Subsystem for Linux Update

"{1A0D1F90-8D1F-4922-8546-D1F84501C46A}" = VNC Viewer 6.20.529

"{1B4EDD59-90CE-4BDE-8520-630981088165}" = Microsoft Visual C++ 2019 X64 Additional Runtime - 14.27.29112

"{1D8E6291-B0D5-35EC-8441-6616F567A0F7}" = Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219

"{26A24AE4-039D-4CA4-87B4-2F64180261F0}" = Java 8 Update 261 (64-bit)

"{2B5DAA91-E0C9-4307-90B7-5688E910C894}" = VMware Workstation

"{2D790347-9563-49DA-AAAD-A5D26B69C993}" = LibreOffice 7.0.2.2

"{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}" = ENE_EHD_M2_HAL

"{37B8F9C7-03FB-3253-8781-2517C99D7C00}" = Microsoft Visual C++ 2012 x64 Additional Runtime - 11.0.61030

"{37BB1766-C587-49AE-B2DB-618FBDEAB88C}" = Microsoft Visual C++ 2019 X64 Minimum Runtime - 14.27.29112

"{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148

"{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161

"{6A9B7FBF-A3F4-4F69-8398-83E03F5EE94A}" = LibreOffice 6.4 Help Pack (German)

"{8220EEFE-38CD-377E-8595-13398D740ACE}" = Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17

"{8DA1B230-D82E-4A24-9237-363E2E1E2695}" = ENE RGB HAL

"{90160000-007E-0000-1000-0000000FF1CE}" = Office 16 Click-to-Run Licensing Component

"{90160000-008C-0000-1000-0000000FF1CE}" = Office 16 Click-to-Run Extensibility Component

"{90160000-008C-0407-1000-0000000FF1CE}" = Office 16 Click-to-Run Localization Component

"{929FBD26-9020-399B-9A7A-751D61F0B942}" = Microsoft Visual C++ 2013 x64 Additional Runtime - 12.0.21005

"{967E7483-38D0-40E3-A44C-BAC69E0DC853}" = Intel(R) Network Connections 23.5.0.0

"{A749D8E6-B613-3BE3-8F5F-045C84EBA29B}" = Microsoft Visual C++ 2013 x64 Minimum Runtime - 12.0.21005

"{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}" = Microsoft Visual C++ 2005 Redistributable (x64)

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver" = NVIDIA Grafiktreiber 460.79

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience" = NVIDIA GeForce Experience 3.20.5.70

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Optimus" = NVIDIA Optimus Update 38.0.5.0

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX" = NVIDIA PhysX-Systemsoftware 9.19.0218

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Update" = NVIDIA Update 38.0.5.0

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk" = NVIDIA FrameView SDK 1.1.4923.29214634

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_GFExperience.NvStreamSrv" = NVIDIA SHIELD Streaming

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver" = NVIDIA HD-Audiotreiber 1.3.38.40

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_installer" = NVIDIA Install Application

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvAbHub" = NVIDIA ABHub

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvBackend" = NVIDIA Backend

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer" = NVIDIA Container

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.ContainerTelemetryApiHelper" = NVIDIA TelemetryApi helper for NvContainer

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.LocalSystem" = NVIDIA LocalSystem Container

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.MessageBus" = NVIDIA Message Bus for NvContainer

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor" = NVAPI Monitor plugin for NvContainer

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.ServiceUser" = NVIDIA NetworkService Container

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.Session" = NVIDIA Session Container

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.User" = NVIDIA User Container

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver" = NvModuleTracker

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvNodejs" = NVIDIA NodeJS

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvPlugin.Watchdog" = NVIDIA Watchdog Plugin for NvContainer

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvTelemetry" = NVIDIA Telemetry Client

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvVHCI" = NVIDIA Virtual Host Controller

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_OSC" = Nvidia Share

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShadowPlay" = NVIDIA ShadowPlay 3.20.5.70

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_ShieldWirelessController" = NVIDIA SHIELD Wireless Controller Driver

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Update.Core" = NVIDIA Update Core

"{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_VirtualAudio.Driver" = NVIDIA Virtual Audio 4.13.0.0

"{BC5E0A82-C638-44CB-8129-20C8ED70DE7A}" = ENE_DRAM_RGB_AURA42

"{CF2BEA3C-26EA-32F8-AA9B-331F7E34BA97}" = Microsoft Visual C++ 2012 x64 Minimum Runtime - 11.0.61030

"{CF703694-01C6-4062-B797-84DB215662BC}" = ENE_EHD_SSS_HAL

"{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}" = Samsung USB Driver for Mobile Phones

"{D9C50188-12D5-4D3E-8F00-682346C2AA5F}" = Microsoft Xbox 360 Accessories 1.2

"{EACF146B-01D2-4185-B773-9604A0E5902A}" = HP Officejet J4500 Series 14.0 Rel. 6

"{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}" = Epic Games Launcher Prerequisites (x64)

"{FEE3E3CD-2A6C-464E-8424-DE7512D4A5D0}" = KeePassXC

"{FF21C3E6-97FD-474F-9518-8DCBE94C2854}" = 64 Bit HP CIO Components Installer

"AMD Catalyst Install Manager" = AMD Software

"AVG TuneUp" = AVG TuneUp

"CCleaner" = CCleaner

"Cheat Engine_is1" = Cheat Engine 7.2

"CPUID ROG CPU-Z_is1" = CPUID ROG CPU-Z 1.92

"Gigabyte Speed" = Gigabyte Speed v10.21

"HP Imaging Device Functions" = HP Imaging Device Functions 14.0

"HP Solution Center & Imaging Support Tools" = HP Solution Center 14.0

"HPExtendedCapabilities" = HP Customer Participation Program 14.0

"HPOCR" = OCR Software by I.R.I.S. 14.0

"Mozilla Firefox 83.0 (x64 de)" = Mozilla Firefox 83.0 (x64 de)

"MozillaMaintenanceService" = Mozilla Maintenance Service

"O365ProPlusRetail - de-de" = Microsoft 365 Apps for Enterprise - de-de

"OpenVPN" = OpenVPN 2.4.9-I601-Win10 

"PROSetDX" = Intel(R) Network Connections 23.5.0.0

"Shop for HP Supplies" = Shop for HP Supplies

"Steam App 252950" = Rocket League

"Steam App 284160" = BeamNG.drive

"Steam App 289070" = Sid Meier's Civilization VI

"Steam App 381210" = Dead by Daylight

"TAP-Windows" = TAP-Windows 9.24.2

"VLC media player" = VLC media player

"WinRAR archiver" = WinRAR 5.91 (64-Bit)

 

[HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{050d4fc8-5d48-4b8f-8972-47c82c46020f}" = Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501

"{06A1D88C-E102-4527-AF70-29FFD7AF215A}" = Scan

"{08D2E121-7F6A-43EB-97FD-629B44903403}" = Microsoft_VC90_CRT_x86

"{0EA45DD4-A825-420C-AFED-C659EFE3B84F}" = Balanced

"{0F5C1C82-9A7A-4FB4-8681-D4E7E9BBFD9C}" = Python 3.8.3 Test Suite (32-bit)

"{0f770e99-3916-4b0c-8f9b-83822826bcbf}" = Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29112

"{13A4EE12-23EA-3371-91EE-EFB36DDFFF3E}" = Microsoft Visual C++ 2013 x86 Minimum Runtime - 12.0.21005

"{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}" = DeviceDiscovery

"{14A8B424-0141-4E46-A1E2-548DF8349BB7}" = Python 3.8.3 Utility Scripts (32-bit)

"{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}" = HPProductAssistant

"{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}" = GigabyteFirmwareUpdateUtility

"{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148

"{26B2CC8C-1492-437D-B27A-655AFB3647DE}" = Python 3.8.3 Standard Library (32-bit)

"{292F0F52-B62D-4E71-921B-89A682402201}" = Toolbox

"{2E72FA1F-BADB-4337-B8AE-F7C17EC57D1D}" = Microsoft Visual C++ 2019 X86 Minimum Runtime - 14.24.28127

"{3250CB33-9B5C-42CF-A215-23E95EA5F75E}" = J4500

"{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

"{3994d355-238a-4612-af93-26d13deddef1}" = Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030

"{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1" = Win32DiskImager version 1.0.0

"{406A47EE-C4AE-4944-BADE-1B543A443873}" = Python Launcher

"{40c376bf-c3a0-439b-8353-f69a3bac10d6}" = Plex Media Server

"{43a03b9c-4770-409c-a999-587b60700b63}" = Launcher Prerequisites (x64)

"{4A03706F-666A-4037-7777-5F2748764D10}" = Java Auto Updater

"{4ADFAA3D-1670-4161-A64A-83535B6D78C6}" = Python 3.8.3 pip Bootstrap (32-bit)

"{526B21BC-E7BE-4CC9-AF49-20F7F11B9113}" = ProtonVPNTap

"{56AC5D63-87FC-4BA0-B4F2-6013D58F3302}" = Python 3.8.3 Tcl/Tk Support (32-bit)

"{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}" = Status

"{5E2BEDEC-EEE1-49B7-A9D0-6971AFA9B5F2}" = Samsung DeX

"{5EFC6C07-6B87-43FC-9524-F9E967241741}" = Grand Theft Auto V

"{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}" = Google Update Helper

"{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}" = Game Boost

"{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}" = Microsoft Visual C++ 2005 Redistributable

"{7258BA11-600C-430E-A759-27E2C691A335}_is1" = GOG GALAXY

"{731F6BAA-A986-45A4-8936-7C3AAAAA760B}" = Teams Machine-Wide Installer

"{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}" = Adobe Photoshop CS6

"{7598e74a-915c-4911-918c-ca4b2c296122}" = AMD_Chipset_Drivers

"{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}" = EasyTune

"{7FDA2F0E-B522-48AD-8792-4BAAA4B5DA1C}" = 4500_Help

"{8064EF1E-3243-4307-A04F-BB64FF06A8DF}" = ProductContext

"{80EC3CEE-2940-42A1-A776-B5D810D39F1E}" = AMD PCI Driver

"{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1" = PDF24 Creator 9.2.2

"{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}" = OEM Application Profile

"{8DE31A48-E744-4526-AE09-B9A4002CE770}" = Plex Media Server

"{8EE94FD8-5F52-4463-A340-185D16328158}" = WebReg

"{912D30CF-F39E-4B31-AD9A-123C6B794EE2}" = HP Update

"{9237DDE8-1DF1-4FA7-AAF9-95458ABC26E0}" = BPDSoftware

"{9294F169-72EE-4D74-AE92-CA25F64B4FF8}" = Fax

"{92D58719-BBC1-4CC3-A08B-56C9E884CC2C}" = Microsoft_VC80_CRT_x86

"{94530A73-5D44-431B-B1F0-FEBA96C90390}" = Stopping Plex

"{964575C3-5820-4642-A89A-754255B5EFE1}" = EasyTuneEngineService

"{988F14B8-79A8-475D-BAC7-83F96AD3D821}" = AMD PSP Driver

"{9A25302D-30C0-39D9-BD6F-21E6EC160475}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17

"{9B362566-EC1B-4700-BB9C-EC661BDE2175}" = DocProc

"{9BE518E6-ECC6-35A9-88E4-87755C07200F}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161

"{9eeadf99-713b-4ab5-9ccd-bf9c1c4d9daf}" = ENE_EHD_SSS_HAL

"{A171D320-C42C-4F3B-A2D8-C6A09F6788CC}" = AMD Ryzen Balanced Driver

"{A5A6A747-393C-4B28-AB7B-2DE2BA7F7D73}" = Epic Games Launcher

"{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}" = SIV

"{AAE0E27D-C88A-49BA-8715-77ADCD4286A3}" = AMD SBxxx SMBus Driver Alpha

"{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}" = HPSSupply

"{AC76BA86-0804-1033-1959-001824406920}" = Adobe Refresh Manager

"{AC76BA86-7AD7-1031-7B44-AC0F074E4100}" = Adobe Acrobat Reader DC - Deutsch

"{B175520C-86A2-35A7-8619-86DC379688B9}" = Microsoft Visual C++ 2012 x86 Additional Runtime - 11.0.61030

"{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}" = Promontory_GPIO Driver

"{BAF129CE-5C13-4383-9807-A44055644E08}" = Python 3.8.3 Documentation (32-bit)

"{BB3447F6-9553-4AA9-960E-0DB5310C5779}" = GPBaseService2

"{bb670f8d-3d66-4f36-8e60-02b71bb0a4e9}" = ENE RGB HAL

"{bc458b5f-1945-4287-8fae-353650fd3109}" = Samsung DeX

"{BC5DD87B-0143-4D14-AAE6-97109614DC6B}" = SolutionCenter

"{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}" = Destinations

"{BD95A8CD-1D9F-35AD-981A-3E7925026EBB}" = Microsoft Visual C++ 2012 x86 Minimum Runtime - 11.0.61030

"{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}" = PDF Settings CS6

"{c6c5a357-c7ca-4a5f-9789-3bb1af579253}" = Launcher Prerequisites (x64)

"{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

"{CD31E63D-47FD-491C-8117-CF201D0AFAB5}" = TrayApp

"{D0512FFD-6194-4D2E-967E-25B82A3322FF}" = ENE IO Driver

"{D1EFF389-2F77-4A46-8AFD-4F37BC6F1F99}" = Python 3.8.3 Executables (32-bit)

"{D360FA88-17C8-4F14-B67F-13AAF9607B12}" = MarketResearch

"{D3A7FDC5-BA4E-44FC-8822-800226B81C71}" = Python 3.8.3 Core Interpreter (32-bit)

"{d491dd9d-2eda-4d75-b504-1a201436e7fd}" = Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030

"{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}" = APP Center

"{d8516682-de60-4332-ad6f-49373754b677}" = ENE_EHD_M2_HAL

"{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}" = GService

"{E105BB34-826A-4DF7-8F35-07DDEE1E47A0}" = BPDSoftware_Ini

"{e31cb1a4-76b5-46a5-a084-3fa419e82201}" = Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127

"{E9DD399F-21A3-479E-A7DF-D6CF4B2ADBF3}" = AMD GPIO2 Driver

"{EA35D9DB-86A9-4705-9D15-7FE33E261450}" = Python 3.8.3 Development Libraries (32-bit)

"{EAC73207-74BD-4B13-AACF-8C0E751FA4E8}" = Microsoft Visual C++ 2019 X86 Additional Runtime - 14.24.28127

"{ebb7013c-0b03-497c-bed1-1e48e806a593}" = Patriot Viper M2 SSD RGB

"{EC7FE03D-239A-4E36-9907-0E327922D2A2}" = bpd_scan

"{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}" = Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219

"{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}" = Realtek Audio Driver

"{F2074AC4-1897-470C-A160-EF5C74F76763}_is1" = Password Tech Version 3.1.0

"{f3d7fb09-b93f-4c01-a765-0b0adc5bc746}" = ENE_DRAM_RGB_AURA42

"{f65db027-aff3-4070-886a-0d87064aabb1}" = Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501

"{F6678473-0198-46D0-A88F-2A247E6FA03C}" = Minecraft Launcher

"{F8CFEB22-A2E7-3971-9EDA-4B11EDEFC185}" = Microsoft Visual C++ 2013 x86 Additional Runtime - 12.0.21005

"{FA0FF682-CC70-4C57-93CD-E276F3E7537E}" = BufferChm

"{FD5DFEEE-C563-4D04-B3F4-E5C7D5F5B1E9}" = ProtonVPN

"{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}" = Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022

"{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}" = RGB Fusion

"Advanced SystemCare_is1" = Advanced SystemCare

"AMD_Chipset_IODrivers" = AMD Chipset Software

"AORUS ENGINE_is1" = AORUS ENGINE

"Audacity_is1" = Audacity 2.4.2

"AVG Antivirus" = AVG AntiVirus FREE

"Detroit: Become Human_is1" = Detroit: Become Human

"Google Chrome" = Google Chrome

"ImgBurn" = ImgBurn

"InstallShield_{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}" = GigabyteFirmwareUpdateUtility

"InstallShield_{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}" = Game Boost

"InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}" = EasyTune

"InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1}" = EasyTuneEngineService

"InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}" = SIV

"InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}" = APP Center

"Internet Download Manager" = Internet Download Manager

"IObitUninstall" = IObit Uninstaller 9

"LEGO DC Super-Villains_is1" = LEGO DC Super-Villains

"Mafia: Definitive Edition_is1" = Mafia: Definitive Edition

"Marvel's Avengers_is1" = Marvel's Avengers

"Microsoft Edge" = Microsoft Edge

"Microsoft Edge Update" = Microsoft Edge Update

"Notepad++" = Notepad++ (32-bit x86)

"NpcapInst" = Npcap

"ProtonVPN 1.17.6" = ProtonVPN

"PunkBusterSvc" = PunkBuster Services

"Razer Cortex_is1" = Razer Cortex

"Red Dead Redemption 2" = Red Dead Redemption 2

"Rockstar Games Launcher" = Rockstar Games Launcher

"Rockstar Games Social Club" = Rockstar Games Social Club

"Steam" = Steam

"TeamViewer" = TeamViewer

"The Sims 4_is1" = The Sims 4

"Uplay" = Ubisoft Connect

"Uplay Install 1651" = Assassin's Creed Chronicles China

"Uplay Install 1875" = Assassin's Creed Syndicate

"Uplay Install 2010" = Far Cry Primal

"Uplay Install 2688" = WATCH_DOGS2

"Uplay Install 273" = Assassin's Creed IV Black Flag

"Uplay Install 274" = Watch_Dogs

"Uplay Install 3353" = Watch Dogs Legion

"Uplay Install 3539" = Assassin's Creed Origins

"Uplay Install 46" = Far Cry 3

"Uplay Install 5059" = Assassin's Creed Odyssey

"Uplay Install 54" = Assassin's Creed III

"Uplay Install 568" = Tom Clancy's The Division

"Uplay Install 625" = Assassin's Creed Liberation HD

"Uplay Install 895" = Assassin's Creed Rogue

"Wireshark" = Wireshark 3.4.0 64-bit

 
 ========== HKEY_CURRENT_USER Uninstall List ==========

 

[HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall]

"{6f6f2a2d-6475-4359-bc65-b2cf464bd085}" = Python 3.8.3 (32-bit)

"{F2074AC4-1897-470C-A160-EF5C74F76763}_is1" = Password Tech Version 3.2.0 (Aktueller Benutzer, 64 Bit)

"2a4703e6-0b98-56dd-80dd-5248bb27b192" = HuBBa 1.3.90

"Allods Online DE (DE)" = Allods Online DE

"DG0-DC Universe Online Live" = DC Universe Online Live

"Discord" = Discord

"GameCenter" = MY.GAMES GameCenter

"OneDriveSetup.exe" = Microsoft OneDrive

"Raspberry Pi Imager" = Raspberry Pi Imager

"Tautulli" = Tautulli

"Teams" = Microsoft Teams

"WeMod" = WeMod

"WhatsApp" = WhatsApp

"ZoomUMX" = Zoom

 
 ========== Last 20 Event Log Errors ==========

 

[ Application Events ]

Error - 16.08.2020 16:39:47 | Computer Name = X | Source = VSS | ID = 13

Description = 

 

Error - 16.08.2020 16:39:47 | Computer Name = X | Source = VSS | ID = 8193

Description = 

 

Error - 16.08.2020 23:56:10 | Computer Name = X | Source = Microsoft-Windows-User Profiles Service | ID = 1552

Description = Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre).

 Prozessname: C:\Program Files\AVG\Antivirus\AVGSvc.exe, PID: 4296, ProfSvc PID:

 1512.

 

Error - 16.08.2020 23:56:10 | Computer Name = X | Source = Microsoft-Windows-User Profiles Service | ID = 1552

Description = Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre).

 Prozessname: C:\Program Files\AVG\Antivirus\AVGSvc.exe, PID: 4296, ProfSvc PID:

 1512.

 

Error - 16.08.2020 23:56:10 | Computer Name = X | Source = Microsoft-Windows-User Profiles Service | ID = 1552

Description = Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre).

 Prozessname: C:\Program Files\AVG\Antivirus\AVGSvc.exe, PID: 4296, ProfSvc PID:

 1512.

 

Error - 16.08.2020 23:56:32 | Computer Name = X | Source = SideBySide | ID = 16842785

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.91_none_d6c3f1519bae0514\MFC80U.DLL".

Die

 abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""

 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm

 "sxstrace.exe".

 

Error - 17.08.2020 00:57:54 | Computer Name = X | Source = .NET Runtime | ID = 1026

Description = 

 

Error - 17.08.2020 10:32:11 | Computer Name = X | Source = Microsoft-Windows-User Profiles Service | ID = 1552

Description = Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre).

 Prozessname: C:\Program Files\AVG\Antivirus\AVGSvc.exe, PID: 3512, ProfSvc PID:

 1688.

 

Error - 17.08.2020 10:32:36 | Computer Name = X | Source = SideBySide | ID = 16842785

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.91_none_d6c3f1519bae0514\MFC80U.DLL".

Die

 abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""

 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm

 "sxstrace.exe".

 

Error - 17.08.2020 14:15:46 | Computer Name = X | Source = SideBySide | ID = 16842785

Description = Fehler beim Generieren des Aktivierungskontextes für "C:\WINDOWS\WinSxS\x86_microsoft.vc80.mfc_1fc8b3b9a1e18e3b_8.0.50727.91_none_d6c3f1519bae0514\MFC80U.DLL".

Die

 abhängige Assemblierung "Microsoft.VC80.MFCLOC,processorArchitecture="x86",publicKeyToken="1fc8b3b9a1e18e3b",type="win32",version="8.0.50608.0""

 konnte nicht gefunden werden.  Verwenden Sie für eine detaillierte Diagnose das Programm

 "sxstrace.exe".

 

[ Parameters Events ]

OTL encountered an error while reading this event log. It may be corrupt.

[ State Events ]

OTL encountered an error while reading this event log. It may be corrupt.

Error - 10.10.2020 15:02:35 | Computer Name = X | Source = DCOM | ID = 10005

Description = 

 

Error - 10.10.2020 15:41:03 | Computer Name = X | Source = DCOM | ID = 10010

Description = 

 

Error - 11.10.2020 05:14:04 | Computer Name = X | Source = NetBT | ID = 4321

Description = Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit

 IP-Adresse 192.168.178.23  registriert werden. Der Computer mit IP-Adresse 192.168.178.20

 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.

 

Error - 11.10.2020 08:38:45 | Computer Name = X | Source = NetBT | ID = 4321

Description = Der Name "WORKGROUP      :1d" konnte nicht auf der Schnittstelle mit

 IP-Adresse 192.168.178.23  registriert werden. Der Computer mit IP-Adresse 192.168.178.20

 hat nicht  zugelassen, dass dieser Computer diesen Namen verwendet.

 

Error - 11.10.2020 15:12:38 | Computer Name = X | Source = NetBT | ID = 4307

Description = Initialisierung fehlgeschlagen, da die Transportschicht das Öffnen

 der Anfangsadressen verweigerte.

 

Error - 11.10.2020 15:31:37 | Computer Name = X | Source = DCOM | ID = 10005

Description = 

 

Error - 12.10.2020 12:06:34 | Computer Name = X | Source = DCOM | ID = 10005

Description = 

 

Error - 13.10.2020 08:00:50 | Computer Name = X | Source = DCOM | ID = 10005

Description = 

 

Error - 13.10.2020 19:54:39 | Computer Name = X | Source = DCOM | ID = 10005

Description = 

 

Error - 14.10.2020 13:15:21 | Computer Name = X | Source = Service Control Manager | ID = 7043

Description = Der Dienst AVG Antivirus konnte nach dem Empfang eines Preshutdown-Steuerelements

 nicht richtig heruntergefahren werden.

 

 

< End of report >

--- --- ---

[/CODE]

ilias2

11.12.2020 18:13

OTL.txt

OTL Logfile:

Code:

OTL logfile created on: 11.12.2020 17:26:04 - Run 1

OTL by OldTimer - Version 3.2.69.0     Folder = H:\Downloads\Programs

64bit- Professional  (Version = 6.2.9200) - Type = NTWorkstation

Internet Explorer (Version = 9.11.19041.0)

Locale: 00000407 | Country:  | Language: DEU | Date Format: dd.MM.yyyy

 

15,95 Gb Total Physical Memory | 8,96 Gb Available Physical Memory | 56,16% Memory free

25,95 Gb Paging File | 16,04 Gb Available in Paging File | 61,83% Paging File free

Paging file location(s): ?:\pagefile.sys [binary data]

 

%SystemDrive% = C: | %SystemRoot% = C:\WINDOWS | %ProgramFiles% = C:\Program Files (x86)

Drive C: | 231,56 Gb Total Space | 124,38 Gb Free Space | 53,71% Space Free | Partition Type: NTFS

Drive G: | 1863,01 Gb Total Space | 66,30 Gb Free Space | 3,56% Space Free | Partition Type: NTFS

Drive H: | 931,51 Gb Total Space | 14,59 Gb Free Space | 1,57% Space Free | Partition Type: NTFS

 

Computer Name: X | User Name: Y | Logged in as Administrator.

Boot Mode: Normal | Scan Mode: Current user | Include 64bit Scans

Company Name Whitelist: Off | Skip Microsoft Files: Off | No Company Name Whitelist: On | File Age = 1 Day

 
 ========== Processes (SafeList) ==========

 

PRC -  File not found

PRC - H:\Downloads\Programs\OTL.exe (OldTimer Tools)

PRC - H:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG.com)

PRC - H:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe (GOG.com)

PRC - H:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe (GOG.com)

PRC - C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe (GOG.com)

PRC - H:\Program Files (x86)\GOG Galaxy\python\python.exe (Python Software Foundation)

PRC - H:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe ()

PRC - H:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe (Plex, Inc.)

PRC - H:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Python Software Foundation)

PRC - H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc.)

PRC - G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH)

PRC - G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH)

PRC - G:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer Germany GmbH)

PRC - G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe (GIGABYTE Technology Co.,Ltd.)

PRC - C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc.)

PRC - C:\Program Files (x86)\IObit\Advanced SystemCare\Pub\PubPlatform.exe (IObit)

PRC - C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe (Node.js)

PRC - C:\Windows\SysWOW64\fontdrvhost.exe (Microsoft Corporation)

PRC - G:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe (Razer Inc.)

PRC - G:\Program Files (x86)\PDF24\pdf24.exe (geek software GmbH)

PRC - C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe (Razer Inc.)

PRC - C:\Windows\SysWOW64\PnkBstrA.exe ()

PRC - C:\Program Files (x86)\GIGABYTE\RGBFusion\RGBFusion.exe ()

PRC - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe (GIGA-BYTE TECHNOLOGY CO., LTD.)

PRC - C:\Programme\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (DEVGURU Co., LTD.)

PRC - C:\Programme\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe (DEVGURU Co., LTD.)

PRC - C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe (Razer Inc)

PRC - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe (IObit)

PRC - C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe (IObit)

PRC - C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe (IObit)

PRC - G:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe (IObit)

PRC - C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe ()

PRC - H:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)

PRC - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe (GIGA-BYTE TECHNOLOGY CO., LTD.)

PRC - C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngine.exe (GIGA-BYTE TECHNOLOGY CO., LTD.)

PRC - C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)

PRC - C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)

PRC - G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc.)

PRC - C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe (Microsoft)

PRC - C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe ()

 

 
 ========== Modules (No Company Name) ==========

 

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\yarl\_quoting.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\multidict\_multidict.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_http_parser.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_frozenlist.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_helpers.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_http_writer.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_websocket.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\etree.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\google\protobuf\pyext\_message.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\html\clean.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\_elementpath.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\yarl\_quoting_c.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\multidict\_multidict.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\google\protobuf\internal\_api_implementation.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\websockets\speedups.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_http_parser.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_frozenlist.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_helpers.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_http_writer.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_websocket.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\_yaml.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_http_parser.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\yarl\_quoting_c.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\psutil\_psutil_windows.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_frozenlist.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_helpers.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_http_writer.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_websocket.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\multidict\_multidict.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\yarl\_quoting_c.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\multidict\_multidict.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_http_parser.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_frozenlist.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_helpers.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_http_writer.cp37-win32.pyd ()

MOD - C:\Users\Y\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_websocket.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\libcef.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\libGLESv2.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\swiftshader\libGLESv2.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\sqlite.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\pcre.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_http_parser.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_http_parser.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\expat.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\xdelta3.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\swiftshader\libEGL.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\libEGL.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\zlib.dll ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\_quoting.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\yarl\_quoting.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_frozenlist.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\psutil\_psutil_windows.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_helpers.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_frozenlist.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_http_writer.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_helpers.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_websocket.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\_multidict.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\multidict\_multidict.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_http_writer.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket.cp37-win32.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\etree.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\Exts\lxml\objectify.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ssl.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\Exts\simplejson\_speedups.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\unicodedata.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\_ctypes.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\_socket.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\_hashlib.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\pyexpat.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\bz2.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\DLLs\select.pyd ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\sqlite3_plex.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\tag.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\TeVii.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\opencv_imgproc310.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\opencv_core310.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\pion.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\soci_core.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\soci_sqlite3.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\miniupnpc.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\libxml2.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\libxslt.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\hdhomerun.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\libexslt.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_thread.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\fmt.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_timer.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_regex.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_locale.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_iostreams.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_filesystem.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_date_time.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\boost_chrono.dll ()

MOD - H:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\mpeg4_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\mp3_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\libx264_encoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\hevc_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\h264_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\flv_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\dca_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\aac_decoder.dll ()

MOD - \\?\C:\Users\Y\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\ac3_encoder.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Serv759bfb78#\23e9ba92b02663afc33f1a7e4f49545b\System.ServiceProcess.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\UIAutomationProvider\1fe1464b2cb159c9fbe49db59596be77\UIAutomationProvider.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Web\21c3dfc5500d46cdaca3c8fd49129f5e\System.Web.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Windows.Forms\c53a93e360cdec5a6b2422401e7a8c32\System.Windows.Forms.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\UIAutomationTypes\12a0b8a4c9e37033f96c2892b3b19eac\UIAutomationTypes.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml.Linq\c0e32ab5785c5df139bab7755ccf80a0\System.Xml.Linq.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xaml\09314f84b0a7bec5fc70f721fa5b05b9\System.Xaml.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Configuration\1cc2deb740912c523a0155a5b0c5c7f6\System.Configuration.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatio5ae0f00f#\d15ddac8ada82d7c24bc4c5adc861335\PresentationFramework.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\Presentatioaec034ca#\a81d76da54869a9af6dbcaac7e168224\PresentationFramework.Aero2.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\PresentationCore\71b50bc60de4b8c052e9a5b1a7b79af2\PresentationCore.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\WindowsBase\00359ca24f0d0c417315ea525a3f0bd8\WindowsBase.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Core\2f1746ab1f00e550090146d74890c4ce\System.Core.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Drawing\292491532cd5f50586e378cc6f62f970\System.Drawing.ni.dll ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSDKAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvShadowPlayAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvBackendAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameStreamAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvUtil.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node ()

MOD - \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvABHubAPI.node ()

MOD - C:\Program Files (x86)\NVIDIA Corporation\NvContainer\libprotobuf.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Management\0a22e17ee5c73cdab64fc5e3f8ed7e56\System.Management.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System.Xml\48fbd098873eae92cf4bda5b7cf7a6ba\System.Xml.ni.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\System\a94f452eecde0f07e988ad14497426a5\System.ni.dll ()

MOD - C:\Windows\SysWOW64\umpdc.dll ()

MOD - C:\Windows\SysWOW64\WindowManagementAPI.dll ()

MOD - C:\Windows\SysWOW64\TextShaping.dll ()

MOD - C:\WINDOWS\assembly\NativeImages_v4.0.30319_32\mscorlib\1c960778124fb2c275142764edfbee19\mscorlib.ni.dll ()

MOD - C:\Program Files (x86)\GIGABYTE\RGBFusion\RGBFusion.exe ()

MOD - C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe ()

MOD - C:\Program Files (x86)\GIGABYTE\AppCenter\BDR_info.dll ()

MOD - G:\Program Files (x86)\IObit\IObit Uninstaller\madexcept_.bpl ()

MOD - G:\Program Files (x86)\IObit\IObit Uninstaller\madbasic_.bpl ()

MOD - G:\Program Files (x86)\IObit\IObit Uninstaller\maddisAsm_.bpl ()

MOD - C:\Programme\Patriot\Aac_Patriot Viper M2 SSD RGB\AacHal_x86.dll ()

MOD - C:\Programme\Patriot\Aac_Patriot Viper M2 SSD RGB\pcie_dll_x86.dll ()

MOD - C:\Program Files (x86)\GIGABYTE\RGBFusion\Phison.dll ()

MOD - G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\GvFireware.dll ()

MOD - G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\BSL430.dll ()

 

 
 ========== Services (SafeList) ==========

 

SRV:64bit: - (nvagent) -- C:\Windows\SysNative\NvAgent.dll (Microsoft Corporation)

SRV:64bit: - (NVDisplay.ContainerLocalSystem) -- C:\Windows\SysNative\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation)

SRV:64bit: - (AVG Tools) -- C:\Program Files\AVG\Antivirus\avgToolsSvc.exe (AVG Technologies CZ, s.r.o.)

SRV:64bit: - (AVG Antivirus) -- C:\Program Files\AVG\Antivirus\AVGSvc.exe (AVG Technologies CZ, s.r.o.)

SRV:64bit: - (AvgWscReporter) -- C:\Program Files\AVG\Antivirus\wsc_proxy.exe (AVG Technologies CZ, s.r.o.)

SRV:64bit: - (WalletService) -- C:\Windows\SysNative\WalletService.dll (Microsoft Corporation)

SRV:64bit: - (hns) -- C:\Windows\SysNative\HostNetSvc.dll (Microsoft Corporation)

SRV:64bit: - (netprofm) -- C:\Windows\SysNative\netprofmsvc.dll (Microsoft Corporation)

SRV:64bit: - (DiagTrack) -- C:\Windows\SysNative\diagtrack.dll (Microsoft Corporation)

SRV:64bit: - (AppXSvc) -- C:\Windows\SysNative\AppXDeploymentServer.dll (Microsoft Corporation)

SRV:64bit: - (DoSvc) -- C:\Windows\SysNative\dosvc.dll (Microsoft Corporation)

SRV:64bit: - (UsoSvc) -- C:\Windows\SysNative\usosvc.dll (Microsoft Corporation)

SRV:64bit: - (WaaSMedicSvc) -- C:\Windows\SysNative\WaaSMedicSvc.dll (Microsoft Corporation)

SRV:64bit: - (PrintNotify) -- C:\Windows\SysNative\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)

SRV:64bit: - (WebManagement) -- C:\Windows\SysNative\WebManagement.exe (Microsoft Corporation)

SRV:64bit: - (vmcompute) -- C:\Windows\SysNative\vmcompute.exe (Microsoft Corporation)

SRV:64bit: - (LxssManagerUser) -- C:\Windows\SysNative\lxss\LxssManager.dll (Microsoft Corporation)

SRV:64bit: - (LxssManager) -- C:\Windows\SysNative\lxss\LxssManager.dll (Microsoft Corporation)

SRV:64bit: - (ScDeviceEnum) -- C:\Windows\SysNative\ScDeviceEnum.dll (Microsoft Corporation)

SRV:64bit: - (Netlogon) -- C:\Windows\SysNative\netlogon.dll (Microsoft Corporation)

SRV:64bit: - (CoreMessagingRegistrar) -- C:\Windows\SysNative\CoreMessaging.dll (Microsoft Corporation)

SRV:64bit: - (SecurityHealthService) -- C:\Windows\SysNative\SecurityHealthService.exe (Microsoft Corporation)

SRV:64bit: - (DevicesFlowUserSvc) -- C:\Windows\SysNative\DevicesFlowBroker.dll (Microsoft Corporation)

SRV:64bit: - (shpamsvc) -- C:\Windows\SysNative\Windows.SharedPC.AccountManager.dll (Microsoft Corporation)

SRV:64bit: - (AarSvc) -- C:\Windows\SysNative\AarSvc.dll (Microsoft Corporation)

SRV:64bit: - (AppReadiness) -- C:\Windows\SysNative\AppReadiness.dll (Microsoft Corporation)

SRV:64bit: - (AppMgmt) -- C:\Windows\SysNative\appmgmts.dll (Microsoft Corporation)

SRV:64bit: - (spectrum) -- C:\Windows\SysNative\Spectrum.exe (Microsoft Corporation)

SRV:64bit: - (DispBrokerDesktopSvc) -- C:\Windows\SysNative\DispBroker.Desktop.dll (Microsoft Corporation)

SRV:64bit: - (SgrmBroker) -- C:\Windows\SysNative\SgrmBroker.exe (Microsoft Corporation)

SRV:64bit: - (UserManager) -- C:\Windows\SysNative\usermgr.dll (Microsoft Corporation)

SRV:64bit: - (NetSetupSvc) -- C:\Windows\SysNative\NetSetupSvc.dll (Microsoft Corporation)

SRV:64bit: - (WpnUserService_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (UserDataSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (UnistoreSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (UdkUserSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (PrintWorkflowUserSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (PimIndexMaintenanceSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (OneSyncSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (MessagingService_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (LxssManagerUser_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (DevicesFlowUserSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (DevicePickerUserSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (DeviceAssociationBrokerSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (ConsentUxUserSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (CDPUserSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (cbdhsvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (CaptureService_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (BluetoothUserService_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (BcastDVRUserService_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (AarSvc_e5bc6) -- C:\Windows\SysNative\svchost.exe (Microsoft Corporation)

SRV:64bit: - (EntAppSvc) -- C:\Windows\SysNative\EnterpriseAppMgmtSvc.dll (Microsoft Corporation)

SRV:64bit: - (StateRepository) -- C:\Windows\SysNative\Windows.StateRepository.dll (Microsoft Corporation)

SRV:64bit: - (NcbService) -- C:\Windows\SysNative\ncbservice.dll (Microsoft Corporation)

SRV:64bit: - (BrokerInfrastructure) -- C:\Windows\SysNative\psmsrv.dll (Microsoft Corporation)

SRV:64bit: - (TimeBrokerSvc) -- C:\Windows\SysNative\TimeBrokerServer.dll (Microsoft Corporation)

SRV:64bit: - (InstallService) -- C:\Windows\SysNative\InstallService.dll (Microsoft Corporation)

SRV:64bit: - (PushToInstall) -- C:\Windows\SysNative\PushToInstall.dll (Microsoft Corporation)

SRV:64bit: - (LicenseManager) -- C:\Windows\SysNative\LicenseManagerSvc.dll (Microsoft Corporation)

SRV:64bit: - (VaultSvc) -- C:\Windows\SysNative\vaultsvc.dll (Microsoft Corporation)

SRV:64bit: - (ClipSVC) -- C:\Windows\SysNative\ClipSVC.dll (Microsoft Corporation)

SRV:64bit: - (TokenBroker) -- C:\Windows\SysNative\TokenBroker.dll (Microsoft Corporation)

SRV:64bit: - (DsmSvc) -- C:\Windows\SysNative\DeviceSetupManager.dll (Microsoft Corporation)

SRV:64bit: - (CredentialEnrollmentManagerUserSvc_e5bc6) -- C:\Windows\SysNative\CredentialEnrollmentManager.exe (Microsoft Corporation)

SRV:64bit: - (CredentialEnrollmentManagerUserSvc) -- C:\Windows\SysNative\CredentialEnrollmentManager.exe (Microsoft Corporation)

SRV:64bit: - (wisvc) -- C:\Windows\SysNative\FlightSettings.dll (Microsoft Corporation)

SRV:64bit: - (PhoneSvc) -- C:\Windows\SysNative\PhoneService.dll (Microsoft Corporation)

SRV:64bit: - (AudioEndpointBuilder) -- C:\Windows\SysNative\AudioEndpointBuilder.dll (Microsoft Corporation)

SRV:64bit: - (DevicePickerUserSvc) -- C:\Windows\SysNative\Windows.Devices.Picker.dll (Microsoft Corporation)

SRV:64bit: - (SshdBroker) -- C:\Windows\SysNative\SshdBroker.dll (Microsoft Corporation)

SRV:64bit: - (AssignedAccessManagerSvc) -- C:\Windows\SysNative\assignedaccessmanagersvc.dll (Microsoft Corporation)

SRV:64bit: - (UevAgentService) -- C:\Windows\SysNative\AgentService.exe (Microsoft Corporation)

SRV:64bit: - (XboxNetApiSvc) -- C:\Windows\SysNative\XboxNetApiSvc.dll (Microsoft Corporation)

SRV:64bit: - (DmEnrollmentSvc) -- C:\Windows\SysNative\Windows.Internal.Management.dll (Microsoft Corporation)

SRV:64bit: - (diagnosticshub.standardcollector.service) -- C:\Windows\SysNative\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe (Microsoft Corporation)

SRV:64bit: - (DeviceAssociationService) -- C:\Windows\SysNative\das.dll (Microsoft Corporation)

SRV:64bit: - (UdkUserSvc) -- C:\Windows\SysNative\windowsudk.shellcommon.dll (Microsoft Corporation)

SRV:64bit: - (CDPSvc) -- C:\Windows\SysNative\cdpsvc.dll (Microsoft Corporation)

SRV:64bit: - (CDPUserSvc) -- C:\Windows\SysNative\cdpusersvc.dll (Microsoft Corporation)

SRV:64bit: - (WpcMonSvc) -- C:\Windows\SysNative\WpcDesktopMonSvc.dll (Microsoft Corporation)

SRV:64bit: - (BTAGService) -- C:\Windows\SysNative\BTAGService.dll (Microsoft Corporation)

SRV:64bit: - (WManSvc) -- C:\Windows\SysNative\Windows.Management.Service.dll (Microsoft Corporation)

SRV:64bit: - (icssvc) -- C:\Windows\SysNative\tetheringservice.dll (Microsoft Corporation)

SRV:64bit: - (FrameServer) -- C:\Windows\SysNative\FrameServer.dll (Microsoft Corporation)

SRV:64bit: - (WiaRpc) -- C:\Windows\SysNative\wiarpc.dll (Microsoft Corporation)

SRV:64bit: - (RmSvc) -- C:\Windows\SysNative\RMapi.dll (Microsoft Corporation)

SRV:64bit: - (wlidsvc) -- C:\Windows\SysNative\wlidsvc.dll (Microsoft Corporation)

SRV:64bit: - (NgcSvc) -- C:\Windows\SysNative\ngcsvc.dll (Microsoft Corporation)

SRV:64bit: - (NgcCtnrSvc) -- C:\Windows\SysNative\NgcCtnrSvc.dll (Microsoft Corporation)

SRV:64bit: - (Wcmsvc) -- C:\Windows\SysNative\wcmsvc.dll (Microsoft Corporation)

SRV:64bit: - (wlpasvc) -- C:\Windows\SysNative\lpasvc.dll (Microsoft Corporation)

SRV:64bit: - (XblAuthManager) -- C:\Windows\SysNative\XblAuthManager.dll (Microsoft Corporation)

SRV:64bit: - (OneSyncSvc) -- C:\Windows\SysNative\APHostService.dll (Microsoft Corporation)

SRV:64bit: - (diagsvc) -- C:\Windows\SysNative\DiagSvc.dll (Microsoft Corporation)

SRV:64bit: - (cbdhsvc) -- C:\Windows\SysNative\CBDHSvc.dll (Microsoft Corporation)

SRV:64bit: - (PrintWorkflowUserSvc) -- C:\Windows\SysNative\PrintWorkflowService.dll (Microsoft Corporation)

SRV:64bit: - (CaptureService) -- C:\Windows\SysNative\CaptureService.dll (Microsoft Corporation)

SRV:64bit: - (KeyIso) -- C:\Windows\SysNative\keyiso.dll (Microsoft Corporation)

SRV:64bit: - (SEMgrSvc) -- C:\Windows\SysNative\SEMgrSvc.dll (Microsoft Corporation)

SRV:64bit: - (ss_conn_launcher_service) -- C:\Windows\SysNative\Samsung\EasySetup\ss_conn_launcher.exe (Samsung Electronics Co., Ltd.)

SRV:64bit: - (workfolderssvc) -- C:\Windows\SysNative\workfolderssvc.dll (Microsoft Corporation)

SRV:64bit: - (camsvc) -- C:\Windows\SysNative\CapabilityAccessManager.dll (Microsoft Corporation)

SRV:64bit: - (AppVClient) -- C:\Windows\SysNative\AppVClient.exe (Microsoft Corporation)

SRV:64bit: - (vmicvss) -- C:\Windows\SysNative\icsvcext.dll (Microsoft Corporation)

SRV:64bit: - (vmicrdv) -- C:\Windows\SysNative\icsvcext.dll (Microsoft Corporation)

SRV:64bit: - (ConsentUxUserSvc) -- C:\Windows\SysNative\ConsentUxClient.dll (Microsoft Corporation)

SRV:64bit: - (BcastDVRUserService) -- C:\Windows\SysNative\bcastdvruserservice.dll (Microsoft Corporation)

SRV:64bit: - (DisplayEnhancementService) -- C:\Windows\SysNative\Microsoft.Graphics.Display.DisplayEnhancementService.dll (Microsoft Corporation)

SRV:64bit: - (perceptionsimulation) -- C:\Windows\SysNative\PerceptionSimulation\PerceptionSimulationService.exe (Microsoft Corporation)

SRV:64bit: - (SensorService) -- C:\Windows\SysNative\SensorService.dll (Microsoft Corporation)

SRV:64bit: - (UserDataSvc) -- C:\Windows\SysNative\UserDataService.dll (Microsoft Corporation)

SRV:64bit: - (DeviceAssociationBrokerSvc) -- C:\Windows\SysNative\deviceaccess.dll (Microsoft Corporation)

SRV:64bit: - (DsSvc) -- C:\Windows\SysNative\dssvc.dll (Microsoft Corporation)

SRV:64bit: - (NaturalAuthentication) -- C:\Windows\SysNative\NaturalAuth.dll (Microsoft Corporation)

SRV:64bit: - (XblGameSave) -- C:\Windows\SysNative\XblGameSave.dll (Microsoft Corporation)

SRV:64bit: - (BluetoothUserService) -- C:\Windows\SysNative\Microsoft.Bluetooth.UserService.dll (Microsoft Corporation)

SRV:64bit: - (TroubleshootingSvc) -- C:\Windows\SysNative\MitigationClient.dll (Microsoft Corporation)

SRV:64bit: - (BthAvctpSvc) -- C:\Windows\SysNative\BthAvctpSvc.dll (Microsoft Corporation)

SRV:64bit: - (VacSvc) -- C:\Windows\SysNative\vac.dll (Microsoft Corporation)

SRV:64bit: - (RtkAudioUniversalService) -- C:\Windows\SysNative\RtkAudUService64.exe (Realtek Semiconductor)

SRV:64bit: - (MixedRealityOpenXRSvc) -- C:\Windows\SysNative\MixedRealityRuntime.dll (Microsoft Corporation)

SRV:64bit: - (RetailDemo) -- C:\Windows\SysNative\RDXService.dll (Microsoft Corporation)

SRV:64bit: - (NcdAutoSetup) -- C:\Windows\SysNative\NcdAutoSetup.dll (Microsoft Corporation)

SRV:64bit: - (SharedRealitySvc) -- C:\Windows\SysNative\SharedRealitySvc.dll (Microsoft Corporation)

SRV:64bit: - (vmicvmsession) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)

SRV:64bit: - (vmictimesync) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)

SRV:64bit: - (vmicshutdown) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)

SRV:64bit: - (vmickvpexchange) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)

SRV:64bit: - (vmicheartbeat) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)

SRV:64bit: - (vmicguestinterface) -- C:\Windows\SysNative\icsvc.dll (Microsoft Corporation)

SRV:64bit: - (fhsvc) -- C:\Windows\SysNative\fhsvc.dll (Microsoft Corporation)

SRV:64bit: - (svsvc) -- C:\Windows\SysNative\svsvc.dll (Microsoft Corporation)

SRV:64bit: - (TieringEngineService) -- C:\Windows\SysNative\TieringEngineService.exe (Microsoft Corporation)

SRV:64bit: - (WEPHOSTSVC) -- C:\Windows\SysNative\wephostsvc.dll (Microsoft Corporation)

SRV:64bit: - (smphost) -- C:\Windows\SysNative\smphost.dll (Microsoft Corporation)

SRV:64bit: - (DusmSvc) -- C:\Windows\SysNative\dusmsvc.dll (Microsoft Corporation)

SRV:64bit: - (HvHost) -- C:\Windows\SysNative\hvhostsvc.dll (Microsoft Corporation)

SRV:64bit: - (SmsRouter) -- C:\Windows\SysNative\SmsRouterSvc.dll (Microsoft Corporation)

SRV:64bit: - (autotimesvc) -- C:\Windows\SysNative\autotimesvc.dll (Microsoft Corporation)

SRV:64bit: - (SensorDataService) -- C:\Windows\SysNative\SensorDataService.exe (Microsoft Corporation)

SRV:64bit: - (lfsvc) -- C:\Windows\SysNative\lfsvc.dll (Microsoft Corporation)

SRV:64bit: - (NcaSvc) -- C:\Windows\SysNative\NcaSvc.dll (Microsoft Corporation)

SRV:64bit: - (EFS) -- C:\Windows\SysNative\efssvc.dll (Microsoft Corporation)

SRV:64bit: - (dmwappushservice) -- C:\Windows\SysNative\dmwappushsvc.dll (Microsoft Corporation)

SRV:64bit: - (WpnService) -- C:\Windows\SysNative\wpnservice.dll (Microsoft Corporation)

SRV:64bit: - (WpnUserService) -- C:\Windows\SysNative\WpnUserService.dll (Microsoft Corporation)

SRV:64bit: - (UnistoreSvc) -- C:\Windows\SysNative\Unistore.dll (Microsoft Corporation)

SRV:64bit: - (SystemEventsBroker) -- C:\Windows\SysNative\SystemEventsBrokerServer.dll (Microsoft Corporation)

SRV:64bit: - (PimIndexMaintenanceSvc) -- C:\Windows\SysNative\PimIndexMaintenance.dll (Microsoft Corporation)

SRV:64bit: - (DevQueryBroker) -- C:\Windows\SysNative\DevQueryBroker.dll (Microsoft Corporation)

SRV:64bit: - (GraphicsPerfSvc) -- C:\Windows\SysNative\GraphicsPerfSvc.dll (Microsoft Corporation)

SRV:64bit: - (MapsBroker) -- C:\Windows\SysNative\moshost.dll (Microsoft Corporation)

SRV:64bit: - (WarpJITSvc) -- C:\Windows\SysNative\Windows.WARP.JITService.dll (Microsoft Corporation)

SRV:64bit: - (tzautoupdate) -- C:\Windows\SysNative\tzautoupdate.dll (Microsoft Corporation)

SRV:64bit: - (AJRouter) -- C:\Windows\SysNative\AJRouter.dll (Microsoft Corporation)

SRV:64bit: - (embeddedmode) -- C:\Windows\SysNative\embeddedmodesvc.dll (Microsoft Corporation)

SRV:64bit: - (LSM) -- C:\Windows\SysNative\lsm.dll (Microsoft Corporation)

SRV:64bit: - (WFDSConMgrSvc) -- C:\Windows\SysNative\WFDSConMgrSvc.dll (Microsoft Corporation)

SRV:64bit: - (LxpSvc) -- C:\Windows\SysNative\LanguageOverlayServer.dll (Microsoft Corporation)

SRV:64bit: - (MessagingService) -- C:\Windows\SysNative\MessagingService.dll (Microsoft Corporation)

SRV:64bit: - (XboxGipSvc) -- C:\Windows\SysNative\xboxgipsvc.dll (Microsoft Corporation)

SRV:64bit: - (IpxlatCfgSvc) -- C:\Windows\SysNative\ipxlatcfg.dll (Microsoft Corporation)

SRV:64bit: - (debugregsvc) -- C:\Windows\SysNative\debugregsvc.dll (Microsoft Corporation)

SRV:64bit: - (DeveloperToolsService) -- C:\Windows\SysNative\DeveloperToolsSvc.exe (Microsoft Corporation)

SRV:64bit: - (ssh-agent) -- C:\Windows\SysNative\OpenSSH\ssh-agent.exe ()

SRV:64bit: - (sshd) -- C:\Windows\SysNative\OpenSSH\sshd.exe ()

SRV:64bit: - (Intel(R) -- C:\Windows\SysNative\IPROSetMonitor.exe (Intel Corporation)

SRV - (GalaxyClientService) -- H:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe (GOG.com)

SRV - (Steam Client Service) -- C:\Program Files (x86)\Common Files\Steam\SteamService.exe (Valve Corporation)

SRV - (MicrosoftEdgeElevationService) -- C:\Program Files (x86)\Microsoft\Edge\Application\87.0.664.57\elevation_service.exe (Microsoft Corporation)

SRV - (NVDisplay.ContainerLocalSystem) -- C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\NVDisplay.Container.exe (NVIDIA Corporation)

SRV - (GalaxyCommunication) -- C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe (GOG.com)

SRV - (GoogleChromeElevationService) -- C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\elevation_service.exe (Google LLC)

SRV - (CleanupPSvc) -- C:\Programme\AVG\TuneUp\TuneupSvc.exe (AVG Technologies CZ, s.r.o.)

SRV - (PlexUpdateService) -- H:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe (Plex, Inc.)

SRV - (BEService) -- C:\Program Files (x86)\Common Files\BattlEye\BEService.exe ()

SRV - (Rockstar Service) -- H:\Programme\Rockstar Games\Launcher\RockstarService.exe (Rockstar Games)

SRV - (avgbIDSAgent) -- C:\Programme\AVG\Antivirus\aswidsagent.exe (AVG Technologies CZ, s.r.o.)

SRV - (MozillaMaintenance) -- C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe (Mozilla Foundation)

SRV - (TeamViewer) -- G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH)

SRV - (PrintNotify) -- C:\WINDOWS\system32\spool\drivers\x64\3\PrintConfig.dll (Microsoft Corporation)

SRV - (ProtonVPN Service) -- H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe ()

SRV - (ProtonVPN Update Service) -- H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe ()

SRV - (AdobeARMservice) -- C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe (Adobe Inc.)

SRV - (StateRepository) -- C:\Windows\SysWOW64\Windows.StateRepository.dll (Microsoft Corporation)

SRV - (AarSvc) -- C:\Windows\SysWOW64\AarSvc.dll (Microsoft Corporation)

SRV - (edgeupdatem) -- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Corporation)

SRV - (edgeupdate) -- C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe (Microsoft Corporation)

SRV - (FvSvc) -- C:\Programme\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe (NVIDIA)

SRV - (NvContainerLocalSystem) -- C:\Programme\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation)

SRV - (CoreMessagingRegistrar) -- C:\Windows\SysWOW64\CoreMessaging.dll (Microsoft Corporation)

SRV - (InstallService) -- C:\Windows\SysWOW64\InstallService.dll (Microsoft Corporation)

SRV - (TokenBroker) -- C:\Windows\SysWOW64\TokenBroker.dll (Microsoft Corporation)

SRV - (wisvc) -- C:\Windows\SysWOW64\FlightSettings.dll (Microsoft Corporation)

SRV - (RzKLService) -- G:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe (Razer Inc.)

SRV - (PDF24) -- G:\Program Files (x86)\PDF24\pdf24.exe (geek software GmbH)

SRV - (RzActionSvc) -- C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe (Razer Inc.)

SRV - (EasyAntiCheat) -- C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe (EasyAntiCheat Ltd)

SRV - (DmEnrollmentSvc) -- C:\Windows\SysWOW64\Windows.Internal.Management.dll (Microsoft Corporation)

SRV - (BTAGService) -- C:\Windows\SysWOW64\BTAGService.dll (Microsoft Corporation)

SRV - (PnkBstrA) -- C:\Windows\SysWOW64\PnkBstrA.exe ()

SRV - (DevicePickerUserSvc) -- C:\Windows\SysWOW64\Windows.Devices.Picker.dll (Microsoft Corporation)

SRV - (PrintWorkflowUserSvc) -- C:\Windows\SysWOW64\PrintWorkflowService.dll (Microsoft Corporation)

SRV - (EasyTuneEngineService) -- C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe (GIGA-BYTE TECHNOLOGY CO., LTD.)

SRV - (ss_conn_service) -- C:\Programme\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe (DEVGURU Co., LTD.)

SRV - (ss_conn_service2) -- C:\Programme\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe (DEVGURU Co., LTD.)

SRV - (Razer Game Manager Service) -- C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe (Razer Inc)

SRV - (AdvancedSystemCareService13) -- C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe (IObit)

SRV - (ucldr_battlegrounds_gl) -- C:\Programme\Common Files\Uncheater\ucldr_battlegrounds_gl.exe (Wellbia.com Co., Ltd.)

SRV - (WdNisSvc) -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.4-0\NisSrv.exe (Microsoft Corporation)

SRV - (WinDefend) -- C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.2005.4-0\MsMpEng.exe (Microsoft Corporation)

SRV - (IObitUnSvr) -- G:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe (IObit)

SRV - (DeviceAssociationBrokerSvc) -- C:\Windows\SysWOW64\deviceaccess.dll (Microsoft Corporation)

SRV - (OpenVPNServiceLegacy) -- C:\Programme\OpenVPN\bin\openvpnserv.exe (The OpenVPN Project)

SRV - (OpenVPNServiceInteractive) -- C:\Programme\OpenVPN\bin\openvpnserv.exe (The OpenVPN Project)

SRV - (HwmRecordService) -- C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe (GIGA-BYTE TECHNOLOGY CO., LTD.)

SRV - (MixedRealityOpenXRSvc) -- C:\Windows\SysWOW64\MixedRealityRuntime.dll (Microsoft Corporation)

SRV - (smphost) -- C:\Windows\SysWOW64\smphost.dll (Microsoft Corporation)

SRV - (tzautoupdate) -- C:\Windows\SysWOW64\tzautoupdate.dll (Microsoft Corporation)

SRV - (UnistoreSvc) -- C:\Windows\SysWOW64\Unistore.dll (Microsoft Corporation)

SRV - (OcButtonService) -- C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe (GIGA-BYTE TECHNOLOGY CO., LTD.)

SRV - (VMwareHostd) -- G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe ()

SRV - (VMnetDHCP) -- C:\Windows\SysWOW64\vmnetdhcp.exe (VMware, Inc.)

SRV - (VMware NAT Service) -- C:\Windows\SysWOW64\vmnat.exe (VMware, Inc.)

SRV - (VMAuthdService) -- G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc.)

SRV - (VMUSBArbService) -- C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe (VMware, Inc.)

SRV - (OpenVPNService) -- C:\Programme\OpenVPN\bin\openvpnserv2.exe ( )

SRV - (Gservice) -- C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe (Microsoft)

SRV - (cFosSpeedS) -- C:\Programme\cFosSpeed\spd.exe (cFos Software GmbH)

SRV - (gadjservice) -- C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe ()

SRV - (SwitchBoard) -- C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)

SRV - (ose64) -- c:\Programme\Common Files\microsoft shared\Source Engine\OSE.EXE (Microsoft Corporation)

 

 
 ========== Driver Services (SafeList) ==========

 

DRV:64bit: - (passthruparser) -- C:\Windows\SysNative\drivers\passthruparser.sys (Microsoft Corporation)

DRV:64bit: - (vpcivsp) -- C:\Windows\SysNative\drivers\vpcivsp.sys (Microsoft Corporation)

DRV:64bit: - (pvhdparser) -- C:\Windows\SysNative\drivers\pvhdparser.sys (Microsoft Corporation)

DRV:64bit: - (l2bridge) -- C:\Windows\SysNative\drivers\l2bridge.sys (Microsoft Corporation)

DRV:64bit: - (vhdparser) -- C:\Windows\SysNative\drivers\vhdparser.sys (Microsoft Corporation)

DRV:64bit: - (hvsocketcontrol) -- C:\Windows\SysNative\drivers\hvsocketcontrol.sys (Microsoft Corporation)

DRV:64bit: - (hnswfpdriver) -- C:\Windows\SysNative\drivers\hnswfpdriver.sys (Microsoft Corporation)

DRV:64bit: - (nvlddmkm) -- C:\Windows\SysNative\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\nvlddmkm.sys (NVIDIA Corporation)

DRV:64bit: - (NVHDA) -- C:\Windows\SysNative\drivers\nvhda64v.sys (NVIDIA Corporation)

DRV:64bit: - (avgVmm) -- C:\Windows\SysNative\drivers\avgVmm.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgNetHub) -- C:\Windows\SysNative\drivers\avgNetHub.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgSP) -- C:\Windows\SysNative\drivers\avgSP.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgbidsh) -- C:\Windows\SysNative\drivers\avgbidsh.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgStm) -- C:\Windows\SysNative\drivers\avgStm.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgMonFlt) -- C:\Windows\SysNative\drivers\avgMonFlt.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgRdr) -- C:\Windows\SysNative\drivers\avgRdr2.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgbuniv) -- C:\Windows\SysNative\drivers\avgbuniv.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgRvrt) -- C:\Windows\SysNative\drivers\avgRvrt.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgKbd) -- C:\Windows\SysNative\drivers\avgKbd.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgElam) -- C:\Windows\SysNative\drivers\avgElam.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgSnx) -- C:\Windows\SysNative\drivers\avgSnx.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgbidsdriver) -- C:\Windows\SysNative\drivers\avgbidsdriver.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgArPot) -- C:\Windows\SysNative\drivers\avgArPot.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (avgArDisk) -- C:\Windows\SysNative\drivers\avgArDisk.sys (AVG Technologies CZ, s.r.o.)

DRV:64bit: - (VMSVSP) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation)

DRV:64bit: - (VMSVSF) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation)

DRV:64bit: - (VMSP) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation)

DRV:64bit: - (vmsmp) -- C:\Windows\SysNative\drivers\vmswitch.sys (Microsoft Corporation)

DRV:64bit: - (VmsProxy) -- C:\Windows\SysNative\drivers\VmsProxy.sys (Microsoft Corporation)

DRV:64bit: - (VMSNPXYMP) -- C:\Windows\SysNative\drivers\VmsProxyHNic.sys (Microsoft Corporation)

DRV:64bit: - (VMSNPXY) -- C:\Windows\SysNative\drivers\VmsProxyHNic.sys (Microsoft Corporation)

DRV:64bit: - (PktMon) -- C:\Windows\SysNative\drivers\PktMon.sys (Microsoft Corporation)

DRV:64bit: - (CLFS) -- C:\Windows\SysNative\drivers\clfs.sys (Microsoft Corporation)

DRV:64bit: - (sdbus) -- C:\Windows\SysNative\drivers\sdbus.sys (Microsoft Corporation)

DRV:64bit: - (netvsc) -- C:\Windows\SysNative\drivers\netvsc.sys (Microsoft Corporation)

DRV:64bit: - (VfpExt) -- C:\Windows\SysNative\drivers\vfpext.sys (Microsoft Corporation)

DRV:64bit: - (hvservice) -- C:\Windows\SysNative\drivers\hvservice.sys (Microsoft Corporation)

DRV:64bit: - (storvsp) -- C:\Windows\SysNative\drivers\storvsp.sys (Microsoft Corporation)

DRV:64bit: - (xboxgip) -- C:\Windows\SysNative\drivers\xboxgip.sys (Microsoft Corporation)

DRV:64bit: - (xinputhid) -- C:\Windows\SysNative\drivers\xinputhid.sys (Microsoft Corporation)

DRV:64bit: - (NdisImPlatform) -- C:\Windows\SysNative\drivers\NdisImPlatform.sys (Microsoft Corporation)

DRV:64bit: - (NetAdapterCx) -- C:\Windows\SysNative\drivers\NetAdapterCx.sys (Microsoft Corporation)

DRV:64bit: - (applockerfltr) -- C:\Windows\SysNative\drivers\applockerfltr.sys (Microsoft Corporation)

DRV:64bit: - (IndirectKmd) -- C:\Windows\SysNative\drivers\IndirectKmd.sys (Microsoft Corporation)

DRV:64bit: - (WFPLWFS) -- C:\Windows\SysNative\drivers\wfplwfs.sys (Microsoft Corporation)

DRV:64bit: - (MMCSS) -- C:\Windows\SysNative\drivers\mmcss.sys (Microsoft Corporation)

DRV:64bit: - (vmbusr) -- C:\Windows\SysNative\drivers\vmbusr.sys (Microsoft Corporation)

DRV:64bit: - (intelpep) -- C:\Windows\SysNative\drivers\intelpep.sys (Microsoft Corporation)

DRV:64bit: - (stornvme) -- C:\Windows\SysNative\drivers\stornvme.sys (Microsoft Corporation)

DRV:64bit: - (Telemetry) -- C:\Windows\SysNative\drivers\IntelTA.sys (Microsoft Corporation)

DRV:64bit: - (npcap_wifi) -- C:\Windows\SysNative\drivers\npcap.sys (Insecure.Com LLC.)

DRV:64bit: - (npcap) -- C:\Windows\SysNative\drivers\npcap.sys (Insecure.Com LLC.)

DRV:64bit: - (afunix) -- C:\Windows\SysNative\drivers\afunix.sys (Microsoft Corporation)

DRV:64bit: - (MsQuic) -- C:\Windows\SysNative\drivers\msquic.sys (Microsoft Corporation)

DRV:64bit: - (CldFlt) -- C:\Windows\SysNative\drivers\cldflt.sys (Microsoft Corporation)

DRV:64bit: - (UcmUcsiCx0101) -- C:\Windows\SysNative\drivers\UcmUcsiCx.sys (Microsoft Corporation)

DRV:64bit: - (GPIOClx0101) -- C:\Windows\SysNative\drivers\msgpioclx.sys (Microsoft Corporation)

DRV:64bit: - (wdiwifi) -- C:\Windows\SysNative\drivers\WdiWiFi.sys (Microsoft Corporation)

DRV:64bit: - (pdc) -- C:\Windows\SysNative\drivers\pdc.sys (Microsoft Corporation)

DRV:64bit: - (WinNat) -- C:\Windows\SysNative\drivers\winnat.sys (Microsoft Corporation)

DRV:64bit: - (USBXHCI) -- C:\Windows\SysNative\drivers\USBXHCI.SYS (Microsoft Corporation)

DRV:64bit: - (BthA2dp) -- C:\Windows\SysNative\drivers\BthA2dp.sys (Microsoft Corporation)

DRV:64bit: - (TPM) -- C:\Windows\SysNative\drivers\tpm.sys (Microsoft Corporation)

DRV:64bit: - (storahci) -- C:\Windows\SysNative\drivers\storahci.sys (Microsoft Corporation)

DRV:64bit: - (BthLEEnum) -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.Legacy.LEEnumerator.sys (Microsoft Corporation)

DRV:64bit: - (storufs) -- C:\Windows\SysNative\drivers\storufs.sys (Microsoft Corporation)

DRV:64bit: - (BthMini) -- C:\Windows\SysNative\drivers\BthMini.SYS (Microsoft Corporation)

DRV:64bit: - (usbrndis6) -- C:\Windows\SysNative\drivers\usb80236.sys (Microsoft Corporation)

DRV:64bit: - (MbbCx) -- C:\Windows\SysNative\drivers\MbbCx.sys (Microsoft Corporation)

DRV:64bit: - (MsSecFlt) -- C:\Windows\SysNative\drivers\mssecflt.sys (Microsoft Corporation)

DRV:64bit: - (spaceport) -- C:\Windows\SysNative\drivers\spaceport.sys (Microsoft Corporation)

DRV:64bit: - (Vid) -- C:\Windows\SysNative\drivers\Vid.sys (Microsoft Corporation)

DRV:64bit: - (ssudmdm) -- C:\Windows\SysNative\drivers\ssudmdm.sys (Samsung Electronics Co., Ltd.)

DRV:64bit: - (dg_ssudbus) -- C:\Windows\SysNative\drivers\ssudbus.sys (Samsung Electronics Co., Ltd.)

DRV:64bit: - (ss_conn_usb_driver2) -- C:\Windows\SysNative\drivers\ss_conn_usb_driver2.sys (Samsung Electronics Co., Ltd.)

DRV:64bit: - (e1rexpress) -- C:\Windows\SysNative\drivers\e1r68x64.sys (Intel Corporation)

DRV:64bit: - (bindflt) -- C:\Windows\SysNative\drivers\bindflt.sys (Microsoft Corporation)

DRV:64bit: - (P9Rdr) -- C:\Windows\SysNative\drivers\p9rdr.sys (Microsoft Corporation)

DRV:64bit: - (lxss) -- C:\Windows\SysNative\drivers\lxss.sys (Microsoft Corporation)

DRV:64bit: - (inpoutx64) -- C:\Windows\SysNative\drivers\inpoutx64.sys (Highresolution Enterprises [www.highrez.co.uk])

DRV:64bit: - (WdFilter) -- C:\Windows\SysNative\drivers\wd\WdFilter.sys (Microsoft Corporation)

DRV:64bit: - (WdNisDrv) -- C:\Windows\SysNative\drivers\wd\WdNisDrv.sys (Microsoft Corporation)

DRV:64bit: - (WdBoot) -- C:\Windows\SysNative\drivers\wd\WdBoot.sys (Microsoft Corporation)

DRV:64bit: - (EneTechIo) -- C:\Windows\SysNative\drivers\ene.sys ()

DRV:64bit: - (RdpVideoMiniport) -- C:\Windows\SysNative\drivers\rdpvideominiport.sys (Microsoft Corporation)

DRV:64bit: - (tsusbhub) -- C:\Windows\SysNative\drivers\tsusbhub.sys (Microsoft Corporation)

DRV:64bit: - (USBHUB3) -- C:\Windows\SysNative\drivers\USBHUB3.SYS (Microsoft Corporation)

DRV:64bit: - (BasicRender) -- C:\Windows\SysNative\DriverStore\FileRepository\basicrender.inf_amd64_49a8589f00d970d9\BasicRender.sys (Microsoft Corporation)

DRV:64bit: - (AMDPCIDev) -- C:\Windows\SysNative\drivers\AMDPCIDev.sys (Advanced Micro Devices)

DRV:64bit: - (tapprotonvpn) -- C:\Windows\SysNative\drivers\tapprotonvpn.sys (The OpenVPN Project)

DRV:64bit: - (amdpsp) -- C:\Windows\SysNative\drivers\amdpsp.sys (Advanced Micro Devices, Inc. )

DRV:64bit: - (amdgpio2) -- C:\Windows\SysNative\drivers\amdgpio2.sys (Advanced Micro Devices, Inc)

DRV:64bit: - (nvvhci) -- C:\Windows\SysNative\drivers\nvvhci.sys (NVIDIA Corporation)

DRV:64bit: - (amdgpio3) -- C:\Windows\SysNative\drivers\amdgpio3.sys (Advanced Micro Devices, Inc)

DRV:64bit: - (nvvad_WaveExtensible) -- C:\Windows\SysNative\drivers\nvvad64v.sys (NVIDIA Corporation)

DRV:64bit: - (NvModuleTracker) -- C:\Windows\SysNative\drivers\NvModuleTracker.sys (NVIDIA Corporation)

DRV:64bit: - (smbdirect) -- C:\Windows\SysNative\drivers\smbdirect.sys (Microsoft Corporation)

DRV:64bit: - (WpdUpFltr) -- C:\Windows\SysNative\drivers\WpdUpFltr.sys (Microsoft Corporation)

DRV:64bit: - (UevAgentDriver) -- C:\Windows\SysNative\drivers\UevAgentDriver.sys (Microsoft Corporation)

DRV:64bit: - (SpatialGraphFilter) -- C:\Windows\SysNative\drivers\SpatialGraphFilter.sys (Microsoft Corporation)

DRV:64bit: - (AppvVemgr) -- C:\Windows\SysNative\drivers\AppvVemgr.sys (Microsoft Corporation)

DRV:64bit: - (AppvVfs) -- C:\Windows\SysNative\drivers\AppvVfs.sys (Microsoft Corporation)

DRV:64bit: - (AppvStrm) -- C:\Windows\SysNative\drivers\AppVStrm.sys (Microsoft Corporation)

DRV:64bit: - (NDKPing) -- C:\Windows\SysNative\drivers\NDKPing.sys (Microsoft Corporation)

DRV:64bit: - (EhStorClass) -- C:\Windows\SysNative\drivers\EhStorClass.sys (Microsoft Corporation)

DRV:64bit: - (spaceparser) -- C:\Windows\SysNative\drivers\spaceparser.sys (Microsoft Corporation)

DRV:64bit: - (Ndu) -- C:\Windows\SysNative\drivers\Ndu.sys (Microsoft Corporation)

DRV:64bit: - (SgrmAgent) -- C:\Windows\SysNative\drivers\SgrmAgent.sys (Microsoft Corporation)

DRV:64bit: - (MsLldp) -- C:\Windows\SysNative\drivers\mslldp.sys (Microsoft Corporation)

DRV:64bit: - (NdisVirtualBus) -- C:\Windows\SysNative\drivers\NdisVirtualBus.sys (Microsoft Corporation)

DRV:64bit: - (ahcache) -- C:\Windows\SysNative\drivers\ahcache.sys (Microsoft Corporation)

DRV:64bit: - (VerifierExt) -- C:\Windows\SysNative\drivers\VerifierExt.sys (Microsoft Corporation)

DRV:64bit: - (Fs_Rec) -- C:\WINDOWS\SysNative\drivers\fs_rec.sys (Microsoft Corporation)

DRV:64bit: - (ReFS) -- C:\WINDOWS\SysNative\drivers\refs.sys (Microsoft Corporation)

DRV:64bit: - (ReFSv1) -- C:\WINDOWS\SysNative\drivers\refsv1.sys (Microsoft Corporation)

DRV:64bit: - (Wof) -- C:\WINDOWS\SysNative\drivers\wof.sys (Microsoft Corporation)

DRV:64bit: - (dam) -- C:\Windows\SysNative\drivers\dam.sys (Microsoft Corporation)

DRV:64bit: - (bam) -- C:\Windows\SysNative\drivers\bam.sys (Microsoft Corporation)

DRV:64bit: - (WdmCompanionFilter) -- C:\Windows\SysNative\drivers\WdmCompanionFilter.sys (Microsoft Corporation)

DRV:64bit: - (Ufx01000) -- C:\Windows\SysNative\drivers\ufx01000.sys (Microsoft Corporation)

DRV:64bit: - (UcmTcpciCx0101) -- C:\Windows\SysNative\drivers\UcmTcpciCx.sys (Microsoft Corporation)

DRV:64bit: - (UcmCx0101) -- C:\Windows\SysNative\drivers\UcmCx.sys (Microsoft Corporation)

DRV:64bit: - (storqosflt) -- C:\Windows\SysNative\drivers\storqosflt.sys (Microsoft Corporation)

DRV:64bit: - (SpbCx) -- C:\Windows\SysNative\drivers\SpbCx.sys (Microsoft Corporation)

DRV:64bit: - (WindowsTrustedRT) -- C:\Windows\SysNative\drivers\WindowsTrustedRT.sys (Microsoft Corporation)

DRV:64bit: - (UrsCx01000) -- C:\Windows\SysNative\drivers\urscx01000.sys (Microsoft Corporation)

DRV:64bit: - (cnghwassist) -- C:\Windows\SysNative\drivers\cnghwassist.sys (Microsoft Corporation)

DRV:64bit: - (SerCx2) -- C:\Windows\SysNative\drivers\SerCx2.sys (Microsoft Corporation)

DRV:64bit: - (SerCx) -- C:\Windows\SysNative\drivers\SerCx.sys (Microsoft Corporation)

DRV:64bit: - (HwNClx0101) -- C:\Windows\SysNative\drivers\mshwnclx.sys (Microsoft Corporation)

DRV:64bit: - (portcfg) -- C:\Windows\SysNative\drivers\portcfg.sys (Microsoft Corporation)

DRV:64bit: - (wcifs) -- C:\Windows\SysNative\drivers\wcifs.sys (Microsoft Corporation)

DRV:64bit: - (wcnfs) -- C:\Windows\SysNative\drivers\wcnfs.sys (Microsoft Corporation)

DRV:64bit: - (CimFS) -- C:\WINDOWS\SysNative\drivers\cimfs.sys ()

DRV:64bit: - (condrv) -- C:\Windows\SysNative\drivers\condrv.sys (Microsoft Corporation)

DRV:64bit: - (mshidumdf) -- C:\Windows\SysNative\drivers\mshidumdf.sys (Microsoft Corporation)

DRV:64bit: - (Acx01000) -- C:\Windows\SysNative\drivers\Acx01000.sys (Microsoft Corporation)

DRV:64bit: - (Ucx01000) -- C:\Windows\SysNative\drivers\Ucx01000.sys (Microsoft Corporation)

DRV:64bit: - (acpiex) -- C:\Windows\SysNative\drivers\acpiex.sys (Microsoft Corporation)

DRV:64bit: - (TsUsbFlt) -- C:\Windows\SysNative\drivers\TsUsbFlt.sys (Microsoft Corporation)

DRV:64bit: - (IPT) -- C:\Windows\SysNative\drivers\ipt.sys (Microsoft Corporation)

DRV:64bit: - (FileCrypt) -- C:\Windows\SysNative\drivers\filecrypt.sys (Microsoft Corporation)

DRV:64bit: - (UdeCx) -- C:\Windows\SysNative\drivers\Udecx.sys (Microsoft Corporation)

DRV:64bit: - (Ramdisk) -- C:\Windows\SysNative\drivers\ramdisk.sys (Microsoft Corporation)

DRV:64bit: - (iorate) -- C:\Windows\SysNative\drivers\iorate.sys (Microsoft Corporation)

DRV:64bit: - (GpuEnergyDrv) -- C:\Windows\SysNative\drivers\gpuenergydrv.sys (Microsoft Corporation)

DRV:64bit: - (vpci) -- C:\Windows\SysNative\drivers\vpci.sys (Microsoft Corporation)

DRV:64bit: - (Synth3dVsc) -- C:\Windows\SysNative\drivers\Synth3dVsc.sys (Microsoft Corporation)

DRV:64bit: - (dmvsc) -- C:\Windows\SysNative\drivers\dmvsc.sys (Microsoft Corporation)

DRV:64bit: - (HyperVideo) -- C:\Windows\SysNative\drivers\HyperVideo.sys (Microsoft Corporation)

DRV:64bit: - (hvcrash) -- C:\Windows\SysNative\drivers\hvcrash.sys (Microsoft Corporation)

DRV:64bit: - (hyperkbd) -- C:\Windows\SysNative\drivers\hyperkbd.sys (Microsoft Corporation)

DRV:64bit: - (gencounter) -- C:\Windows\SysNative\drivers\vmgencounter.sys (Microsoft Corporation)

DRV:64bit: - (vmgid) -- C:\Windows\SysNative\drivers\vmgid.sys (Microsoft Corporation)

DRV:64bit: - (VirtualRender) -- C:\Windows\SysNative\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys (Microsoft Corporation)

DRV:64bit: - (ufxsynopsys) -- C:\Windows\SysNative\drivers\ufxsynopsys.sys (Microsoft Corporation)

DRV:64bit: - (UfxChipidea) -- C:\Windows\SysNative\DriverStore\FileRepository\ufxchipidea.inf_amd64_1c78775fffab6a0a\UfxChipidea.sys (Microsoft Corporation)

DRV:64bit: - (sdstor) -- C:\Windows\SysNative\drivers\sdstor.sys (Microsoft Corporation)

DRV:64bit: - (hidspi) -- C:\Windows\SysNative\drivers\hidspi.sys (Microsoft Corporation)

DRV:64bit: - (hidi2c) -- C:\Windows\SysNative\drivers\hidi2c.sys (Microsoft Corporation)

DRV:64bit: - (msgpiowin32) -- C:\Windows\SysNative\drivers\msgpiowin32.sys (Microsoft Corporation)

DRV:64bit: - (hidinterrupt) -- C:\Windows\SysNative\drivers\hidinterrupt.sys (Microsoft Corporation)

DRV:64bit: - (buttonconverter) -- C:\Windows\SysNative\drivers\buttonconverter.sys (Microsoft Corporation)

DRV:64bit: - (terminpt) -- C:\Windows\SysNative\drivers\terminpt.sys (Microsoft Corporation)

DRV:64bit: - (UcmUcsiAcpiClient) -- C:\Windows\SysNative\drivers\UcmUcsiAcpiClient.sys (Microsoft Corporation)

DRV:64bit: - (kdnic) -- C:\Windows\SysNative\drivers\kdnic.sys (Microsoft Corporation)

DRV:64bit: - (UrsChipidea) -- C:\Windows\SysNative\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\urschipidea.sys (Microsoft Corporation)

DRV:64bit: - (UrsSynopsys) -- C:\Windows\SysNative\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\urssynopsys.sys (Microsoft Corporation)

DRV:64bit: - (npsvctrig) -- C:\Windows\SysNative\drivers\npsvctrig.sys (Microsoft Corporation)

DRV:64bit: - (genericusbfn) -- C:\Windows\SysNative\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys (Microsoft Corporation)

DRV:64bit: - (WindowsTrustedRTProxy) -- C:\Windows\SysNative\drivers\WindowsTrustedRTProxy.sys (Microsoft Corporation)

DRV:64bit: - (cht4vbd) -- C:\Windows\SysNative\drivers\cht4vx64.sys (Chelsio Communications)

DRV:64bit: - (mlx4_bus) -- C:\Windows\SysNative\drivers\mlx4_bus.sys (Mellanox)

DRV:64bit: - (iaStorAVC) -- C:\Windows\SysNative\drivers\iaStorAVC.sys (Intel Corporation)

DRV:64bit: - (ibbus) -- C:\Windows\SysNative\drivers\ibbus.sys (Mellanox)

DRV:64bit: - (mausbhost) -- C:\Windows\SysNative\drivers\mausbhost.sys (Microsoft Corporation)

DRV:64bit: - (cht4iscsi) -- C:\Windows\SysNative\drivers\cht4sx64.sys (Chelsio Communications)

DRV:64bit: - (VSTXRAID) -- C:\Windows\SysNative\drivers\VSTXRAID.SYS (VIA Corporation)

DRV:64bit: - (nvdimm) -- C:\Windows\SysNative\drivers\nvdimm.sys (Microsoft Corporation)

DRV:64bit: - (scmbus) -- C:\Windows\SysNative\drivers\scmbus.sys (Microsoft Corporation)

DRV:64bit: - (ndfltr) -- C:\Windows\SysNative\drivers\ndfltr.sys (Mellanox)

DRV:64bit: - (pmem) -- C:\Windows\SysNative\drivers\pmem.sys (Microsoft Corporation)

DRV:64bit: - (usbser) -- C:\Windows\SysNative\drivers\usbser.sys (Microsoft Corporation)

DRV:64bit: - (UASPStor) -- C:\Windows\SysNative\drivers\uaspstor.sys (Microsoft Corporation)

DRV:64bit: - (WinVerbs) -- C:\Windows\SysNative\drivers\winverbs.sys (Mellanox)

DRV:64bit: - (BasicDisplay) -- C:\Windows\SysNative\DriverStore\FileRepository\basicdisplay.inf_amd64_62ba5773ba05edee\BasicDisplay.sys (Microsoft Corporation)

DRV:64bit: - (mausbip) -- C:\Windows\SysNative\drivers\mausbip.sys (Microsoft Corporation)

DRV:64bit: - (vhf) -- C:\Windows\SysNative\drivers\vhf.sys (Microsoft Corporation)

DRV:64bit: - (bttflt) -- C:\Windows\SysNative\drivers\bttflt.sys (Microsoft Corporation)

DRV:64bit: - (WinMad) -- C:\Windows\SysNative\drivers\winmad.sys (Mellanox)

DRV:64bit: - (acpitime) -- C:\Windows\SysNative\drivers\acpitime.sys (Microsoft Corporation)

DRV:64bit: - (acpipagr) -- C:\Windows\SysNative\drivers\acpipagr.sys (Microsoft Corporation)

DRV:64bit: - (ADP80XX) -- C:\Windows\SysNative\drivers\adp80xx.sys (PMC-Sierra)

DRV:64bit: - (amdsbs) -- C:\Windows\SysNative\drivers\amdsbs.sys (AMD Technologies Inc.)

DRV:64bit: - (SmartSAMD) -- C:\Windows\SysNative\drivers\SmartSAMD.sys (Microsemi Corportation)

DRV:64bit: - (ItSas35i) -- C:\Windows\SysNative\drivers\ItSas35i.sys (Avago Technologies)

DRV:64bit: - (LSI_SAS3i) -- C:\Windows\SysNative\drivers\lsi_sas3i.sys (Avago Technologies)

DRV:64bit: - (LSI_SAS2i) -- C:\Windows\SysNative\drivers\lsi_sas2i.sys (LSI Corporation)

DRV:64bit: - (3ware) -- C:\Windows\SysNative\drivers\3ware.sys (LSI)

DRV:64bit: - (megasas35i) -- C:\Windows\SysNative\drivers\megasas35i.sys (Avago Technologies)

DRV:64bit: - (amdsata) -- C:\Windows\SysNative\drivers\amdsata.sys (Advanced Micro Devices)

DRV:64bit: - (LSI_SSS) -- C:\Windows\SysNative\drivers\lsi_sss.sys (LSI Corporation)

DRV:64bit: - (megasas2i) -- C:\Windows\SysNative\drivers\MegaSas2i.sys (Avago Technologies)

DRV:64bit: - (percsas3i) -- C:\Windows\SysNative\drivers\percsas3i.sys (Avago Technologies)

DRV:64bit: - (HpSAMD) -- C:\Windows\SysNative\drivers\HpSAMD.sys (Hewlett-Packard Company)

DRV:64bit: - (mvumis) -- C:\Windows\SysNative\drivers\mvumis.sys (Marvell Semiconductor, Inc.)

DRV:64bit: - (percsas2i) -- C:\Windows\SysNative\drivers\percsas2i.sys (Avago Technologies)

DRV:64bit: - (umbus) -- C:\Windows\SysNative\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.sys (Microsoft Corporation)

DRV:64bit: - (TsUsbGD) -- C:\Windows\SysNative\drivers\TsUsbGD.sys (Microsoft Corporation)

DRV:64bit: - (UEFI) -- C:\Windows\SysNative\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\uefi.sys (Microsoft Corporation)

DRV:64bit: - (stexstor) -- C:\Windows\SysNative\drivers\stexstor.sys (Promise Technology, Inc.)

DRV:64bit: - (amdxata) -- C:\Windows\SysNative\drivers\amdxata.sys (Advanced Micro Devices)

DRV:64bit: - (AcpiDev) -- C:\Windows\SysNative\drivers\AcpiDev.sys (Microsoft Corporation)

DRV:64bit: - (volume) -- C:\Windows\SysNative\drivers\volume.sys (Microsoft Corporation)

DRV:64bit: - (ebdrv) -- C:\Windows\SysNative\drivers\evbda.sys (QLogic Corporation)

DRV:64bit: - (b06bdrv) -- C:\Windows\SysNative\drivers\bxvbda.sys (QLogic Corporation)

DRV:64bit: - (usbaudio2) -- C:\Windows\SysNative\drivers\usbaudio2.sys (Microsoft Corporation)

DRV:64bit: - (EhStorTcgDrv) -- C:\Windows\SysNative\drivers\EhStorTcgDrv.sys (Microsoft Corporation)

DRV:64bit: - (rhproxy) -- C:\Windows\SysNative\drivers\rhproxy.sys (Microsoft Corporation)

DRV:64bit: - (iaLPSSi_I2C) -- C:\Windows\SysNative\drivers\iaLPSSi_I2C.sys (Intel Corporation)

DRV:64bit: - (CompositeBus) -- C:\Windows\SysNative\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\CompositeBus.sys (Microsoft Corporation)

DRV:64bit: - (iaLPSSi_GPIO) -- C:\Windows\SysNative\drivers\iaLPSSi_GPIO.sys (Intel Corporation)

DRV:64bit: - (SDFRd) -- C:\Windows\SysNative\drivers\SDFRd.sys (Microsoft Corporation)

DRV:64bit: - (swenum) -- C:\Windows\SysNative\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.sys (Microsoft Corporation)

DRV:64bit: - (PNPMEM) -- C:\Windows\SysNative\drivers\pnpmem.sys (Microsoft Corporation)

DRV:64bit: - (netr28ux) -- C:\Windows\SysNative\drivers\netr28ux.sys (MediaTek Inc.)

DRV:64bit: - (iaLPSS2i_I2C_GLK) -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_GLK.sys (Intel Corporation)

DRV:64bit: - (iaLPSS2i_I2C_CNL) -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_CNL.sys (Intel Corporation)

DRV:64bit: - (iaLPSS2i_I2C_BXT_P) -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C_BXT_P.sys (Intel Corporation)

DRV:64bit: - (iaLPSS2i_I2C) -- C:\Windows\SysNative\drivers\iaLPSS2i_I2C.sys (Intel Corporation)

DRV:64bit: - (BthHFEnum) -- C:\Windows\SysNative\drivers\BthHfEnum.sys (Microsoft Corporation)

DRV:64bit: - (iaLPSS2i_GPIO2_CNL) -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_CNL.sys (Intel Corporation)

DRV:64bit: - (xusb22) -- C:\Windows\SysNative\drivers\xusb22.sys (Microsoft Corporation)

DRV:64bit: - (iaLPSS2i_GPIO2_GLK) -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_GLK.sys (Intel Corporation)

DRV:64bit: - (iaLPSS2i_GPIO2_BXT_P) -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2_BXT_P.sys (Intel Corporation)

DRV:64bit: - (iai2c) -- C:\Windows\SysNative\drivers\iai2c.sys (Intel(R) Corporation)

DRV:64bit: - (iaLPSS2i_GPIO2) -- C:\Windows\SysNative\drivers\iaLPSS2i_GPIO2.sys (Intel Corporation)

DRV:64bit: - (CAD) -- C:\Windows\SysNative\drivers\CAD.sys (Microsoft Corporation)

DRV:64bit: - (BthHFAud) -- C:\Windows\SysNative\drivers\BthHfAud.sys (Microsoft Corporation)

DRV:64bit: - (Microsoft_Bluetooth_AvrcpTransport) -- C:\Windows\SysNative\drivers\Microsoft.Bluetooth.AvrcpTransport.sys (Microsoft Corporation)

DRV:64bit: - (amdi2c) -- C:\Windows\SysNative\drivers\amdi2c.sys (Advanced Micro Devices, Inc)

DRV:64bit: - (iagpio) -- C:\Windows\SysNative\drivers\iagpio.sys (Intel(R) Corporation)

DRV:64bit: - (intelpmax) -- C:\Windows\SysNative\drivers\intelpmax.sys (Microsoft Corporation)

DRV:64bit: - (bcmfn2) -- C:\Windows\SysNative\drivers\bcmfn2.sys (Windows (R) Win 7 DDK provider)

DRV:64bit: - (tap0901) -- C:\Windows\SysNative\drivers\tap0901.sys (The OpenVPN Project)

DRV:64bit: - (VMnetBridge) -- C:\Windows\SysNative\drivers\vmnetbridge.sys (VMware, Inc.)

DRV:64bit: - (VMnetAdapter) -- C:\Windows\SysNative\drivers\vmnetadapter.sys (VMware, Inc.)

DRV:64bit: - (VMnetuserif) -- C:\Windows\SysNative\drivers\vmnetuserif.sys (VMware, Inc.)

DRV:64bit: - (vmkbd3) -- C:\Windows\SysNative\drivers\vmkbd.sys (VMware, Inc.)

DRV:64bit: - (vmx86) -- C:\Windows\SysNative\drivers\vmx86.sys (VMware, Inc.)

DRV:64bit: - (vsock) -- C:\Windows\SysNative\drivers\vsock.sys (VMware, Inc.)

DRV:64bit: - (vmci) -- C:\Windows\SysNative\drivers\vmci.sys (VMware, Inc.)

DRV:64bit: - (IDMWFP) -- C:\Windows\SysNative\drivers\idmwfp.sys (Tonec Inc.)

DRV:64bit: - (hcmon) -- C:\Windows\SysNative\drivers\hcmon.sys (VMware, Inc.)

DRV:64bit: - (vmusb) -- C:\Windows\SysNative\drivers\vmusb.sys (VMware, Inc.)

DRV:64bit: - (NAL) -- C:\Windows\SysNative\drivers\iqvw64e.sys (Intel Corporation )

DRV:64bit: - (AmdTools64) -- C:\Windows\SysNative\drivers\AmdTools64.sys (Advanced Micro Devices)

DRV:64bit: - (SteamStreamingMicrophone) -- C:\Windows\SysNative\drivers\SteamStreamingMicrophone.sys ()

DRV:64bit: - (SteamStreamingSpeakers) -- C:\Windows\SysNative\drivers\SteamStreamingSpeakers.sys ()

DRV:64bit: - (cFosSpeed) -- C:\Windows\SysNative\drivers\cfosspeed6.sys (cFos Software GmbH)

DRV:64bit: - (xusb21) -- C:\Windows\SysNative\drivers\xusb21.sys (Microsoft Corporation)

DRV - (cpuz145) -- C:\Windows\Temp\cpuz145\cpuz145_x64.sys (CPUID)

DRV - (BEDaisy) -- C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys ()

DRV - (nvlddmkm) -- C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\nvlddmkm.sys (NVIDIA Corporation)

DRV - (afunix) -- C:\Windows\SysWOW64\drivers\afunix.sys (Microsoft Corporation)

DRV - (ProtonVPNSplitTunnel) -- H:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.SplitTunnelDriver.sys (Proton Technologies AG)

DRV - (xhunter1) -- C:\Windows\xhunter1.sys (Wellbia.com Co., Ltd.)

DRV - (gdrv) -- C:\Windows\gdrv.sys (GIGA-BYTE TECHNOLOGY CO., LTD.)

DRV - (gdrv2) -- C:\Windows\gdrv2.sys (GIGA-BYTE TECHNOLOGY CO., LTD.)

DRV - (IURegistryFilter) -- G:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IURegistryFilter.sys (IObit)

DRV - (IUFileFilter) -- G:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IUFileFilter.sys (IObit)

DRV - (IUProcessFilter) -- G:\Program Files (x86)\IObit\IObit Uninstaller\Drivers\win10_amd64\IUProcessFilter.sys (IObit)

DRV - (BasicRender) -- C:\WINDOWS\System32\DriverStore\FileRepository\basicrender.inf_amd64_49a8589f00d970d9\BasicRender.sys (Microsoft Corporation)

DRV - (VirtualRender) -- C:\WINDOWS\System32\DriverStore\FileRepository\vrd.inf_amd64_81fbd405ff2470fc\vrd.sys (Microsoft Corporation)

DRV - (UfxChipidea) -- C:\WINDOWS\System32\DriverStore\FileRepository\ufxchipidea.inf_amd64_1c78775fffab6a0a\UfxChipidea.sys (Microsoft Corporation)

DRV - (UrsChipidea) -- C:\WINDOWS\System32\DriverStore\FileRepository\urschipidea.inf_amd64_78ad1c14e33df968\urschipidea.sys (Microsoft Corporation)

DRV - (UrsSynopsys) -- C:\WINDOWS\System32\DriverStore\FileRepository\urssynopsys.inf_amd64_057fa37902020500\urssynopsys.sys (Microsoft Corporation)

DRV - (genericusbfn) -- C:\WINDOWS\System32\DriverStore\FileRepository\genericusbfn.inf_amd64_53931f0ae21d6d2c\genericusbfn.sys (Microsoft Corporation)

DRV - (BasicDisplay) -- C:\WINDOWS\System32\DriverStore\FileRepository\basicdisplay.inf_amd64_62ba5773ba05edee\BasicDisplay.sys (Microsoft Corporation)

DRV - (umbus) -- C:\WINDOWS\System32\DriverStore\FileRepository\umbus.inf_amd64_b78a9c5b6fd62c27\umbus.sys (Microsoft Corporation)

DRV - (UEFI) -- C:\WINDOWS\System32\DriverStore\FileRepository\uefi.inf_amd64_c1628ffa62c8e54c\UEFI.sys (Microsoft Corporation)

DRV - (CompositeBus) -- C:\WINDOWS\System32\DriverStore\FileRepository\compositebus.inf_amd64_7500cffa210c6946\CompositeBus.sys (Microsoft Corporation)

DRV - (swenum) -- C:\WINDOWS\System32\DriverStore\FileRepository\swenum.inf_amd64_16a14542b63c02af\swenum.sys (Microsoft Corporation)

DRV - (AscRegistryFilter) -- C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys (IObit)

DRV - (AscFileFilter) -- C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys (IObit)

DRV - (AMDRyzenMasterDriver) -- C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\AMD\Ryzen\AMDRyzenMasterDriver.sys (Advanced Micro Devices)

DRV - (iobit_monitor_server) -- C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys (IObit)

 

 
 ========== Standard Registry (SafeList) ==========

 

 
 ========== Internet Explorer ==========

 

IE:64bit: - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE:64bit: - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

IE - HKLM\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = C:\Windows\SysWOW64\blank.htm

IE - HKLM\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKLM\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&FORM=IE8SRC

 

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Local Page = %11%\blank.htm

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page = https://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,Start Page_TIMESTAMP = 87 B0 87 F8 07 36 D6 01  [binary data]

IE - HKCU\SOFTWARE\Microsoft\Internet Explorer\Main,SyncHomePage Protected - It is a violation of Windows Policy to modify. See aka.ms/browserpolicy = 01 00 00 00 49 00 00 00 F0 A4 1E F7 9B 1B 1E 5D 99 E0 53 22 62 59 BA FF DD 33 A0 27 D4 13 5D 81 E0 E7 EA 0E 76 AE 31 B7 D1 87 FF BB EB EE 9B C1 9B EB 1D 16 89 69 1B DE C5 A4 CD 0C E9 A2 E8 C2 03 67 DF AC E7 60 19 7B E4 8E 7F 21 73 B5 90 0D AA 02 00 00 00 0E 00 00 00 48 73 37 56 45 77 35 6B 49 46 67 25 33 64  [Binary data over 200 bytes]

IE - HKCU\..\SearchScopes,DefaultScope = {0633EE93-D776-472f-A0FF-E1416B8B2E3A}

IE - HKCU\..\SearchScopes\{0633EE93-D776-472f-A0FF-E1416B8B2E3A}: "URL" = hxxp://www.bing.com/search?q={searchTerms}&src=IE-SearchBox&FORM=IESR02

IE - HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings: "ProxyEnable" = 0

 
 ========== FireFox ==========

 

 

 

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/DTPlugin,version=11.261.2: C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@java.com/JavaPlugin,version=11.261.2: C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll (Oracle Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL (Microsoft Corporation)

FF:64bit: - HKLM\Software\MozillaPlugins\@videolan.org/vlc,version=3.0.11: G:\Program Files\VideoLAN\VLC\npvlc.dll (VideoLAN)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/Lync,version=15.0: C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\@microsoft.com/SharePoint,version=14.0: C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL (Microsoft Corporation)

FF - HKLM\Software\MozillaPlugins\Adobe Reader: C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll (Adobe Systems Inc.)

 

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 83.0\extensions\\Components: C:\PROGRAM FILES\MOZILLA FIREFOX\COMPONENTS

64bit-FF - HKEY_LOCAL_MACHINE\software\mozilla\Mozilla Firefox 83.0\extensions\\Plugins: C:\PROGRAM FILES\MOZILLA FIREFOX\PLUGINS

FF - HKEY_CURRENT_USER\software\mozilla\Firefox\Extensions\\mozilla_cc3@internetdownloadmanager.com: H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2020.04.29 22:19:06 | 000,087,398 | ---- | M] ()

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 83.0\extensions\\Components: C:\Program Files\Mozilla Firefox\components

FF - HKEY_CURRENT_USER\software\mozilla\Mozilla Firefox 83.0\extensions\\Plugins: C:\Program Files\Mozilla Firefox\plugins

FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc@internetdownloadmanager.com: C:\Users\Y\AppData\Roaming\IDM\idmmzcc5 [2020.05.29 20:06:59 | 000,000,000 | ---D | M]

FF - HKEY_CURRENT_USER\software\mozilla\SeaMonkey\Extensions\\mozilla_cc2@internetdownloadmanager.com: H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017.12.20 15:58:30 | 000,030,386 | ---- | M] ()

 

[2020.05.29 19:36:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Extensions

[2020.05.29 19:36:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\SystemExtensionsDev

[2020.05.30 10:39:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\j0np2f1s.default\extensions

[2020.12.04 16:09:50 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\extensions

[2020.05.29 20:02:27 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++1a36b675-46c3-4c8c-a033-9b0a8ba9626c^userContextId=4294967295

[2020.12.11 17:20:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++1a36b675-46c3-4c8c-a033-9b0a8ba9626c^userContextId=4294967295\idb

[2020.05.29 20:02:31 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++2a40d587-32fb-4799-b455-f605c2cce222^userContextId=4294967295

[2020.12.11 17:20:15 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++2a40d587-32fb-4799-b455-f605c2cce222^userContextId=4294967295\idb

[2020.05.29 19:36:36 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++56b4dcfc-861d-4131-b203-e399579bbf6e^userContextId=4294967295

[2020.12.11 13:23:35 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++56b4dcfc-861d-4131-b203-e399579bbf6e^userContextId=4294967295\idb

[2020.05.29 20:02:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++68f3b5cd-d65f-4ea4-b6c9-f9269d7062e3

[2020.12.11 17:23:16 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++68f3b5cd-d65f-4ea4-b6c9-f9269d7062e3\idb

[2020.05.29 20:02:30 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++68f3b5cd-d65f-4ea4-b6c9-f9269d7062e3^userContextId=4294967295

[2020.12.11 17:28:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++68f3b5cd-d65f-4ea4-b6c9-f9269d7062e3^userContextId=4294967295\idb

[2020.05.29 20:02:34 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++70016862-8675-44cf-ac3b-80e1c7dd283f^userContextId=4294967295

[2020.12.11 17:28:12 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++70016862-8675-44cf-ac3b-80e1c7dd283f^userContextId=4294967295\idb

[2020.05.29 20:02:32 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++a54443e8-d7bd-4f74-92e0-9afad78115e5^userContextId=4294967295

[2020.12.11 17:20:17 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++a54443e8-d7bd-4f74-92e0-9afad78115e5^userContextId=4294967295\idb

[2020.05.29 20:02:33 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++d00b2b24-a4ba-4bb3-9101-3dd77df5c597^userContextId=4294967295

[2020.12.11 17:20:14 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++d00b2b24-a4ba-4bb3-9101-3dd77df5c597^userContextId=4294967295\idb

[2020.05.29 20:02:28 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++d1bc35a3-51fb-4c31-81a2-9ffb7a7f7d16^userContextId=4294967295

[2020.12.11 17:26:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++d1bc35a3-51fb-4c31-81a2-9ffb7a7f7d16^userContextId=4294967295\idb

[2020.05.29 20:02:38 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++efaf5c90-0ee1-402a-bc1d-a7eb27ee4961^userContextId=4294967295

[2020.12.11 17:26:44 | 000,000,000 | ---D | M] (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\Firefox\Profiles\ue9r639e.default-release\storage\default\moz-extension+++efaf5c90-0ee1-402a-bc1d-a7eb27ee4961^userContextId=4294967295\idb

[2020.05.29 20:02:36 | 007,483,728 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\@porn-blocker.xpi

[2020.10.01 19:33:39 | 000,181,325 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\@testpilot-containers.xpi

[2020.11.17 17:50:55 | 001,745,655 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\https-everywhere@eff.org.xpi

[2020.05.29 20:02:37 | 000,217,770 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack.xpi

[2020.11.05 19:13:36 | 006,857,292 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi

[2020.10.09 13:54:02 | 001,240,482 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi

[2020.11.08 11:36:43 | 000,674,795 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\keepassxc-browser@keepassxc.org.xpi

[2020.11.14 17:03:06 | 000,090,013 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\mozilla_cc3@internetdownloadmanager.com.xpi

[2020.11.20 09:33:55 | 002,801,972 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\uBlock0@raymondhill.net.xpi

[2020.06.20 11:53:38 | 000,156,498 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\{6547f9b8-7695-4fc9-b57b-fb7aa9fec4c3}.xpi

[2020.12.04 16:09:50 | 000,105,692 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\{9efc0280-b125-400e-b53d-2d09d7effab4}.xpi

[2020.05.29 20:02:38 | 000,101,809 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\{b4eda7b1-2bbe-4961-b336-aaad77d87a47}.xpi

[2020.05.29 20:02:34 | 000,183,197 | ---- | M] () (No name found) -- C:\Users\Y\AppData\Roaming\mozilla\firefox\profiles\ue9r639e.default-release\extensions\{ef8616e0-e2f1-471b-9c47-5d09149b6d2b}.xpi

 
 ========== Chrome  ==========

 

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche\4.0.8.8_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo\4.2.8_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm\1.31.2_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk\5.1.0_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp\2020.11.17_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjljknijpnfibppaijefibndmiabonep\2019.117.1623.1_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfnbbbkabnehoejfhcbbhdicagcoobji\1.6.0_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj\2.0.15_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek\6.38.11_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda\1.0.0.5_1\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\npeicpdbkakmehahjeeohfdhnlpdklia\0.2.1.3_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnfifcganohemahpomajbhocfkdgmjb\4.2.1_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\onjjgbgnpbedmhbdoikhknhflbfkecjm\6.2.8_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm\8720.1005.0.2_0\

CHR - Extension: No name found = C:\Users\Y\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp\2020.12.10_0\

 

O1 HOSTS File: ([2020.06.06 12:01:26 | 000,000,862 | ---- | M]) - C:\Windows\SysNative\drivers\etc\hosts

O1 - Hosts: 127.0.0.1       activate.navicat.com

O2:64bit: - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - H:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll (Internet Download Manager, Tonec Inc.)

O2:64bit: - BHO: (ExplorerWnd Helper) - {10921475-03CE-4E04-90CE-E2E7EF20C814} - G:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll (IObit)

O2:64bit: - BHO: (IEToEdge BHO) - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\87.0.664.60\BHO\ie_to_edge_bho_64.dll (Microsoft Corporation)

O2:64bit: - BHO: (Skype for Business Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\root\Office16\OCHelper.dll (Microsoft Corporation)

O2:64bit: - BHO: (Java(tm) Plug-In SSV Helper) - {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} - C:\Programme\Java\jre1.8.0_261\bin\ssv.dll (Oracle Corporation)

O2:64bit: - BHO: (Java(tm) Plug-In 2 SSV Helper) - {DBC80044-A445-435b-BC74-9C25C1C588A9} - C:\Programme\Java\jre1.8.0_261\bin\jp2ssv.dll (Oracle Corporation)

O2 - BHO: (IDM integration (IDMIEHlprObj Class)) - {0055C089-8582-441B-A0BF-17B458C2A3A8} - H:\Program Files (x86)\Internet Download Manager\IDMIECC.dll (Internet Download Manager, Tonec Inc.)

O2 - BHO: (IEToEdge BHO) - {1FD49718-1D00-4B19-AF5F-070AF6D5D54C} - C:\Program Files (x86)\Microsoft\Edge\Application\87.0.664.60\BHO\ie_to_edge_bho.dll (Microsoft Corporation)

O2 - BHO: (Skype for Business Browser Helper) - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll (Microsoft Corporation)

O4:64bit: - HKLM..\Run: [AdobeAAMUpdater-1.0] C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe (Adobe Systems Incorporated)

O4:64bit: - HKLM..\Run: [AVGUI.exe] C:\Program Files\AVG\Antivirus\AvLaunch.exe (AVG Technologies CZ, s.r.o.)

O4:64bit: - HKLM..\Run: [Gigabyte Speed] C:\Programme\cFosSpeed\cfosspeed.exe (cFos Software GmbH)

O4:64bit: - HKLM..\Run: [RtkAudUService] C:\WINDOWS\SysNative\RtkAudUService64.exe (Realtek Semiconductor)

O4:64bit: - HKLM..\Run: [SecurityHealth] C:\Windows\SysNative\SecurityHealthSystray.exe (Microsoft Corporation)

O4:64bit: - HKLM..\Run: [TuneupUI.exe] C:\Program Files\AVG\TuneUp\TuneupUI.exe (AVG Technologies CZ, s.r.o.)

O4 - HKLM..\Run: [AdobeCS6ServiceManager] C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [PDFPrint] G:\Program Files (x86)\PDF24\pdf24.exe (geek software GmbH)

O4 - HKLM..\Run: [RazerCortex] G:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe (Razer Inc.)

O4 - HKLM..\Run: [SwitchBoard] C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe (Adobe Systems Incorporated)

O4 - HKLM..\Run: [vmware-tray.exe] G:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe (VMware, Inc.)

O4 - HKCU..\Run: [35C0DD69A13B47FAAE527F030D7053F7FAB3A98B._service_run] C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe (Microsoft Corporation)

O4 - HKCU..\Run: [AdobeBridge]  File not found

O4 - HKCU..\Run: [Advanced SystemCare] C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe (IObit)

O4 - HKCU..\Run: [CCleaner Smart Cleaning] G:\Program Files\CCleaner\CCleaner64.exe (Piriform Software Ltd)

O4 - HKCU..\Run: [com.squirrel.Teams.Teams] C:\Users\Y\AppData\Local\Microsoft\Teams\Update.exe (Microsoft Corporation)

O4 - HKCU..\Run: [Discord] C:\Users\Y\AppData\Local\Discord\Update.exe --processStart Discord.exe File not found

O4 - HKCU..\Run: [EpicGamesLauncher] G:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe (Epic Games, Inc.)

O4 - HKCU..\Run: [GalaxyClient]  File not found

O4 - HKCU..\Run: [GogGalaxy] H:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe (GOG.com)

O4 - HKCU..\Run: [IDMan] H:\Program Files (x86)\Internet Download Manager\IDMan.exe (Tonec Inc.)

O4 - HKCU..\Run: [OneDrive] C:\Users\Y\AppData\Local\Microsoft\OneDrive\OneDrive.exe (Microsoft Corporation)

O4 - HKCU..\Run: [Plex Media Server] H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc.)

O4 - HKCU..\Run: [Tautulli] C:\Program Files (x86)\Tautulli\Tautulli.exe ()

O4 - HKLM..\RunOnce: [DualBiosRescue] C:\Program Files (x86)\GIGABYTE\GigabyteFirmwareUpdateUtility\dbrro.exe ()

O4 - HKLM..\RunOnce: [PreRun] C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe ()

O4 - HKLM..\RunOnce: [SelLed] C:\Program Files (x86)\GIGABYTE\RGBFusion\RunLed.exe ()

O4 - Startup: C:\Users\Y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AORUS ENGINE.lnk = G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\autorun.exe ()

O4 - Startup: C:\Users\Y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dateien (RP-AC68U-D764) (Z) [2020.05.29 23:15:30 | 000,000,000 | R--D | M]

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktop = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoActiveDesktopChanges = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorAdmin = 5

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: ConsentPromptBehaviorUser = 3

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: DSCAutomationHostEnabled = 2

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableCursorSuppression = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableFullTrustStartupTasks = 2

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: EnableUwpStartupTasks = 2

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportFullTrustStartupTasks = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: SupportUwpStartupTasks = 1

O6 - HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\System: FilterAdministratorToken = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoLowDiskSpaceChecks = 1

O7 - HKCU\SOFTWARE\Microsoft\Windows\CurrentVersion\policies\Explorer: NoDriveTypeAutoRun = 221

O8:64bit: - Extra context menu item: Download aller Links mit IDM - H:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()

O8:64bit: - Extra context menu item: Download mit IDM - H:\Program Files (x86)\Internet Download Manager\IEExt.htm ()

O8 - Extra context menu item: Download aller Links mit IDM - H:\Program Files (x86)\Internet Download Manager\IEGetAll.htm ()

O8 - Extra context menu item: Download mit IDM - H:\Program Files (x86)\Internet Download Manager\IEExt.htm ()

O9:64bit: - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\root\Office16\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\root\Office16\ONBttnIE.dll (Microsoft Corporation)

O9:64bit: - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\root\Office16\OCHelper.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\root\Office16\OCHelper.dll (Microsoft Corporation)

O9:64bit: - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9:64bit: - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\root\Office16\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra Button: Send to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Se&nd to OneNote - {2670000A-7350-4f3c-8081-5663EE0C6C49} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ONBttnIE.dll (Microsoft Corporation)

O9 - Extra Button: Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : Lync Click to Call - {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll (Microsoft Corporation)

O9 - Extra Button: OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O9 - Extra 'Tools' menuitem : OneNote Lin&ked Notes - {789FE86F-6FC4-46A1-9849-EDE0DB0C95CA} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\ONBttnIELinkedNotes.dll (Microsoft Corporation)

O10:64bit: - Protocol_Catalog_Before_Reset\Catalog_Entries64\000000000015 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)

O10:64bit: - Protocol_Catalog_Before_Reset\Catalog_Entries64\000000000016 - C:\Windows\SysNative\vsocklib.dll (VMware, Inc.)

O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000015 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)

O10 - Protocol_Catalog_Before_Reset\Catalog_Entries\000000000016 - C:\Windows\SysWOW64\vsocklib.dll (VMware, Inc.)

O1364bit: - gopher Prefix: missing

O13 - gopher Prefix: missing

O15 - HKCU\..Trusted Domains: sharepoint.com ([jgumainz-files] https in Trusted sites)

O15 - HKCU\..Trusted Domains: sharepoint.com ([jgumainz-myfiles] https in Trusted sites)

O17 - HKLM\System\CCS\Services\Tcpip\Parameters\Interfaces\{eb096168-f090-4110-b734-6b22861b7b13}: DhcpNameServer = 192.168.178.1

O18:64bit: - Protocol\Handler\mso-minsb.16 {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Programme\Microsoft Office\root\Office16\MSOSB.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Handler\mso-minsb-roaming.16 {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Programme\Microsoft Office\root\Office16\MSOSB.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Handler\osf.16 {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Programme\Microsoft Office\root\Office16\MSOSB.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Handler\osf-roaming.16 {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Programme\Microsoft Office\root\Office16\MSOSB.DLL (Microsoft Corporation)

O18:64bit: - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)

O18:64bit: - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysNative\tbauth.dll (Microsoft Corporation)

O18 - Protocol\Handler\mso-minsb.16 {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL (Microsoft Corporation)

O18 - Protocol\Handler\mso-minsb-roaming.16 {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL (Microsoft Corporation)

O18 - Protocol\Handler\osf.16 {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL (Microsoft Corporation)

O18 - Protocol\Handler\osf-roaming.16 {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL (Microsoft Corporation)

O18 - Protocol\Handler\tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)

O18 - Protocol\Handler\windows.tbauth {14654CA6-5711-491D-B89A-58E571679951} - C:\Windows\SysWOW64\tbauth.dll (Microsoft Corporation)

O18:64bit: - Protocol\Filter\text/xml {807583E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesCommonX64\Microsoft Shared\OFFICE16\MSOXMLMF.DLL (Microsoft Corporation)

O18 - Protocol\Filter\text/xml {807583E5-5146-11D5-A672-00B0D022E945} - C:\Programme\Microsoft Office\root\vfs\ProgramFilesCommonX86\Microsoft Shared\Office16\MSOXMLMF.DLL (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\explorer.exe (Microsoft Corporation)

O20:64bit: - HKLM Winlogon: UserInit - (C:\WINDOWS\system32\userinit.exe) - C:\Windows\SysNative\userinit.exe (Microsoft Corporation)

O20 - HKLM Winlogon: Shell - (explorer.exe) - C:\WINDOWS\SysWow64\explorer.exe (Microsoft Corporation)

O21:64bit: - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O21 - SSODL: WebCheck - {E6FB5E20-DE35-11CF-9C87-00AA005127ED} - No CLSID value found.

O30:64bit: - LSA: Authentication Packages - (SshdPinAuthLsa) - C:\WINDOWS\SysNative\SshdPinAuthLsa.dll (Microsoft Corporation)

O30 - LSA: Authentication Packages - (SshdPinAuthLsa) -  File not found

O32 - HKLM CDRom: AutoRun - 1

O34 - HKLM BootExecute: (autocheck autochk *)

O34 - HKLM BootExecute: (icarus_rvrt.exe)

O35:64bit: - HKLM\..comfile [open] -- "%1" %*

O35:64bit: - HKLM\..exefile [open] -- "%1" %*

O35 - HKLM\..comfile [open] -- "%1" %*

O35 - HKLM\..exefile [open] -- "%1" %*

O37:64bit: - HKLM\...com [@ = comfile] -- "%1" %*

O37:64bit: - HKLM\...exe [@ = exefile] -- "%1" %*

O37 - HKLM\...com [@ = comfile] -- "%1" %*

O37 - HKLM\...exe [@ = exefile] -- "%1" %*

O38 - SubSystems\\Windows: (ServerDll=winsrv:UserServerDllInitialization,3)

O38 - SubSystems\\Windows: (ServerDll=sxssrv,4)

 
 ========== Files/Folders - Created Within 1 Day ==========

 

[2020.12.11 17:18:56 | 000,340,104 | ---- | C] (AVG Technologies CZ, s.r.o.) -- C:\WINDOWS\SysNative\avgBoot.exe

[2020.12.11 13:19:47 | 000,000,000 | ---D | C] -- H:\Dokumente\iScreenKit

[2020.12.11 13:13:19 | 000,000,000 | ---D | C] -- C:\Users\Y\AppData\Roaming\INNOTREND COMMERCE HK LIMITED

[1 C:\*.tmp files -> C:\*.tmp -> ]

 
 ========== Files - Modified Within 1 Day ==========

 

[2020.12.11 17:25:35 | 001,731,070 | ---- | M] () -- C:\WINDOWS\SysNative\PerfStringBackup.INI

[2020.12.11 17:25:35 | 000,746,436 | ---- | M] () -- C:\WINDOWS\SysNative\perfh007.dat

[2020.12.11 17:25:35 | 000,704,120 | ---- | M] () -- C:\WINDOWS\SysNative\perfh009.dat

[2020.12.11 17:25:35 | 000,151,384 | ---- | M] () -- C:\WINDOWS\SysNative\perfc007.dat

[2020.12.11 17:25:35 | 000,134,488 | ---- | M] () -- C:\WINDOWS\SysNative\perfc009.dat

[2020.12.11 17:20:40 | 000,067,584 | --S- | M] () -- C:\WINDOWS\bootstat.dat

[2020.12.11 17:18:38 | 2555,289,599 | -HS- | M] () -- C:\hiberfil.sys

[2020.12.11 17:18:38 | 016,777,216 | -HS- | M] () -- C:\swapfile.sys

[1 C:\*.tmp files -> C:\*.tmp -> ]

 
 ========== Files Created - No Company Name ==========

 

[2020.12.09 18:22:10 | 001,382,616 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo-1-999-0-0-0.exe

[2020.12.09 18:22:10 | 001,382,616 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkaninfo.exe

[2020.12.09 18:22:10 | 000,940,760 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1-999-0-0-0.dll

[2020.12.09 18:22:10 | 000,940,760 | ---- | C] () -- C:\WINDOWS\SysWow64\vulkan-1.dll

[2020.12.09 18:22:07 | 000,548,248 | ---- | C] () -- C:\WINDOWS\SysWow64\nvofapi.dll

[2020.11.28 21:28:19 | 000,281,688 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrB.exe

[2020.11.01 16:33:41 | 000,266,240 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.Internal.UI.Shell.WindowTabManager.dll

[2020.10.27 21:46:40 | 000,004,682 | ---- | C] () -- C:\Users\Y\AppData\Roaming\VoiceMeeterDefault.xml

[2020.10.14 07:45:55 | 000,047,472 | ---- | C] () -- C:\WINDOWS\SysWow64\umpdc.dll

[2020.10.14 07:45:52 | 001,333,248 | ---- | C] () -- C:\WINDOWS\SysWow64\TextInputMethodFormatter.dll

[2020.10.14 07:45:52 | 000,455,168 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowManagementAPI.dll

[2020.10.14 07:45:51 | 000,611,952 | ---- | C] () -- C:\WINDOWS\SysWow64\TextShaping.dll

[2020.09.18 14:42:44 | 000,058,344 | ---- | C] () -- C:\WINDOWS\SysWow64\FvSDK_x86.dll

[2020.09.11 00:34:02 | 000,101,688 | ---- | C] () -- C:\WINDOWS\SysWow64\HvsiManagementApi.dll

[2020.09.06 12:41:46 | 000,076,888 | ---- | C] () -- C:\WINDOWS\SysWow64\PnkBstrA.exe

[2020.07.12 18:33:49 | 000,007,597 | ---- | C] () -- C:\Users\Y\AppData\Local\Resmon.ResmonCfg

[2020.07.04 08:55:00 | 000,000,001 | ---- | C] () -- C:\WINDOWS\vgkbootstatus.dat

[2020.06.21 15:42:13 | 000,000,128 | ---- | C] () -- C:\Users\Y\AppData\Local\PUTTY.RND

[2020.05.31 15:30:42 | 001,752,172 | ---- | C] () -- C:\WINDOWS\SysWow64\PerfStringBackup.INI

[2020.05.31 12:03:09 | 000,197,041 | ---- | C] () -- C:\WINDOWS\hpwins19.dat

[2020.05.31 12:03:09 | 000,000,633 | ---- | C] () -- C:\WINDOWS\hpwmdl19.dat

[2020.05.30 13:17:30 | 000,000,448 | RHS- | C] () -- C:\ProgramData\ntuser.pol

[2020.05.29 19:22:09 | 000,000,000 | -H-- | C] () -- C:\ProgramData\DP45977C.lfl

[2020.05.29 19:02:37 | 000,067,584 | --S- | C] () -- C:\WINDOWS\bootstat.dat

[2020.05.29 18:59:14 | 000,365,056 | ---- | C] () -- C:\WINDOWS\SysWow64\d3dconfig.exe

[2019.12.07 10:15:00 | 000,003,103 | ---- | C] () -- C:\WINDOWS\SysWow64\mmc.exe.config

[2019.12.07 10:15:00 | 000,000,741 | ---- | C] () -- C:\WINDOWS\SysWow64\NOISE.DAT

[2019.12.07 10:14:59 | 000,215,943 | ---- | C] () -- C:\WINDOWS\SysWow64\dssec.dat

[2019.12.07 10:10:05 | 000,019,485 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr.dat

[2019.12.07 10:10:05 | 000,011,292 | ---- | C] () -- C:\WINDOWS\SysWow64\srms-apr-v.dat

[2019.12.07 10:10:02 | 000,518,144 | ---- | C] () -- C:\WINDOWS\SysWow64\msjetoledb40.dll

[2019.12.07 10:09:57 | 000,053,248 | ---- | C] () -- C:\WINDOWS\SysWow64\BWContextHandler.dll

[2019.12.07 10:09:22 | 000,002,404 | ---- | C] () -- C:\WINDOWS\SysWow64\WimBootCompress.ini

[2019.12.07 10:09:18 | 000,167,640 | ---- | C] () -- C:\WINDOWS\SysWow64\chs_singlechar_pinyin.dat

[2019.12.07 10:09:17 | 003,595,776 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.UI.Input.Inking.Analysis.dll

[2019.12.07 10:09:17 | 000,235,520 | ---- | C] () -- C:\WINDOWS\SysWow64\HeatCore.dll

[2019.12.07 10:09:17 | 000,107,008 | ---- | C] () -- C:\WINDOWS\SysWow64\WindowsDefaultHeatProcessor.dll

[2019.12.07 10:09:17 | 000,060,416 | ---- | C] () -- C:\WINDOWS\SysWow64\xboxgipsynthetic.dll

[2019.12.07 10:09:17 | 000,054,784 | ---- | C] () -- C:\WINDOWS\SysWow64\Windows.WARP.JITService.exe

[2019.12.07 10:09:13 | 000,223,744 | ---- | C] () -- C:\WINDOWS\SysWow64\TpmTool.exe

[2019.12.07 10:09:11 | 000,330,752 | ---- | C] () -- C:\WINDOWS\SysWow64\ssdm.dll

[2019.12.07 10:09:11 | 000,240,640 | ---- | C] () -- C:\WINDOWS\SysWow64\CoreMas.dll

[2019.12.07 10:09:11 | 000,049,664 | ---- | C] () -- C:\WINDOWS\SysWow64\windows.applicationmodel.conversationalagent.proxystub.dll

[2019.12.07 10:09:11 | 000,040,448 | ---- | C] () -- C:\WINDOWS\SysWow64\windows.applicationmodel.conversationalagent.internal.proxystub.dll

[2019.12.07 10:09:11 | 000,010,752 | ---- | C] () -- C:\WINDOWS\SysWow64\agentactivationruntimestarter.exe

[2019.12.07 10:09:04 | 000,673,088 | ---- | C] () -- C:\WINDOWS\SysWow64\mlang.dat

[2019.12.07 10:08:58 | 000,043,131 | ---- | C] () -- C:\WINDOWS\mib.bin

 
 ========== ZeroAccess Check ==========

 

[2020.12.11 16:16:33 | 000,000,000 | ---D | M] -- C:\$Recycle.bin\S-1-5-21-3136980708-3557880529-3186569697-1001\$RNXD4P1.X\AppData\Local\ConnectedDevicesPlatform\L.defaultuser100000

[2020.05.29 19:44:54 | 000,000,227 | RHS- | M] () -- C:\WINDOWS\assembly\Desktop.ini

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

 

[HKEY_CURRENT_USER\Software\Classes\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32] /64

 

[HKEY_CURRENT_USER\Software\Classes\Wow6432node\clsid\{fbeb8a05-beee-4442-804e-409d6c4515e9}\InProcServer32]

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32] /64

"" = C:\Windows\SysNative\windows.storage.dll -- [2020.11.01 16:33:33 | 007,990,232 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{42aedc87-2188-41fd-b9a3-0c966feabec1}\InProcServer32]

"" = %SystemRoot%\system32\windows.storage.dll -- [2020.11.01 16:33:42 | 006,368,392 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Apartment

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\fastprox.dll -- [2020.10.14 07:45:09 | 001,075,712 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{5839FCA9-774D-42A1-ACDA-D6A79037F57F}\InProcServer32]

"" = %systemroot%\system32\wbem\fastprox.dll -- [2020.10.14 07:45:50 | 000,804,352 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Free

 

[HKEY_LOCAL_MACHINE\Software\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32] /64

"" = C:\Windows\SysNative\wbem\wbemess.dll -- [2019.12.07 10:08:19 | 000,514,560 | ---- | M] (Microsoft Corporation)

"ThreadingModel" = Both

 

[HKEY_LOCAL_MACHINE\Software\Wow6432Node\Classes\clsid\{F3130CDB-AA52-4C3A-AB32-85FFC23AF9C1}\InProcServer32]

 
 ========== Alternate Data Streams ==========

 

@Alternate Data Stream - 16 bytes -> C:\Users\Y\AppData\Local\Temp:$DATA
 

< End of report >

--- --- ---

felix1

11.12.2020 20:40

Bitte postet uns keine HijackThis, OTL oder DDS Logdateien!

Diese Tools sind bereits überholt und können uns keinen ausreichenden Überblick mehr geben.

Wir bitten euch, folgendes durchzulesen und abzuarbeiten:
Für alle Hilfesuchenden! Was muss ich vor der Eröffnung eines Themas beachten?

Nur mit diesen Informationen können wir euch helfen.

ilias2

11.12.2020 22:20

FRST.txt

Code:



==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: 127.0.0.1       activate.navicat.com

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{eb096168-f090-4110-b734-6b22861b7b13}: [DhcpNameServer] 192.168.178.1
 

Edge: 

======

Edge Profile: C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default [2020-11-08]

Edge Extension: (IDM Integration Module) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-11-07]

Edge HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]
 

FireFox:

========

FF DefaultProfile: j0np2f1s.default

FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j0np2f1s.default [2020-12-11]

FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j0np2f1s.default\user.js [2020-09-20]

FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release [2020-12-11]

FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\user.js [2020-09-20]

FF Session Restore: Mozilla\Firefox\Profiles\ue9r639e.default-release -> ist aktiviert.

FF Notifications: Mozilla\Firefox\Profiles\ue9r639e.default-release -> hxxps://dekom.uc.de

FF Extension: (Anti-Porno) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\@porn-blocker.xpi [2020-05-29]

FF Extension: (Firefox Multi-Account Containers) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\@testpilot-containers.xpi [2020-10-01]

FF Extension: (HTTPS Everywhere) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\https-everywhere@eff.org.xpi [2020-11-17]

FF Extension: (Terms of Service; Didn’t Read) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack.xpi [2020-05-29]

FF Extension: (Decentraleyes) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2020-11-05]

FF Extension: (Privacy Badger) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2020-10-09]

FF Extension: (KeePassXC-Browser) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\keepassxc-browser@keepassxc.org.xpi [2020-11-08]

FF Extension: (IDM Integration Module) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2020-11-14]

FF Extension: (uBlock Origin) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\uBlock0@raymondhill.net.xpi [2020-11-20]

FF Extension: (WatchDogs) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{6547f9b8-7695-4fc9-b57b-fb7aa9fec4c3}.xpi [2020-06-20]

FF Extension: (Mitaka) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{9efc0280-b125-400e-b53d-2d09d7effab4}.xpi [2020-12-04]

FF Extension: (adultblacklist) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{b4eda7b1-2bbe-4961-b336-aaad77d87a47}.xpi [2020-05-29]

FF Extension: (Avengers: Infinity War 3) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{ef8616e0-e2f1-471b-9c47-5d09149b6d2b}.xpi [2020-05-29]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi

FF Extension: (IDM Integration Module) - H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2020-04-29]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\*****\AppData\Roaming\IDM\idmmzcc5

FF Extension: (IDM CC) - C:\Users\*****\AppData\Roaming\IDM\idmmzcc5 [2020-05-29] [] [ist nicht signiert]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF Extension: (IDM integration) - H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []

FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.11 -> G:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2020-12-11]

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "hxxps://www.facebook.com/","hxxp://www.google.com/","hxxp://start.iminent.com/?appId=E4B15248-E4A6-47F0-A767-40F4BA8E7F4A","hxxps://www.google.com/"

CHR Session Restore: Default -> ist aktiviert.

CHR Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2020-05-31]

CHR Extension: (YouTube) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-31]

CHR Extension: (uBlock Origin) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-12-11]

CHR Extension: (Adblock für Youtube™) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2020-10-17]

CHR Extension: (HTTPS Everywhere) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2020-11-23]

CHR Extension: (GeForce Experience Stream Client) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjljknijpnfibppaijefibndmiabonep [2020-05-31]

CHR Extension: (OkayFreedom) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfnbbbkabnehoejfhcbbhdicagcoobji [2020-05-31]

CHR Extension: (Decentraleyes) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj [2020-11-15]

CHR Extension: (IDM Integration Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-12-11]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-31]

CHR Extension: (WebRTC Network Limiter) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\npeicpdbkakmehahjeeohfdhnlpdklia [2020-05-31]

CHR Extension: (AdFly Skipper) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnfifcganohemahpomajbhocfkdgmjb [2020-11-15]

CHR Extension: (Adult Blocker - Porn Adult Filter) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\onjjgbgnpbedmhbdoikhknhflbfkecjm [2020-05-31]

CHR Extension: (Chrome Media Router) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-23]

CHR Extension: (Privacy Badger) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2020-12-11]

CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]

CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)

R2 AdvancedSystemCareService13; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1293072 2020-06-15] (IObit Information Technology -> IObit)

R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [366232 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [3096712 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [8502208 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [110608 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8736880 2020-11-28] (BattlEye Innovations e.K. -> )

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [598360 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

R2 CleanupPSvc; C:\Program Files\AVG\TuneUp\TuneupSvc.exe [12976336 2020-12-01] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-11-23] (Microsoft Corporation -> Microsoft Corporation)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2020-09-19] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [143072 2020-07-01] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)

R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [Datei ist nicht signiert]

S3 GalaxyClientService; H:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2020-12-11] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-12-04] (GOG Sp. z o.o. -> GOG.com)

R2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)

S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [128736 2020-04-09] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S2 IObitUnSvr; G:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2020-05-25] (IObit Information Technology -> IObit)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [119808 2019-11-21] (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert]

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24192 2018-03-06] (OpenVPN Technologies, Inc. -> )

R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [67000 2020-04-16] (OpenVPN Inc. -> The OpenVPN Project)

S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [67000 2020-04-16] (OpenVPN Inc. -> The OpenVPN Project)

R2 PDF24; G:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

R2 PlexUpdateService; H:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1425912 2020-12-01] (Plex, Inc. -> Plex, Inc.)

R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2020-09-06] (Even Balance, Inc. -> )

S3 ProtonVPN Service; H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe [99624 2020-11-04] (ProtonVPN AG -> )

S3 ProtonVPN Update Service; H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe [61736 2020-11-04] (ProtonVPN AG -> )

R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [253776 2020-06-24] (Razer USA Ltd. -> Razer Inc)

S3 Rockstar Service; H:\Programme\Rockstar Games\Launcher\RockstarService.exe [1382016 2020-11-27] (Rockstar Games, Inc. -> Rockstar Games)

R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533376 2020-09-23] (Razer USA Ltd. -> Razer Inc.)

R2 RzKLService; G:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [290864 2020-10-09] (Razer USA Ltd. -> Razer Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5101992 2020-11-13] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)

R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]

R2 TeamViewer; G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12720144 2020-11-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Uncheater\ucldr_battlegrounds_gl.exe [6995800 2020-06-07] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

R2 VMAuthdService; G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [100784 2019-05-04] (VMware, Inc. -> VMware, Inc.)

S3 VMwareHostd; G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15446448 2019-05-04] (VMware, Inc. -> )

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.4-0\NisSrv.exe [2484256 2020-05-29] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.4-0\MsMpEng.exe [103168 2020-05-29] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [58216 2018-03-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [45432 2019-07-15] (IObit Information Technology -> IObit)

R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [46008 2019-07-15] (IObit Information Technology -> IObit)

R0 avgArDisk; C:\WINDOWS\System32\drivers\avgArDisk.sys [37216 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [206472 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [332432 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [247952 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [97424 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [16832 2020-11-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVG Technologies CZ, s.r.o.)

R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [42848 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [176808 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [521816 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [109352 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [84928 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [851680 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [469896 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [217408 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [326488 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

S3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [3213176 2020-12-08] (BattlEye Innovations e.K. -> )

R1 cFosSpeed; C:\WINDOWS\system32\DRIVERS\cfosspeed6.sys [1499112 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

R3 cpuz145; C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [49968 2020-12-11] (CPUID -> CPUID)

R1 EneTechIo; C:\WINDOWS\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

S3 gdrv; C:\WINDOWS\gdrv.sys [26792 2020-05-29] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R3 gdrv2; C:\WINDOWS\gdrv2.sys [32600 2020-05-29] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-05-29] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])

R3 iobit_monitor_server; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [32520 2018-07-04] (IObit Information Technology -> IObit)

R3 IUFileFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44104 2020-05-25] (IObit Information Technology -> IObit)

R3 IUProcessFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2020-05-25] (IObit Information Technology -> IObit)

R3 IURegistryFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2020-05-25] (IObit Information Technology -> IObit)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220160 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [197792 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [139424 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 NAL; C:\WINDOWS\system32\Drivers\iqvw64e.sys [58520 2018-10-11] (Intel(R) INTELND1820 -> Intel Corporation)

R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)

S4 npcap_wifi; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)

S3 ProtonVPNSplitTunnel; H:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.SplitTunnelDriver.sys [31584 2020-08-19] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166768 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> )

R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> )

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49008 2020-04-06] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [52288 2019-05-04] (VMware, Inc. -> VMware, Inc.)

R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [66576 2019-05-04] (VMware, Inc. -> VMware, Inc.)

R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [92040 2019-04-27] (VMware, Inc. -> VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [52576 2018-02-28] (VMware, Inc. -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-05-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [401120 2020-05-29] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-05-29] (Microsoft Windows -> Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [2740480 2020-06-07] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

U4 napagent; kein ImagePath

S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-12-11 22:09 - 2020-12-11 22:09 - 000024203 _____ C:\Users\*****\Desktop\FRST.txt

2020-12-11 22:08 - 2020-12-11 22:06 - 002288640 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe

2020-12-11 22:07 - 2020-12-11 22:09 - 000000000 ____D C:\FRST

2020-12-11 18:24 - 2020-12-11 18:43 - 000000000 ____D C:\Users\*****\AppData\LocalLow\IGDump

2020-12-11 18:24 - 2020-12-11 18:24 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000220160 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000197792 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000139424 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000002029 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000002029 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000000000 ____D C:\Users\*****\AppData\Local\mbam

2020-12-11 18:24 - 2020-12-11 18:24 - 000000000 ____D C:\ProgramData\Malwarebytes

2020-12-11 18:23 - 2020-12-11 18:23 - 000000000 ____D C:\Program Files\Malwarebytes

2020-12-11 17:23 - 2020-12-11 17:23 - 000003906 _____ C:\Users\*****\Desktop\Tiefenscan1.txt

2020-12-11 17:18 - 2020-12-11 21:19 - 000004266 _____ C:\WINDOWS\system32\Tasks\Antivirus Emergency Update

2020-12-11 17:18 - 2020-11-24 17:25 - 000340104 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe

2020-12-11 16:47 - 2020-12-11 16:47 - 109768704 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 005103616 _____ C:\WINDOWS\system32\config\DRIVERS.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000868352 _____ C:\WINDOWS\system32\config\DEFAULT.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000143360 _____ C:\WINDOWS\system32\config\SAM.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000053248 _____ C:\WINDOWS\system32\config\SECURITY.iobit

2020-12-11 13:13 - 2020-12-11 13:13 - 000000000 ____D C:\Users\*****\AppData\Roaming\INNOTREND COMMERCE HK LIMITED

2020-12-09 18:30 - 2020-12-11 17:18 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK

2020-12-09 18:27 - 2020-12-09 18:27 - 000373776 _____ C:\WINDOWS\system32\vp9fs.dll

2020-12-09 18:23 - 2020-12-04 04:05 - 000135408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys

2020-12-09 18:23 - 2020-12-04 04:05 - 000038640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001786584 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001786584 _____ C:\WINDOWS\system32\vulkaninfo.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001453296 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001382616 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001382616 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001193880 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001087704 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001087704 _____ C:\WINDOWS\system32\vulkan-1.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000679664 _____ C:\WINDOWS\system32\nvofapi64.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000608496 _____ C:\WINDOWS\system32\nvml.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000548248 _____ C:\WINDOWS\SysWOW64\nvofapi.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 002104216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001589144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001511664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001164528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000813976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000684784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe

2020-12-09 18:22 - 2020-12-05 04:24 - 000673688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000657816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000559000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 008262552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 007391984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 004611312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 002731928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 000447384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe

2020-12-09 18:22 - 2020-12-05 04:22 - 007113064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2020-12-09 18:22 - 2020-12-05 04:22 - 006070008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2020-12-09 18:22 - 2020-12-05 04:22 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe

2020-12-09 18:22 - 2020-12-04 04:05 - 000084008 _____ C:\WINDOWS\system32\nvinfo.pb

2020-12-09 16:28 - 2020-12-09 16:28 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tautulli

2020-12-09 16:28 - 2020-12-09 16:28 - 000000000 ____D C:\Program Files (x86)\Tautulli

2020-12-09 16:16 - 2020-12-09 16:16 - 000002096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2020-12-06 13:43 - 2020-12-06 13:43 - 000000000 ____D C:\Users\*****\AppData\Roaming\Bungie

2020-12-05 12:56 - 2020-12-05 12:56 - 000000000 ____D C:\Users\*****\AppData\Local\GOG.com

2020-12-05 12:56 - 2020-12-05 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2020-12-05 12:54 - 2020-12-05 12:54 - 000000000 ____D C:\ProgramData\GOG.com

2020-12-05 12:15 - 2020-12-05 12:15 - 000000951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk

2020-12-05 12:15 - 2020-12-05 12:15 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2020-12-05 12:14 - 2020-12-05 12:14 - 000000921 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk

2020-12-05 12:13 - 2020-12-05 12:15 - 000000000 ____D C:\Program Files\Common Files\Adobe

2020-12-05 12:13 - 2020-12-05 12:13 - 000001600 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk

2020-12-05 12:13 - 2020-12-05 12:13 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk

2020-12-02 19:58 - 2020-11-23 14:45 - 000816368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll

2020-12-02 19:51 - 2020-12-02 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server

2020-11-28 22:33 - 2020-11-28 22:33 - 000000000 ____D C:\Users\*****\AppData\Local\My Games

2020-11-28 21:28 - 2020-11-28 21:28 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe

2020-11-28 19:03 - 2020-11-28 19:03 - 000000234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Watch Dogs Legion.url

2020-11-28 16:33 - 2020-11-28 16:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 7.2

2020-11-26 22:56 - 2020-11-26 22:56 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0

2020-11-25 19:20 - 2020-11-25 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

2020-11-25 13:56 - 2020-12-09 20:09 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2020-11-24 17:25 - 2020-11-24 17:25 - 000851680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000521816 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgNetHub.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000469896 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000332432 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000326488 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000247952 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsh.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000217408 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000206472 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArPot.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000176808 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000109352 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000097424 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniv.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000084928 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000042848 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgKbd.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000037216 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArDisk.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000016832 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgElam.sys

2020-11-22 21:09 - 2020-11-22 21:10 - 000000000 ____D C:\Users\defaultuser100000\AppData\Local\ConnectedDevicesPlatform

2020-11-22 21:09 - 2020-11-22 21:10 - 000000000 ____D C:\Users\defaultuser100000

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Raspberry Pi

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Users\*****\AppData\Local\Raspberry Pi

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Program Files (x86)\Raspberry Pi Imager

2020-11-21 12:06 - 2020-11-21 12:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2020-11-20 22:36 - 2020-11-22 09:47 - 000000000 ____D C:\Program Files\Mozilla Firefox

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\Users\*****\AppData\Roaming\Proton Technologies AG

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\Program Files (x86)\Proton Technologies

2020-11-18 20:03 - 2020-12-09 20:09 - 000002158 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog

2020-11-18 20:03 - 2020-11-18 20:03 - 000000948 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk

2020-11-18 20:02 - 2020-11-18 20:03 - 000000000 ____D C:\Program Files\Npcap

2020-11-18 20:02 - 2020-11-18 20:02 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap

2020-11-18 20:02 - 2020-11-18 20:02 - 000000000 ____D C:\WINDOWS\system32\Npcap

2020-11-18 20:00 - 2020-11-18 20:00 - 000000000 ____D C:\Users\*****\AppData\Roaming\Wireshark

2020-11-15 12:21 - 2020-11-15 12:21 - 000000000 ____D C:\Users\*****\AppData\Local\FLiNGTrainer

2020-11-14 15:07 - 2020-11-14 15:07 - 000000000 ____D C:\Users\*****\AppData\Roaming\EasyAntiCheat

2020-11-13 18:10 - 2020-11-13 18:10 - 000009265 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2020-11-11 18:00 - 2020-12-09 20:09 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3136980708-3557880529-3186569697-1004
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-12-11 22:07 - 2020-05-29 21:29 - 000000000 ____D C:\Users\*****\AppData\Local\CrashDumps

2020-12-11 21:59 - 2020-05-29 19:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2020-12-11 18:24 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2020-12-11 18:23 - 2020-05-29 20:06 - 000000000 ____D C:\Users\*****\AppData\Roaming\IDM

2020-12-11 18:22 - 2020-07-12 18:33 - 000007597 _____ C:\Users\*****\AppData\Local\Resmon.ResmonCfg

2020-12-11 17:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps

2020-12-11 17:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2020-12-11 17:28 - 2020-11-01 16:05 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2020-12-11 17:27 - 2020-05-29 19:31 - 000000000 ____D C:\ProgramData\NVIDIA

2020-12-11 17:27 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2020-12-11 17:25 - 2020-05-29 19:21 - 001731070 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2020-12-11 17:25 - 2019-12-07 15:51 - 000746436 _____ C:\WINDOWS\system32\perfh007.dat

2020-12-11 17:25 - 2019-12-07 15:51 - 000151384 _____ C:\WINDOWS\system32\perfc007.dat

2020-12-11 17:25 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF

2020-12-11 17:21 - 2020-05-29 19:36 - 000000000 ____D C:\ProgramData\Mozilla

2020-12-11 17:20 - 2020-07-03 15:42 - 000000000 ____D C:\Users\*****\AppData\Local\Tautulli

2020-12-11 17:20 - 2020-05-29 19:36 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla

2020-12-11 17:19 - 2020-05-29 20:14 - 000000000 ____D C:\Users\*****\AppData\Local\Plex Media Server

2020-12-11 17:19 - 2020-05-29 19:40 - 000000000 ____D C:\ProgramData\AVG

2020-12-11 17:18 - 2020-08-29 08:06 - 000008192 ___SH C:\DumpStack.log.tmp

2020-12-11 17:18 - 2020-05-31 15:30 - 000000000 ____D C:\ProgramData\VMware

2020-12-11 17:18 - 2020-05-29 19:21 - 000000000 ____D C:\Users\*****

2020-12-11 17:18 - 2020-05-29 19:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2020-12-11 17:18 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2020-12-11 17:16 - 2020-09-27 10:19 - 000000000 ____D C:\Users\*****\AppData\Local\WhatsApp

2020-12-11 17:16 - 2020-06-12 20:19 - 000000000 ____D C:\Program Files\TAP-Windows

2020-12-11 17:16 - 2020-06-12 20:19 - 000000000 ____D C:\Program Files\OpenVPN

2020-12-11 17:16 - 2020-05-31 22:28 - 000000000 ____D C:\Users\*****\AppData\Local\WeMod

2020-12-11 17:16 - 2020-05-30 10:44 - 000000000 ___SD C:\WINDOWS\SysWOW64\lxss

2020-12-11 17:16 - 2020-05-30 10:44 - 000000000 ___SD C:\WINDOWS\system32\lxss

2020-12-11 17:16 - 2020-05-30 10:36 - 000000000 ____D C:\ProgramData\ProductData

2020-12-11 17:16 - 2020-05-30 10:36 - 000000000 ____D C:\ProgramData\IObit

2020-12-11 17:16 - 2020-05-29 21:05 - 000000000 ____D C:\Users\*****\AppData\Roaming\vlc

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ___SD C:\WINDOWS\system32\AppV

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Portable Devices

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Multimedia Platform

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform

2020-12-11 17:16 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\OpenSSH

2020-12-11 17:16 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\de

2020-12-11 17:16 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\de

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\dsc

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Keywords

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\downlevel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\L2Schemas

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System

2020-12-11 17:16 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing

2020-12-11 17:15 - 2020-05-30 10:37 - 000000000 ____D C:\Users\*****\AppData\Roaming\IObit

2020-12-11 17:15 - 2020-05-30 10:36 - 000000000 ____D C:\Users\*****\AppData\LocalLow\IObit

2020-12-11 17:15 - 2020-05-30 00:23 - 000000000 ____D C:\Users\*****\AppData\Local\cFos

2020-12-11 17:15 - 2020-05-29 21:28 - 000000000 ____D C:\Users\*****\AppData\Roaming\discord

2020-12-11 17:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Containers

2020-12-11 17:03 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\registration

2020-12-11 17:02 - 2020-05-29 21:28 - 000000000 ____D C:\Users\*****\AppData\Roaming\WhatsApp

2020-12-11 17:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState

2020-12-11 16:59 - 2020-05-29 20:06 - 000000000 ____D C:\Users\*****\AppData\Roaming\DMCache

2020-12-11 16:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF

2020-12-11 16:15 - 2020-05-30 00:46 - 000000000 ____D C:\Users\*****\AppData\Local\ElevatedDiagnostics

2020-12-11 15:35 - 2020-05-30 10:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software

2020-12-11 12:58 - 2020-10-23 17:34 - 000000000 ____D C:\Users\*****\AppData\Local\RealVNC

2020-12-11 12:58 - 2020-05-29 19:25 - 000000000 ____D C:\Users\*****\AppData\Local\PlaceholderTileLogoFolder

2020-12-10 06:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender

2020-12-10 06:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender

2020-12-09 20:09 - 2020-11-08 11:35 - 000002578 _____ C:\WINDOWS\system32\Tasks\GraphicsCardEngine

2020-12-09 20:09 - 2020-11-08 11:35 - 000002542 _____ C:\WINDOWS\system32\Tasks\LiquidSensord

2020-12-09 20:09 - 2020-11-01 16:36 - 000002568 _____ C:\WINDOWS\system32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE

2020-12-09 20:09 - 2020-11-01 16:04 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2020-12-09 20:09 - 2020-11-01 16:04 - 000003404 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2020-12-09 20:09 - 2020-10-29 19:21 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 18:56 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3136980708-3557880529-3186569697-1001

2020-12-09 20:09 - 2020-10-14 18:46 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2020-12-09 20:09 - 2020-09-09 15:28 - 000002460 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor

2020-12-09 20:09 - 2020-09-09 15:28 - 000002350 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_*****

2020-12-09 20:09 - 2020-05-30 12:34 - 000002402 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_*****

2020-12-09 20:09 - 2020-05-29 21:01 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC

2020-12-09 20:09 - 2020-05-29 19:42 - 000003558 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2020-12-09 20:09 - 2020-05-29 19:42 - 000003334 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2020-12-09 20:09 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2020-12-09 19:30 - 2020-05-29 19:45 - 000000000 ____D C:\Users\*****\AppData\Local\D3DSCache

2020-12-09 18:59 - 2020-05-29 21:31 - 000000000 ____D C:\Users\*****\AppData\Local\NVIDIA

2020-12-09 18:49 - 2020-07-12 18:05 - 000000000 ____D C:\Users\*****\AppData\Local\KeePassXC

2020-12-09 18:45 - 2020-05-31 15:31 - 000000000 ____D C:\Users\*****\AppData\Local\VMware

2020-12-09 18:44 - 2020-05-31 15:31 - 000000000 ____D C:\Users\*****\AppData\Roaming\VMware

2020-12-09 18:37 - 2020-05-29 19:23 - 000000000 ____D C:\Users\*****\AppData\Local\Packages

2020-12-09 18:35 - 2020-05-31 16:10 - 000000435 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

2020-12-09 17:23 - 2020-06-21 15:42 - 000000128 _____ C:\Users\*****\AppData\Local\PUTTY.RND

2020-12-09 16:59 - 2020-05-29 21:59 - 000000000 ____D C:\Users\*****\AppData\Local\Ubisoft Game Launcher

2020-12-09 16:13 - 2020-05-29 21:28 - 000000000 ____D C:\Users\*****\AppData\Local\Discord

2020-12-06 20:22 - 2020-06-07 18:59 - 000000000 ____D C:\Users\*****\AppData\Roaming\HuBBa

2020-12-06 14:16 - 2020-05-30 13:49 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2020-12-05 19:52 - 2020-05-29 20:33 - 000000000 ____D C:\Users\*****\AppData\Local\EpicGamesLauncher

2020-12-05 19:43 - 2020-10-17 10:24 - 005302184 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2020-12-05 12:57 - 2020-05-30 00:40 - 000000000 ____D C:\Users\*****\AppData\Local\Adobe

2020-12-05 12:46 - 2020-05-29 19:23 - 000000000 ____D C:\Users\*****\AppData\Roaming\Adobe

2020-12-05 12:15 - 2020-05-30 00:42 - 000000000 ____D C:\ProgramData\Adobe

2020-12-05 12:13 - 2020-05-30 00:42 - 000000000 ____D C:\Program Files (x86)\Adobe

2020-12-04 21:40 - 2020-05-29 21:27 - 000000000 ____D C:\Users\*****\AppData\Local\SquirrelTemp

2020-12-04 15:34 - 2020-05-30 11:42 - 000000000 ____D C:\Program Files\Microsoft Office

2020-12-04 15:34 - 2020-05-29 19:43 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2020-12-02 19:51 - 2020-05-29 20:09 - 000000000 ____D C:\ProgramData\Package Cache

2020-11-28 22:32 - 2020-06-07 19:37 - 000000000 ____D C:\Users\*****\AppData\Local\BattlEye

2020-11-28 21:28 - 2020-09-06 12:42 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr

2020-11-27 21:12 - 2020-05-29 20:31 - 000000000 ____D C:\Program Files\Rockstar Games

2020-11-27 21:12 - 2020-05-29 20:31 - 000000000 ____D C:\Program Files (x86)\Rockstar Games

2020-11-25 17:33 - 2020-07-04 09:26 - 000000774 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk

2020-11-25 17:33 - 2020-05-29 19:47 - 000000000 ____D C:\Users\*****\AppData\Roaming\Notepad++

2020-11-25 16:22 - 2020-09-20 10:56 - 000134792 _____ (AVG Technologies) C:\WINDOWS\system32\icarus_rvrt.exe

2020-11-22 20:25 - 2020-06-21 20:33 - 000000000 ____D C:\Users\*****\AppData\Roaming\.minecraft

2020-11-22 09:47 - 2020-05-29 19:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2020-11-21 16:07 - 2020-10-23 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer

2020-11-21 16:04 - 2020-05-31 11:52 - 000000000 ____D C:\Users\*****\AppData\Local\cache

2020-11-21 12:06 - 2020-05-29 19:36 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2020-11-20 20:06 - 2020-05-31 12:32 - 000000000 ____D C:\ProgramData\ProtonVPN

2020-11-20 20:03 - 2020-05-30 02:57 - 000000000 ____D C:\Users\*****\AppData\Local\ProtonVPN

2020-11-17 07:02 - 2020-05-29 21:31 - 000000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation

2020-11-17 07:02 - 2020-05-29 19:23 - 000000000 ____D C:\ProgramData\Packages

2020-11-15 20:28 - 2020-05-31 22:29 - 000000000 ____D C:\Users\*****\AppData\Roaming\WeMod

2020-11-14 18:09 - 2020-06-06 11:07 - 000000000 ____D C:\Users\*****\AppData\Local\GameCenter

2020-11-14 11:12 - 2020-05-29 19:25 - 000000000 ____D C:\WINDOWS\system32\MRT

2020-11-14 11:10 - 2020-05-29 19:25 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2020-11-13 18:45 - 2020-05-29 19:23 - 000000000 ____D C:\ProgramData\NVIDIA Corporation

2020-11-13 18:09 - 2020-05-29 19:16 - 002876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2020-10-27 21:46 - 2020-10-27 21:46 - 000004682 _____ () C:\Users\*****\AppData\Roaming\VoiceMeeterDefault.xml

2020-06-21 15:42 - 2020-12-09 17:23 - 000000128 _____ () C:\Users\*****\AppData\Local\PUTTY.RND

2020-07-12 18:33 - 2020-12-11 18:22 - 000007597 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

ilias2

11.12.2020 22:24

Die Addition.txt hat mehr als die hier erlaubte Zeichen länge weshalb ich es in zwei Beiträge geteilt habe

Addition.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 09-12-2020

durchgeführt von ***** (11-12-2020 22:10:46)

Gestartet von C:\Users\*****\Desktop

Windows 10 Pro Version 20H2 19042.630 (X64) (2020-05-29 18:19:26)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3136980708-3557880529-3186569697-500 - Administrator - Disabled)

amine (S-1-5-21-3136980708-3557880529-3186569697-1005 - Limited - Disabled)

DefaultAccount (S-1-5-21-3136980708-3557880529-3186569697-503 - Limited - Disabled)

Gast (S-1-5-21-3136980708-3557880529-3186569697-501 - Limited - Disabled)

***** (S-1-5-21-3136980708-3557880529-3186569697-1001 - Administrator - Enabled) => C:\Users\*****

laila (S-1-5-21-3136980708-3557880529-3186569697-1004 - Limited - Disabled) => C:\Users\laila

WDAGUtilityAccount (S-1-5-21-3136980708-3557880529-3186569697-504 - Limited - Disabled)

yahia (S-1-5-21-3136980708-3557880529-3186569697-1003 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

4500_Help (HKLM-x32\...\{7FDA2F0E-B522-48AD-8792-4BAAA4B5DA1C}) (Version: 1.00.0000 - Hewlett-Packard) Hidden

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 20.013.20074 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 13.7.0 - IObit)

Allods Online DE (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Allods Online DE (DE)) (Version: 1.209 - MY.GAMES)

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.07.21.306 - Advanced Micro Devices, Inc.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.16 - Advanced Micro Devices, Inc.)

AMD_Chipset_Drivers (HKLM-x32\...\{7598e74a-915c-4911-918c-ca4b2c296122}) (Version: 2.07.21.306 - Advanced Micro Devices, Inc.) Hidden

AORUS ENGINE (HKLM-x32\...\AORUS ENGINE_is1) (Version: 1.9.2.0 - GIGABYTE Technology Co.,Inc.)

APP Center (HKLM-x32\...\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.20.00803.1 - GIGABYTE) Hidden

APP Center (HKLM-x32\...\InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.20.00803.1 - GIGABYTE)

Assassin's Creed Chronicles China (HKLM-x32\...\Uplay Install 1651) (Version:  - Ubisoft)

Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version:  - Ubisoft)

Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)

Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version:  - Ubisoft)

Assassin's Creed Odyssey (HKLM-x32\...\Uplay Install 5059) (Version:  - Ubisoft)

Assassin's Creed Origins (HKLM-x32\...\Uplay Install 3539) (Version:  - Ubisoft)

Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)

Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version:  - Ubisoft)

Audacity 2.4.2 (HKLM-x32\...\Audacity_is1) (Version: 2.4.2 - Audacity Team)

AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 20.9.3152 - AVG Technologies)

AVG TuneUp (HKLM\...\AVG TuneUp) (Version: 20.1.2191.714 - AVG)

Balanced (HKLM-x32\...\{0EA45DD4-A825-420C-AFED-C659EFE3B84F}) (Version: 4.00.0000 - Advanced Micro Devices, Inc.) Hidden

bpd_scan (HKLM-x32\...\{EC7FE03D-239A-4E36-9907-0E327922D2A2}) (Version: 3.00.0000 - Hewlett-Packard) Hidden

BPDSoftware (HKLM-x32\...\{9237DDE8-1DF1-4FA7-AAF9-95458ABC26E0}) (Version: 140.0.001.000 - Hewlett-Packard) Hidden

BPDSoftware_Ini (HKLM-x32\...\{E105BB34-826A-4DF7-8F35-07DDEE1E47A0}) (Version: 1.00.0000 - Hewlett-Packard) Hidden

BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.72 - Piriform)

Cheat Engine 7.2 (HKLM\...\Cheat Engine_is1) (Version:  - Cheat Engine)

CPUID ROG CPU-Z 1.92 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.92 - CPUID, Inc.)

DC Universe Online Live (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\DG0-DC Universe Online Live) (Version:  - Sony Online Entertainment)

Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden

Detroit: Become Human (HKLM-x32\...\Detroit: Become Human_is1) (Version:  - )

DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden

Discord (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)

DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden

EasyTune (HKLM-x32\...\{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.20.0214.1 - GIGABYTE) Hidden

EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.20.0214.1 - GIGABYTE)

EasyTuneEngineService (HKLM-x32\...\{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.20.0701.1 - GIGABYTE) Hidden

EasyTuneEngineService (HKLM-x32\...\InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.20.0701.1 - GIGABYTE)

ENE IO Driver (HKLM-x32\...\{D0512FFD-6194-4D2E-967E-25B82A3322FF}) (Version: 3.3.0 - ENE TECHNOLOGY INC.) Hidden

ENE RGB HAL (HKLM\...\{8DA1B230-D82E-4A24-9237-363E2E1E2695}) (Version: 1.0.21.0 - Ene Tech.) Hidden

ENE RGB HAL (HKLM-x32\...\{bb670f8d-3d66-4f36-8e60-02b71bb0a4e9}) (Version: 1.0.21.0 - Ene Tech.) Hidden

ENE_DRAM_RGB_AURA42 (HKLM\...\{BC5E0A82-C638-44CB-8129-20C8ED70DE7A}) (Version: 1.00.02 - Ene Tech.) Hidden

ENE_DRAM_RGB_AURA42 (HKLM-x32\...\{f3d7fb09-b93f-4c01-a765-0b0adc5bc746}) (Version: 1.00.02 - Ene Tech.) Hidden

ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.6.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_M2_HAL (HKLM-x32\...\{d8516682-de60-4332-ad6f-49373754b677}) (Version: 1.0.6.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_SSS_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_SSS_HAL (HKLM-x32\...\{9eeadf99-713b-4ab5-9ccd-bf9c1c4d9daf}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden

Epic Games Launcher (HKLM-x32\...\{A5A6A747-393C-4B28-AB7B-2DE2BA7F7D73}) (Version: 1.1.267.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Far Cry 3 (HKLM-x32\...\Uplay Install 46) (Version:  - Ubisoft)

Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)

Fax (HKLM-x32\...\{9294F169-72EE-4D74-AE92-CA25F64B4FF8}) (Version: 140.0.307.000 - Hewlett-Packard) Hidden

Game Boost (HKLM-x32\...\{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}) (Version: 1.00.0006 - Gigabyte) Hidden

Game Boost (HKLM-x32\...\InstallShield_{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}) (Version: 1.00.0006 - Gigabyte)

Gigabyte Speed v10.21 (HKLM\...\Gigabyte Speed) (Version: 10.21 - cFos Software GmbH, Bonn)

GigabyteFirmwareUpdateUtility (HKLM-x32\...\{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}) (Version: 1.20.0406.1 - GIGABYTE) Hidden

GigabyteFirmwareUpdateUtility (HKLM-x32\...\InstallShield_{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}) (Version: 1.20.0406.1 - GIGABYTE)

GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden

GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden

Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.2060.1 - Rockstar Games)

GService (HKLM-x32\...\{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}) (Version: 1.19.0624.1 - GIGABYTE)

HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)

HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)

HP Officejet J4500 Series 14.0 Rel. 6 (HKLM\...\{EACF146B-01D2-4185-B773-9604A0E5902A}) (Version: 14.0 - HP)

HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden

HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden

HuBBa 1.3.90 (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\2a4703e6-0b98-56dd-80dd-5248bb27b192) (Version: 1.3.90 - BiFi2000)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Intel(R) Network Connections 23.5.0.0 (HKLM\...\PROSetDX) (Version: 23.5.0.0 - Intel)

Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version:  - Tonec Inc.)

IObit Uninstaller 9 (HKLM-x32\...\IObitUninstall) (Version: 9.5.0.15 - IObit)

J4500 (HKLM-x32\...\{3250CB33-9B5C-42CF-A215-23E95EA5F75E}) (Version: 140.0.001.000 - Hewlett-Packard) Hidden

Java 8 Update 261 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180261F0}) (Version: 8.0.2610.12 - Oracle Corporation)

KeePassXC (HKLM\...\{FEE3E3CD-2A6C-464E-8424-DE7512D4A5D0}) (Version: 2.6.2 - KeePassXC Team)

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

LEGO DC Super-Villains (HKLM-x32\...\LEGO DC Super-Villains_is1) (Version:  - )

LibreOffice 6.4 Help Pack (German) (HKLM\...\{6A9B7FBF-A3F4-4F69-8398-83E03F5EE94A}) (Version: 6.4.4.2 - The Document Foundation)

LibreOffice 7.0.2.2 (HKLM\...\{2D790347-9563-49DA-AAAD-A5D26B69C993}) (Version: 7.0.2.2 - The Document Foundation)

Mafia: Definitive Edition (HKLM-x32\...\Mafia: Definitive Edition_is1) (Version:  - )

Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)

MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

Marvel's Avengers (HKLM-x32\...\Marvel's Avengers_is1) (Version:  - )

Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.13426.20308 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.60 - Microsoft Corporation)

Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )

Microsoft OneDrive (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation)

Microsoft Teams (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Teams) (Version: 1.3.00.9267 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3994d355-238a-4612-af93-26d13deddef1}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29112 (HKLM-x32\...\{0f770e99-3916-4b0c-8f9b-83822826bcbf}) (Version: 14.27.29112.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)

Minecraft Launcher (HKLM-x32\...\{F6678473-0198-46D0-A88F-2A247E6FA03C}) (Version: 1.0.0.0 - Mojang)

Mozilla Firefox 83.0 (x64 de) (HKLM\...\Mozilla Firefox 83.0 (x64 de)) (Version: 83.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 76.0.1 - Mozilla)

MY.GAMES GameCenter (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\GameCenter) (Version: 4.1573 - MY.COM B.V.)

Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.9.1 - Notepad++ Team)

Npcap (HKLM-x32\...\NpcapInst) (Version: 1.00 - Nmap Project)

NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden

NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)

NVIDIA Grafiktreiber 460.79 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 460.79 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)

NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden

OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)

OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20294 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20308 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.13426.20294 - Microsoft Corporation) Hidden

OpenVPN 2.4.9-I601-Win10  (HKLM\...\OpenVPN) (Version: 2.4.9-I601-Win10 - OpenVPN Technologies, Inc.)

Password Tech Version 3.1.0 (HKLM-x32\...\{F2074AC4-1897-470C-A160-EF5C74F76763}_is1) (Version: 3.1.0 - Christian Thöing)

Password Tech Version 3.2.0 (Aktueller Benutzer, 64 Bit) (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\{F2074AC4-1897-470C-A160-EF5C74F76763}_is1) (Version: 3.2.0 - Christian Thöing)

Patriot Viper M2 SSD RGB (HKLM\...\{0886A906-0625-4A43-930D-AA92F6665AF4}) (Version: 1.00.04 - Patriot Memory) Hidden

Patriot Viper M2 SSD RGB (HKLM-x32\...\{ebb7013c-0b03-497c-bed1-1e48e806a593}) (Version: 1.00.04 - Patriot Memory)

PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden

PDF24 Creator 9.2.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)

Plex Media Server (HKLM-x32\...\{40c376bf-c3a0-439b-8353-f69a3bac10d6}) (Version: 1.21.0.3711 - Plex, Inc.)

Plex Media Server (HKLM-x32\...\{8DE31A48-E744-4526-AE09-B9A4002CE770}) (Version: 1.21.711 - Plex, Inc.) Hidden

ProductContext (HKLM-x32\...\{8064EF1E-3243-4307-A04F-BB64FF06A8DF}) (Version: 140.0.001.000 - Hewlett-Packard) Hidden

Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 2.0.1.0 - Advanced Micro Devices, Inc.) Hidden

ProtonVPN (HKLM-x32\...\{FD5DFEEE-C563-4D04-B3F4-E5C7D5F5B1E9}) (Version: 1.17.6 - Proton Technologies AG) Hidden

ProtonVPN (HKLM-x32\...\ProtonVPN 1.17.6) (Version: 1.17.6 - Proton Technologies AG)

ProtonVPNTap (HKLM-x32\...\{526B21BC-E7BE-4CC9-AF49-20F7F11B9113}) (Version: 1.1.1 - Proton Technologies AG)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Python 3.8.3 (32-bit) (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\{6f6f2a2d-6475-4359-bc65-b2cf464bd085}) (Version: 3.8.3150.0 - Python Software Foundation)

Python 3.8.3 Core Interpreter (32-bit) (HKLM-x32\...\{D3A7FDC5-BA4E-44FC-8822-800226B81C71}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Development Libraries (32-bit) (HKLM-x32\...\{EA35D9DB-86A9-4705-9D15-7FE33E261450}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Documentation (32-bit) (HKLM-x32\...\{BAF129CE-5C13-4383-9807-A44055644E08}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Executables (32-bit) (HKLM-x32\...\{D1EFF389-2F77-4A46-8AFD-4F37BC6F1F99}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 pip Bootstrap (32-bit) (HKLM-x32\...\{4ADFAA3D-1670-4161-A64A-83535B6D78C6}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Standard Library (32-bit) (HKLM-x32\...\{26B2CC8C-1492-437D-B27A-655AFB3647DE}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Tcl/Tk Support (32-bit) (HKLM-x32\...\{56AC5D63-87FC-4BA0-B4F2-6013D58F3302}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Test Suite (32-bit) (HKLM-x32\...\{0F5C1C82-9A7A-4FB4-8681-D4E7E9BBFD9C}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Utility Scripts (32-bit) (HKLM-x32\...\{14A8B424-0141-4E46-A1E2-548DF8349BB7}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python Launcher (HKLM-x32\...\{406A47EE-C4AE-4944-BADE-1B543A443873}) (Version: 3.8.7072.0 - Python Software Foundation)

Raspberry Pi Imager (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Raspberry Pi Imager) (Version: 1.4 - Raspberry Pi)

Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 9.11.9.1287 - Razer Inc.)

Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8945.1 - Realtek Semiconductor Corp.)

Red Dead Redemption 2 (HKLM-x32\...\Red Dead Redemption 2) (Version: 1.0.1355.18 - Rockstar Games)

RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.20.0721.1 - GIGABYTE)

Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.32.316 - Rockstar Games)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.7.5 - Rockstar Games)

Samsung DeX (HKLM-x32\...\{5E2BEDEC-EEE1-49B7-A9D0-6971AFA9B5F2}) (Version: 1.0.2.26 - Samsung Electronics Co., Ltd.) Hidden

Samsung DeX (HKLM-x32\...\{bc458b5f-1945-4287-8fae-353650fd3109}) (Version: 1.0.2.26 - Samsung Electronics Co., Ltd.)

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.31.0 - Samsung Electronics Co., Ltd.)

Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)

SIV (HKLM-x32\...\{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.20.0410.1 - GIGABYTE) Hidden

SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.20.0410.1 - GIGABYTE)

SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden

Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Stopping Plex (HKLM-x32\...\{94530A73-5D44-431B-B1F0-FEBA96C90390}) (Version: 1.21.711 - Plex, Inc.) Hidden

TAP-Windows 9.24.2 (HKLM\...\TAP-Windows) (Version: 9.24.2 - OpenVPN Technologies, Inc.)

Tautulli (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Tautulli) (Version: 2.6.2.1 - Tautulli)

Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.9267 - Microsoft Corporation)

TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.12.4 - TeamViewer)

The Sims 4 (HKLM-x32\...\The Sims 4_is1) (Version:  - )

Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version:  - Ubisoft)

Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden

TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden

Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 29.0 - Ubisoft)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)

VMware Workstation (HKLM\...\{2B5DAA91-E0C9-4307-90B7-5688E910C894}) (Version: 15.1.0 - VMware, Inc.)

VNC Viewer 6.20.529 (HKLM\...\{1A0D1F90-8D1F-4922-8546-D1F84501C46A}) (Version: 6.20.529.42646 - RealVNC Ltd)

Watch Dogs Legion (HKLM-x32\...\Uplay Install 3353) (Version:  - Ubisoft)

Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)

WATCH_DOGS2 (HKLM-x32\...\Uplay Install 2688) (Version:  - Ubisoft)

WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden

WeMod (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\WeMod) (Version: 6.3.11 - WeMod)

WhatsApp (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\WhatsApp) (Version: 2.2047.13 - WhatsApp)

Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)

Windows Subsystem for Linux Update (HKLM\...\{18E72D39-392C-419D-9B86-C4C633B4CED9}) (Version: 4.19.128 - Microsoft Corporation)

WinRAR 5.91 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Wireshark 3.4.0 64-bit (HKLM-x32\...\Wireshark) (Version: 3.4.0 - The Wireshark developer community, hxxps://www.wireshark.org)

Zoom (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.)
 

Packages:

=========

Amazon Music -> C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_8.0.0.0_x86__kc6t79cpj4tp0 [2020-12-11] (AMZN Mobile LLC)

Amazon Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.42.0_x64__pwbj9vvecjh7j [2020-12-11] (Amazon Development Centre (London) Ltd)

Kali Linux -> C:\Program Files\WindowsApps\KaliLinux.54290C8133FEE_1.6.0.0_x64__ey8k8hqnwqnmg [2020-12-11] (Kali Linux)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Studios) [MS Ad]

Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.32.33291.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation) [Startup Task]

Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-12-11] (Netflix, Inc.)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.959.0_x64__56jybvy8sckqj [2020-12-11] (NVIDIA Corp.)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.11.217.0_x64__dt26b99r8h8gj [2020-12-11] (Realtek Semiconductor Corp)

Ubuntu -> C:\Program Files\WindowsApps\CanonicalGroupLimited.UbuntuonWindows_2004.2020.812.0_x64__79rhkp1fndgsc [2020-12-11] (Canonical Group Limited)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3136980708-3557880529-3186569697-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20077.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3136980708-3557880529-3186569697-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\*****\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20077.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [                        IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => H:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2019-05-02] (Tonec Inc. -> Tonec Inc.)

ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => H:\Program Files (x86)\Notepad++\NppShell_06.dll [2020-09-24] (Notepad++ -> )

ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => G:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-05-25] (IObit Information Technology -> IObit)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit)

ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => G:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2019-05-04] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => G:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2019-05-04] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit)

ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => G:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-05-25] (IObit Information Technology -> IObit)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\nvshext.dll [2020-12-05] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => G:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-05-25] (IObit Information Technology -> IObit)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\GeForce Experience Stream Client.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=gjljknijpnfibppaijefibndmiabonep
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2020-11-23 19:03 - 2020-11-23 19:03 - 000629760 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\aac_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000394752 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\ac3_encoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000608256 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\dca_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000751104 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\flv_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 001559040 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\h264_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000818688 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\hevc_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 001800704 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\libx264_encoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000579072 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\mp3_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 001268224 _____ () [Datei ist nicht signiert] \\?\C:\Users\*****\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\mpeg4_decoder.dll

2020-04-30 14:28 - 2020-04-30 14:28 - 001866752 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\BDR_info.dll

2019-08-05 19:50 - 2019-08-05 19:50 - 000009216 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\Phison.dll

2020-12-05 19:23 - 2020-12-05 19:23 - 000182272 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\_cffi_backend.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000034816 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_aes.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000016384 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_aesni.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013312 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_cbc.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_cfb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000014336 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ctr.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000011264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ecb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000015360 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ocb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000012288 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ofb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000015360 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_Salsa20.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000015872 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_BLAKE2s.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_ghash_clmul.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_ghash_portable.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000016896 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_MD5.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000019456 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_SHA1.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000022016 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_SHA256.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013312 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Protocol\_scrypt.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000011264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Util\_cpuid_c.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000011264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Util\_strxor.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 003100160 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\cryptography\hazmat\bindings\_openssl.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000572928 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\pythoncom38.dll

2020-12-05 19:23 - 2020-12-05 19:23 - 000142848 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\pywintypes38.dll

2020-12-05 19:23 - 2020-12-05 19:23 - 000134656 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32api.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000539136 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32com\shell\shell.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000027648 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32event.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000058880 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32service.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000054272 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000039936 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000218624 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000036864 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000024576 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000069632 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\yarl\_quoting_c.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000050176 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000225792 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000045056 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000073216 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\yarl\_quoting.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000050176 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000225792 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000045056 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000014848 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\google\protobuf\internal\_api_implementation.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 001055232 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\google\protobuf\pyext\_message.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000118784 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\_elementpath.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 003284992 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\etree.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000161792 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\html\clean.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000009728 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\websockets\speedups.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000069632 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\yarl\_quoting_c.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000231424 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\_yaml.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000050176 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000225792 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000045056 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\psutil\_psutil_windows.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000069632 _____ () [Datei ist nicht signiert] C:\Users\*****\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\yarl\_quoting_c.cp37-win32.pyd

2020-10-21 19:33 - 2020-10-21 19:33 - 000083604 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libdouble-conversion.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000081585 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libgcc_s_seh-1.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 028408832 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libicudt67.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 003277824 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libicuin67.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 002113536 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libicuuc67.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000339456 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libpcre2-16-0.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000303486 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libsodium-23.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000043429 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libssp-0.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 001752711 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libstdc++-6.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000737792 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libzstd.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000093720 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\zlib1.dll

2020-12-05 12:55 - 2020-12-04 09:17 - 000064512 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000050176 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000225792 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000045056 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000034304 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000034304 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\multidict\_multidict.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000061952 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\psutil\_psutil_windows.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000073216 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\yarl\_quoting.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000048128 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000036864 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000216064 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000032256 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000022528 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000034304 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\_multidict.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000073216 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\_quoting.cp37-win32.pyd

2019-04-15 15:24 - 2019-04-15 15:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\yccV2.dll

2019-04-15 16:24 - 2019-04-15 16:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\yccV2.dll

2019-04-15 16:24 - 2019-04-15 16:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\yccV2.DLL

2019-10-29 09:26 - 2019-10-29 09:26 - 000445952 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GVDisplay.dll

2018-09-11 19:53 - 2018-09-11 19:53 - 000237056 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GvIllumLib.dll

2020-06-18 08:01 - 2020-06-18 08:01 - 002057216 _____ (GIGABYTE) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACPCIeSSD_Lib.dll

2020-06-18 08:01 - 2020-06-18 08:01 - 002057728 _____ (GIGABYTE) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACSSD_Lib.dll

2010-08-06 10:15 - 2010-08-06 10:15 - 000071680 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzinw12.dll

2010-08-06 10:15 - 2010-08-06 10:15 - 000089600 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzipm12.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000058539 _____ (MingW-W64 Project. All rights reserved.) [Datei ist nicht signiert] G:\Program Files\KeePassXC\libwinpthread-1.dll

2018-08-30 16:26 - 2018-08-30 16:26 - 000053760 _____ (MS) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\MsIo32_Galax.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 006992719 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] G:\Program Files\KeePassXC\Qt5Core.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 002549349 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] G:\Program Files\KeePassXC\Qt5Network.dll

2015-10-14 00:15 - 2015-10-14 00:15 - 002042368 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\osvi.dll

2019-07-04 18:06 - 2019-07-04 18:06 - 001988608 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GbtNvGpuLib.dll

2017-10-05 15:26 - 2017-10-05 15:26 - 002247168 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\CRtive.dll

2018-12-08 08:22 - 2018-12-08 08:22 - 002059264 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GHidApi.dll

2020-07-06 19:33 - 2020-07-06 19:33 - 000478720 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GvLedLib.dll

2020-05-08 14:55 - 2020-05-08 14:55 - 002107392 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\SMBCtrl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\*****\AppData\Local\Temp:$DATA [16]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP

BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> H:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2020-01-21] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> G:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2020-01-31] (IObit Information Technology -> IObit)

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_261\bin\ssv.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_261\bin\jp2ssv.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> H:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2020-01-21] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\sharepoint.com -> hxxps://jgumainz-files.sharepoint.com
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 10:14 - 2020-06-06 12:01 - 000000862 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       activate.navicat.com
 

2020-05-31 16:10 - 2020-12-09 18:35 - 000000435 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

172.31.128.1 *****.mshome.net # 2025 12 1 8 17 35 43 429
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\Control Panel\Desktop\\Wallpaper -> H:\Downloads\Compressed\WD2_Wallpapers\3\16_9\3_2560x1440.jpg

DNS Servers: Datenträger ist nicht mit dem Internet verbunden.

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

 ist aktiviert.
 

Network Binding:

=============

Ethernet: VMware Bridge Protocol -> vmware_bridge (enabled) 

Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

Ethernet: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

Ethernet: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

LAN-Verbindung: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

LAN-Verbindung: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

LAN-Verbindung: VMware Bridge Protocol -> vmware_bridge (enabled) 

LAN-Verbindung: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 

VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

LAN-Verbindung 2: VMware Bridge Protocol -> vmware_bridge (enabled) 

LAN-Verbindung 2: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

LAN-Verbindung 2: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

LAN-Verbindung 2: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 

VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"

HKLM\...\StartupApproved\Run: => "XboxStat"

HKLM\...\StartupApproved\Run: => "Riot Vanguard"

HKLM\...\StartupApproved\Run32: => "RazerCortex"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "vmware-tray.exe"

HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"

HKLM\...\StartupApproved\Run32: => "PDFPrint"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\StartupFolder: => "GIGABYTE AORUS GRAPHICS ENGINE.lnk"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "IDMan"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "EpicGamesLauncher"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "OPENVPN-GUI"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "Advanced SystemCare"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "MyDriveConnect.exe"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "35C0DD69A13B47FAAE527F030D7053F7FAB3A98B._service_run"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{DAE1B244-2654-4C22-9C03-8F75C38131C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{8953D7FC-E6A6-478A-90A0-192C1EC81428}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{884ADA83-A667-4B8B-A28F-6FC912E29B66}] => (Allow) H:\Program Files (x86)\Steam\steam.exe (Valve -> Valve Corporation)

FirewallRules: [{6AB88638-B0AF-4021-9D7A-ABA0FBA7FAA7}] => (Allow) H:\Program Files (x86)\Steam\steam.exe (Valve -> Valve Corporation)

FirewallRules: [{4238A560-8AA9-4999-B7FF-B21258D3FBA4}] => (Allow) H:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{A4C491AB-9C55-4D6B-81B8-8ABF16EEA7B6}] => (Allow) H:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{E9269052-FE64-44E4-BC31-5899E47CD50D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{6233A909-02E2-4441-BC45-52BC23EC49D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{AEE1DF78-731F-49A9-9064-990E95B5CC82}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{D619D246-E916-4FE4-8167-8C3899C9457B}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{7B5A16C2-03C8-437A-91F8-888B020401E3}] => (Allow) LPort=9009

FirewallRules: [{F8441524-0FC2-4B58-8620-D25FBB8BF5A9}] => (Allow) LPort=9009

FirewallRules: [{71652B94-8D03-4E8D-9E5E-FDD09E09ABD9}] => (Allow) LPort=9009

FirewallRules: [{E585C08C-AAC7-47CB-8D65-2F8A060309BA}] => (Allow) LPort=9009

FirewallRules: [{79F958CA-7658-464F-AD6D-B57E92AA87C6}] => (Allow) LPort=9009

FirewallRules: [{70E69257-630E-4CAE-B394-50B2A5F8C725}] => (Allow) LPort=9009

FirewallRules: [{39E5249B-6E84-4C31-898D-0D676F464C6D}] => (Allow) LPort=9009

FirewallRules: [{92A762F5-71D4-480C-AFFD-1EFF1A88F178}] => (Allow) LPort=9009

FirewallRules: [{FFA17206-E769-43F6-BDCF-D33465CE9A83}] => (Allow) LPort=9009

FirewallRules: [{7558928D-63E2-4718-8141-71ABF2DD86BD}] => (Allow) LPort=9009

FirewallRules: [{3257E1C0-E035-46F5-95C8-BB203AD797C2}] => (Allow) LPort=9009

FirewallRules: [{093B834C-2C0F-4545-9DDE-8E835519F4C8}] => (Allow) LPort=9009

FirewallRules: [{20F30550-43F8-4C2E-B616-093EA22D65F0}] => (Allow) LPort=9009

FirewallRules: [{540C48AD-2635-4F95-984C-9949129C1BF7}] => (Allow) LPort=9009

FirewallRules: [{BCB17D5B-80F3-491E-BD8F-8C25CB2414D0}] => (Allow) LPort=9009

FirewallRules: [{D14AC5A1-CFFB-4C41-A210-9096E8E8B3A6}] => (Allow) LPort=9009

FirewallRules: [{6653C6AB-652C-4448-8389-D476501673A1}] => (Allow) LPort=9009

FirewallRules: [{32E7A7CB-3833-435A-B181-94EC250C604A}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Origins\ACOrigins_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{4E3AE518-57EC-4907-A69B-C468C65FF1C5}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Origins\ACOrigins_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{26C20AEF-BD2D-491B-A067-3F4851939276}] => (Allow) LPort=9009

FirewallRules: [{80513380-7748-4F98-99FB-00A23CC8642B}] => (Allow) LPort=9009

FirewallRules: [{4DC846C7-943A-4A2F-BBEB-282F08D8B471}] => (Allow) LPort=9009

FirewallRules: [{4BACDBCD-84E1-4E91-BECB-24970AEBA7B3}] => (Allow) LPort=9009

FirewallRules: [{2152E9D9-6A7F-493F-B133-CE52714DE524}] => (Allow) LPort=9009

FirewallRules: [{7BA34BAB-84FC-4E05-AC16-280CFA7378B1}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [{CD655D27-EE12-4F43-8349-411302EE893C}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [{1E82349B-7870-44A1-800B-4DE6C661A138}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )

FirewallRules: [{7AD85ACA-0D91-4770-A511-8946D0A5A20A}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )

FirewallRules: [{230FA1FA-90E8-4224-8C59-F2071BAAC89B}] => (Allow) LPort=9009

FirewallRules: [{776C6B29-8999-42F1-BE34-377AD0295116}] => (Allow) LPort=9009

FirewallRules: [{2D7BAD1D-1489-494A-A623-5F4C89A9D998}] => (Allow) LPort=9009

FirewallRules: [{54C21C80-B054-4099-9E76-19F198F065A6}] => (Allow) LPort=9009

FirewallRules: [{27DEAD8C-1074-4CD3-8356-145D2B147ED3}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\BeamNG.drive\BeamNG.drive.exe (BeamNG GmbH) [Datei ist nicht signiert]

FirewallRules: [{4AEA242F-4724-44BF-B58D-C0CF88E42BF6}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\BeamNG.drive\BeamNG.drive.exe (BeamNG GmbH) [Datei ist nicht signiert]

FirewallRules: [{E89F7144-8877-45F2-A916-4AA8F78DDAA4}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )

FirewallRules: [{C842A5DE-0D43-41F2-B624-C7579A943852}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )

FirewallRules: [{1920091C-16C5-4FF9-993D-411EA8E6C4F7}] => (Allow) LPort=9009

FirewallRules: [{298444CD-4F5D-44D1-A78B-81FD66B05E92}] => (Allow) LPort=9009

FirewallRules: [{F1D5B639-4A0E-43AE-B1D1-EE1C57E2EFE7}] => (Allow) LPort=9009

FirewallRules: [{C97A7AEA-DD0A-410B-9332-8E0A4E070F54}] => (Allow) LPort=9009

FirewallRules: [{8844F677-8A28-4AFF-BB8D-36C715E786C2}] => (Allow) LPort=9009

FirewallRules: [{F238437D-94F2-4657-BF0E-886F77F217A4}] => (Allow) LPort=9009

FirewallRules: [{500043C5-D2D9-4AAA-8B5E-369AAC125985}] => (Allow) LPort=9009

FirewallRules: [{4437032A-A84D-4446-B2E4-E376156E3FA7}] => (Allow) LPort=9009

FirewallRules: [{DB080CB2-DBAC-4FAF-8A4C-F091CA7930DB}] => (Allow) LPort=9009

FirewallRules: [{89C27047-0265-4D30-A9B3-A2F700E38227}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Allods Online My.com\AllodsMycomSteamLoader.exe (Mail.Ru LLC -> )

FirewallRules: [{0F15FEC3-0EE0-4F41-8556-1A7064B2A426}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Allods Online My.com\AllodsMycomSteamLoader.exe (Mail.Ru LLC -> )

FirewallRules: [{0E4B8310-D4C6-45AD-BAD6-FACE249BD8E7}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Allods Online My.com\Allods Online DE\bin\Launcher.exe (LLC MAIL.RU -> © 2008-2019 Allods Team, Mail.Ru Games) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{A9E1CF12-2656-4B8A-B67C-984D441B4176}C:\users\*****\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\*****\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [UDP Query User{DC2926A0-F60F-4B0E-851F-5F2782E74326}C:\users\*****\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\*****\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [{3775C925-8205-41C2-8EAF-B263CA3B52B7}] => (Allow) G:\Programme\Uplay\Assassin's Creed Odyssey\ACOdyssey_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{FCDF7798-1206-4109-B228-EE7ED48C787F}] => (Allow) G:\Programme\Uplay\Assassin's Creed Odyssey\ACOdyssey_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{5ECD9456-BAE5-49CF-80BE-202009E6D589}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest_x64.exe () [Datei ist nicht signiert]

FirewallRules: [{C271ABFC-434D-4914-9361-C575F25CCF70}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest_x64.exe () [Datei ist nicht signiert]

FirewallRules: [{10D42B82-D1BB-4016-B299-9F4C7700DCBC}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest.exe () [Datei ist nicht signiert]

FirewallRules: [{D4A3137A-4F0B-40F7-A90A-62EF6CAA7D38}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest.exe () [Datei ist nicht signiert]

FirewallRules: [{EF6BD5E2-8357-478E-BE90-5B51401E7CB3}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{4A6BA015-1596-4A95-B131-340F084CDF2E}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{9CC8AC29-BAB1-4AB8-A2A5-E8B21E4FB5C3}] => (Allow) LPort=9009

FirewallRules: [{41AFF113-3D49-43FE-8D12-9F8B39755813}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{B769692B-4E38-42C0-B5A8-AB58A649F489}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{F6401DCF-0AA0-4BF1-B4AD-1CC1B5DFBF32}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin_plus\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{1730AC81-1750-4CD0-96BE-7F8654C94C2F}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin_plus\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{73A037D6-AA68-4BE5-8023-093CF12D6DF0}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\EAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{9E1C9D18-A17E-4822-A5ED-68713DAB55DF}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\EAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{9651F030-D1E6-406B-9897-5AFAEAA1D429}] => (Allow) LPort=9009

FirewallRules: [{3C458199-E8D5-47D4-915D-E0B6CE784E49}] => (Allow) LPort=9009

FirewallRules: [{FA40DA03-697A-4BC8-802C-189E111B7521}] => (Allow) LPort=9009

FirewallRules: [{665FF16B-2402-4E78-B20C-E59C3093A21F}] => (Allow) LPort=9009

FirewallRules: [{902CCB86-526F-4C35-A60E-B9BD8CC82DBF}] => (Allow) LPort=9009

FirewallRules: [{0C23F0E1-76F2-4B50-B8A2-A9CE75A0C88A}] => (Allow) LPort=9009

FirewallRules: [{FCECE2A5-8655-4E13-9A61-DD278CD8E7B3}] => (Allow) LPort=9009

FirewallRules: [{336BEA9B-BF7D-4E49-9F1E-C78BE0AA5B96}] => (Allow) LPort=9009

FirewallRules: [{E25D0CD7-ED3B-4BBE-B991-2AF39D30381F}] => (Allow) C:\Users\*****\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{91E6759A-758A-4EDB-A369-ABC3CF8F54D4}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Syndicate\ACS.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{B634680D-29BE-4184-A686-8962295DB8A6}] => (Allow) LPort=9009

FirewallRules: [{7EEB199B-2474-4FEC-B4E8-048D4D2C9A89}] => (Allow) LPort=9009

FirewallRules: [{F5C7F79B-0FCB-4B42-9243-43E0C169AE84}] => (Allow) LPort=9009

FirewallRules: [{7F8AA965-8883-4DCB-A9EF-298E2DF8FE19}] => (Allow) H:\Programme\Uplay\games\Watch_Dogs\bin\Watch_Dogs.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{A21B38AD-4976-4F94-A93E-1350888A32CE}] => (Allow) H:\Programme\Uplay\games\Watch_Dogs\bin\Watch_Dogs.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{313DD029-0170-4028-BBDF-AA39AF187908}] => (Allow) LPort=9009

FirewallRules: [{AF340386-CB3C-4705-9B50-4D34F517D474}] => (Allow) LPort=9009

FirewallRules: [{EF463F9B-102D-4A1E-B0E0-5C6BBE8948F1}] => (Allow) LPort=9009

FirewallRules: [{3770FD15-5B33-40EA-BC19-EBAFDDC062F2}] => (Allow) LPort=9009

FirewallRules: [{9958AF36-41DB-4526-9502-98B57ED63366}] => (Allow) LPort=9009

FirewallRules: [{CF11565B-CA51-46C3-B677-BF0296848677}] => (Allow) LPort=9009

FirewallRules: [{94C3C4B4-BD1A-44EF-B14E-E41495A88F7E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{F69665A2-2B24-4355-9E06-3569D87CC5EB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{67AF3586-FFFC-4F4B-9FBD-744D151BF6C2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{48001033-9119-43D6-9926-41E0131D1A27}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{CD276B12-4AD6-4F46-A620-C869659E279C}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Besiege\Besiege.exe () [Datei ist nicht signiert]

FirewallRules: [{BB070AAD-6B52-42EC-8E38-934E6DA54915}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Besiege\Besiege.exe () [Datei ist nicht signiert]

FirewallRules: [{826571B4-AD43-4555-9565-606B8D1C96EC}] => (Allow) LPort=9009

FirewallRules: [{D81723F0-799E-4FA9-93F9-019325772670}] => (Allow) LPort=9009

FirewallRules: [{F7F54016-1A1E-4830-89AF-F9A8CEDFC8C6}] => (Allow) LPort=9009

FirewallRules: [{0A788C13-0189-48F1-890B-E06369E7DEF4}] => (Allow) LPort=9009

FirewallRules: [{423E12D6-0D79-4E08-A4E7-F6B5A7DAC5EE}] => (Allow) LPort=9009

FirewallRules: [{3BD60476-133B-46E8-8229-5F5C294AE233}] => (Allow) LPort=9009

FirewallRules: [{89D7626B-8331-4775-86F8-598C41A2A979}] => (Allow) LPort=9009

FirewallRules: [{73111904-FC32-442C-A1C5-83F271630428}] => (Allow) LPort=9009

FirewallRules: [{D947EB54-FD26-4F6B-A8C7-76E4347CBE25}] => (Allow) LPort=9009

FirewallRules: [{B4AF0129-BEC0-4F98-BDA8-1550049EDA37}] => (Allow) LPort=9009

FirewallRules: [{47167BB2-DB19-4F8E-8FA5-668C7A962FE5}] => (Allow) LPort=9009

FirewallRules: [{B0F494FC-3211-4705-AFBE-7654896D98E9}] => (Allow) LPort=9009

FirewallRules: [{8C9C5FBA-EBCA-4298-97F2-829568403AF9}] => (Allow) LPort=9009

FirewallRules: [{F65F57DA-48F1-4403-A469-1A816C1EDA68}] => (Allow) LPort=9009

FirewallRules: [{CB953820-00B6-4890-82B1-6C9F9F24AD29}] => (Allow) LPort=9009

FirewallRules: [{B78BB03D-0D62-4625-BC5C-E32EB9C89524}] => (Allow) LPort=9009

FirewallRules: [{4B39B479-9339-4477-9AD5-609D8A5FDC7A}] => (Allow) LPort=9009

FirewallRules: [{36C1CE74-5400-4108-B20E-0BBCA1F1650C}] => (Allow) LPort=9009

FirewallRules: [{C0DA0D50-A282-4DC2-8A66-27B4F788726F}] => (Allow) LPort=9009

FirewallRules: [{8C445951-DDA3-4012-BE57-33CD2FB1BC45}] => (Allow) LPort=9009

FirewallRules: [{EB3603CA-F786-4711-A74E-6F18A7528218}] => (Allow) LPort=9009

FirewallRules: [{7B7C164C-7698-4937-91FA-16DDF623FDA5}] => (Allow) LPort=9009

FirewallRules: [{D151D9B4-69AB-49C6-A1CC-7FA20CE42159}] => (Allow) LPort=9009

FirewallRules: [{0208A22B-0C03-4DF3-ACEB-04DDF745AAF1}] => (Allow) LPort=9009

FirewallRules: [{6AF6A2BA-1AD8-47FA-BABB-FF472A23F98A}] => (Allow) LPort=9009

FirewallRules: [{6715DBFF-A385-4979-9B78-06E0D1236B05}] => (Allow) LPort=9009

FirewallRules: [{71DA14A0-C1F9-4CC4-9CB7-07CF6916E11A}] => (Allow) LPort=9009

FirewallRules: [{CD0CCEB7-0155-49CB-8D4E-3C743676BC69}] => (Allow) LPort=9009

FirewallRules: [{B88AB3AA-20E5-4627-AB4B-422CFA83741C}] => (Allow) LPort=9009

FirewallRules: [{649204E0-8FF7-4482-8C16-50A502B7CEBD}] => (Allow) LPort=9009

FirewallRules: [{B8B1B2D3-A1CC-4A25-81D6-9F6CB9BD8CF8}] => (Allow) LPort=9009

FirewallRules: [{F6F33401-293B-4F8D-AAFC-7B6F5C4E1948}] => (Allow) LPort=9009

FirewallRules: [{7C027969-982F-45C9-B03F-DC52E1E072F7}] => (Allow) LPort=9009

FirewallRules: [{F24147DC-5C0D-4118-A2F9-BFEEEBA9F80D}] => (Allow) LPort=9009

FirewallRules: [{A07A76B5-06AE-4357-8E27-D51E507B9B69}] => (Allow) LPort=9009

FirewallRules: [{2CBE5144-5521-4151-9959-2087CF58B131}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{8038F798-E538-458B-BBAB-6CA4DFF7C523}G:\program files (x86)\the knight\rage 2\rage2.exe] => (Allow) G:\program files (x86)\the knight\rage 2\rage2.exe () [Datei ist nicht signiert]

FirewallRules: [UDP Query User{2D0544CE-01CA-4DF4-8D2F-07BD0A60961E}G:\program files (x86)\the knight\rage 2\rage2.exe] => (Allow) G:\program files (x86)\the knight\rage 2\rage2.exe () [Datei ist nicht signiert]

FirewallRules: [{EF6D7BBD-12E2-4087-AC19-13221B5D0E52}] => (Allow) LPort=9009

FirewallRules: [{F46FFAAC-EF19-4E2B-89D4-3D0706A201D9}] => (Allow) LPort=9009

FirewallRules: [{901609A1-24C2-42D2-B02E-EB0B6C6A2583}] => (Allow) LPort=9009

FirewallRules: [{7DDDC26B-89AF-4329-B0AA-6A8A9A433C26}] => (Allow) LPort=9009

FirewallRules: [{5AF7EE4C-8E9D-4337-97DC-117C775BCD98}] => (Allow) LPort=9009

FirewallRules: [{28D55537-8EF4-4913-B3FA-DDAEFB2B48FD}] => (Allow) LPort=9009

FirewallRules: [{6BA14A00-0E55-4FDD-8176-A60B0AB0312D}] => (Allow) LPort=9009

FirewallRules: [{A9EDA5FF-316F-4637-8DD2-5E7F3AAA517E}] => (Allow) LPort=9009

FirewallRules: [{6ACBF067-C968-48A5-98BC-DCF3E49983E5}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]

FirewallRules: [{4DBDD82D-D712-4224-9F83-DB375D1178A7}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]

FirewallRules: [{1274570E-F929-4371-9B91-92EECC0EE6B5}] => (Allow) LPort=9009

FirewallRules: [{AA259895-23A8-4638-805D-1EAE06BBD5BD}] => (Allow) LPort=9009

FirewallRules: [{E0879C28-E438-4948-A68B-16ABF9E34825}] => (Allow) LPort=9009

FirewallRules: [{6CEE1229-C96D-42E3-A191-A00B1746C818}] => (Allow) LPort=93

FirewallRules: [{8E6323E3-7481-48B8-A6C5-6929545D4348}] => (Allow) LPort=9009

FirewallRules: [{98579FAF-90A3-4459-B8EB-3439AFD0B49A}] => (Allow) LPort=9009

FirewallRules: [{E468DEC2-9E1F-4D14-9280-C5A2C0673B6D}] => (Allow) LPort=9009

FirewallRules: [{78868E05-8EBC-4917-8C8B-235F9DD08690}] => (Allow) LPort=9009

FirewallRules: [{10C28EED-B248-4AAB-86B9-B421D124EE84}] => (Allow) LPort=9009

FirewallRules: [{883691ED-79C4-4C55-9930-47E727FCDE9A}] => (Allow) LPort=9009

FirewallRules: [{70A148D2-EC84-44BE-925F-5C7869E7FCBE}] => (Allow) LPort=9009

FirewallRules: [{2453CC66-2ED7-4451-A2C9-AE77792D4065}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{F0C934A0-B3F4-4D9A-8F2B-6B0502AF23A6}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{C88135CA-F1E0-4687-802E-BB3F76F8D211}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{BD216EDE-6A0C-4278-99C8-AAF8D861B52B}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe (MariaDB Corporation Ab -> )

FirewallRules: [UDP Query User{3FCD227C-6102-4281-AF42-8CAE65421532}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe (MariaDB Corporation Ab -> )

FirewallRules: [TCP Query User{E4199A6A-DA0D-4C3C-A320-770B4F3EC150}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [UDP Query User{A49FFB1E-EE35-4232-A6DB-8145D49ABAB3}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [TCP Query User{1CCD513A-D05F-4DE7-A964-668BC97CDAB0}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{4AF40930-0DE9-441E-93A1-DDF69FDD44D7}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{D52E00C1-A812-4F43-AC0B-BAB8C9BA21CD}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{0A45418E-3CD3-4C46-8909-FBB139EF5281}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [{E4677943-4809-41F4-AA1B-7386B1BDD8B9}] => (Allow) LPort=9009

FirewallRules: [{02C12C4E-1514-4540-9A40-F1F8C2258F11}] => (Allow) LPort=9009

FirewallRules: [{E2B7545F-F8F2-452A-883D-DA1B8C5C14D7}] => (Allow) LPort=9009

FirewallRules: [{E886355F-7504-4955-AA73-98021821A3DC}] => (Allow) LPort=9009

FirewallRules: [{8F8A5180-FD08-4631-A7A9-F8AEE9AD3819}] => (Allow) LPort=9009

FirewallRules: [{EED15B78-6086-4DCF-8A6F-9813B27CDF21}] => (Allow) LPort=9009

FirewallRules: [{2A00541F-E9DB-478B-A4FA-95502773AAC1}] => (Allow) LPort=9009

FirewallRules: [{FF505FD8-7377-45E3-82C7-4F85D5F92858}] => (Allow) LPort=9009

FirewallRules: [{457DE54F-6E38-4D34-A3FF-26B8F93FAF54}] => (Allow) LPort=9009

FirewallRules: [{1797903C-E973-4A1C-B756-B4DAA03E15FF}] => (Allow) LPort=9009

FirewallRules: [{8A95BADA-C539-4E36-878D-0FC83CD039B8}] => (Allow) LPort=9009

FirewallRules: [{8C18C03E-BC22-4418-B6F6-E53BD9D37C35}] => (Allow) LPort=9009

FirewallRules: [{38AB4A76-A973-4ED8-9E06-A528F73E2D5B}] => (Allow) LPort=9009

FirewallRules: [{C1FDFAA9-2D0C-4B7F-AA22-BAC16DDDD975}] => (Allow) LPort=9009

FirewallRules: [{98987678-49BC-402B-9256-DF66E18CF71B}] => (Allow) LPort=9009

FirewallRules: [{39A4F60A-36B7-481E-AB97-7B92C07ECFF3}] => (Allow) LPort=9009

FirewallRules: [{EB3B11F7-4173-4169-8173-339E6B283E16}] => (Allow) LPort=9009

FirewallRules: [{F743F4E2-991E-47D5-8AF3-EDC27E70BF31}] => (Allow) LPort=9009

FirewallRules: [{7C1B9F43-4F85-498B-BFA2-4BD1D7FFE53C}] => (Allow) LPort=9009

FirewallRules: [{10EC20FD-6BEE-48EA-80AA-7F082D38C427}] => (Allow) LPort=9009

FirewallRules: [{21E8B3AD-84CE-474A-855E-F8E02505AA59}] => (Allow) LPort=9009

FirewallRules: [{6FB6C9E9-9468-4C07-96AE-96C234EC9D1C}] => (Allow) LPort=9009

FirewallRules: [{BBCC23F3-D543-4DD2-B1A5-B645643123DA}] => (Allow) LPort=9009

FirewallRules: [{F86E22EB-8CF4-4705-8200-9E7F85B8D54D}] => (Allow) LPort=9009

FirewallRules: [{9052F49F-751D-4D4F-A699-C55374F0720D}] => (Allow) LPort=9009

FirewallRules: [{6FF09F31-68B5-4FD6-81BE-467020294980}] => (Allow) LPort=9009

FirewallRules: [{10713C94-AE25-4D74-B62C-F415C66B003C}] => (Allow) LPort=9009

FirewallRules: [{7763BD91-1F1D-451A-8570-2F7E3F7F0CC1}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{5C47F3BA-2A49-43C9-BC11-F28D23192A1E}H:\programme\rockstar games\grand theft auto v\gta5.exe] => (Allow) H:\programme\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [UDP Query User{A08F555D-810C-4C70-BE2C-8909612E1DBB}H:\programme\rockstar games\grand theft auto v\gta5.exe] => (Allow) H:\programme\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [{9B5B8FA4-5ECC-457A-AA48-802BF2D8CB1C}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{C7E780B7-2916-459A-80A3-24A4EF243FB2}G:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) G:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [UDP Query User{2D31F209-16D4-4065-8A6B-F9060FA67C89}G:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) G:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [{0A15C446-9831-4EED-864A-21129DEB6130}] => (Allow) LPort=9009

FirewallRules: [{0A52F091-B959-4862-92B4-2E023793F300}] => (Allow) LPort=9009

FirewallRules: [{43F0F9CF-1D18-4803-9485-013AE8D61DB5}] => (Allow) LPort=9009

FirewallRules: [{EA2AF9DB-AAA8-4DF3-9B52-DA1C4A622B99}] => (Allow) LPort=9009

FirewallRules: [{56E60533-054A-4BCB-AA39-5AC520E4A2B9}] => (Allow) LPort=9009

FirewallRules: [{BD0CF392-6D73-46CD-BFB9-2533CE95C359}] => (Allow) LPort=9009

FirewallRules: [{46571334-AA20-4217-B4BE-21EAC4F4F5A3}] => (Allow) LPort=9009

FirewallRules: [{EBA797CB-F355-4959-9BF9-C83F057924C5}] => (Allow) LPort=9009

FirewallRules: [{2994E284-A0BC-489A-98BB-CFE4890338D8}] => (Allow) LPort=9009

FirewallRules: [{A53CDD86-DF9D-44BE-B309-210A6879869B}] => (Allow) LPort=9009

FirewallRules: [{BE712C6E-F468-4FF1-B449-B8DB94B7959B}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{750959BD-167F-4B3C-BD44-1C66A5629413}G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe] => (Block) G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{3B8323FA-69CD-4EE7-8D1C-962EDD08C87E}G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe] => (Block) G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.) [Datei ist nicht signiert]

FirewallRules: [{FE266EC5-971A-484B-9BF3-17CDCCC25B90}] => (Allow) LPort=9009

FirewallRules: [{18425415-E593-49D6-A15C-F904E8C0A79A}] => (Allow) LPort=9009

FirewallRules: [{D4E33953-CB8D-4DDA-B0B7-49ABFF98376C}] => (Allow) LPort=9009

FirewallRules: [{48367F9E-45A5-4807-BE8C-AB0C8E92A225}] => (Allow) LPort=9009

FirewallRules: [{BBE9D50C-E652-49EB-95AE-3DC9DEF3F34E}] => (Allow) LPort=9009

FirewallRules: [{D94D92B1-A4A3-493F-A0FE-FCA8B2ECB72B}] => (Allow) LPort=9009

FirewallRules: [{123809A6-483D-4CE9-8C4C-F560C7D85A2D}] => (Allow) LPort=9009

FirewallRules: [{ED9A5ABA-A271-4E82-B252-EAE99C1109DB}] => (Allow) LPort=9009

FirewallRules: [{CBE8EC1F-AB28-469E-B059-D5697B02C384}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe (Rocksteady Studios Ltd.) [Datei ist nicht signiert]

FirewallRules: [{3EDC1276-8EF2-4B44-9685-7303162F0D85}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe (Rocksteady Studios Ltd.) [Datei ist nicht signiert]

FirewallRules: [{20229675-488C-47A1-BA8C-872AFBECF00E}] => (Allow) LPort=9009

FirewallRules: [{AF68E724-E020-4F6B-A026-349C1CBAE12A}] => (Allow) LPort=9009

FirewallRules: [{3BE2B281-98E5-420C-9BF4-2755FAC94BB3}] => (Allow) LPort=9009

FirewallRules: [{C64AAD90-8DDC-4102-9548-3652A9401107}] => (Allow) LPort=9009

FirewallRules: [{2CCC1F91-7F72-4D15-A2B8-1F47BC9D1233}] => (Allow) LPort=9009

FirewallRules: [{F5327578-8ABD-45BD-9777-06FD91D43380}] => (Allow) LPort=9009

FirewallRules: [{DFCE7B1B-A0C3-41A0-9BF8-D76045534B4E}] => (Allow) LPort=9009

FirewallRules: [{5AB0CA45-9DFA-4418-ABE0-00DC1FC6FBCD}] => (Allow) LPort=9009

FirewallRules: [{24D22571-BA95-4C02-9826-C7DE60DBE5E3}] => (Allow) LPort=9009

FirewallRules: [{39BBA9B3-BAA3-4BD5-87E8-CA01E36CCA0C}] => (Allow) LPort=9009

FirewallRules: [{4AE806B5-B721-4A9C-8671-042F75B34908}] => (Allow) LPort=9009

FirewallRules: [{E89AF2BA-C7D6-427E-94CD-3446AE5C0C9D}] => (Allow) LPort=9009

FirewallRules: [{12059972-E222-4862-9C07-B4A00710AD2D}] => (Allow) LPort=9009

FirewallRules: [{6F8BC16D-0C27-4E81-9291-716E336845E4}] => (Allow) LPort=9009

FirewallRules: [{72B9AA28-1076-48FE-A2A6-D2FA815D8A1F}] => (Allow) LPort=9009

FirewallRules: [{F78DB957-7379-4E96-9018-A21CCD7D0C0A}] => (Allow) LPort=9009

FirewallRules: [{29282BB5-BA4A-4B01-93DD-CD614C4D2AFD}] => (Allow) LPort=9009

FirewallRules: [{5AB6FA1F-282A-4D03-971B-1613B37D69A8}] => (Allow) LPort=9009

FirewallRules: [{A8CDC7C0-9AC6-45C1-A50B-EED3CEE41834}] => (Allow) LPort=9009

FirewallRules: [{D80B3F1C-FFDF-4BF6-A95C-79ED20D657EF}] => (Allow) LPort=9009

FirewallRules: [{18598FC2-DAA7-4C26-BF8B-715C396394E9}] => (Allow) LPort=9009

FirewallRules: [{5C12FE61-258E-412D-B7CA-4DE887A2BA6C}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe (Activision Publishing Inc -> )

FirewallRules: [{CACD8413-E65B-4060-AADE-CDFC27486E73}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe (Activision Publishing Inc -> )

FirewallRules: [{2A1FDF6D-CDA1-4662-9CAE-3F47407DAE2A}] => (Allow) LPort=9009

FirewallRules: [{20AB9A4B-E953-47E9-BF54-F581ECE229E4}] => (Allow) LPort=9009

FirewallRules: [{BFF448E9-8CA7-4533-B79D-B34ACA0BFB46}] => (Allow) LPort=9009

FirewallRules: [{ABA7653C-CA3C-4FEB-9698-65CC5D935B67}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe (Square Enix) [Datei ist nicht signiert]

FirewallRules: [{CE258CEE-6668-4C68-8F90-15FDDE53F61F}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe (Square Enix) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{698DF1BC-393E-47C6-A19C-3D96345DF257}G:\program files\epic games\totalwarsagatroy\troy.exe] => (Allow) G:\program files\epic games\totalwarsagatroy\troy.exe => Keine Datei

FirewallRules: [UDP Query User{BE74110F-2F42-4B2A-9457-39F695E4E51D}G:\program files\epic games\totalwarsagatroy\troy.exe] => (Allow) G:\program files\epic games\totalwarsagatroy\troy.exe => Keine Datei

FirewallRules: [{E71EE8D8-F343-4C28-BBA1-2DD299F0BFB8}] => (Allow) LPort=9009

FirewallRules: [{334F5ABA-96A5-4AF6-9598-FF64BD5F366B}] => (Allow) LPort=9009

FirewallRules: [{5647784A-286B-4287-8A4C-9B43D2EE6427}] => (Allow) LPort=9009

FirewallRules: [{55BB64EC-2EDC-47EB-8ECA-30F8F8F3BD59}] => (Allow) LPort=9009

FirewallRules: [{A73D8F82-E203-4943-9274-7A2F72FB2C7A}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{68AC0099-9881-45D0-B2D9-ABF26FD4B350}G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe] => (Block) G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe (Focus Home Interactive -> Focus Home Interactive) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{6666A672-8D84-4AC9-B4E1-FB0ABA950E00}G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe] => (Block) G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe (Focus Home Interactive -> Focus Home Interactive) [Datei ist nicht signiert]

FirewallRules: [{8423AC61-EF99-49B1-9750-C1B3F6F6CE8A}] => (Allow) LPort=9009

FirewallRules: [{23F1FCF6-D340-4C7F-9A6F-D95F60383A9C}] => (Allow) LPort=9009

FirewallRules: [{4A6CF62E-A374-46CC-81BD-2A1D8B6BE888}] => (Allow) LPort=9009

FirewallRules: [{0E762191-4784-4B9B-AD14-8880ECF23EFE}] => (Allow) LPort=9009

FirewallRules: [{4FECC383-A40A-4AA9-BE82-C59619A370C9}] => (Allow) LPort=9009

FirewallRules: [{7FAA19FA-AB6A-47E1-9A83-F95DEB13A8DE}] => (Allow) LPort=9009

FirewallRules: [{64FC1124-B27C-474A-8240-0C8C5E57C0F9}] => (Allow) LPort=9009

FirewallRules: [{3838EDAA-0AB3-4C64-AA02-8EF5CCF57FF4}] => (Allow) LPort=9009

FirewallRules: [{7321BAE3-5279-4D84-9610-C887763C5789}] => (Allow) LPort=9009

FirewallRules: [{C18C1CE6-3C94-4FB2-8677-DA1B98781729}] => (Allow) LPort=9009

FirewallRules: [{DB9FB736-7271-42F1-9A19-7EF4F35004CC}] => (Allow) LPort=9009

FirewallRules: [{8B8F9B53-6D76-44B0-BE8D-07F2270C5231}] => (Allow) LPort=9009

FirewallRules: [{EB0F0988-50AF-47AE-A132-581E29BDFB74}] => (Allow) LPort=9009

FirewallRules: [{09ABCFFD-E654-4863-91A7-CE227CEE67F4}] => (Allow) LPort=9009

FirewallRules: [{59362B8C-B63A-4A98-9866-4521F6D1F8E1}] => (Allow) LPort=9009

FirewallRules: [{CDF246BE-D52A-4BB3-9026-D9BE252CE1D5}] => (Allow) LPort=9009

FirewallRules: [{26FAC9F2-0943-4189-AA21-96794B2D7AA3}] => (Allow) LPort=9009

FirewallRules: [{2271A30C-FF29-40D1-A7ED-738FED189A3D}] => (Allow) LPort=9009

FirewallRules: [{E8304080-290B-4617-BEA2-D55A0AEDE061}] => (Allow) LPort=9009

FirewallRules: [{51DA6998-7245-4E88-9A56-133C5B3EA00C}] => (Allow) LPort=9009

FirewallRules: [{35B9EF1D-D0EE-4943-AB6E-72A808688AEF}] => (Allow) LPort=9009

FirewallRules: [{4E2DF05E-A687-4151-8D16-D9AB53B9BD15}] => (Allow) LPort=9009

FirewallRules: [{3A320DA6-F912-4BFD-9707-23B2B11A84C8}] => (Allow) LPort=9009

FirewallRules: [{9984CACD-8722-4B4C-B1DA-11C721DEDF47}] => (Allow) LPort=9009

FirewallRules: [{32777281-C16F-49E4-9A3E-701C8217457B}] => (Allow) LPort=9009

FirewallRules: [{34B503B2-F927-4F88-BEBB-F0B96AE1C509}] => (Allow) LPort=9009

FirewallRules: [{BBDA2AA3-D30A-457A-AB0F-711DA960A60B}] => (Allow) LPort=9009

FirewallRules: [{12605487-706C-4A72-BC94-E80EBF4AAF28}] => (Allow) LPort=9009

FirewallRules: [{E4FB5E86-94A6-4F5B-A384-FC9908DE3B5E}] => (Allow) LPort=9009

FirewallRules: [{B46BBFF9-7472-4B08-9610-97AE3165D0B9}] => (Allow) LPort=9009

FirewallRules: [{AEB75F9E-16D9-4742-B600-2D32FDE8EB5D}] => (Allow) LPort=9009

FirewallRules: [{E66859C3-FD3D-4924-9E80-213AFA364A4C}] => (Allow) G:\Programme\Uplay\Tom Clancy's The Division\TheDivision.exe (Ubisoft Entertainment Sweden AB -> Ubisoft)

FirewallRules: [{AF357AE8-BC03-45B0-BECE-CDF254A86EF5}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{77F09BE0-845B-47AA-9824-EDF96A67788D}G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe

FirewallRules: [UDP Query User{E50D1F95-3391-4B8D-AF5A-CE0EF2D76C22}G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe

FirewallRules: [{9DE3BFB7-4066-4458-BF82-A0243E23C031}] => (Allow) LPort=9009

FirewallRules: [{4000C567-593B-4444-86F1-5E5F982FA105}] => (Allow) LPort=9009

FirewallRules: [{D2C949DA-8081-4F46-B782-2710E335F9A6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )

FirewallRules: [{715084A9-3B08-4B5F-8780-BB62BF73D198}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )

FirewallRules: [{0F109C04-2AD2-4D0C-BF4F-076C686BADFD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )

FirewallRules: [{B10A27C3-5699-4820-AD43-5DD38AC6C2B0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )

FirewallRules: [TCP Query User{2E6A6070-CCAA-4D83-AD54-64E3807CF8D6}H:\programme\uplay\games\far cry 3\bin\farcry3.exe] => (Allow) H:\programme\uplay\games\far cry 3\bin\farcry3.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [UDP Query User{E56AFF91-3832-4A59-97F1-585242CE710C}H:\programme\uplay\games\far cry 3\bin\farcry3.exe] => (Allow) H:\programme\uplay\games\far cry 3\bin\farcry3.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{290A0F71-7DB1-4C65-A87C-98C2EE42984D}] => (Allow) LPort=9009

FirewallRules: [{350BD6AF-9EAC-4C89-B91D-3D17F6D47DF6}] => (Allow) LPort=9009

FirewallRules: [{4A74DA9F-7EEB-400A-B3C4-B7F5813C70A7}] => (Allow) LPort=9009

FirewallRules: [{BEF1DFA3-B825-4095-A67F-D60864226C19}] => (Allow) LPort=9009

FirewallRules: [{3F4F6B64-901A-4B25-A468-933AE8507EB4}] => (Allow) LPort=9009

FirewallRules: [{84613B71-181C-452F-9D00-FC53A6FCA31A}] => (Allow) LPort=9009

FirewallRules: [{BE45E5F6-7D71-49CB-B397-5D94566B33E9}] => (Allow) LPort=9009

FirewallRules: [{4A8C8987-CF43-4A57-87FD-4E57785D198A}] => (Allow) LPort=9009

FirewallRules: [{74C2CC5F-B2F4-4DDB-B72F-1375AC1384DC}] => (Allow) LPort=9009

FirewallRules: [{8B411965-2AD6-4417-9959-B62A7EB5D536}] => (Allow) LPort=9009

FirewallRules: [{933EA8E6-CCE8-44B7-A944-BC63F2ED99A2}] => (Allow) LPort=9009

FirewallRules: [{7478E4D0-0C93-4335-A355-A0018E660F60}] => (Allow) LPort=9009

FirewallRules: [{0543F3AC-07FB-41C1-BE36-EA297CFD3258}] => (Allow) LPort=9009

FirewallRules: [{263E2E95-A836-46BB-9A1D-E14C5586B83B}] => (Allow) LPort=9009

FirewallRules: [{5207F52F-EA83-49A3-892A-4FDE46C054AE}] => (Allow) LPort=9009

FirewallRules: [{133B78F4-D967-434D-8AA3-0C4B9C5C6155}] => (Allow) LPort=9009

FirewallRules: [{2269EC4F-4351-4123-B082-BE1878E02837}] => (Allow) LPort=9009

FirewallRules: [{9B45757D-38B2-42EE-B25A-71F52AD796C2}] => (Allow) LPort=9009

FirewallRules: [{75A4087C-E563-4D0C-BE60-23630E43E14D}] => (Allow) LPort=9009

FirewallRules: [{B6F06ACE-1105-46BB-BF21-DA188A49E134}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{3F9DE2F1-CA4E-4A33-BE9C-556A650C4FD9}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{5FD4D251-712B-43BD-9FCC-AB1A942FA6A1}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{89CB9AD8-FED3-43B2-B285-836A7495805A}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{C60C5437-4AA9-4558-BEE2-BDA2200AC77A}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{B8007968-D965-461D-A9F5-5BE9A48339EF}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{AE129111-D405-483C-A43B-D7CC4F8BC550}] => (Allow) LPort=9009

FirewallRules: [{2BB73D0F-A28A-4629-97BC-F7FE2F91492A}] => (Allow) LPort=9009

FirewallRules: [{77F7029E-5DCF-4924-94D9-4C69E885973D}] => (Allow) LPort=9009

FirewallRules: [{0A74855A-7364-4283-B408-C6886CEA9A3B}] => (Allow) LPort=9009

FirewallRules: [{119A234C-0970-4EBD-A866-F675EDE4AD79}] => (Allow) LPort=9009

FirewallRules: [{7F59DC3F-D8CA-44E9-8B27-B93CAAFF1978}] => (Allow) LPort=9009

FirewallRules: [{0CA452AA-CCB6-4648-8DCF-A95F1C277B85}] => (Allow) LPort=9009

FirewallRules: [{8D6AE2D4-FDAA-4DA8-AFA5-CB78C1F54278}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{CFB02508-51DD-4E0E-8A27-92D516143BF9}H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe (Daybreak Game Company, LLC.) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{88B41455-C7B7-4CE1-BC17-D9D8CEF77A8F}H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe (Daybreak Game Company, LLC.) [Datei ist nicht signiert]

FirewallRules: [{CD26041B-8C5B-478A-94BE-E7F46A9CD02B}] => (Allow) LPort=9009

FirewallRules: [{59F2FD82-6BD0-4139-B874-7786F3222AA7}] => (Allow) LPort=9009

FirewallRules: [{3AC845A9-026F-4A02-BAF2-F9A7A36A906E}] => (Allow) LPort=9009

FirewallRules: [{3C381993-E7FB-45E1-92E7-E1B39F25D249}] => (Allow) LPort=9009

FirewallRules: [{387988D9-766F-4F3B-9ACB-D83BFC009280}] => (Allow) LPort=9009

FirewallRules: [{17EDAB59-8FAE-4CAC-B3A0-8B61DB44A5DA}] => (Allow) LPort=9009

FirewallRules: [{16A61BCE-69A5-41A7-9112-EB1BEF2459AA}] => (Allow) LPort=9009

FirewallRules: [{D0B2F476-A286-4D72-8277-9F48849E5DCE}] => (Allow) LPort=9009

FirewallRules: [{E3D3BC2D-89CF-4FEA-AC34-BD0FB1C1FB3F}] => (Allow) LPort=9009

FirewallRules: [{F599E881-A26A-45D1-9AD7-78148130619C}] => (Allow) LPort=9009

FirewallRules: [{BFE7515F-4EBE-4095-B3C4-425AA1C2B023}] => (Allow) LPort=9009

FirewallRules: [{74DCAE55-5ECE-478A-8C6A-735820525C5B}] => (Allow) LPort=9009

FirewallRules: [{CE44F4A0-E747-4270-8107-E059216C635F}] => (Allow) LPort=9009

FirewallRules: [{10FCB8AC-9F39-4C36-B92C-B176DAFEB1FC}] => (Allow) LPort=9009

FirewallRules: [{07389942-80F1-4123-B88F-79EE5A44E7F8}] => (Allow) LPort=9009

FirewallRules: [{AF67C518-4FDD-43BE-9120-548D932849CF}] => (Allow) LPort=9009

FirewallRules: [{1C6DF141-7D53-4D23-B713-2926E4B84C2A}] => (Allow) LPort=9009

FirewallRules: [{9DF5ADAB-A78C-4288-B7EE-DF82177F59B3}] => (Allow) LPort=9009

FirewallRules: [{54074D1C-D06B-48BB-B0B7-40EF4849A32F}] => (Allow) LPort=9009

FirewallRules: [{2EC281BA-0F4B-4832-A162-5D977E5F9869}] => (Allow) LPort=9009

FirewallRules: [{1C26207A-A8E4-425D-BA45-8FF854AC8A93}] => (Allow) LPort=9009

FirewallRules: [{04484E54-35CA-4CD2-8562-3B5E824836E4}] => (Allow) LPort=9009

FirewallRules: [{3E3FA7C2-6680-41C9-9CB6-0F45DD65BEA8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Datei ist nicht signiert]

FirewallRules: [{9A9F9476-3878-49CC-9F33-01C399BA9E8A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Datei ist nicht signiert]

FirewallRules: [{19BEFEDA-6530-4BEF-890D-8B3E67C52AAD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{A654C92C-F202-4402-B02B-6A3C9F1AF739}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{F09514B6-1E6A-4487-A0FC-3D491B3D295E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{6499315F-D645-4164-9B5E-3225EFA52C36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{1342BC9F-73EA-45EA-8010-D95EA1C88D60}] => (Allow) LPort=9009

FirewallRules: [{629EFD93-35A6-465D-9455-023C587B7286}] => (Allow) LPort=9009

FirewallRules: [{4C3E6C68-643D-44E2-976C-BFD6AF83879C}] => (Allow) LPort=9009

FirewallRules: [{6D288172-E941-444A-A18C-5A01735E9554}] => (Allow) LPort=9009

FirewallRules: [{68FD928D-20E7-4559-9911-4A450FA2EBC0}] => (Allow) LPort=9009

FirewallRules: [{2584C026-7BF8-4B87-AFD8-3FB8CC57DD9F}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{F608652E-A605-410E-BAD2-43FA5CFA1C82}G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe] => (Allow) G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe (Ubisoft Blue Byte GmbH -> Ubisoft)

FirewallRules: [UDP Query User{FEE53804-1CD7-4EA2-AFC6-846750D3EC76}G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe] => (Allow) G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe (Ubisoft Blue Byte GmbH -> Ubisoft)

FirewallRules: [TCP Query User{D8A56D9E-7FEF-45BA-B9F9-E1C610676C98}C:\users\*****\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\*****\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [UDP Query User{151EC62C-A23F-4B62-A3EB-CB86CEF63310}C:\users\*****\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\*****\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [{295E8900-1F3D-4199-8804-E4E16139D308}] => (Allow) LPort=9009

FirewallRules: [{50F77767-A997-4E4B-9BB3-A7ABD9A4BA6A}] => (Allow) LPort=9009

FirewallRules: [{5BF11EAD-2B25-42E7-A719-BF214DB6160F}] => (Allow) LPort=9009

FirewallRules: [{85726FFC-5921-4D01-B508-29DE0D40AE02}] => (Allow) LPort=9009

FirewallRules: [{16863DDD-CCA1-4238-8BCD-37E2342E2B68}] => (Allow) LPort=9009

FirewallRules: [{0A707DFE-79D6-47C7-BD8D-E7D7F3210BBD}] => (Allow) LPort=9009

FirewallRules: [{7343CF5D-79DD-43C0-8907-36C42B2E86C9}] => (Allow) LPort=9009

FirewallRules: [{8FA726A7-61BE-46AE-97CB-B60C29471293}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{B5941CD9-D6B7-49F0-AF8F-CC74E054C46D}G:\program files\videolan\vlc\vlc.exe] => (Allow) G:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [UDP Query User{45A82BE5-0D8A-4F77-A1A7-FD259C7392B2}G:\program files\videolan\vlc\vlc.exe] => (Allow) G:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [TCP Query User{4F2987B9-E54F-437F-9DFD-281A1E1C3B46}G:\program files (x86)\samsung dex\samsungdex.exe] => (Allow) G:\program files (x86)\samsung dex\samsungdex.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

FirewallRules: [UDP Query User{F33D234D-9ABB-434E-ACAB-B36E95094B76}G:\program files (x86)\samsung dex\samsungdex.exe] => (Allow) G:\program files (x86)\samsung dex\samsungdex.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

FirewallRules: [{7B648AB0-9D5D-46C0-8E93-9202F0CD8A68}] => (Allow) LPort=9009

FirewallRules: [{0F745A3D-2648-4DAE-BD4A-689129CEFA2A}] => (Allow) LPort=9009

FirewallRules: [{2FCFCC1F-96D6-4A8C-98BA-2F904F83E2D5}] => (Allow) LPort=9009

FirewallRules: [{86F7C0F0-59DB-4B3A-B91A-8AC234D2AB57}] => (Allow) LPort=9009

FirewallRules: [{CC471296-97B6-42E9-843A-4D70F078F6FD}] => (Allow) LPort=9009

FirewallRules: [{B1409BBA-4E37-4333-8582-923CCD4B8F6A}] => (Allow) LPort=9009

FirewallRules: [{ACB11644-9D84-4B56-B781-54000F97F9C4}] => (Allow) LPort=9009

FirewallRules: [{9CA6CD96-9658-48B7-AD9E-C252EAD2BDB0}] => (Allow) LPort=9009

FirewallRules: [{1171263F-3B4D-4F31-92B1-6E00C2996E59}] => (Allow) LPort=9009

FirewallRules: [{339DE54B-0F39-4DDF-81C8-FC7B884073BC}] => (Allow) LPort=9009

FirewallRules: [{24BED14F-ACEF-4770-8337-FC704AC84BD3}] => (Allow) LPort=9009

FirewallRules: [{659FB545-E6E0-48BE-9F29-587E522B878A}] => (Allow) LPort=9009

FirewallRules: [{D8B799AF-57B3-49FF-9C5C-16BB4ADC87F6}] => (Allow) LPort=9009

FirewallRules: [{046D3204-C914-42BE-B56A-EF8AF9E48903}] => (Allow) LPort=9009

FirewallRules: [{23F29C1B-7213-4FA1-AC0A-FCB8020E1E8D}] => (Allow) LPort=9009

FirewallRules: [{DBF265BF-89D1-40AA-8EDB-CF49F29C1CD7}] => (Allow) LPort=9009

FirewallRules: [{38497A56-3196-4F86-8E1E-154F42FAA7D3}] => (Allow) LPort=9009

FirewallRules: [{78A8E1DE-41CD-4B12-88FC-D3C4ABB2BB31}] => (Allow) LPort=9009

FirewallRules: [{6C1B6F87-D969-4350-9DB7-08B8A2A55420}] => (Allow) LPort=9009

FirewallRules: [{EC77EBAF-554C-484F-B364-6F46243BA51A}] => (Allow) LPort=9009

FirewallRules: [{6F44C766-B4AC-4496-A149-1E8B8E03704A}] => (Allow) LPort=9009

FirewallRules: [{C0D74F91-3E05-4D16-AA01-5FBB01D3447D}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{B6C9EBE8-8DB2-4EDA-BB19-BA910A898A53}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{1F455AEB-C2EC-4821-AC7F-5B3C8E74AADF}] => (Allow) LPort=9009

FirewallRules: [{CE301B76-1CDB-4C47-8CC8-5964812A5726}] => (Allow) LPort=9009

FirewallRules: [{EE8904A4-275D-44CB-AEFA-0C97458FF105}] => (Allow) LPort=9009

FirewallRules: [{9A0F51AA-C58D-48BE-BA0A-572DE26B23D6}] => (Allow) C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_8.0.0.0_x86__kc6t79cpj4tp0\Amazon Music Helper.exe (Amazon.com Services LLC) [Datei ist nicht signiert]

FirewallRules: [{D020BEF7-D1FE-490F-B28A-185678BBC212}] => (Allow) C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_8.0.0.0_x86__kc6t79cpj4tp0\Amazon Music Helper.exe (Amazon.com Services LLC) [Datei ist nicht signiert]

FirewallRules: [{1E28815A-ECA4-437A-9A2F-B37B939AABCD}] => (Allow) LPort=9009

FirewallRules: [{646E9AE4-288F-4E98-985B-9B2649DA747E}] => (Allow) LPort=9009

FirewallRules: [{D2D0D84F-2713-4D48-97BE-49BAD0D7AC65}] => (Allow) LPort=9009

FirewallRules: [{E48051BD-EE50-4560-8952-446B1986705E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{B3506CE9-057A-423F-B740-69463DA6553F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{7459A16F-9FB3-48D1-9DB9-C03F81F2E16A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{A3A5CAEE-A7A2-4239-BEE5-60DDA98BCE85}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{C8546D42-67C4-4930-89C5-51C4F26FCDA1}] => (Allow) LPort=9009

FirewallRules: [{797DB6DE-990F-4A71-98EA-BC44E09B35E8}] => (Allow) LPort=9009

FirewallRules: [{00D52345-1403-49F2-8BC9-DA69C497FD52}] => (Allow) LPort=9009

FirewallRules: [{06598DB5-C76B-472E-8977-16F3ECD792F0}] => (Allow) LPort=9009

FirewallRules: [{BED43A43-1E1A-4537-8F06-F9F718D4EB25}] => (Allow) LPort=9009

FirewallRules: [{EA430E3D-8104-430A-9386-205BCD166483}] => (Allow) LPort=9009

FirewallRules: [{23831084-6F55-47D7-BA70-611C57C47AFD}] => (Allow) LPort=9009

FirewallRules: [{97930381-2451-46F2-8BE4-EBD7D24DB8F9}] => (Allow) LPort=9009

FirewallRules: [{2E2DF32B-C6D1-4364-A769-D3178BE1E7FA}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert]

FirewallRules: [{C9C5ABCF-5AA4-4F84-A697-7F42C466AA45}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert]

FirewallRules: [{016BDD9B-A569-4860-917C-AB0951818E59}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)

FirewallRules: [{7E9EEBB3-B284-4B0C-A4DC-736344DC2978}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)

FirewallRules: [{4D17AEAA-F858-4C0B-B8F8-34AB17A584B3}] => (Allow) LPort=9009

FirewallRules: [{9829E6ED-D0BC-4852-9D05-01066CFD3374}] => (Allow) LPort=9009

FirewallRules: [{182D2CEB-4845-40E4-92E8-C0383931C817}] => (Allow) LPort=9009

FirewallRules: [{8155DD57-9746-4846-BA26-CBDF93926B2E}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{40F2E5B1-7CF1-4854-AF42-1CE0155D5BD1}H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe] => (Block) H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [UDP Query User{6D966027-33B3-464D-9857-3D40F1877D2C}H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe] => (Block) H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{862F156B-60DB-4A0A-BDDC-BE25873846FC}] => (Allow) LPort=9009

FirewallRules: [{6D32D14C-1F7B-4B3A-BC9A-BA7751CE1E77}] => (Allow) LPort=9009

FirewallRules: [{1EAF73EE-F1B3-4E40-AA00-08C3459BD57A}] => (Allow) LPort=9009

FirewallRules: [{A9A16F19-6878-4356-A6F3-18D2BCFAD9DB}] => (Allow) LPort=9009

FirewallRules: [{77BD1EB1-2F04-4064-831E-40FFAC211787}] => (Allow) LPort=9009

FirewallRules: [{124C864A-F31E-4660-97A4-D564DB412703}] => (Allow) LPort=9009

FirewallRules: [{CADEAA8D-FA7F-4178-95D9-71841612D3A4}] => (Allow) G:\Programme\Uplay\Watch Dogs Legion\bin\WatchDogsLegion.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)

FirewallRules: [{3A55B6DA-6786-4059-8F30-4FB4DA5A3345}] => (Allow) G:\Programme\Uplay\Watch Dogs Legion\bin\WatchDogsLegion.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)

FirewallRules: [{E6DF3F11-D621-470A-ACA7-9CBD8414951F}] => (Allow) LPort=9009

FirewallRules: [{C0F307DD-7F9F-4D8B-861F-23BA801A3ECE}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{D95D2CC7-B930-4B92-97B3-935A622F8F01}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{D9E3A425-38D4-44E4-A10D-27492E3C80AC}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{3FF6B4AD-7853-4B57-BCEA-D166B30CD6B4}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{2E132007-944D-4A53-A460-99376130BDCF}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Liberation HD\ac3lhd_32.exe (Ubisoft Entertainment SA -> )

FirewallRules: [{909974B3-FA4F-4159-8484-196A6C18A110}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Liberation HD\ac3lhd_64.exe => Keine Datei

FirewallRules: [{0509F46A-5613-412A-9200-F761252C73ED}] => (Allow) LPort=9009

FirewallRules: [{703AA02F-A5AA-4D5F-9DB7-7BB8407B2931}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc. -> Plex, Inc.)

FirewallRules: [{9F1C4D51-EF49-4254-8A72-4CB575A32822}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc. -> Python Software Foundation)

FirewallRules: [{17E93FC6-DC97-416B-81A7-829F8BA7CA57}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc. -> Plex, Inc.)

FirewallRules: [{2E743466-C370-4A5B-9AD4-0332285BA91D}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc. -> )

FirewallRules: [{722CBD6E-4BCB-424F-8C33-D0ADB0E76605}] => (Allow) LPort=9009

FirewallRules: [{F0FCA94B-2DAD-4164-9C10-0E45B0803F47}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{FD3AAC5E-2BC2-487C-8C2B-91792EE0E69E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{7E58BA1D-4BE8-421C-A119-1A6DACD770D6}] => (Allow) LPort=9009

FirewallRules: [{C088EBAE-FE2F-4A7C-909B-02D15FBC8F5F}] => (Allow) LPort=9009

FirewallRules: [{4A237A44-59C5-4F4A-9A5C-3C4626B02DBC}] => (Allow) LPort=9009

FirewallRules: [{B8797BCB-C345-4B3B-A17A-2EE6D335825E}] => (Allow) LPort=9009

FirewallRules: [{9EEDB966-BC01-4CEB-A48B-5B13F80EB056}] => (Allow) LPort=9009

FirewallRules: [{B0C52258-1F31-4AA7-B8E3-5F132240EF7C}] => (Allow) LPort=9009

FirewallRules: [{B2C82F77-17A0-4AE4-9247-49EF80A32AAE}] => (Allow) LPort=9009

FirewallRules: [{276A4A59-7174-48F5-AA3D-03A50C8AF9BF}] => (Allow) LPort=9009

FirewallRules: [{2B8F2737-5552-4C27-B5E7-5845D07C5AFB}] => (Allow) LPort=9009

FirewallRules: [{B22319EB-71F4-4854-A694-EDCFEBA84A68}] => (Allow) LPort=9009

FirewallRules: [{53CE5125-FDC2-43E6-AF58-223CAA2A4F8F}] => (Allow) LPort=9009

FirewallRules: [{C6FDECDC-7BFF-4398-8779-A9B1C976F477}] => (Allow) LPort=9009

FirewallRules: [{905132DB-173B-437D-80BE-866B249D805D}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{1970B036-0320-4B58-A5FF-3622E74BCA3D}C:\program files (x86)\tautulli\tautulli.exe] => (Allow) C:\program files (x86)\tautulli\tautulli.exe () [Datei ist nicht signiert]

FirewallRules: [UDP Query User{94E85D38-CF7A-431C-A846-71475413A649}C:\program files (x86)\tautulli\tautulli.exe] => (Allow) C:\program files (x86)\tautulli\tautulli.exe () [Datei ist nicht signiert]

FirewallRules: [{06760A6B-4BD9-4C8D-88E0-16A7B261DC62}] => (Allow) LPort=9009

FirewallRules: [{153D3772-D01F-4F04-8EA1-8EBFDB67F1B8}] => (Allow) LPort=9009

FirewallRules: [{9A60008D-F16F-4924-BC50-FA10EB101101}] => (Allow) LPort=9009
 

==================== Wiederherstellungspunkte =========================
 

10-12-2020 06:35:49 Windows Modules Installer

10-12-2020 06:36:59 Windows Modules Installer

11-12-2020 16:48:56 Windows Modules Installer

11-12-2020 16:59:00 Wiederherstellungsvorgang
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)

Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standard-USB-Hostcontroller)

Service: 

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation.

ilias2

11.12.2020 22:25

Rest vom Addition.txt

Code:


 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (12/11/2020 10:07:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AORUS.exe, Version: 1.9.2.0, Zeitstempel: 0x5fa3b862

Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.9625, Zeitstempel: 0x5db2747f

Ausnahmecode: 0x40000015

Fehleroffset: 0x0005beae

ID des fehlerhaften Prozesses: 0x429c

Startzeit der fehlerhaften Anwendung: 0x01d6cfd97949a403

Pfad der fehlerhaften Anwendung: G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\MSVCR90.dll

Berichtskennung: 8609782a-c7df-478f-9cb4-7a5c046d78b9

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/11/2020 05:19:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)

Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Program Files\AVG\TuneUp\TuneupSvc.exe, PID: 5672, ProfSvc PID: 2708.
 

Error: (12/11/2020 05:19:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)

Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Program Files\AVG\TuneUp\TuneupSvc.exe, PID: 5672, ProfSvc PID: 2708.
 

Error: (12/11/2020 05:18:45 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (5652,R,98) SRUJet: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\WINDOWS\system32\SRU\SRU033F7.log.
 

Error: (12/11/2020 05:18:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. "ESENT"-Fehler: -550.
 

Error: (12/11/2020 04:59:58 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.

.
 

Error: (12/11/2020 04:59:58 PM) (Source: VSS) (EventID: 13) (User: )

Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.

]
 

Error: (12/11/2020 04:50:42 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 10.0.19041.662, Zeitstempel: 0x996782f8

Name des fehlerhaften Moduls: fhcfg.dll, Version: 10.0.19041.1, Zeitstempel: 0x93b89db8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000023f4f

ID des fehlerhaften Prozesses: 0x2428

Startzeit der fehlerhaften Anwendung: 0x01d6cfd55bed6fe3

Pfad der fehlerhaften Anwendung: C:\WINDOWS\explorer.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\fhcfg.dll

Berichtskennung: f2851fac-2122-4db4-86cc-961a21bb0253

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (12/11/2020 04:25:28 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:25:28 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:23:03 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:23:03 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:16:57 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/11/2020 04:16:57 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/11/2020 04:15:14 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (12/11/2020 04:15:14 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 
 

CodeIntegrity:

===================================
 

Date: 2020-12-11 18:25:18.9540000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 18:24:51.5920000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 18:24:51.5610000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:32:01.7090000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:32:01.7030000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:32:01.6840000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:25:17.5230000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:25:17.5180000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. F30 04/18/2019

Hauptplatine: Gigabyte Technology Co., Ltd. AX370-Gaming K5-CF

Prozessor: AMD Ryzen 5 1600 Six-Core Processor 

Prozentuale Nutzung des RAM: 62%

Installierter physikalischer RAM: 16332.29 MB

Verfügbarer physikalischer RAM: 6154.05 MB

Summe virtueller Speicher: 26572.29 MB

Verfügbarer virtueller Speicher: 10586.88 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:231.56 GB) (Free:123.41 GB) NTFS

Drive g: (HDD 2TB) (Fixed) (Total:1863.01 GB) (Free:66.31 GB) NTFS

Drive h: (HDD) (Fixed) (Total:931.51 GB) (Free:14.58 GB) NTFS
 

\\?\Volume{b1edee0f-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS

\\?\Volume{b1edee0f-0000-0000-0000-80033a000000}\ () (Fixed) (Total:0.83 GB) (Free:0.39 GB) NTFS
 

==================== MBR & Partitionstabelle ====================
 

==================== Ende von Addition.txt =======================

M-K-D-B

11.12.2020 22:28

:hallo:

Mein Name ist Matthias und ich werde dir bei der Analyse und der eventuell notwendigen Bereinigung deines Computers helfen.

Die Logdatei FRST.txt ist unvollständig. Bitte nachreichen.

ilias2

11.12.2020 22:34

Danke Matthias für deine schnelle Antwort. Im folgenden findest du meine FRST.txt Datei.

Code:

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: 127.0.0.1       activate.navicat.com

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{eb096168-f090-4110-b734-6b22861b7b13}: [DhcpNameServer] 192.168.178.1
 

Edge: 

======

Edge Profile: C:\Users\y\AppData\Local\Microsoft\Edge\User Data\Default [2020-11-08]

Edge Extension: (IDM Integration Module) - C:\Users\y\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-11-07]

Edge HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]
 

FireFox:

========

FF DefaultProfile: j0np2f1s.default

FF ProfilePath: C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\j0np2f1s.default [2020-12-11]

FF user.js: detected! => C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\j0np2f1s.default\user.js [2020-09-20]

FF ProfilePath: C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release [2020-12-11]

FF user.js: detected! => C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\user.js [2020-09-20]

FF Session Restore: Mozilla\Firefox\Profiles\ue9r639e.default-release -> ist aktiviert.

FF Notifications: Mozilla\Firefox\Profiles\ue9r639e.default-release -> hxxps://dekom.uc.de

FF Extension: (Anti-Porno) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\@porn-blocker.xpi [2020-05-29]

FF Extension: (Firefox Multi-Account Containers) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\@testpilot-containers.xpi [2020-10-01]

FF Extension: (HTTPS Everywhere) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\https-everywhere@eff.org.xpi [2020-11-17]

FF Extension: (Terms of Service; Didn’t Read) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack.xpi [2020-05-29]

FF Extension: (Decentraleyes) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2020-11-05]

FF Extension: (Privacy Badger) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2020-10-09]

FF Extension: (KeePassXC-Browser) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\keepassxc-browser@keepassxc.org.xpi [2020-11-08]

FF Extension: (IDM Integration Module) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2020-11-14]

FF Extension: (uBlock Origin) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\uBlock0@raymondhill.net.xpi [2020-11-20]

FF Extension: (WatchDogs) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{6547f9b8-7695-4fc9-b57b-fb7aa9fec4c3}.xpi [2020-06-20]

FF Extension: (Mitaka) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{9efc0280-b125-400e-b53d-2d09d7effab4}.xpi [2020-12-04]

FF Extension: (adultblacklist) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{b4eda7b1-2bbe-4961-b336-aaad77d87a47}.xpi [2020-05-29]

FF Extension: (Avengers: Infinity War 3) - C:\Users\y\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{ef8616e0-e2f1-471b-9c47-5d09149b6d2b}.xpi [2020-05-29]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi

FF Extension: (IDM Integration Module) - H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2020-04-29]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\y\AppData\Roaming\IDM\idmmzcc5

FF Extension: (IDM CC) - C:\Users\y\AppData\Roaming\IDM\idmmzcc5 [2020-05-29] [] [ist nicht signiert]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF Extension: (IDM integration) - H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []

FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.11 -> G:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\y\AppData\Local\Google\Chrome\User Data\Default [2020-12-11]

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "hxxps://www.facebook.com/","hxxp://www.google.com/","hxxp://start.iminent.com/?appId=E4B15248-E4A6-47F0-A767-40F4BA8E7F4A","hxxps://www.google.com/"

CHR Session Restore: Default -> ist aktiviert.

CHR Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2020-05-31]

CHR Extension: (YouTube) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-31]

CHR Extension: (uBlock Origin) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-12-11]

CHR Extension: (Adblock für Youtube™) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2020-10-17]

CHR Extension: (HTTPS Everywhere) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2020-11-23]

CHR Extension: (GeForce Experience Stream Client) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjljknijpnfibppaijefibndmiabonep [2020-05-31]

CHR Extension: (OkayFreedom) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfnbbbkabnehoejfhcbbhdicagcoobji [2020-05-31]

CHR Extension: (Decentraleyes) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj [2020-11-15]

CHR Extension: (IDM Integration Module) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-12-11]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-31]

CHR Extension: (WebRTC Network Limiter) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\npeicpdbkakmehahjeeohfdhnlpdklia [2020-05-31]

CHR Extension: (AdFly Skipper) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnfifcganohemahpomajbhocfkdgmjb [2020-11-15]

CHR Extension: (Adult Blocker - Porn Adult Filter) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\onjjgbgnpbedmhbdoikhknhflbfkecjm [2020-05-31]

CHR Extension: (Chrome Media Router) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-23]

CHR Extension: (Privacy Badger) - C:\Users\y\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2020-12-11]

CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]

CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)

R2 AdvancedSystemCareService13; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1293072 2020-06-15] (IObit Information Technology -> IObit)

R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [366232 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [3096712 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [8502208 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [110608 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8736880 2020-11-28] (BattlEye Innovations e.K. -> )

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [598360 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

R2 CleanupPSvc; C:\Program Files\AVG\TuneUp\TuneupSvc.exe [12976336 2020-12-01] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-11-23] (Microsoft Corporation -> Microsoft Corporation)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2020-09-19] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [143072 2020-07-01] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)

R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [Datei ist nicht signiert]

S3 GalaxyClientService; H:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2020-12-11] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-12-04] (GOG Sp. z o.o. -> GOG.com)

R2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)

S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [128736 2020-04-09] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S2 IObitUnSvr; G:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2020-05-25] (IObit Information Technology -> IObit)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [119808 2019-11-21] (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert]

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24192 2018-03-06] (OpenVPN Technologies, Inc. -> )

R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [67000 2020-04-16] (OpenVPN Inc. -> The OpenVPN Project)

S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [67000 2020-04-16] (OpenVPN Inc. -> The OpenVPN Project)

R2 PDF24; G:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

R2 PlexUpdateService; H:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1425912 2020-12-01] (Plex, Inc. -> Plex, Inc.)

R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2020-09-06] (Even Balance, Inc. -> )

S3 ProtonVPN Service; H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe [99624 2020-11-04] (ProtonVPN AG -> )

S3 ProtonVPN Update Service; H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe [61736 2020-11-04] (ProtonVPN AG -> )

R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [253776 2020-06-24] (Razer USA Ltd. -> Razer Inc)

S3 Rockstar Service; H:\Programme\Rockstar Games\Launcher\RockstarService.exe [1382016 2020-11-27] (Rockstar Games, Inc. -> Rockstar Games)

R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533376 2020-09-23] (Razer USA Ltd. -> Razer Inc.)

R2 RzKLService; G:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [290864 2020-10-09] (Razer USA Ltd. -> Razer Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5101992 2020-11-13] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)

R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]

R2 TeamViewer; G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12720144 2020-11-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Uncheater\ucldr_battlegrounds_gl.exe [6995800 2020-06-07] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

R2 VMAuthdService; G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [100784 2019-05-04] (VMware, Inc. -> VMware, Inc.)

S3 VMwareHostd; G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15446448 2019-05-04] (VMware, Inc. -> )

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.4-0\NisSrv.exe [2484256 2020-05-29] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.4-0\MsMpEng.exe [103168 2020-05-29] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [58216 2018-03-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [45432 2019-07-15] (IObit Information Technology -> IObit)

R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [46008 2019-07-15] (IObit Information Technology -> IObit)

R0 avgArDisk; C:\WINDOWS\System32\drivers\avgArDisk.sys [37216 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [206472 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [332432 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [247952 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [97424 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [16832 2020-11-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVG Technologies CZ, s.r.o.)

R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [42848 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [176808 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [521816 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [109352 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [84928 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [851680 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [469896 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [217408 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [326488 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

S3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [3213176 2020-12-08] (BattlEye Innovations e.K. -> )

R1 cFosSpeed; C:\WINDOWS\system32\DRIVERS\cfosspeed6.sys [1499112 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

R3 cpuz145; C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [49968 2020-12-11] (CPUID -> CPUID)

R1 EneTechIo; C:\WINDOWS\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

S3 gdrv; C:\WINDOWS\gdrv.sys [26792 2020-05-29] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R3 gdrv2; C:\WINDOWS\gdrv2.sys [32600 2020-05-29] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-05-29] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])

R3 iobit_monitor_server; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [32520 2018-07-04] (IObit Information Technology -> IObit)

R3 IUFileFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44104 2020-05-25] (IObit Information Technology -> IObit)

R3 IUProcessFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2020-05-25] (IObit Information Technology -> IObit)

R3 IURegistryFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2020-05-25] (IObit Information Technology -> IObit)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220160 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [197792 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [139424 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 NAL; C:\WINDOWS\system32\Drivers\iqvw64e.sys [58520 2018-10-11] (Intel(R) INTELND1820 -> Intel Corporation)

R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)

S4 npcap_wifi; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)

S3 ProtonVPNSplitTunnel; H:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.SplitTunnelDriver.sys [31584 2020-08-19] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166768 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> )

R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> )

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49008 2020-04-06] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [52288 2019-05-04] (VMware, Inc. -> VMware, Inc.)

R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [66576 2019-05-04] (VMware, Inc. -> VMware, Inc.)

R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [92040 2019-04-27] (VMware, Inc. -> VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [52576 2018-02-28] (VMware, Inc. -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-05-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [401120 2020-05-29] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-05-29] (Microsoft Windows -> Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [2740480 2020-06-07] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

U4 napagent; kein ImagePath

S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-12-11 22:09 - 2020-12-11 22:09 - 000024203 _____ C:\Users\y\Desktop\FRST.txt

2020-12-11 22:08 - 2020-12-11 22:06 - 002288640 _____ (Farbar) C:\Users\y\Desktop\FRST64.exe

2020-12-11 22:07 - 2020-12-11 22:09 - 000000000 ____D C:\FRST

2020-12-11 18:24 - 2020-12-11 18:43 - 000000000 ____D C:\Users\y\AppData\LocalLow\IGDump

2020-12-11 18:24 - 2020-12-11 18:24 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000220160 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000197792 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000139424 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000002029 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000002029 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000000000 ____D C:\Users\y\AppData\Local\mbam

2020-12-11 18:24 - 2020-12-11 18:24 - 000000000 ____D C:\ProgramData\Malwarebytes

2020-12-11 18:23 - 2020-12-11 18:23 - 000000000 ____D C:\Program Files\Malwarebytes

2020-12-11 17:23 - 2020-12-11 17:23 - 000003906 _____ C:\Users\y\Desktop\Tiefenscan1.txt

2020-12-11 17:18 - 2020-12-11 21:19 - 000004266 _____ C:\WINDOWS\system32\Tasks\Antivirus Emergency Update

2020-12-11 17:18 - 2020-11-24 17:25 - 000340104 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe

2020-12-11 16:47 - 2020-12-11 16:47 - 109768704 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 005103616 _____ C:\WINDOWS\system32\config\DRIVERS.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000868352 _____ C:\WINDOWS\system32\config\DEFAULT.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000143360 _____ C:\WINDOWS\system32\config\SAM.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000053248 _____ C:\WINDOWS\system32\config\SECURITY.iobit

2020-12-11 13:13 - 2020-12-11 13:13 - 000000000 ____D C:\Users\y\AppData\Roaming\INNOTREND COMMERCE HK LIMITED

2020-12-09 18:30 - 2020-12-11 17:18 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK

2020-12-09 18:27 - 2020-12-09 18:27 - 000373776 _____ C:\WINDOWS\system32\vp9fs.dll

2020-12-09 18:23 - 2020-12-04 04:05 - 000135408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys

2020-12-09 18:23 - 2020-12-04 04:05 - 000038640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001786584 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001786584 _____ C:\WINDOWS\system32\vulkaninfo.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001453296 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001382616 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001382616 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001193880 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001087704 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001087704 _____ C:\WINDOWS\system32\vulkan-1.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000679664 _____ C:\WINDOWS\system32\nvofapi64.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000608496 _____ C:\WINDOWS\system32\nvml.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000548248 _____ C:\WINDOWS\SysWOW64\nvofapi.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 002104216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001589144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001511664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001164528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000813976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000684784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe

2020-12-09 18:22 - 2020-12-05 04:24 - 000673688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000657816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000559000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 008262552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 007391984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 004611312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 002731928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 000447384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe

2020-12-09 18:22 - 2020-12-05 04:22 - 007113064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2020-12-09 18:22 - 2020-12-05 04:22 - 006070008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2020-12-09 18:22 - 2020-12-05 04:22 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe

2020-12-09 18:22 - 2020-12-04 04:05 - 000084008 _____ C:\WINDOWS\system32\nvinfo.pb

2020-12-09 16:28 - 2020-12-09 16:28 - 000000000 ____D C:\Users\y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tautulli

2020-12-09 16:28 - 2020-12-09 16:28 - 000000000 ____D C:\Program Files (x86)\Tautulli

2020-12-09 16:16 - 2020-12-09 16:16 - 000002096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2020-12-06 13:43 - 2020-12-06 13:43 - 000000000 ____D C:\Users\y\AppData\Roaming\Bungie

2020-12-05 12:56 - 2020-12-05 12:56 - 000000000 ____D C:\Users\y\AppData\Local\GOG.com

2020-12-05 12:56 - 2020-12-05 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2020-12-05 12:54 - 2020-12-05 12:54 - 000000000 ____D C:\ProgramData\GOG.com

2020-12-05 12:15 - 2020-12-05 12:15 - 000000951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk

2020-12-05 12:15 - 2020-12-05 12:15 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2020-12-05 12:14 - 2020-12-05 12:14 - 000000921 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk

2020-12-05 12:13 - 2020-12-05 12:15 - 000000000 ____D C:\Program Files\Common Files\Adobe

2020-12-05 12:13 - 2020-12-05 12:13 - 000001600 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk

2020-12-05 12:13 - 2020-12-05 12:13 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk

2020-12-02 19:58 - 2020-11-23 14:45 - 000816368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll

2020-12-02 19:51 - 2020-12-02 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server

2020-11-28 22:33 - 2020-11-28 22:33 - 000000000 ____D C:\Users\y\AppData\Local\My Games

2020-11-28 21:28 - 2020-11-28 21:28 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe

2020-11-28 19:03 - 2020-11-28 19:03 - 000000234 _____ C:\Users\y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Watch Dogs Legion.url

2020-11-28 16:33 - 2020-11-28 16:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 7.2

2020-11-26 22:56 - 2020-11-26 22:56 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0

2020-11-25 19:20 - 2020-11-25 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

2020-11-25 13:56 - 2020-12-09 20:09 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2020-11-24 17:25 - 2020-11-24 17:25 - 000851680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000521816 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgNetHub.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000469896 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000332432 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000326488 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000247952 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsh.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000217408 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000206472 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArPot.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000176808 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000109352 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000097424 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniv.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000084928 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000042848 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgKbd.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000037216 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArDisk.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000016832 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgElam.sys

2020-11-22 21:09 - 2020-11-22 21:10 - 000000000 ____D C:\Users\defaultuser100000\AppData\Local\ConnectedDevicesPlatform

2020-11-22 21:09 - 2020-11-22 21:10 - 000000000 ____D C:\Users\defaultuser100000

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Users\y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Raspberry Pi

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Users\y\AppData\Local\Raspberry Pi

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Program Files (x86)\Raspberry Pi Imager

2020-11-21 12:06 - 2020-11-21 12:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2020-11-20 22:36 - 2020-11-22 09:47 - 000000000 ____D C:\Program Files\Mozilla Firefox

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\Users\y\AppData\Roaming\Proton Technologies AG

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\Program Files (x86)\Proton Technologies

2020-11-18 20:03 - 2020-12-09 20:09 - 000002158 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog

2020-11-18 20:03 - 2020-11-18 20:03 - 000000948 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk

2020-11-18 20:02 - 2020-11-18 20:03 - 000000000 ____D C:\Program Files\Npcap

2020-11-18 20:02 - 2020-11-18 20:02 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap

2020-11-18 20:02 - 2020-11-18 20:02 - 000000000 ____D C:\WINDOWS\system32\Npcap

2020-11-18 20:00 - 2020-11-18 20:00 - 000000000 ____D C:\Users\y\AppData\Roaming\Wireshark

2020-11-15 12:21 - 2020-11-15 12:21 - 000000000 ____D C:\Users\y\AppData\Local\FLiNGTrainer

2020-11-14 15:07 - 2020-11-14 15:07 - 000000000 ____D C:\Users\y\AppData\Roaming\EasyAntiCheat

2020-11-13 18:10 - 2020-11-13 18:10 - 000009265 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2020-11-11 18:00 - 2020-12-09 20:09 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3136980708-3557880529-3186569697-1004
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-12-11 22:07 - 2020-05-29 21:29 - 000000000 ____D C:\Users\y\AppData\Local\CrashDumps

2020-12-11 21:59 - 2020-05-29 19:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2020-12-11 18:24 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2020-12-11 18:23 - 2020-05-29 20:06 - 000000000 ____D C:\Users\y\AppData\Roaming\IDM

2020-12-11 18:22 - 2020-07-12 18:33 - 000007597 _____ C:\Users\y\AppData\Local\Resmon.ResmonCfg

2020-12-11 17:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps

2020-12-11 17:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2020-12-11 17:28 - 2020-11-01 16:05 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2020-12-11 17:27 - 2020-05-29 19:31 - 000000000 ____D C:\ProgramData\NVIDIA

2020-12-11 17:27 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2020-12-11 17:25 - 2020-05-29 19:21 - 001731070 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2020-12-11 17:25 - 2019-12-07 15:51 - 000746436 _____ C:\WINDOWS\system32\perfh007.dat

2020-12-11 17:25 - 2019-12-07 15:51 - 000151384 _____ C:\WINDOWS\system32\perfc007.dat

2020-12-11 17:25 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF

2020-12-11 17:21 - 2020-05-29 19:36 - 000000000 ____D C:\ProgramData\Mozilla

2020-12-11 17:20 - 2020-07-03 15:42 - 000000000 ____D C:\Users\y\AppData\Local\Tautulli

2020-12-11 17:20 - 2020-05-29 19:36 - 000000000 ____D C:\Users\y\AppData\LocalLow\Mozilla

2020-12-11 17:19 - 2020-05-29 20:14 - 000000000 ____D C:\Users\y\AppData\Local\Plex Media Server

2020-12-11 17:19 - 2020-05-29 19:40 - 000000000 ____D C:\ProgramData\AVG

2020-12-11 17:18 - 2020-08-29 08:06 - 000008192 ___SH C:\DumpStack.log.tmp

2020-12-11 17:18 - 2020-05-31 15:30 - 000000000 ____D C:\ProgramData\VMware

2020-12-11 17:18 - 2020-05-29 19:21 - 000000000 ____D C:\Users\y

2020-12-11 17:18 - 2020-05-29 19:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2020-12-11 17:18 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2020-12-11 17:16 - 2020-09-27 10:19 - 000000000 ____D C:\Users\y\AppData\Local\WhatsApp

2020-12-11 17:16 - 2020-06-12 20:19 - 000000000 ____D C:\Program Files\TAP-Windows

2020-12-11 17:16 - 2020-06-12 20:19 - 000000000 ____D C:\Program Files\OpenVPN

2020-12-11 17:16 - 2020-05-31 22:28 - 000000000 ____D C:\Users\y\AppData\Local\WeMod

2020-12-11 17:16 - 2020-05-30 10:44 - 000000000 ___SD C:\WINDOWS\SysWOW64\lxss

2020-12-11 17:16 - 2020-05-30 10:44 - 000000000 ___SD C:\WINDOWS\system32\lxss

2020-12-11 17:16 - 2020-05-30 10:36 - 000000000 ____D C:\ProgramData\ProductData

2020-12-11 17:16 - 2020-05-30 10:36 - 000000000 ____D C:\ProgramData\IObit

2020-12-11 17:16 - 2020-05-29 21:05 - 000000000 ____D C:\Users\y\AppData\Roaming\vlc

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ___SD C:\WINDOWS\system32\AppV

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Portable Devices

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Multimedia Platform

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform

2020-12-11 17:16 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\OpenSSH

2020-12-11 17:16 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\de

2020-12-11 17:16 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\de

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\dsc

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Keywords

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\downlevel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\L2Schemas

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System

2020-12-11 17:16 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing

2020-12-11 17:15 - 2020-05-30 10:37 - 000000000 ____D C:\Users\y\AppData\Roaming\IObit

2020-12-11 17:15 - 2020-05-30 10:36 - 000000000 ____D C:\Users\y\AppData\LocalLow\IObit

2020-12-11 17:15 - 2020-05-30 00:23 - 000000000 ____D C:\Users\y\AppData\Local\cFos

2020-12-11 17:15 - 2020-05-29 21:28 - 000000000 ____D C:\Users\y\AppData\Roaming\discord

2020-12-11 17:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Containers

2020-12-11 17:03 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\registration

2020-12-11 17:02 - 2020-05-29 21:28 - 000000000 ____D C:\Users\y\AppData\Roaming\WhatsApp

2020-12-11 17:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState

2020-12-11 16:59 - 2020-05-29 20:06 - 000000000 ____D C:\Users\y\AppData\Roaming\DMCache

2020-12-11 16:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF

2020-12-11 16:15 - 2020-05-30 00:46 - 000000000 ____D C:\Users\y\AppData\Local\ElevatedDiagnostics

2020-12-11 15:35 - 2020-05-30 10:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software

2020-12-11 12:58 - 2020-10-23 17:34 - 000000000 ____D C:\Users\y\AppData\Local\RealVNC

2020-12-11 12:58 - 2020-05-29 19:25 - 000000000 ____D C:\Users\y\AppData\Local\PlaceholderTileLogoFolder

2020-12-10 06:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender

2020-12-10 06:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender

2020-12-09 20:09 - 2020-11-08 11:35 - 000002578 _____ C:\WINDOWS\system32\Tasks\GraphicsCardEngine

2020-12-09 20:09 - 2020-11-08 11:35 - 000002542 _____ C:\WINDOWS\system32\Tasks\LiquidSensord

2020-12-09 20:09 - 2020-11-01 16:36 - 000002568 _____ C:\WINDOWS\system32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE

2020-12-09 20:09 - 2020-11-01 16:04 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2020-12-09 20:09 - 2020-11-01 16:04 - 000003404 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2020-12-09 20:09 - 2020-10-29 19:21 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 18:56 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3136980708-3557880529-3186569697-1001

2020-12-09 20:09 - 2020-10-14 18:46 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2020-12-09 20:09 - 2020-09-09 15:28 - 000002460 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor

2020-12-09 20:09 - 2020-09-09 15:28 - 000002350 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_y

2020-12-09 20:09 - 2020-05-30 12:34 - 000002402 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_y

2020-12-09 20:09 - 2020-05-29 21:01 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC

2020-12-09 20:09 - 2020-05-29 19:42 - 000003558 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2020-12-09 20:09 - 2020-05-29 19:42 - 000003334 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2020-12-09 20:09 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2020-12-09 19:30 - 2020-05-29 19:45 - 000000000 ____D C:\Users\y\AppData\Local\D3DSCache

2020-12-09 18:59 - 2020-05-29 21:31 - 000000000 ____D C:\Users\y\AppData\Local\NVIDIA

2020-12-09 18:49 - 2020-07-12 18:05 - 000000000 ____D C:\Users\y\AppData\Local\KeePassXC

2020-12-09 18:45 - 2020-05-31 15:31 - 000000000 ____D C:\Users\y\AppData\Local\VMware

2020-12-09 18:44 - 2020-05-31 15:31 - 000000000 ____D C:\Users\y\AppData\Roaming\VMware

2020-12-09 18:37 - 2020-05-29 19:23 - 000000000 ____D C:\Users\y\AppData\Local\Packages

2020-12-09 18:35 - 2020-05-31 16:10 - 000000435 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

2020-12-09 17:23 - 2020-06-21 15:42 - 000000128 _____ C:\Users\y\AppData\Local\PUTTY.RND

2020-12-09 16:59 - 2020-05-29 21:59 - 000000000 ____D C:\Users\y\AppData\Local\Ubisoft Game Launcher

2020-12-09 16:13 - 2020-05-29 21:28 - 000000000 ____D C:\Users\y\AppData\Local\Discord

2020-12-06 20:22 - 2020-06-07 18:59 - 000000000 ____D C:\Users\y\AppData\Roaming\HuBBa

2020-12-06 14:16 - 2020-05-30 13:49 - 000000000 ____D C:\Users\y\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2020-12-05 19:52 - 2020-05-29 20:33 - 000000000 ____D C:\Users\y\AppData\Local\EpicGamesLauncher

2020-12-05 19:43 - 2020-10-17 10:24 - 005302184 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2020-12-05 12:57 - 2020-05-30 00:40 - 000000000 ____D C:\Users\y\AppData\Local\Adobe

2020-12-05 12:46 - 2020-05-29 19:23 - 000000000 ____D C:\Users\y\AppData\Roaming\Adobe

2020-12-05 12:15 - 2020-05-30 00:42 - 000000000 ____D C:\ProgramData\Adobe

2020-12-05 12:13 - 2020-05-30 00:42 - 000000000 ____D C:\Program Files (x86)\Adobe

2020-12-04 21:40 - 2020-05-29 21:27 - 000000000 ____D C:\Users\y\AppData\Local\SquirrelTemp

2020-12-04 15:34 - 2020-05-30 11:42 - 000000000 ____D C:\Program Files\Microsoft Office

2020-12-04 15:34 - 2020-05-29 19:43 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2020-12-02 19:51 - 2020-05-29 20:09 - 000000000 ____D C:\ProgramData\Package Cache

2020-11-28 22:32 - 2020-06-07 19:37 - 000000000 ____D C:\Users\y\AppData\Local\BattlEye

2020-11-28 21:28 - 2020-09-06 12:42 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr

2020-11-27 21:12 - 2020-05-29 20:31 - 000000000 ____D C:\Program Files\Rockstar Games

2020-11-27 21:12 - 2020-05-29 20:31 - 000000000 ____D C:\Program Files (x86)\Rockstar Games

2020-11-25 17:33 - 2020-07-04 09:26 - 000000774 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk

2020-11-25 17:33 - 2020-05-29 19:47 - 000000000 ____D C:\Users\y\AppData\Roaming\Notepad++

2020-11-25 16:22 - 2020-09-20 10:56 - 000134792 _____ (AVG Technologies) C:\WINDOWS\system32\icarus_rvrt.exe

2020-11-22 20:25 - 2020-06-21 20:33 - 000000000 ____D C:\Users\y\AppData\Roaming\.minecraft

2020-11-22 09:47 - 2020-05-29 19:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2020-11-21 16:07 - 2020-10-23 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer

2020-11-21 16:04 - 2020-05-31 11:52 - 000000000 ____D C:\Users\y\AppData\Local\cache

2020-11-21 12:06 - 2020-05-29 19:36 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2020-11-20 20:06 - 2020-05-31 12:32 - 000000000 ____D C:\ProgramData\ProtonVPN

2020-11-20 20:03 - 2020-05-30 02:57 - 000000000 ____D C:\Users\y\AppData\Local\ProtonVPN

2020-11-17 07:02 - 2020-05-29 21:31 - 000000000 ____D C:\Users\y\AppData\Local\NVIDIA Corporation

2020-11-17 07:02 - 2020-05-29 19:23 - 000000000 ____D C:\ProgramData\Packages

2020-11-15 20:28 - 2020-05-31 22:29 - 000000000 ____D C:\Users\y\AppData\Roaming\WeMod

2020-11-14 18:09 - 2020-06-06 11:07 - 000000000 ____D C:\Users\y\AppData\Local\GameCenter

2020-11-14 11:12 - 2020-05-29 19:25 - 000000000 ____D C:\WINDOWS\system32\MRT

2020-11-14 11:10 - 2020-05-29 19:25 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2020-11-13 18:45 - 2020-05-29 19:23 - 000000000 ____D C:\ProgramData\NVIDIA Corporation

2020-11-13 18:09 - 2020-05-29 19:16 - 002876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2020-10-27 21:46 - 2020-10-27 21:46 - 000004682 _____ () C:\Users\y\AppData\Roaming\VoiceMeeterDefault.xml

2020-06-21 15:42 - 2020-12-09 17:23 - 000000128 _____ () C:\Users\y\AppData\Local\PUTTY.RND

2020-07-12 18:33 - 2020-12-11 18:22 - 000007597 _____ () C:\Users\y\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

M-K-D-B

11.12.2020 22:50

Die FRST.txt ist wieder unvollständig... es fehlt der komplette obere Teil.

Starte den Rechner neu und führe einen neuen Suchlauf mit FRST aus.
Poste beide Logdateien erneut.

ilias2

11.12.2020 23:10

FRST.txt

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 09-12-2020

durchgeführt von ***** (Administrator) auf FRIDAY (Gigabyte Technology Co., Ltd. AX370-Gaming K5) (11-12-2020 23:00:22)

Gestartet von C:\Users\*****\Desktop

Geladene Profile: *****

Platform: Windows 10 Pro Version 20H2 19042.630 (X64) Sprache: Deutsch (Deutschland)

Standard-Browser: FF

Start-Modus: Normal
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

() [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe

() [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Tautulli.exe

(Adobe Inc. -> Adobe Inc.) C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\aswidsagent.exe

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGSvc.exe

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\avgToolsSvc.exe

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\AVGUI.exe <4>

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\Antivirus\wsc_proxy.exe

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupSvc.exe

(AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) C:\Program Files\AVG\TuneUp\TuneupUI.exe <2>

(cFos Software GmbH -> cFos Software GmbH) C:\Program Files\cFosSpeed\cfosspeed.exe

(cFos Software GmbH -> cFos Software GmbH) C:\Program Files\cFosSpeed\spd.exe

(DroidMonkey Apps, LLC -> ) G:\Program Files\KeePassXC\keepassxc-proxy.exe

(Even Balance, Inc. -> ) C:\Windows\SysWOW64\PnkBstrA.exe

(geek software GmbH -> geek software GmbH) G:\Program Files (x86)\PDF24\pdf24.exe

(GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe

(GIGA-BYTE TECHNOLOGY CO., LTD. -> ) C:\Program Files (x86)\GIGABYTE\RGBFusion\RGBFusion.exe

(GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.) C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe

(GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft) C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe

(GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngine.exe

(GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe

(GOG Sp. z o.o. -> GOG.com) C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe

(GOG Sp. z o.o. -> GOG.com) H:\Program Files (x86)\GOG Galaxy\GalaxyClient Helper.exe <2>

(GOG Sp. z o.o. -> GOG.com) H:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe

(GOG Sp. z o.o. -> GOG.com) H:\Program Files (x86)\GOG Galaxy\GOG Galaxy Notifications Renderer.exe

(Intel(R) INTELND1820 -> Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe

(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe

(IObit Information Technology -> IObit) C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe

(IObit Information Technology -> IObit) G:\Program Files (x86)\IObit\IObit Uninstaller\UninstallMonitor.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbam.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe

(Malwarebytes Inc -> Malwarebytes) C:\Program Files\Malwarebytes\Anti-Malware\mbamtray.exe

(Microsoft Corporation -> Microsoft Corporation) C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20316.0_x64__8wekyb3d8bbwe\HxOutlook.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\microsoft.windowscommunicationsapps_16005.13426.20316.0_x64__8wekyb3d8bbwe\HxTsr.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.WindowsStore_12011.1001.1.0_x64__8wekyb3d8bbwe\WinStore.App.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.420.11102.0_x64__8wekyb3d8bbwe\GameBar.exe

(Microsoft Corporation) C:\Program Files\WindowsApps\Microsoft.XboxGamingOverlay_5.420.11102.0_x64__8wekyb3d8bbwe\GameBarFTServer.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\dllhost.exe <4>

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\MoUsoCoreWorker.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\rundll32.exe

(Microsoft Windows -> Microsoft Corporation) C:\Windows\System32\smartscreen.exe

(Microsoft Windows Publisher -> Microsoft Corporation) C:\Windows\SysWOW64\svchost.exe <2>

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\firefox.exe <12>

(Mozilla Corporation -> Mozilla Corporation) C:\Program Files\Mozilla Firefox\plugin-container.exe

(NVIDIA Corporation -> Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe <5>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe <3>

(NVIDIA Corporation -> NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvsphelper64.exe

(NVIDIA Corporation -> NVIDIA Corporation) C:\Windows\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\NVDisplay.Container.exe <2>

(OpenVPN Inc. -> The OpenVPN Project) C:\Program Files\OpenVPN\bin\openvpnserv.exe

(Plex, Inc. -> ) H:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe

(Plex, Inc. -> Plex, Inc.) H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe

(Plex, Inc. -> Plex, Inc.) H:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe

(Plex, Inc. -> Python Software Foundation) H:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe

(Python Software Foundation -> Python Software Foundation) H:\Program Files (x86)\GOG Galaxy\python\python.exe <6>

(Razer USA Ltd. -> Razer Inc) C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe

(Razer USA Ltd. -> Razer Inc.) C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe

(Razer USA Ltd. -> Razer Inc.) G:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe

(Realtek Semiconductor Corp. -> Realtek Semiconductor) C:\Windows\System32\RtkAudUService64.exe <2>

(Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe

(Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.) C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe

(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) G:\Program Files (x86)\TeamViewer\TeamViewer.exe

(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe

(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) G:\Program Files (x86)\TeamViewer\tv_w32.exe

(TeamViewer Germany GmbH -> TeamViewer Germany GmbH) G:\Program Files (x86)\TeamViewer\tv_x64.exe

(Tonec Inc. -> Tonec Inc.) [Datei ist nicht signiert] H:\Program Files (x86)\Internet Download Manager\IDMan.exe

(VMware, Inc. -> VMware, Inc.) C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe

(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnat.exe

(VMware, Inc. -> VMware, Inc.) C:\Windows\SysWOW64\vmnetdhcp.exe

(VMware, Inc. -> VMware, Inc.) G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe
 

==================== Registry (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [AVGUI.exe] => C:\Program Files\AVG\Antivirus\AvLaunch.exe [165000 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [Gigabyte Speed] => C:\Program Files\cFosSpeed\cFosSpeed.exe [1563480 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

HKLM\...\Run: [RtkAudUService] => C:\WINDOWS\System32\RtkAudUService64.exe [1082160 2020-05-03] (Realtek Semiconductor Corp. -> Realtek Semiconductor)

HKLM\...\Run: [TuneupUI.exe] => C:\Program Files\AVG\TuneUp\TuneupUI.exe [2614832 2020-12-01] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [446392 2012-04-04] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM-x32\...\Run: [RazerCortex] => G:\Program Files (x86)\Razer\Razer Cortex\CortexLauncher.exe [266624 2020-10-09] (Razer USA Ltd. -> Razer Inc.)

HKLM-x32\...\Run: [HP Software Update] => C:\Program Files (x86)\HP\HP Software Update\HPWuSchd2.exe [96056 2013-05-30] (Hewlett-Packard Company -> Hewlett-Packard)

HKLM-x32\...\Run: [vmware-tray.exe] => G:\Program Files (x86)\VMware\VMware Workstation\vmware-tray.exe [125872 2019-05-04] (VMware, Inc. -> VMware, Inc.)

HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [710776 2020-06-18] (Oracle America, Inc. -> Oracle Corporation)

HKLM-x32\...\Run: [PDFPrint] => G:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

HKLM-x32\...\Run: [SwitchBoard] => C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]

HKLM-x32\...\Run: [AdobeCS6ServiceManager] => C:\Program Files (x86)\Common Files\Adobe\CS6ServiceManager\CS6ServiceManager.exe [1073312 2012-03-09] (Adobe Systems Incorporated -> Adobe Systems Incorporated)

HKLM-x32\...\RunOnce: [DualBiosRescue] => C:\Program Files (x86)\GIGABYTE\GigabyteFirmwareUpdateUtility\dbrro.exe [12096 2015-08-19] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

HKLM-x32\...\RunOnce: [PreRun] => C:\Program Files (x86)\GIGABYTE\AppCenter\PreRun.exe [14632 2016-02-26] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

HKLM-x32\...\RunOnce: [SelLed] => C:\Program Files (x86)\GIGABYTE\RGBFusion\RunLed.exe [50096 2019-04-29] (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [Plex Media Server] => H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [21011440 2020-12-01] (Plex, Inc. -> Plex, Inc.)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [EpicGamesLauncher] => G:\Program Files (x86)\Epic Games\Launcher\Portal\Binaries\Win64\EpicGamesLauncher.exe [32710544 2020-12-11] (Epic Games Inc. -> Epic Games, Inc.)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [CCleaner Smart Cleaning] => G:\Program Files\CCleaner\CCleaner64.exe [30870200 2020-09-22] (Piriform Software Ltd -> Piriform Software Ltd)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [Discord] => C:\Users\*****\AppData\Local\Discord\Update.exe [1512760 2020-12-03] (Discord Inc. -> GitHub)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [com.squirrel.Teams.Teams] => C:\Users\*****\AppData\Local\Microsoft\Teams\Update.exe [2347880 2020-06-17] (Microsoft 3rd Party Application Component -> Microsoft Corporation)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [Advanced SystemCare] => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCTray.exe [3637008 2020-06-19] (IObit Information Technology -> IObit)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [IDMan] => H:\Program Files (x86)\Internet Download Manager\IDMan.exe [5451576 2020-05-02] (Tonec Inc. -> Tonec Inc.) [Datei ist nicht signiert]

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [35C0DD69A13B47FAAE527F030D7053F7FAB3A98B._service_run] => "C:\Program Files (x86)\Microsoft\Edge\Application\msedge.exe" --type=service /prefetch:8

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [AdobeBridge] => [X]

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [GalaxyClient] => [X]

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [GogGalaxy] => H:\Program Files (x86)\GOG Galaxy\GalaxyClient.exe [14848584 2020-12-11] (GOG Sp. z o.o. -> GOG.com)

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Run: [Tautulli] => C:\Program Files (x86)\Tautulli\Tautulli.exe [6679526 2020-12-05] () [Datei ist nicht signiert]

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Policies\Explorer: [NoLowDiskSpaceChecks] 1

HKU\S-1-5-18\...\Run: [] => [X]

HKU\S-1-5-18\...\Run: [Plex Media Server] => H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe [21011440 2020-12-01] (Plex, Inc. -> Plex, Inc.)

HKLM\...\Windows x64\Print Processors\hpzppw71: C:\Windows\System32\spool\prtprocs\x64\hpzppw71.dll [239704 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)

HKLM\...\Print\Monitors\PCL hpz3lw71: C:\WINDOWS\system32\hpz3lw71.dll [55392 2017-12-18] (Microsoft Windows Hardware Compatibility Publisher -> Hewlett-Packard Corporation)

HKLM\Software\Microsoft\Active Setup\Installed Components: [OpenVPN_UserSetup] -> reg add HKCU\Software\Microsoft\Windows\CurrentVersion\Run /v OPENVPN-GUI /t REG_SZ /d "C:\Program Files\OpenVPN\bin\openvpn-gui.exe" /f

HKLM\Software\Microsoft\Active Setup\Installed Components: [{8A69D345-D564-463c-AFF1-A69D9E530F96}] -> C:\Program Files (x86)\Google\Chrome\Application\87.0.4280.88\Installer\chrmstp.exe [2020-12-04] (Google LLC -> Google LLC)

Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\HP Digital Imaging Monitor.lnk [2020-05-31]

ShortcutTarget: HP Digital Imaging Monitor.lnk -> C:\Program Files (x86)\HP\Digital Imaging\bin\hpqtra08.exe (Hewlett Packard -> Hewlett-Packard Co.)

Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\AORUS ENGINE.lnk [2020-11-08]

ShortcutTarget: AORUS ENGINE.lnk -> G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\autorun.exe () [Datei ist nicht signiert]

Startup: C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dateien (RP-AC68U-D764) (Z) [2020-05-29] ()

BootExecute: autocheck autochk * icarus_rvrt.exe

GroupPolicy: Beschränkung ? <==== ACHTUNG

Policies: C:\ProgramData\NTUSER.pol: Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Mozilla\Firefox: Beschränkung <==== ACHTUNG

HKLM\SOFTWARE\Policies\Google: Beschränkung <==== ACHTUNG
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) ============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {0289AC85-3E9C-4F4F-B45F-1D446CF7A583} - System32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE => G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe [33903328 2020-11-05] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGABYTE Technology Co.,Ltd.)

Task: {0999DF21-4411-4E22-96ED-9DCC0F5959DC} - System32\Tasks\SIV => C:\Program Files (x86)\GIGABYTE\SIV\thermald.exe [426208 2020-04-09] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

Task: {0C513286-FD2D-47F9-8161-6425F043E319} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\*****\Report update status => %SYSTEMROOT%\System32\RUNDLL32 tsworkspace,WorkspaceStatusNotify2

Task: {0EA88F2F-3AEB-48CB-AF24-8596C36C05A5} - System32\Tasks\EasyTune => C:\Program Files (x86)\GIGABYTE\EasyTune\etinit.exe [15792 2019-02-21] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

Task: {0FFC6FF0-69E7-4402-8B32-D067D6451503} - System32\Tasks\GraphicsCardEngine => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GraphicsCardEngineStarter.exe [227328 2019-11-21] (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert]

Task: {133AE18C-287D-4906-85CA-6659A67841CD} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {179DD872-40A8-4179-8343-363836A32CE6} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2020-05-29] (Google Inc -> Google LLC)

Task: {203C6F4E-E2FD-4A19-A581-ED205C8A8A7F} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\*****\Start Workspace Runtime at logon => {4F1DFCA6-3AAD-48E1-8406-4BC21A501D7C} C:\WINDOWS\system32\wksprt.exe [449536 2020-06-11] (Microsoft Windows -> Microsoft Corporation)

Task: {21AAB9C0-50CC-4522-98F9-80BD0C7098FF} - System32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA GeForce Experience.exe [3301176 2020-10-20] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {2330DB4A-F536-4191-B579-3A5AB3D8CC39} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentFallBack2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5142960 2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {26F36D28-AF82-48A0-872B-5D4581E5B6E5} - System32\Tasks\Microsoft\Office\Office Automatic Updates 2.0 => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {28030DB9-BD8D-465F-B474-67EAE34E8474} - System32\Tasks\Mozilla\Firefox Default Browser Agent 308046B0AF4A39CB => C:\Program Files\Mozilla Firefox\default-browser-agent.exe [670928 2020-11-20] (Mozilla Corporation -> Mozilla Foundation)

Task: {3D3F1FB9-E8B9-460D-9340-B6B0BBF794F2} - System32\Tasks\ASC_SkipUac_***** => C:\Program Files (x86)\IObit\Advanced SystemCare\ASC.exe [8951568 2020-08-09] (IObit Information Technology -> IObit)

Task: {3EDFC92D-179C-4935-944A-5D00A768924D} - System32\Tasks\AVG\AVG TuneUp Update => C:\Program Files\Common Files\AVG\Icarus\avg-tu\icarus.exe [5495432 2020-11-25] (AVG Technologies USA, LLC -> AVG Technologies)

Task: {51AA188B-8CC5-4552-AA04-321FF47C5365} - System32\Tasks\EasyTune 1 => C:\Program Files (x86)\GIGABYTE\EasyTune\etocfile.exe [18144 2020-02-14] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

Task: {64755257-4591-4988-B924-0027D28A76BB} - System32\Tasks\Uninstaller_SkipUac_***** => G:\Program Files (x86)\IObit\IObit Uninstaller\IObitUninstaler.exe [6044432 2020-05-25] (IObit Information Technology -> IObit)

Task: {6B7CB13F-5063-4DE5-9BCD-5A966294B5F1} - System32\Tasks\npcapwatchdog => C:\Program Files\Npcap\CheckStatus.bat [880 2020-09-25] () [Datei ist nicht signiert]

Task: {770CED39-FEEF-407C-8F8A-FFFD576F86FA} - System32\Tasks\Microsoft\Windows\RemoteApp and Desktop Connections Update\*****\Update connections => %SYSTEMROOT%\System32\RUNDLL32 tsworkspace,TaskUpdateWorkspaces2

Task: {7B906A4E-51A2-43C5-9E4A-FA1FEBE5D6C2} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [907240 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {80919B4B-AFF7-4B95-A34C-D2F802F1A5AE} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [154920 2020-05-29] (Google Inc -> Google LLC)

Task: {8BDD3AB6-72CC-4398-9A5C-74CE8D1D822A} - System32\Tasks\Agent Activation Runtime\S-1-5-21-3136980708-3557880529-3186569697-1001 => C:\WINDOWS\System32\AgentActivationRuntimeStarter.exe [13312 2020-10-14] (Microsoft Windows -> )

Task: {8EC653C4-4C2B-466C-AA62-EB08AC432AA0} - System32\Tasks\Antivirus Emergency Update => C:\Program Files\AVG\Antivirus\AvEmUpdate.exe [4665480 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

Task: {9359A8BF-5762-419D-A71D-39629AE0FB61} - System32\Tasks\CCleaner Update => G:\Program Files\CCleaner\CCUpdate.exe [686384 2020-09-22] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {95085B74-4291-4747-A0BC-CC8F8E288565} - System32\Tasks\Microsoft\Office\Office Feature Updates => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143712 2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {96A13AA8-5988-4925-B3D7-6D29F5997935} - System32\Tasks\CCleanerSkipUAC => G:\Program Files\CCleaner\CCleaner.exe [25492152 2020-09-22] (Piriform Software Ltd -> Piriform Software Ltd)

Task: {9B55094D-AA1B-4036-8CDD-8B92CED620E6} - System32\Tasks\Microsoft\Office\Office ClickToRun Service Monitor => C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeC2RClient.exe [23054216 2020-12-01] (Microsoft Corporation -> Microsoft Corporation)

Task: {9CB5A898-840E-4A19-8445-1BEDFEC26AB3} - System32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {A1431C1A-3C24-4195-9054-3571481D7E16} - System32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {A8BECF4D-A8B0-4285-8138-0AE94817C9C8} - System32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {B1FB5E7C-0D80-4DCE-8D23-AF9D93F34295} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [646456 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)

Task: {B434060D-9504-4627-B495-0EF159572A3D} - System32\Tasks\cFos\Registration Tasks\Open Browser => c:\program files\mozilla firefox\firefox.exe -osint -url "hxxp://localhost:1487/cfosspeed/pingstat.htm"

Task: {BFB520AE-0843-416F-AE74-F9D7C296E824} - System32\Tasks\ASC_PerformanceMonitor => C:\Program Files (x86)\IObit\Advanced SystemCare\Monitor.exe [3183888 2020-06-01] (IObit Information Technology -> IObit)

Task: {BFC87559-4A15-47EB-BED8-3A70AD3CE014} - System32\Tasks\Microsoft\Office\Office Feature Updates Logon => C:\Program Files\Microsoft Office\root\Office16\sdxhelper.exe [143712 2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {C3C15CE6-3BC7-4370-8D2C-68331913FF2F} - System32\Tasks\Microsoft\Office\OfficeTelemetryAgentLogOn2016 => C:\Program Files\Microsoft Office\root\Office16\msoia.exe [5142960 2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Task: {C977D54C-FE1E-4D00-BDC8-9192E620EF26} - System32\Tasks\SIV-VGA => C:\Program Files (x86)\GIGABYTE\SIV\sensord.exe [254176 2020-04-09] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

Task: {D006FA77-20F5-4E27-911A-361EBFA4F537} - System32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvBackend\NvBatteryBoostCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerBatteryBoostCheck.log

Task: {DD4A5077-6315-4893-8190-C355CADAC9A1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [1349200 2020-11-03] (Adobe Inc. -> Adobe Inc.)

Task: {DEA35F7B-DCEE-42BD-8353-649C20205EF0} - System32\Tasks\LiquidSensord => C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\LiquidSensord.exe [245760 2019-11-21] (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert]

Task: {EB3B346B-EF0C-43E0-B520-6925FE7C5A22} - System32\Tasks\AVG\AVG TuneUp Update BugReport => C:\Program Files\AVG\TuneUp\AvBugReport.exe [2812664 2020-12-01] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.) -> --send "dumps|report" --silent --product 74 --programpath "C:\Program Files\AVG\TuneUp\Setup\.." --configpath "C:\Program Files\AVG\TuneUp\Setup" --path "C:\ProgramData\AVG\TuneUp\log" --path "C:\ProgramData\AVG\Icarus\Logs" --guid 451e9b39-5e60-4034-a6d2-4ad3b45df07f

Task: {ECEFDF88-ED43-4C43-99A8-1B17BCE9F472} - System32\Tasks\AVG\Overseer => C:\Program Files\Common Files\AVG\Overseer\overseer.exe [1773192 2020-09-17] (AVG Technologies USA, LLC -> AVG Technologies)

Task: {F09E62EC-EE80-41BB-97E3-A1128FEEB92E} - System32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [874472 2020-10-17] (NVIDIA Corporation -> NVIDIA Corporation) -> -d "C:\Program Files\NVIDIA Corporation\NvDriverUpdateCheck" -l 3 -f C:\ProgramData\NVIDIA\NvContainerDriverUpdateCheck.log

Task: {FB96D000-781A-4993-BBD3-24537046221D} - System32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\NvBackend\NvTmRep.exe [1128424 2020-10-19] (NVIDIA Corporation -> NVIDIA Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: 127.0.0.1       activate.navicat.com

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{eb096168-f090-4110-b734-6b22861b7b13}: [DhcpNameServer] 192.168.178.1
 

Edge: 

======

Edge Profile: C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default [2020-11-08]

Edge Extension: (IDM Integration Module) - C:\Users\*****\AppData\Local\Microsoft\Edge\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-11-07]

Edge HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\SOFTWARE\Microsoft\Edge\Extensions\...\Edge\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]
 

FireFox:

========

FF DefaultProfile: j0np2f1s.default

FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j0np2f1s.default [2020-12-11]

FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\j0np2f1s.default\user.js [2020-09-20]

FF ProfilePath: C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release [2020-12-11]

FF user.js: detected! => C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\user.js [2020-09-20]

FF Session Restore: Mozilla\Firefox\Profiles\ue9r639e.default-release -> ist aktiviert.

FF Notifications: Mozilla\Firefox\Profiles\ue9r639e.default-release -> hxxps://dekom.uc.de

FF Extension: (Anti-Porno) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\@porn-blocker.xpi [2020-05-29]

FF Extension: (Firefox Multi-Account Containers) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\@testpilot-containers.xpi [2020-10-01]

FF Extension: (HTTPS Everywhere) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\https-everywhere@eff.org.xpi [2020-11-17]

FF Extension: (Terms of Service; Didn’t Read) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid0-3GUEt1r69sQNSrca5p8kx9Ezc3U@jetpack.xpi [2020-05-29]

FF Extension: (Decentraleyes) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid1-BoFifL9Vbdl2zQ@jetpack.xpi [2020-11-05]

FF Extension: (Privacy Badger) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\jid1-MnnxcxisBPnSXQ@jetpack.xpi [2020-10-09]

FF Extension: (KeePassXC-Browser) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\keepassxc-browser@keepassxc.org.xpi [2020-11-08]

FF Extension: (IDM Integration Module) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\mozilla_cc3@internetdownloadmanager.com.xpi [2020-11-14]

FF Extension: (uBlock Origin) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\uBlock0@raymondhill.net.xpi [2020-11-20]

FF Extension: (WatchDogs) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{6547f9b8-7695-4fc9-b57b-fb7aa9fec4c3}.xpi [2020-06-20]

FF Extension: (Mitaka) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{9efc0280-b125-400e-b53d-2d09d7effab4}.xpi [2020-12-04]

FF Extension: (adultblacklist) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{b4eda7b1-2bbe-4961-b336-aaad77d87a47}.xpi [2020-05-29]

FF Extension: (Avengers: Infinity War 3) - C:\Users\*****\AppData\Roaming\Mozilla\Firefox\Profiles\ue9r639e.default-release\Extensions\{ef8616e0-e2f1-471b-9c47-5d09149b6d2b}.xpi [2020-05-29]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Firefox\Extensions: [mozilla_cc3@internetdownloadmanager.com] - H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi

FF Extension: (IDM Integration Module) - H:\Program Files (x86)\Internet Download Manager\idmmzcc3.xpi [2020-04-29]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\SeaMonkey\Extensions: [mozilla_cc@internetdownloadmanager.com] - C:\Users\*****\AppData\Roaming\IDM\idmmzcc5

FF Extension: (IDM CC) - C:\Users\*****\AppData\Roaming\IDM\idmmzcc5 [2020-05-29] [] [ist nicht signiert]

FF HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\SeaMonkey\Extensions: [mozilla_cc2@internetdownloadmanager.com] - H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi

FF Extension: (IDM integration) - H:\Program Files (x86)\Internet Download Manager\idmmzcc2.xpi [2017-12-20] []

FF Plugin: @java.com/DTPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\dtplugin\npDeployJava1.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @java.com/JavaPlugin,version=11.261.2 -> C:\Program Files\Java\jre1.8.0_261\bin\plugin2\npjp2.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

FF Plugin: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\Office16\NPSPWRAP.DLL [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin: @videolan.org/vlc,version=3.0.11 -> G:\Program Files\VideoLAN\VLC\npvlc.dll [2020-06-04] (VideoLAN -> VideoLAN)

FF Plugin-x32: @microsoft.com/Lync,version=15.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Mozilla Firefox\plugins\npmeetingjoinpluginoc.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: @microsoft.com/SharePoint,version=14.0 -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\NPSPWRAP.DLL [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2020-12-07] (Adobe Inc. -> Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default [2020-12-11]

CHR HomePage: Default -> hxxp://www.google.com

CHR StartupUrls: Default -> "hxxps://www.facebook.com/","hxxp://www.google.com/","hxxp://start.iminent.com/?appId=E4B15248-E4A6-47F0-A767-40F4BA8E7F4A","hxxps://www.google.com/"

CHR Session Restore: Default -> ist aktiviert.

CHR Extension: (Pop up blocker for Chrome™ - Poper Blocker) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\bkkbcggnhapdmkeljlodobbkopceiche [2020-05-31]

CHR Extension: (YouTube) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2020-05-31]

CHR Extension: (uBlock Origin) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cjpalhdlnbpafiamejdnhcphjbkeiagm [2020-12-11]

CHR Extension: (Adblock für Youtube™) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\cmedhionkhpnakcndndgjdbohmhepckk [2020-10-17]

CHR Extension: (HTTPS Everywhere) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2020-11-23]

CHR Extension: (GeForce Experience Stream Client) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\gjljknijpnfibppaijefibndmiabonep [2020-05-31]

CHR Extension: (OkayFreedom) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\hfnbbbkabnehoejfhcbbhdicagcoobji [2020-05-31]

CHR Extension: (Decentraleyes) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ldpochfccmkkmhdbclfhpagapcfdljkj [2020-11-15]

CHR Extension: (IDM Integration Module) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\ngpampappnmepgilojfohadhhmbhlaek [2020-12-11]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2020-05-31]

CHR Extension: (WebRTC Network Limiter) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\npeicpdbkakmehahjeeohfdhnlpdklia [2020-05-31]

CHR Extension: (AdFly Skipper) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\obnfifcganohemahpomajbhocfkdgmjb [2020-11-15]

CHR Extension: (Adult Blocker - Porn Adult Filter) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\onjjgbgnpbedmhbdoikhknhflbfkecjm [2020-05-31]

CHR Extension: (Chrome Media Router) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2020-11-23]

CHR Extension: (Privacy Badger) - C:\Users\*****\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2020-12-11]

CHR HKLM\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]

CHR HKLM-x32\...\Chrome\Extension: [ngpampappnmepgilojfohadhhmbhlaek] - H:\Program Files (x86)\Internet Download Manager\IDMGCExt.crx [2020-05-02]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 AdobeARMservice; C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\armsvc.exe [170056 2020-11-03] (Adobe Inc. -> Adobe Inc.)

R2 AdvancedSystemCareService13; C:\Program Files (x86)\IObit\Advanced SystemCare\ASCService.exe [1293072 2020-06-15] (IObit Information Technology -> IObit)

R2 AVG Antivirus; C:\Program Files\AVG\Antivirus\AVGSvc.exe [366232 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 AVG Tools; C:\Program Files\AVG\Antivirus\avgToolsSvc.exe [3096712 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R3 avgbIDSAgent; C:\Program Files\AVG\Antivirus\aswidsagent.exe [8502208 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 AvgWscReporter; C:\Program Files\AVG\Antivirus\wsc_proxy.exe [110608 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [8736880 2020-11-28] (BattlEye Innovations e.K. -> )

R2 cFosSpeedS; C:\Program Files\cFosSpeed\spd.exe [598360 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

R2 CleanupPSvc; C:\Program Files\AVG\TuneUp\TuneupSvc.exe [12976336 2020-12-01] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 ClickToRunSvc; C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe [9105800 2020-11-23] (Microsoft Corporation -> Microsoft Corporation)

S3 EasyAntiCheat; C:\Program Files (x86)\EasyAntiCheat\EasyAntiCheat.exe [784512 2020-09-19] (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

R2 EasyTuneEngineService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\EasyTuneEngineService.exe [143072 2020-07-01] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S3 FvSvc; C:\Program Files\NVIDIA Corporation\FrameViewSDK\nvfvsdksvc_x64.exe [287720 2020-10-19] (NVIDIA Corporation -> NVIDIA)

R2 gadjservice; C:\Program Files (x86)\GIGABYTE\AppCenter\AdjustService.exe [17920 2015-06-25] () [Datei ist nicht signiert]

S3 GalaxyClientService; H:\Program Files (x86)\GOG Galaxy\GalaxyClientService.exe [1741384 2020-12-11] (GOG Sp. z o.o. -> GOG.com)

S3 GalaxyCommunication; C:\ProgramData\GOG.com\Galaxy\redists\GalaxyCommunication.exe [6821960 2020-12-04] (GOG Sp. z o.o. -> GOG.com)

R2 Gservice; C:\Program Files (x86)\GIGABYTE\GService\GCloud.exe [19888 2016-12-02] (GIGA-BYTE TECHNOLOGY CO., LTD. -> Microsoft)

S3 HwmRecordService; C:\Program Files (x86)\GIGABYTE\SIV\HwmRecordService.exe [128736 2020-04-09] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

S2 IObitUnSvr; G:\Program Files (x86)\IObit\IObit Uninstaller\IUService.exe [156944 2020-05-25] (IObit Information Technology -> IObit)

R2 MBAMService; C:\Program Files\Malwarebytes\Anti-Malware\MBAMService.exe [7456464 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R2 Net Driver HPZ12; C:\Windows\System32\HPZinw12.dll [71680 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 OcButtonService; C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\OcButtonService.exe [119808 2019-11-21] (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert]

S3 OpenVPNService; C:\Program Files\OpenVPN\bin\openvpnserv2.exe [24192 2018-03-06] (OpenVPN Technologies, Inc. -> )

R2 OpenVPNServiceInteractive; C:\Program Files\OpenVPN\bin\openvpnserv.exe [67000 2020-04-16] (OpenVPN Inc. -> The OpenVPN Project)

S3 OpenVPNServiceLegacy; C:\Program Files\OpenVPN\bin\openvpnserv.exe [67000 2020-04-16] (OpenVPN Inc. -> The OpenVPN Project)

R2 PDF24; G:\Program Files (x86)\PDF24\pdf24.exe [486464 2020-10-01] (geek software GmbH -> geek software GmbH)

R2 PlexUpdateService; H:\Program Files (x86)\Plex\Plex Media Server\Plex Update Service.exe [1425912 2020-12-01] (Plex, Inc. -> Plex, Inc.)

R2 Pml Driver HPZ12; C:\Windows\System32\HPZipm12.dll [89600 2010-08-06] (Hewlett-Packard) [Datei ist nicht signiert]

R2 PnkBstrA; C:\WINDOWS\SysWOW64\PnkBstrA.exe [76888 2020-09-06] (Even Balance, Inc. -> )

S3 ProtonVPN Service; H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPNService.exe [99624 2020-11-04] (ProtonVPN AG -> )

S3 ProtonVPN Update Service; H:\Program Files (x86)\Proton Technologies\ProtonVPN\ProtonVPN.UpdateService.exe [61736 2020-11-04] (ProtonVPN AG -> )

R2 Razer Game Manager Service; C:\Program Files (x86)\Razer\Razer Services\GMS\GameManagerService.exe [253776 2020-06-24] (Razer USA Ltd. -> Razer Inc)

S3 Rockstar Service; H:\Programme\Rockstar Games\Launcher\RockstarService.exe [1382016 2020-11-27] (Rockstar Games, Inc. -> Rockstar Games)

R2 RzActionSvc; C:\Program Files (x86)\Razer\Razer Services\Razer Central\RazerCentralService.exe [533376 2020-09-23] (Razer USA Ltd. -> Razer Inc.)

R2 RzKLService; G:\Program Files (x86)\Razer\Razer Cortex\RzKLService.exe [290864 2020-10-09] (Razer USA Ltd. -> Razer Inc.)

S3 Sense; C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe [5101992 2020-11-13] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 ss_conn_launcher_service; C:\WINDOWS\System32\Samsung\EasySetup\ss_conn_launcher.exe [182128 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R2 ss_conn_service; C:\Program Files\Samsung\USB Drivers\27_ssconn\conn\ss_conn_service.exe [752224 2020-06-26] (Samsung Electronics CO., LTD. -> DEVGURU Co., LTD.)

R2 ss_conn_service2; C:\Program Files\Samsung\USB Drivers\28_ssconn2\conn\ss_conn_service2.exe [935352 2020-06-26] (Samsung Electronics Co., Ltd. -> DEVGURU Co., LTD.)

S3 SwitchBoard; C:\Program Files (x86)\Common Files\Adobe\SwitchBoard\SwitchBoard.exe [517096 2010-02-19] (Test Signing Certificate -> Adobe Systems Incorporated) [Datei ist nicht signiert]

R2 TeamViewer; G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [12720144 2020-11-18] (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

S3 ucldr_battlegrounds_gl; C:\Program Files\Common Files\Uncheater\ucldr_battlegrounds_gl.exe [6995800 2020-06-07] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

R2 VMAuthdService; G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe [100784 2019-05-04] (VMware, Inc. -> VMware, Inc.)

S3 VMwareHostd; G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe [15446448 2019-05-04] (VMware, Inc. -> )

S3 WdNisSvc; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.4-0\NisSrv.exe [2484256 2020-05-29] (Microsoft Windows Publisher -> Microsoft Corporation)

S3 WinDefend; C:\ProgramData\Microsoft\Windows Defender\platform\4.18.2005.4-0\MsMpEng.exe [103168 2020-05-29] (Microsoft Windows Publisher -> Microsoft Corporation)

R2 NVDisplay.ContainerLocalSystem; C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\NVDisplay.Container.exe -s NVDisplay.ContainerLocalSystem -f %ProgramData%\NVIDIA\NVDisplay.ContainerLocalSystem.log -l 3 -d C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\Display.NvContainer\plugins\LocalSystem -r -p 30000 -cfg NVDisplay.ContainerLocalSystem\LocalSystem
 

===================== Treiber (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R3 AmdTools64; C:\WINDOWS\System32\drivers\AmdTools64.sys [58216 2018-03-23] (Advanced Micro Devices Inc. -> Advanced Micro Devices)

R3 AscFileFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscFileFilter.sys [45432 2019-07-15] (IObit Information Technology -> IObit)

R3 AscRegistryFilter; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\win10_amd64\AscRegistryFilter.sys [46008 2019-07-15] (IObit Information Technology -> IObit)

R0 avgArDisk; C:\WINDOWS\System32\drivers\avgArDisk.sys [37216 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgArPot; C:\WINDOWS\System32\drivers\avgArPot.sys [206472 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgbidsdriver; C:\WINDOWS\System32\drivers\avgbidsdriver.sys [332432 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgbidsh; C:\WINDOWS\System32\drivers\avgbidsh.sys [247952 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgbuniv; C:\WINDOWS\System32\drivers\avgbuniv.sys [97424 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgElam; C:\WINDOWS\System32\drivers\avgElam.sys [16832 2020-11-24] (Microsoft Windows Early Launch Anti-malware Publisher -> AVG Technologies CZ, s.r.o.)

R1 avgKbd; C:\WINDOWS\System32\drivers\avgKbd.sys [42848 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgMonFlt; C:\WINDOWS\System32\drivers\avgMonFlt.sys [176808 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgNetHub; C:\WINDOWS\System32\drivers\avgNetHub.sys [521816 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgRdr; C:\WINDOWS\System32\drivers\avgRdr2.sys [109352 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgRvrt; C:\WINDOWS\System32\drivers\avgRvrt.sys [84928 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgSnx; C:\WINDOWS\System32\drivers\avgSnx.sys [851680 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R1 avgSP; C:\WINDOWS\System32\drivers\avgSP.sys [469896 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R2 avgStm; C:\WINDOWS\System32\drivers\avgStm.sys [217408 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

R0 avgVmm; C:\WINDOWS\System32\drivers\avgVmm.sys [326488 2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

S3 BEDaisy; C:\Program Files (x86)\Common Files\BattlEye\BEDaisy.sys [3213176 2020-12-08] (BattlEye Innovations e.K. -> )

R1 cFosSpeed; C:\WINDOWS\system32\DRIVERS\cfosspeed6.sys [1499112 2016-10-21] (cFos Software GmbH -> cFos Software GmbH)

R3 cpuz145; C:\WINDOWS\temp\cpuz145\cpuz145_x64.sys [49968 2020-12-11] (CPUID -> CPUID)

R1 EneTechIo; C:\WINDOWS\system32\drivers\ene.sys [20992 2020-05-12] (Microsoft Windows Hardware Compatibility Publisher -> )

R1 ESProtectionDriver; C:\WINDOWS\system32\drivers\mbae64.sys [153312 2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

S3 gdrv; C:\WINDOWS\gdrv.sys [26792 2020-05-29] (GIGA-BYTE TECHNOLOGY CO., LTD. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R3 gdrv2; C:\WINDOWS\gdrv2.sys [32600 2020-05-29] (GIGA-BYTE Technology Co., Ltd. -> GIGA-BYTE TECHNOLOGY CO., LTD.)

R2 inpoutx64; C:\WINDOWS\System32\Drivers\inpoutx64.sys [15008 2020-05-29] (Red Fox UK Limited -> Highresolution Enterprises [www.highrez.co.uk])

R3 iobit_monitor_server; C:\Program Files (x86)\IObit\Advanced SystemCare\drivers\Monitor_win10_x64.sys [32520 2018-07-04] (IObit Information Technology -> IObit)

R3 IUFileFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUFileFilter.sys [44104 2020-05-25] (IObit Information Technology -> IObit)

R3 IUProcessFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IUProcessFilter.sys [37328 2020-05-25] (IObit Information Technology -> IObit)

R3 IURegistryFilter; G:\Program Files (x86)\IObit\IObit Uninstaller\drivers\win10_amd64\IURegistryFilter.sys [49800 2020-05-25] (IObit Information Technology -> IObit)

R2 MBAMChameleon; C:\WINDOWS\System32\Drivers\MbamChameleon.sys [220160 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

S0 MbamElam; C:\WINDOWS\System32\DRIVERS\MbamElam.sys [19912 2020-12-11] (Microsoft Windows Early Launch Anti-malware Publisher -> Malwarebytes)

R3 MBAMFarflt; C:\WINDOWS\System32\DRIVERS\farflt.sys [197792 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMProtection; C:\WINDOWS\system32\DRIVERS\mbam.sys [77496 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMSwissArmy; C:\WINDOWS\System32\Drivers\mbamswissarmy.sys [248968 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 MBAMWebProtection; C:\WINDOWS\system32\DRIVERS\mwac.sys [139424 2020-12-11] (Malwarebytes Inc -> Malwarebytes)

R3 NAL; C:\WINDOWS\system32\Drivers\iqvw64e.sys [58520 2018-10-11] (Intel(R) INTELND1820 -> Intel Corporation)

R1 npcap; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)

S4 npcap_wifi; C:\WINDOWS\system32\DRIVERS\npcap.sys [74616 2020-09-25] (Insecure.Com LLC -> Insecure.Com LLC.)

S3 ProtonVPNSplitTunnel; H:\Program Files (x86)\Proton Technologies\ProtonVPN\x64\Win10\ProtonVPN.SplitTunnelDriver.sys [31584 2020-08-19] (Microsoft Windows Hardware Compatibility Publisher -> Proton Technologies AG)

S3 ssudmdm; C:\WINDOWS\system32\DRIVERS\ssudmdm.sys [166768 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

S3 ss_conn_usb_driver2; C:\WINDOWS\System32\Drivers\ss_conn_usb_driver2.sys [43376 2020-06-26] (Samsung Electronics Co., Ltd. -> Samsung Electronics Co., Ltd.)

R3 SteamStreamingMicrophone; C:\WINDOWS\system32\drivers\SteamStreamingMicrophone.sys [40736 2017-07-28] (Valve Corp. -> )

R3 SteamStreamingSpeakers; C:\WINDOWS\system32\drivers\SteamStreamingSpeakers.sys [40736 2017-07-21] (Valve Corp. -> )

R3 tap0901; C:\WINDOWS\System32\drivers\tap0901.sys [39920 2019-10-23] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R3 tapprotonvpn; C:\WINDOWS\System32\drivers\tapprotonvpn.sys [49008 2020-04-06] (Microsoft Windows Hardware Compatibility Publisher -> The OpenVPN Project)

R1 vmkbd3; C:\WINDOWS\system32\DRIVERS\vmkbd.sys [52288 2019-05-04] (VMware, Inc. -> VMware, Inc.)

R2 VMnetBridge; C:\WINDOWS\system32\DRIVERS\vmnetbridge.sys [66576 2019-05-04] (VMware, Inc. -> VMware, Inc.)

R0 vsock; C:\WINDOWS\System32\DRIVERS\vsock.sys [92040 2019-04-27] (VMware, Inc. -> VMware, Inc.)

R2 vstor2-mntapi20-shared; C:\Windows\SysWow64\drivers\vstor2-x64.sys [52576 2018-02-28] (VMware, Inc. -> VMware, Inc.)

S3 WdBoot; C:\WINDOWS\system32\drivers\wd\WdBoot.sys [45960 2020-05-29] (Microsoft Windows Early Launch Anti-malware Publisher -> Microsoft Corporation)

S3 WdFilter; C:\WINDOWS\system32\drivers\wd\WdFilter.sys [401120 2020-05-29] (Microsoft Windows -> Microsoft Corporation)

S3 WdNisDrv; C:\WINDOWS\System32\drivers\wd\WdNisDrv.sys [64224 2020-05-29] (Microsoft Windows -> Microsoft Corporation)

S3 xhunter1; C:\WINDOWS\xhunter1.sys [2740480 2020-06-07] (Wellbia.com Co., Ltd. -> Wellbia.com Co., Ltd.)

U4 napagent; kein ImagePath

S3 VBAudioVMVAIOMME; \SystemRoot\System32\drivers\vbaudio_vmvaio64_win10.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat (erstellte) (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-12-11 22:10 - 2020-12-11 22:15 - 000127223 _____ C:\Users\*****\Desktop\Addition.txt

2020-12-11 22:09 - 2020-12-11 23:02 - 000049753 _____ C:\Users\*****\Desktop\FRST.txt

2020-12-11 22:08 - 2020-12-11 22:06 - 002288640 _____ (Farbar) C:\Users\*****\Desktop\FRST64.exe

2020-12-11 22:07 - 2020-12-11 23:01 - 000000000 ____D C:\FRST

2020-12-11 18:24 - 2020-12-11 18:43 - 000000000 ____D C:\Users\*****\AppData\LocalLow\IGDump

2020-12-11 18:24 - 2020-12-11 18:24 - 000248968 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbamswissarmy.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000220160 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamChameleon.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000197792 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\farflt.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000153312 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbae64.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000139424 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mwac.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000077496 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\mbam.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000019912 _____ (Malwarebytes) C:\WINDOWS\system32\Drivers\MbamElam.sys

2020-12-11 18:24 - 2020-12-11 18:24 - 000002041 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000002029 _____ C:\Users\Public\Desktop\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000002029 _____ C:\ProgramData\Desktop\Malwarebytes.lnk

2020-12-11 18:24 - 2020-12-11 18:24 - 000000000 ____D C:\Users\*****\AppData\Local\mbam

2020-12-11 18:24 - 2020-12-11 18:24 - 000000000 ____D C:\ProgramData\Malwarebytes

2020-12-11 18:23 - 2020-12-11 18:23 - 000000000 ____D C:\Program Files\Malwarebytes

2020-12-11 17:23 - 2020-12-11 17:23 - 000003906 _____ C:\Users\*****\Desktop\Tiefenscan1.txt

2020-12-11 17:18 - 2020-12-11 21:19 - 000004266 _____ C:\WINDOWS\system32\Tasks\Antivirus Emergency Update

2020-12-11 17:18 - 2020-11-24 17:25 - 000340104 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\avgBoot.exe

2020-12-11 16:47 - 2020-12-11 16:47 - 109768704 _____ C:\WINDOWS\system32\config\SOFTWARE.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 005103616 _____ C:\WINDOWS\system32\config\DRIVERS.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000868352 _____ C:\WINDOWS\system32\config\DEFAULT.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000143360 _____ C:\WINDOWS\system32\config\SAM.iobit

2020-12-11 16:47 - 2020-12-11 16:47 - 000053248 _____ C:\WINDOWS\system32\config\SECURITY.iobit

2020-12-11 13:13 - 2020-12-11 13:13 - 000000000 ____D C:\Users\*****\AppData\Roaming\INNOTREND COMMERCE HK LIMITED

2020-12-09 18:30 - 2020-12-11 17:18 - 000001134 _____ C:\WINDOWS\system32\config\VSMIDK

2020-12-09 18:27 - 2020-12-09 18:27 - 000373776 _____ C:\WINDOWS\system32\vp9fs.dll

2020-12-09 18:23 - 2020-12-04 04:05 - 000135408 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhda64v.sys

2020-12-09 18:23 - 2020-12-04 04:05 - 000038640 _____ (NVIDIA Corporation) C:\WINDOWS\system32\Drivers\nvhdap64.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001786584 _____ C:\WINDOWS\system32\vulkaninfo-1-999-0-0-0.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001786584 _____ C:\WINDOWS\system32\vulkaninfo.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001453296 _____ (Khronos Group) C:\WINDOWS\system32\OpenCL.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001382616 _____ C:\WINDOWS\SysWOW64\vulkaninfo-1-999-0-0-0.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001382616 _____ C:\WINDOWS\SysWOW64\vulkaninfo.exe

2020-12-09 18:22 - 2020-12-05 04:27 - 001193880 _____ (Khronos Group) C:\WINDOWS\SysWOW64\OpenCL.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001087704 _____ C:\WINDOWS\system32\vulkan-1-999-0-0-0.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 001087704 _____ C:\WINDOWS\system32\vulkan-1.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1-999-0-0-0.dll

2020-12-09 18:22 - 2020-12-05 04:27 - 000940760 _____ C:\WINDOWS\SysWOW64\vulkan-1.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000679664 _____ C:\WINDOWS\system32\nvofapi64.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000608496 _____ C:\WINDOWS\system32\nvml.dll

2020-12-09 18:22 - 2020-12-05 04:25 - 000548248 _____ C:\WINDOWS\SysWOW64\nvofapi.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 002104216 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvFBC64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001589144 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvFBC.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001511664 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFR64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 001164528 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFR.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000813976 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvEncodeAPI64.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000684784 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvidia-smi.exe

2020-12-09 18:22 - 2020-12-05 04:24 - 000673688 _____ (NVIDIA Corporation) C:\WINDOWS\system32\NvIFROpenGL.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000657816 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvEncodeAPI.dll

2020-12-09 18:22 - 2020-12-05 04:24 - 000559000 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\NvIFROpenGL.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 008262552 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuvid.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 007391984 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuvid.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 004611312 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvcuda.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 002731928 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvcuda.dll

2020-12-09 18:22 - 2020-12-05 04:23 - 000447384 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvdebugdump.exe

2020-12-09 18:22 - 2020-12-05 04:22 - 007113064 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvapi64.dll

2020-12-09 18:22 - 2020-12-05 04:22 - 006070008 _____ (NVIDIA Corporation) C:\WINDOWS\SysWOW64\nvapi.dll

2020-12-09 18:22 - 2020-12-05 04:22 - 000849648 _____ (NVIDIA Corporation) C:\WINDOWS\system32\MCU.exe

2020-12-09 18:22 - 2020-12-04 04:05 - 000084008 _____ C:\WINDOWS\system32\nvinfo.pb

2020-12-09 16:28 - 2020-12-09 16:28 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Tautulli

2020-12-09 16:28 - 2020-12-09 16:28 - 000000000 ____D C:\Program Files (x86)\Tautulli

2020-12-09 16:16 - 2020-12-09 16:16 - 000002096 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2020-12-06 13:43 - 2020-12-06 13:43 - 000000000 ____D C:\Users\*****\AppData\Roaming\Bungie

2020-12-05 12:56 - 2020-12-05 12:56 - 000000000 ____D C:\Users\*****\AppData\Local\GOG.com

2020-12-05 12:56 - 2020-12-05 12:56 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\GOG.com

2020-12-05 12:54 - 2020-12-05 12:54 - 000000000 ____D C:\ProgramData\GOG.com

2020-12-05 12:15 - 2020-12-05 12:15 - 000000951 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CS6 (64 Bit).lnk

2020-12-05 12:15 - 2020-12-05 12:15 - 000000000 ____D C:\ProgramData\regid.1986-12.com.adobe

2020-12-05 12:14 - 2020-12-05 12:14 - 000000921 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Bridge CS6 (64bit).lnk

2020-12-05 12:13 - 2020-12-05 12:15 - 000000000 ____D C:\Program Files\Common Files\Adobe

2020-12-05 12:13 - 2020-12-05 12:13 - 000001600 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe ExtendScript Toolkit CS6.lnk

2020-12-05 12:13 - 2020-12-05 12:13 - 000001016 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Extension Manager CS6.lnk

2020-12-02 19:58 - 2020-11-23 14:45 - 000816368 _____ (NVIDIA Corporation) C:\WINDOWS\system32\nvmcumd.dll

2020-12-02 19:51 - 2020-12-02 19:51 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Plex Media Server

2020-11-28 22:33 - 2020-11-28 22:33 - 000000000 ____D C:\Users\*****\AppData\Local\My Games

2020-11-28 21:28 - 2020-11-28 21:28 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.exe

2020-11-28 19:03 - 2020-11-28 19:03 - 000000234 _____ C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Watch Dogs Legion.url

2020-11-28 16:33 - 2020-11-28 16:33 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Cheat Engine 7.2

2020-11-26 22:56 - 2020-11-26 22:56 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.ex0

2020-11-25 19:20 - 2020-11-25 19:20 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PDF24

2020-11-25 13:56 - 2020-12-09 20:09 - 000003482 _____ C:\WINDOWS\system32\Tasks\Adobe Acrobat Update Task

2020-11-24 17:25 - 2020-11-24 17:25 - 000851680 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSnx.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000521816 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgNetHub.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000469896 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgSP.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000332432 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsdriver.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000326488 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgVmm.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000247952 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbidsh.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000217408 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgStm.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000206472 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArPot.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000176808 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgMonFlt.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000109352 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRdr2.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000097424 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgbuniv.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000084928 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgRvrt.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000042848 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgKbd.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000037216 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgArDisk.sys

2020-11-24 17:25 - 2020-11-24 17:25 - 000016832 _____ (AVG Technologies CZ, s.r.o.) C:\WINDOWS\system32\Drivers\avgElam.sys

2020-11-22 21:09 - 2020-11-22 21:10 - 000000000 ____D C:\Users\defaultuser100000\AppData\Local\ConnectedDevicesPlatform

2020-11-22 21:09 - 2020-11-22 21:10 - 000000000 ____D C:\Users\defaultuser100000

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Raspberry Pi

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Users\*****\AppData\Local\Raspberry Pi

2020-11-21 16:04 - 2020-11-21 16:04 - 000000000 ____D C:\Program Files (x86)\Raspberry Pi Imager

2020-11-21 12:06 - 2020-11-21 12:06 - 000000000 ____D C:\WINDOWS\system32\Tasks\Mozilla

2020-11-20 22:36 - 2020-11-22 09:47 - 000000000 ____D C:\Program Files\Mozilla Firefox

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\Users\*****\AppData\Roaming\Proton Technologies AG

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\ProtonVPN

2020-11-20 20:03 - 2020-11-20 20:03 - 000000000 ____D C:\Program Files (x86)\Proton Technologies

2020-11-18 20:03 - 2020-12-09 20:09 - 000002158 _____ C:\WINDOWS\system32\Tasks\npcapwatchdog

2020-11-18 20:03 - 2020-11-18 20:03 - 000000948 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Wireshark.lnk

2020-11-18 20:02 - 2020-11-18 20:03 - 000000000 ____D C:\Program Files\Npcap

2020-11-18 20:02 - 2020-11-18 20:02 - 000000000 ____D C:\WINDOWS\SysWOW64\Npcap

2020-11-18 20:02 - 2020-11-18 20:02 - 000000000 ____D C:\WINDOWS\system32\Npcap

2020-11-18 20:00 - 2020-11-18 20:00 - 000000000 ____D C:\Users\*****\AppData\Roaming\Wireshark

2020-11-15 12:21 - 2020-11-15 12:21 - 000000000 ____D C:\Users\*****\AppData\Local\FLiNGTrainer

2020-11-14 15:07 - 2020-11-14 15:07 - 000000000 ____D C:\Users\*****\AppData\Roaming\EasyAntiCheat

2020-11-13 18:10 - 2020-11-13 18:10 - 000009265 _____ C:\WINDOWS\system32\DrtmAuthTxt.wim

2020-11-11 18:00 - 2020-12-09 20:09 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3136980708-3557880529-3186569697-1004
 

==================== Ein Monat (geänderte) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2020-12-11 22:58 - 2020-05-29 19:07 - 000000000 ____D C:\WINDOWS\system32\SleepStudy

2020-12-11 22:20 - 2020-07-03 15:42 - 000000000 ____D C:\Users\*****\AppData\Local\Tautulli

2020-12-11 22:07 - 2020-05-29 21:29 - 000000000 ____D C:\Users\*****\AppData\Local\CrashDumps

2020-12-11 18:24 - 2019-12-07 10:14 - 000000000 ___HD C:\WINDOWS\ELAMBKUP

2020-12-11 18:23 - 2020-05-29 20:06 - 000000000 ____D C:\Users\*****\AppData\Roaming\IDM

2020-12-11 18:22 - 2020-07-12 18:33 - 000007597 _____ C:\Users\*****\AppData\Local\Resmon.ResmonCfg

2020-12-11 17:34 - 2019-12-07 10:14 - 000000000 ___HD C:\Program Files\WindowsApps

2020-12-11 17:34 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\AppReadiness

2020-12-11 17:28 - 2020-11-01 16:05 - 000002398 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Microsoft Edge.lnk

2020-12-11 17:27 - 2020-05-29 19:31 - 000000000 ____D C:\ProgramData\NVIDIA

2020-12-11 17:27 - 2019-12-07 10:14 - 000000000 ____D C:\ProgramData\regid.1991-06.com.microsoft

2020-12-11 17:25 - 2020-05-29 19:21 - 001731070 _____ C:\WINDOWS\system32\PerfStringBackup.INI

2020-12-11 17:25 - 2019-12-07 15:51 - 000746436 _____ C:\WINDOWS\system32\perfh007.dat

2020-12-11 17:25 - 2019-12-07 15:51 - 000151384 _____ C:\WINDOWS\system32\perfc007.dat

2020-12-11 17:25 - 2019-12-07 10:13 - 000000000 ____D C:\WINDOWS\INF

2020-12-11 17:21 - 2020-05-29 19:36 - 000000000 ____D C:\ProgramData\Mozilla

2020-12-11 17:20 - 2020-05-29 19:36 - 000000000 ____D C:\Users\*****\AppData\LocalLow\Mozilla

2020-12-11 17:19 - 2020-05-29 20:14 - 000000000 ____D C:\Users\*****\AppData\Local\Plex Media Server

2020-12-11 17:19 - 2020-05-29 19:40 - 000000000 ____D C:\ProgramData\AVG

2020-12-11 17:18 - 2020-08-29 08:06 - 000008192 ___SH C:\DumpStack.log.tmp

2020-12-11 17:18 - 2020-05-31 15:30 - 000000000 ____D C:\ProgramData\VMware

2020-12-11 17:18 - 2020-05-29 19:21 - 000000000 ____D C:\Users\*****

2020-12-11 17:18 - 2020-05-29 19:09 - 000000006 ____H C:\WINDOWS\Tasks\SA.DAT

2020-12-11 17:18 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\CbsTemp

2020-12-11 17:16 - 2020-09-27 10:19 - 000000000 ____D C:\Users\*****\AppData\Local\WhatsApp

2020-12-11 17:16 - 2020-06-12 20:19 - 000000000 ____D C:\Program Files\TAP-Windows

2020-12-11 17:16 - 2020-06-12 20:19 - 000000000 ____D C:\Program Files\OpenVPN

2020-12-11 17:16 - 2020-05-31 22:28 - 000000000 ____D C:\Users\*****\AppData\Local\WeMod

2020-12-11 17:16 - 2020-05-30 10:44 - 000000000 ___SD C:\WINDOWS\SysWOW64\lxss

2020-12-11 17:16 - 2020-05-30 10:44 - 000000000 ___SD C:\WINDOWS\system32\lxss

2020-12-11 17:16 - 2020-05-30 10:36 - 000000000 ____D C:\ProgramData\ProductData

2020-12-11 17:16 - 2020-05-30 10:36 - 000000000 ____D C:\ProgramData\IObit

2020-12-11 17:16 - 2020-05-29 21:05 - 000000000 ____D C:\Users\*****\AppData\Roaming\vlc

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 __SHD C:\WINDOWS\BitLockerDiscoveryVolumeContents

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ___SD C:\WINDOWS\system32\AppV

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Portable Devices

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Photo Viewer

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Multimedia Platform

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files\Windows Defender Advanced Threat Protection

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Portable Devices

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Photo Viewer

2020-12-11 17:16 - 2019-12-07 15:54 - 000000000 ____D C:\Program Files (x86)\Windows Multimedia Platform

2020-12-11 17:16 - 2019-12-07 15:52 - 000000000 ____D C:\WINDOWS\system32\OpenSSH

2020-12-11 17:16 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\SysWOW64\de

2020-12-11 17:16 - 2019-12-07 15:51 - 000000000 ____D C:\WINDOWS\system32\de

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\F12

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\SysWOW64\DiagSvcs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\UNP

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\F12

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\dsc

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___SD C:\WINDOWS\system32\DiagSvcs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\PrintDialog

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ___RD C:\WINDOWS\ImmersiveControlPanel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\WinMetadata

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\setup

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\PerceptionSimulation

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\oobe

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\migwiz

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Keywords

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\InstallShield

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\downlevel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Dism

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\Com

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SysWOW64\AdvancedInstallers

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\SystemResources

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinMetadata

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\WinBioPlugIns

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\SystemResetPlatform

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Sysprep

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\ShellExperiences

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\setup

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\PerceptionSimulation

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\oobe

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\migwiz

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Keywords

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\downlevel

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Dism

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\DDFs

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\Com

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\AdvancedInstallers

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellExperiences

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ShellComponents

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\PolicyDefinitions

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\L2Schemas

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\IME

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\DiagTrack

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\bcastdvr

2020-12-11 17:16 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Common Files\System

2020-12-11 17:16 - 2019-12-07 10:03 - 000000000 ____D C:\WINDOWS\servicing

2020-12-11 17:15 - 2020-05-30 10:37 - 000000000 ____D C:\Users\*****\AppData\Roaming\IObit

2020-12-11 17:15 - 2020-05-30 10:36 - 000000000 ____D C:\Users\*****\AppData\LocalLow\IObit

2020-12-11 17:15 - 2020-05-30 00:23 - 000000000 ____D C:\Users\*****\AppData\Local\cFos

2020-12-11 17:15 - 2020-05-29 21:28 - 000000000 ____D C:\Users\*****\AppData\Roaming\discord

2020-12-11 17:15 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\Containers

2020-12-11 17:03 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\registration

2020-12-11 17:02 - 2020-05-29 21:28 - 000000000 ____D C:\Users\*****\AppData\Roaming\WhatsApp

2020-12-11 17:02 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\ServiceState

2020-12-11 16:59 - 2020-05-29 20:06 - 000000000 ____D C:\Users\*****\AppData\Roaming\DMCache

2020-12-11 16:16 - 2019-12-07 10:14 - 000000000 ____D C:\WINDOWS\system32\NDF

2020-12-11 16:15 - 2020-05-30 00:46 - 000000000 ____D C:\Users\*****\AppData\Local\ElevatedDiagnostics

2020-12-11 15:35 - 2020-05-30 10:25 - 000000000 ____D C:\WINDOWS\system32\Tasks\AVAST Software

2020-12-11 12:58 - 2020-10-23 17:34 - 000000000 ____D C:\Users\*****\AppData\Local\RealVNC

2020-12-11 12:58 - 2020-05-29 19:25 - 000000000 ____D C:\Users\*****\AppData\Local\PlaceholderTileLogoFolder

2020-12-10 06:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files\Windows Defender

2020-12-10 06:51 - 2019-12-07 10:14 - 000000000 ____D C:\Program Files (x86)\Windows Defender

2020-12-09 20:09 - 2020-11-08 11:35 - 000002578 _____ C:\WINDOWS\system32\Tasks\GraphicsCardEngine

2020-12-09 20:09 - 2020-11-08 11:35 - 000002542 _____ C:\WINDOWS\system32\Tasks\LiquidSensord

2020-12-09 20:09 - 2020-11-01 16:36 - 000002568 _____ C:\WINDOWS\system32\Tasks\Launcher GIGABYTE AORUS GRAPHICS ENGINE

2020-12-09 20:09 - 2020-11-01 16:04 - 000003628 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineUA

2020-12-09 20:09 - 2020-11-01 16:04 - 000003404 _____ C:\WINDOWS\system32\Tasks\MicrosoftEdgeUpdateTaskMachineCore

2020-12-09 20:09 - 2020-10-29 19:21 - 000003398 _____ C:\WINDOWS\system32\Tasks\NvDriverUpdateCheckDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000003196 _____ C:\WINDOWS\system32\Tasks\NvBatteryBoostCheckOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000003152 _____ C:\WINDOWS\system32\Tasks\NVIDIA GeForce Experience SelfUpdate_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002984 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport4_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport3_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport2_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002948 _____ C:\WINDOWS\system32\Tasks\NvTmRep_CrashReport1_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002914 _____ C:\WINDOWS\system32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 19:21 - 000002744 _____ C:\WINDOWS\system32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}

2020-12-09 20:09 - 2020-10-29 18:56 - 000002862 _____ C:\WINDOWS\system32\Tasks\OneDrive Standalone Update Task-S-1-5-21-3136980708-3557880529-3186569697-1001

2020-12-09 20:09 - 2020-10-14 18:46 - 000003194 _____ C:\WINDOWS\system32\Tasks\CCleaner Update

2020-12-09 20:09 - 2020-09-09 15:28 - 000002460 _____ C:\WINDOWS\system32\Tasks\ASC_PerformanceMonitor

2020-12-09 20:09 - 2020-09-09 15:28 - 000002350 _____ C:\WINDOWS\system32\Tasks\ASC_SkipUac_*****

2020-12-09 20:09 - 2020-05-30 12:34 - 000002402 _____ C:\WINDOWS\system32\Tasks\Uninstaller_SkipUac_*****

2020-12-09 20:09 - 2020-05-29 21:01 - 000002238 _____ C:\WINDOWS\system32\Tasks\CCleanerSkipUAC

2020-12-09 20:09 - 2020-05-29 19:42 - 000003558 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineUA

2020-12-09 20:09 - 2020-05-29 19:42 - 000003334 _____ C:\WINDOWS\system32\Tasks\GoogleUpdateTaskMachineCore

2020-12-09 20:09 - 2019-12-07 10:03 - 000786432 _____ C:\WINDOWS\system32\config\BBI

2020-12-09 19:30 - 2020-05-29 19:45 - 000000000 ____D C:\Users\*****\AppData\Local\D3DSCache

2020-12-09 18:59 - 2020-05-29 21:31 - 000000000 ____D C:\Users\*****\AppData\Local\NVIDIA

2020-12-09 18:49 - 2020-07-12 18:05 - 000000000 ____D C:\Users\*****\AppData\Local\KeePassXC

2020-12-09 18:45 - 2020-05-31 15:31 - 000000000 ____D C:\Users\*****\AppData\Local\VMware

2020-12-09 18:44 - 2020-05-31 15:31 - 000000000 ____D C:\Users\*****\AppData\Roaming\VMware

2020-12-09 18:37 - 2020-05-29 19:23 - 000000000 ____D C:\Users\*****\AppData\Local\Packages

2020-12-09 18:35 - 2020-05-31 16:10 - 000000435 _____ C:\WINDOWS\system32\Drivers\etc\hosts.ics

2020-12-09 17:23 - 2020-06-21 15:42 - 000000128 _____ C:\Users\*****\AppData\Local\PUTTY.RND

2020-12-09 16:59 - 2020-05-29 21:59 - 000000000 ____D C:\Users\*****\AppData\Local\Ubisoft Game Launcher

2020-12-09 16:13 - 2020-05-29 21:28 - 000000000 ____D C:\Users\*****\AppData\Local\Discord

2020-12-06 20:22 - 2020-06-07 18:59 - 000000000 ____D C:\Users\*****\AppData\Roaming\HuBBa

2020-12-06 14:16 - 2020-05-30 13:49 - 000000000 ____D C:\Users\*****\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam

2020-12-05 19:52 - 2020-05-29 20:33 - 000000000 ____D C:\Users\*****\AppData\Local\EpicGamesLauncher

2020-12-05 19:43 - 2020-10-17 10:24 - 005302184 _____ C:\WINDOWS\system32\FNTCACHE.DAT

2020-12-05 12:57 - 2020-05-30 00:40 - 000000000 ____D C:\Users\*****\AppData\Local\Adobe

2020-12-05 12:46 - 2020-05-29 19:23 - 000000000 ____D C:\Users\*****\AppData\Roaming\Adobe

2020-12-05 12:15 - 2020-05-30 00:42 - 000000000 ____D C:\ProgramData\Adobe

2020-12-05 12:13 - 2020-05-30 00:42 - 000000000 ____D C:\Program Files (x86)\Adobe

2020-12-04 21:40 - 2020-05-29 21:27 - 000000000 ____D C:\Users\*****\AppData\Local\SquirrelTemp

2020-12-04 15:34 - 2020-05-30 11:42 - 000000000 ____D C:\Program Files\Microsoft Office

2020-12-04 15:34 - 2020-05-29 19:43 - 000002253 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2020-12-02 19:51 - 2020-05-29 20:09 - 000000000 ____D C:\ProgramData\Package Cache

2020-11-28 22:32 - 2020-06-07 19:37 - 000000000 ____D C:\Users\*****\AppData\Local\BattlEye

2020-11-28 21:28 - 2020-09-06 12:42 - 000281688 _____ C:\WINDOWS\SysWOW64\PnkBstrB.xtr

2020-11-27 21:12 - 2020-05-29 20:31 - 000000000 ____D C:\Program Files\Rockstar Games

2020-11-27 21:12 - 2020-05-29 20:31 - 000000000 ____D C:\Program Files (x86)\Rockstar Games

2020-11-25 17:33 - 2020-07-04 09:26 - 000000774 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Notepad++.lnk

2020-11-25 17:33 - 2020-05-29 19:47 - 000000000 ____D C:\Users\*****\AppData\Roaming\Notepad++

2020-11-25 16:22 - 2020-09-20 10:56 - 000134792 _____ (AVG Technologies) C:\WINDOWS\system32\icarus_rvrt.exe

2020-11-22 20:25 - 2020-06-21 20:33 - 000000000 ____D C:\Users\*****\AppData\Roaming\.minecraft

2020-11-22 09:47 - 2020-05-29 19:36 - 000000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service

2020-11-21 16:07 - 2020-10-23 20:36 - 000000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Image Writer

2020-11-21 16:04 - 2020-05-31 11:52 - 000000000 ____D C:\Users\*****\AppData\Local\cache

2020-11-21 12:06 - 2020-05-29 19:36 - 000001005 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Firefox.lnk

2020-11-20 20:06 - 2020-05-31 12:32 - 000000000 ____D C:\ProgramData\ProtonVPN

2020-11-20 20:03 - 2020-05-30 02:57 - 000000000 ____D C:\Users\*****\AppData\Local\ProtonVPN

2020-11-17 07:02 - 2020-05-29 21:31 - 000000000 ____D C:\Users\*****\AppData\Local\NVIDIA Corporation

2020-11-17 07:02 - 2020-05-29 19:23 - 000000000 ____D C:\ProgramData\Packages

2020-11-15 20:28 - 2020-05-31 22:29 - 000000000 ____D C:\Users\*****\AppData\Roaming\WeMod

2020-11-14 18:09 - 2020-06-06 11:07 - 000000000 ____D C:\Users\*****\AppData\Local\GameCenter

2020-11-14 11:12 - 2020-05-29 19:25 - 000000000 ____D C:\WINDOWS\system32\MRT

2020-11-14 11:10 - 2020-05-29 19:25 - 133736600 ____C (Microsoft Corporation) C:\WINDOWS\system32\MRT.exe

2020-11-13 18:45 - 2020-05-29 19:23 - 000000000 ____D C:\ProgramData\NVIDIA Corporation

2020-11-13 18:09 - 2020-05-29 19:16 - 002876928 _____ (Microsoft Corporation) C:\WINDOWS\SysWOW64\PrintConfig.dll
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse ========
 

2020-10-27 21:46 - 2020-10-27 21:46 - 000004682 _____ () C:\Users\*****\AppData\Roaming\VoiceMeeterDefault.xml

2020-06-21 15:42 - 2020-12-09 17:23 - 000000128 _____ () C:\Users\*****\AppData\Local\PUTTY.RND

2020-07-12 18:33 - 2020-12-11 18:22 - 000007597 _____ () C:\Users\*****\AppData\Local\Resmon.ResmonCfg
 

==================== SigCheck ============================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

==================== Ende von FRST.txt ========================

ilias2

11.12.2020 23:12

Addition.txt

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 09-12-2020

durchgeführt von ilias (11-12-2020 23:02:49)

Gestartet von C:\Users\ilias\Desktop

Windows 10 Pro Version 20H2 19042.630 (X64) (2020-05-29 18:19:26)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-3136980708-3557880529-3186569697-500 - Administrator - Disabled)

amine (S-1-5-21-3136980708-3557880529-3186569697-1005 - Limited - Disabled)

DefaultAccount (S-1-5-21-3136980708-3557880529-3186569697-503 - Limited - Disabled)

Gast (S-1-5-21-3136980708-3557880529-3186569697-501 - Limited - Disabled)

ilias (S-1-5-21-3136980708-3557880529-3186569697-1001 - Administrator - Enabled) => C:\Users\ilias

laila (S-1-5-21-3136980708-3557880529-3186569697-1004 - Limited - Disabled) => C:\Users\laila

WDAGUtilityAccount (S-1-5-21-3136980708-3557880529-3186569697-504 - Limited - Disabled)

yahia (S-1-5-21-3136980708-3557880529-3186569697-1003 - Limited - Disabled)
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AV: AVG Antivirus (Enabled - Up to date) {18A975F9-A60C-37D8-E30B-4BEF31AD3411}

AV: Malwarebytes (Enabled - Up to date) {23007AD3-69FE-687C-2629-D584AFFAF72B}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

4500_Help (HKLM-x32\...\{7FDA2F0E-B522-48AD-8792-4BAAA4B5DA1C}) (Version: 1.00.0000 - Hewlett-Packard) Hidden

64 Bit HP CIO Components Installer (HKLM\...\{FF21C3E6-97FD-474F-9518-8DCBE94C2854}) (Version: 7.2.8 - Hewlett-Packard) Hidden

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 20.013.20074 - Adobe Systems Incorporated)

Adobe Photoshop CS6 (HKLM-x32\...\{74EB3499-8B95-4B5C-96EB-7B342F3FD0C6}) (Version: 13.0 - Adobe Systems Incorporated)

Advanced SystemCare (HKLM-x32\...\Advanced SystemCare_is1) (Version: 13.7.0 - IObit)

Allods Online DE (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Allods Online DE (DE)) (Version: 1.209 - MY.GAMES)

AMD Chipset Software (HKLM-x32\...\AMD_Chipset_IODrivers) (Version: 2.07.21.306 - Advanced Micro Devices, Inc.)

AMD Software (HKLM\...\AMD Catalyst Install Manager) (Version: 19.10.16 - Advanced Micro Devices, Inc.)

AMD_Chipset_Drivers (HKLM-x32\...\{7598e74a-915c-4911-918c-ca4b2c296122}) (Version: 2.07.21.306 - Advanced Micro Devices, Inc.) Hidden

AORUS ENGINE (HKLM-x32\...\AORUS ENGINE_is1) (Version: 1.9.2.0 - GIGABYTE Technology Co.,Inc.)

APP Center (HKLM-x32\...\{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.20.00803.1 - GIGABYTE) Hidden

APP Center (HKLM-x32\...\InstallShield_{D50BEE9A-0EC6-4A58-BF90-35BDC6D6495D}) (Version: 3.20.00803.1 - GIGABYTE)

Assassin's Creed Chronicles China (HKLM-x32\...\Uplay Install 1651) (Version:  - Ubisoft)

Assassin's Creed III (HKLM-x32\...\Uplay Install 54) (Version:  - Ubisoft)

Assassin's Creed IV Black Flag (HKLM-x32\...\Uplay Install 273) (Version:  - Ubisoft)

Assassin's Creed Liberation HD (HKLM-x32\...\Uplay Install 625) (Version:  - Ubisoft)

Assassin's Creed Odyssey (HKLM-x32\...\Uplay Install 5059) (Version:  - Ubisoft)

Assassin's Creed Origins (HKLM-x32\...\Uplay Install 3539) (Version:  - Ubisoft)

Assassin's Creed Rogue (HKLM-x32\...\Uplay Install 895) (Version:  - Ubisoft)

Assassin's Creed Syndicate (HKLM-x32\...\Uplay Install 1875) (Version:  - Ubisoft)

Audacity 2.4.2 (HKLM-x32\...\Audacity_is1) (Version: 2.4.2 - Audacity Team)

AVG AntiVirus FREE (HKLM-x32\...\AVG Antivirus) (Version: 20.9.3152 - AVG Technologies)

AVG TuneUp (HKLM\...\AVG TuneUp) (Version: 20.1.2191.714 - AVG)

Balanced (HKLM-x32\...\{0EA45DD4-A825-420C-AFED-C659EFE3B84F}) (Version: 4.00.0000 - Advanced Micro Devices, Inc.) Hidden

bpd_scan (HKLM-x32\...\{EC7FE03D-239A-4E36-9907-0E327922D2A2}) (Version: 3.00.0000 - Hewlett-Packard) Hidden

BPDSoftware (HKLM-x32\...\{9237DDE8-1DF1-4FA7-AAF9-95458ABC26E0}) (Version: 140.0.001.000 - Hewlett-Packard) Hidden

BPDSoftware_Ini (HKLM-x32\...\{E105BB34-826A-4DF7-8F35-07DDEE1E47A0}) (Version: 1.00.0000 - Hewlett-Packard) Hidden

BufferChm (HKLM-x32\...\{FA0FF682-CC70-4C57-93CD-E276F3E7537E}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden

CCleaner (HKLM\...\CCleaner) (Version: 5.72 - Piriform)

Cheat Engine 7.2 (HKLM\...\Cheat Engine_is1) (Version:  - Cheat Engine)

CPUID ROG CPU-Z 1.92 (HKLM\...\CPUID ROG CPU-Z_is1) (Version: 1.92 - CPUID, Inc.)

DC Universe Online Live (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\DG0-DC Universe Online Live) (Version:  - Sony Online Entertainment)

Destinations (HKLM-x32\...\{BD7204BA-DD64-499E-9B55-6A282CDF4FA4}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden

Detroit: Become Human (HKLM-x32\...\Detroit: Become Human_is1) (Version:  - )

DeviceDiscovery (HKLM-x32\...\{1458BB78-1DC5-4BC0-B9A3-2B644F5A8105}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden

Discord (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Discord) (Version: 0.0.309 - Discord Inc.)

DocProc (HKLM-x32\...\{9B362566-EC1B-4700-BB9C-EC661BDE2175}) (Version: 140.0.185.000 - Hewlett-Packard) Hidden

EasyTune (HKLM-x32\...\{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.20.0214.1 - GIGABYTE) Hidden

EasyTune (HKLM-x32\...\InstallShield_{7F635314-EE21-4E4B-A68D-69AE70BA0E9B}) (Version: 1.20.0214.1 - GIGABYTE)

EasyTuneEngineService (HKLM-x32\...\{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.20.0701.1 - GIGABYTE) Hidden

EasyTuneEngineService (HKLM-x32\...\InstallShield_{964575C3-5820-4642-A89A-754255B5EFE1}) (Version: 1.20.0701.1 - GIGABYTE)

ENE IO Driver (HKLM-x32\...\{D0512FFD-6194-4D2E-967E-25B82A3322FF}) (Version: 3.3.0 - ENE TECHNOLOGY INC.) Hidden

ENE RGB HAL (HKLM\...\{8DA1B230-D82E-4A24-9237-363E2E1E2695}) (Version: 1.0.21.0 - Ene Tech.) Hidden

ENE RGB HAL (HKLM-x32\...\{bb670f8d-3d66-4f36-8e60-02b71bb0a4e9}) (Version: 1.0.21.0 - Ene Tech.) Hidden

ENE_DRAM_RGB_AURA42 (HKLM\...\{BC5E0A82-C638-44CB-8129-20C8ED70DE7A}) (Version: 1.00.02 - Ene Tech.) Hidden

ENE_DRAM_RGB_AURA42 (HKLM-x32\...\{f3d7fb09-b93f-4c01-a765-0b0adc5bc746}) (Version: 1.00.02 - Ene Tech.) Hidden

ENE_EHD_M2_HAL (HKLM\...\{37A48B7F-D4EA-4863-844E-A284E2AA3C5D}) (Version: 1.0.6.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_M2_HAL (HKLM-x32\...\{d8516682-de60-4332-ad6f-49373754b677}) (Version: 1.0.6.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_SSS_HAL (HKLM\...\{CF703694-01C6-4062-B797-84DB215662BC}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden

ENE_EHD_SSS_HAL (HKLM-x32\...\{9eeadf99-713b-4ab5-9ccd-bf9c1c4d9daf}) (Version: 1.0.2.0 - ENE TECHNOLOGY INC.) Hidden

Epic Games Launcher (HKLM-x32\...\{A5A6A747-393C-4B28-AB7B-2DE2BA7F7D73}) (Version: 1.1.267.0 - Epic Games, Inc.)

Epic Games Launcher Prerequisites (x64) (HKLM\...\{F9C5C994-F6B9-4D75-B3E7-AD01B84073E9}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Far Cry 3 (HKLM-x32\...\Uplay Install 46) (Version:  - Ubisoft)

Far Cry Primal (HKLM-x32\...\Uplay Install 2010) (Version:  - Ubisoft)

Fax (HKLM-x32\...\{9294F169-72EE-4D74-AE92-CA25F64B4FF8}) (Version: 140.0.307.000 - Hewlett-Packard) Hidden

Game Boost (HKLM-x32\...\{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}) (Version: 1.00.0006 - Gigabyte) Hidden

Game Boost (HKLM-x32\...\InstallShield_{644B5310-D2AA-42A8-9F3B-7B92C856C8D7}) (Version: 1.00.0006 - Gigabyte)

Gigabyte Speed v10.21 (HKLM\...\Gigabyte Speed) (Version: 10.21 - cFos Software GmbH, Bonn)

GigabyteFirmwareUpdateUtility (HKLM-x32\...\{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}) (Version: 1.20.0406.1 - GIGABYTE) Hidden

GigabyteFirmwareUpdateUtility (HKLM-x32\...\InstallShield_{1CBA99CE-1AB3-4366-AFB4-7F7B75EBBE35}) (Version: 1.20.0406.1 - GIGABYTE)

GOG GALAXY (HKLM-x32\...\{7258BA11-600C-430E-A759-27E2C691A335}_is1) (Version:  - GOG.com)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 87.0.4280.88 - Google LLC)

Google Update Helper (HKLM-x32\...\{60EC980A-BDA2-4CB6-A427-B07A5498B4CA}) (Version: 1.3.36.51 - Google LLC) Hidden

GPBaseService2 (HKLM-x32\...\{BB3447F6-9553-4AA9-960E-0DB5310C5779}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden

Grand Theft Auto V (HKLM-x32\...\{5EFC6C07-6B87-43FC-9524-F9E967241741}) (Version: 1.0.2060.1 - Rockstar Games)

GService (HKLM-x32\...\{D9CB4282-7B2A-4840-AD1D-9DA72B973DD9}) (Version: 1.19.0624.1 - GIGABYTE)

HP Customer Participation Program 14.0 (HKLM\...\HPExtendedCapabilities) (Version: 14.0 - HP)

HP Imaging Device Functions 14.0 (HKLM\...\HP Imaging Device Functions) (Version: 14.0 - HP)

HP Officejet J4500 Series 14.0 Rel. 6 (HKLM\...\{EACF146B-01D2-4185-B773-9604A0E5902A}) (Version: 14.0 - HP)

HP Solution Center 14.0 (HKLM\...\HP Solution Center & Imaging Support Tools) (Version: 14.0 - HP)

HP Update (HKLM-x32\...\{912D30CF-F39E-4B31-AD9A-123C6B794EE2}) (Version: 5.005.002.002 - Hewlett-Packard)

HPProductAssistant (HKLM-x32\...\{150B6201-E9E6-4DFB-960E-CCBD53FBDDED}) (Version: 140.0.298.000 - Hewlett-Packard) Hidden

HPSSupply (HKLM-x32\...\{AC35A885-0F8F-4857-B7DA-6E8DFB43E6B3}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden

HuBBa 1.3.90 (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\2a4703e6-0b98-56dd-80dd-5248bb27b192) (Version: 1.3.90 - BiFi2000)

ImgBurn (HKLM-x32\...\ImgBurn) (Version: 2.5.8.0 - LIGHTNING UK!)

Intel(R) Network Connections 23.5.0.0 (HKLM\...\PROSetDX) (Version: 23.5.0.0 - Intel)

Internet Download Manager (HKLM-x32\...\Internet Download Manager) (Version:  - Tonec Inc.)

IObit Uninstaller 9 (HKLM-x32\...\IObitUninstall) (Version: 9.5.0.15 - IObit)

J4500 (HKLM-x32\...\{3250CB33-9B5C-42CF-A215-23E95EA5F75E}) (Version: 140.0.001.000 - Hewlett-Packard) Hidden

Java 8 Update 261 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180261F0}) (Version: 8.0.2610.12 - Oracle Corporation)

KeePassXC (HKLM\...\{FEE3E3CD-2A6C-464E-8424-DE7512D4A5D0}) (Version: 2.6.2 - KeePassXC Team)

Launcher Prerequisites (x64) (HKLM-x32\...\{43a03b9c-4770-409c-a999-587b60700b63}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

Launcher Prerequisites (x64) (HKLM-x32\...\{c6c5a357-c7ca-4a5f-9789-3bb1af579253}) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden

LEGO DC Super-Villains (HKLM-x32\...\LEGO DC Super-Villains_is1) (Version:  - )

LibreOffice 6.4 Help Pack (German) (HKLM\...\{6A9B7FBF-A3F4-4F69-8398-83E03F5EE94A}) (Version: 6.4.4.2 - The Document Foundation)

LibreOffice 7.0.2.2 (HKLM\...\{2D790347-9563-49DA-AAAD-A5D26B69C993}) (Version: 7.0.2.2 - The Document Foundation)

Mafia: Definitive Edition (HKLM-x32\...\Mafia: Definitive Edition_is1) (Version:  - )

Malwarebytes version 4.3.0.98 (HKLM\...\{35065F43-4BB2-439A-BFF7-0F1014F2E0CD}_is1) (Version: 4.3.0.98 - Malwarebytes)

MarketResearch (HKLM-x32\...\{D360FA88-17C8-4F14-B67F-13AAF9607B12}) (Version: 140.0.212.000 - Hewlett-Packard) Hidden

Marvel's Avengers (HKLM-x32\...\Marvel's Avengers_is1) (Version:  - )

Microsoft 365 Apps for Enterprise - de-de (HKLM\...\O365ProPlusRetail - de-de) (Version: 16.0.13426.20308 - Microsoft Corporation)

Microsoft Edge (HKLM-x32\...\Microsoft Edge) (Version: 87.0.664.60 - Microsoft Corporation)

Microsoft Edge Update (HKLM-x32\...\Microsoft Edge Update) (Version: 1.3.139.59 - )

Microsoft OneDrive (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\OneDriveSetup.exe) (Version: 20.169.0823.0008 - Microsoft Corporation)

Microsoft Teams (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Teams) (Version: 1.3.00.9267 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{d491dd9d-2eda-4d75-b504-1a201436e7fd}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{3994d355-238a-4612-af93-26d13deddef1}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x64) - 14.27.29112 (HKLM-x32\...\{0f770e99-3916-4b0c-8f9b-83822826bcbf}) (Version: 14.27.29112.0 - Microsoft Corporation)

Microsoft Visual C++ 2015-2019 Redistributable (x86) - 14.24.28127 (HKLM-x32\...\{e31cb1a4-76b5-46a5-a084-3fa419e82201}) (Version: 14.24.28127.4 - Microsoft Corporation)

Microsoft Xbox 360 Accessories 1.2 (HKLM\...\{D9C50188-12D5-4D3E-8F00-682346C2AA5F}) (Version: 1.20.146.0 - Microsoft)

Minecraft Launcher (HKLM-x32\...\{F6678473-0198-46D0-A88F-2A247E6FA03C}) (Version: 1.0.0.0 - Mojang)

Mozilla Firefox 83.0 (x64 de) (HKLM\...\Mozilla Firefox 83.0 (x64 de)) (Version: 83.0 - Mozilla)

Mozilla Maintenance Service (HKLM\...\MozillaMaintenanceService) (Version: 76.0.1 - Mozilla)

MY.GAMES GameCenter (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\GameCenter) (Version: 4.1573 - MY.COM B.V.)

Notepad++ (32-bit x86) (HKLM-x32\...\Notepad++) (Version: 7.9.1 - Notepad++ Team)

Npcap (HKLM-x32\...\NpcapInst) (Version: 1.00 - Nmap Project)

NVAPI Monitor plugin for NvContainer (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvContainer.NvapiMonitor) (Version: 1.27 - NVIDIA Corporation) Hidden

NVIDIA FrameView SDK 1.1.4923.29214634 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_FrameViewSdk) (Version: 1.1.4923.29214634 - NVIDIA Corporation)

NVIDIA GeForce Experience 3.20.5.70 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.20.5.70 - NVIDIA Corporation)

NVIDIA Grafiktreiber 460.79 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 460.79 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.38.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.38.40 - NVIDIA Corporation)

NVIDIA PhysX-Systemsoftware 9.19.0218 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.19.0218 - NVIDIA Corporation)

NvModuleTracker (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_NvModuleTracker.Driver) (Version: 6.14.24033.38719 - NVIDIA Corporation) Hidden

OCR Software by I.R.I.S. 14.0 (HKLM\...\HPOCR) (Version: 14.0 - HP)

OEM Application Profile (HKLM-x32\...\{84AD2AF7-10C8-0395-66F9-FFAEB4C5DBF1}) (Version: 1.00.0000 - Advanced Micro Devices, Inc.)

Office 16 Click-to-Run Extensibility Component (HKLM\...\{90160000-008C-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20294 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Licensing Component (HKLM\...\{90160000-007E-0000-1000-0000000FF1CE}) (Version: 16.0.13426.20308 - Microsoft Corporation) Hidden

Office 16 Click-to-Run Localization Component (HKLM\...\{90160000-008C-0407-1000-0000000FF1CE}) (Version: 16.0.13426.20294 - Microsoft Corporation) Hidden

OpenVPN 2.4.9-I601-Win10  (HKLM\...\OpenVPN) (Version: 2.4.9-I601-Win10 - OpenVPN Technologies, Inc.)

Password Tech Version 3.1.0 (HKLM-x32\...\{F2074AC4-1897-470C-A160-EF5C74F76763}_is1) (Version: 3.1.0 - Christian Thöing)

Password Tech Version 3.2.0 (Aktueller Benutzer, 64 Bit) (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\{F2074AC4-1897-470C-A160-EF5C74F76763}_is1) (Version: 3.2.0 - Christian Thöing)

Patriot Viper M2 SSD RGB (HKLM\...\{0886A906-0625-4A43-930D-AA92F6665AF4}) (Version: 1.00.04 - Patriot Memory) Hidden

Patriot Viper M2 SSD RGB (HKLM-x32\...\{ebb7013c-0b03-497c-bed1-1e48e806a593}) (Version: 1.00.04 - Patriot Memory)

PDF Settings CS6 (HKLM-x32\...\{BFEAAE77-BD7F-4534-B286-9C5CB4697EB1}) (Version: 11.0 - Adobe Systems Incorporated) Hidden

PDF24 Creator 9.2.2 (HKLM-x32\...\{81A6F461-0DBA-4F12-B56F-0E977EC10576}_is1) (Version: 9.2.2 - PDF24.org)

Plex Media Server (HKLM-x32\...\{40c376bf-c3a0-439b-8353-f69a3bac10d6}) (Version: 1.21.0.3711 - Plex, Inc.)

Plex Media Server (HKLM-x32\...\{8DE31A48-E744-4526-AE09-B9A4002CE770}) (Version: 1.21.711 - Plex, Inc.) Hidden

ProductContext (HKLM-x32\...\{8064EF1E-3243-4307-A04F-BB64FF06A8DF}) (Version: 140.0.001.000 - Hewlett-Packard) Hidden

Promontory_GPIO Driver (HKLM-x32\...\{B5512BCC-F4CD-4159-86A4-B2AD7D38FFA9}) (Version: 2.0.1.0 - Advanced Micro Devices, Inc.) Hidden

ProtonVPN (HKLM-x32\...\{FD5DFEEE-C563-4D04-B3F4-E5C7D5F5B1E9}) (Version: 1.17.6 - Proton Technologies AG) Hidden

ProtonVPN (HKLM-x32\...\ProtonVPN 1.17.6) (Version: 1.17.6 - Proton Technologies AG)

ProtonVPNTap (HKLM-x32\...\{526B21BC-E7BE-4CC9-AF49-20F7F11B9113}) (Version: 1.1.1 - Proton Technologies AG)

PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)

Python 3.8.3 (32-bit) (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\{6f6f2a2d-6475-4359-bc65-b2cf464bd085}) (Version: 3.8.3150.0 - Python Software Foundation)

Python 3.8.3 Core Interpreter (32-bit) (HKLM-x32\...\{D3A7FDC5-BA4E-44FC-8822-800226B81C71}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Development Libraries (32-bit) (HKLM-x32\...\{EA35D9DB-86A9-4705-9D15-7FE33E261450}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Documentation (32-bit) (HKLM-x32\...\{BAF129CE-5C13-4383-9807-A44055644E08}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Executables (32-bit) (HKLM-x32\...\{D1EFF389-2F77-4A46-8AFD-4F37BC6F1F99}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 pip Bootstrap (32-bit) (HKLM-x32\...\{4ADFAA3D-1670-4161-A64A-83535B6D78C6}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Standard Library (32-bit) (HKLM-x32\...\{26B2CC8C-1492-437D-B27A-655AFB3647DE}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Tcl/Tk Support (32-bit) (HKLM-x32\...\{56AC5D63-87FC-4BA0-B4F2-6013D58F3302}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Test Suite (32-bit) (HKLM-x32\...\{0F5C1C82-9A7A-4FB4-8681-D4E7E9BBFD9C}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python 3.8.3 Utility Scripts (32-bit) (HKLM-x32\...\{14A8B424-0141-4E46-A1E2-548DF8349BB7}) (Version: 3.8.3150.0 - Python Software Foundation) Hidden

Python Launcher (HKLM-x32\...\{406A47EE-C4AE-4944-BADE-1B543A443873}) (Version: 3.8.7072.0 - Python Software Foundation)

Raspberry Pi Imager (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Raspberry Pi Imager) (Version: 1.4 - Raspberry Pi)

Razer Cortex (HKLM-x32\...\Razer Cortex_is1) (Version: 9.11.9.1287 - Razer Inc.)

Realtek Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.8945.1 - Realtek Semiconductor Corp.)

Red Dead Redemption 2 (HKLM-x32\...\Red Dead Redemption 2) (Version: 1.0.1355.18 - Rockstar Games)

RGB Fusion (HKLM-x32\...\{FFA8F1FA-3C2C-4A94-AC0B-0DF47272C25F}) (Version: 3.20.0721.1 - GIGABYTE)

Rockstar Games Launcher (HKLM-x32\...\Rockstar Games Launcher) (Version: 1.0.32.316 - Rockstar Games)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 2.0.7.5 - Rockstar Games)

Samsung DeX (HKLM-x32\...\{5E2BEDEC-EEE1-49B7-A9D0-6971AFA9B5F2}) (Version: 1.0.2.26 - Samsung Electronics Co., Ltd.) Hidden

Samsung DeX (HKLM-x32\...\{bc458b5f-1945-4287-8fae-353650fd3109}) (Version: 1.0.2.26 - Samsung Electronics Co., Ltd.)

Samsung USB Driver for Mobile Phones (HKLM\...\{D0795B21-0CDA-4a92-AB9E-6E92D8111E44}) (Version: 1.7.31.0 - Samsung Electronics Co., Ltd.)

Scan (HKLM-x32\...\{06A1D88C-E102-4527-AF70-29FFD7AF215A}) (Version: 140.0.253.000 - Hewlett-Packard) Hidden

Shop for HP Supplies (HKLM\...\Shop for HP Supplies) (Version: 14.0 - HP)

SIV (HKLM-x32\...\{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.20.0410.1 - GIGABYTE) Hidden

SIV (HKLM-x32\...\InstallShield_{AAA057C3-10DC-4EB9-A3D6-8208C1BB7411}) (Version: 1.20.0410.1 - GIGABYTE)

SolutionCenter (HKLM-x32\...\{BC5DD87B-0143-4D14-AAE6-97109614DC6B}) (Version: 140.0.299.000 - Hewlett-Packard) Hidden

Status (HKLM-x32\...\{5B025634-7D5B-4B8D-BE2A-7943C1CF2D5D}) (Version: 140.0.342.000 - Hewlett-Packard) Hidden

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

Stopping Plex (HKLM-x32\...\{94530A73-5D44-431B-B1F0-FEBA96C90390}) (Version: 1.21.711 - Plex, Inc.) Hidden

TAP-Windows 9.24.2 (HKLM\...\TAP-Windows) (Version: 9.24.2 - OpenVPN Technologies, Inc.)

Tautulli (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\Tautulli) (Version: 2.6.2.1 - Tautulli)

Teams Machine-Wide Installer (HKLM-x32\...\{731F6BAA-A986-45A4-8936-7C3AAAAA760B}) (Version: 1.3.0.9267 - Microsoft Corporation)

TeamViewer (HKLM-x32\...\TeamViewer) (Version: 15.12.4 - TeamViewer)

The Sims 4 (HKLM-x32\...\The Sims 4_is1) (Version:  - )

Tom Clancy's The Division (HKLM-x32\...\Uplay Install 568) (Version:  - Ubisoft)

Toolbox (HKLM-x32\...\{292F0F52-B62D-4E71-921B-89A682402201}) (Version: 140.0.596.000 - Hewlett-Packard) Hidden

TrayApp (HKLM-x32\...\{CD31E63D-47FD-491C-8117-CF201D0AFAB5}) (Version: 140.0.297.000 - Hewlett-Packard) Hidden

Ubisoft Connect (HKLM-x32\...\Uplay) (Version: 29.0 - Ubisoft)

VLC media player (HKLM\...\VLC media player) (Version: 3.0.11 - VideoLAN)

VMware Workstation (HKLM\...\{2B5DAA91-E0C9-4307-90B7-5688E910C894}) (Version: 15.1.0 - VMware, Inc.)

VNC Viewer 6.20.529 (HKLM\...\{1A0D1F90-8D1F-4922-8546-D1F84501C46A}) (Version: 6.20.529.42646 - RealVNC Ltd)

Watch Dogs Legion (HKLM-x32\...\Uplay Install 3353) (Version:  - Ubisoft)

Watch_Dogs (HKLM-x32\...\Uplay Install 274) (Version:  - Ubisoft)

WATCH_DOGS2 (HKLM-x32\...\Uplay Install 2688) (Version:  - Ubisoft)

WebReg (HKLM-x32\...\{8EE94FD8-5F52-4463-A340-185D16328158}) (Version: 140.0.297.017 - Hewlett-Packard) Hidden

WeMod (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\WeMod) (Version: 6.3.11 - WeMod)

WhatsApp (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\WhatsApp) (Version: 2.2047.13 - WhatsApp)

Win32DiskImager version 1.0.0 (HKLM-x32\...\{3DFFA293-DF2C-4B23-92E5-3433BDC310E1}}_is1) (Version: 1.0.0 - ImageWriter Developers)

Windows Subsystem for Linux Update (HKLM\...\{18E72D39-392C-419D-9B86-C4C633B4CED9}) (Version: 4.19.128 - Microsoft Corporation)

WinRAR 5.91 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.91.0 - win.rar GmbH)

Wireshark 3.4.0 64-bit (HKLM-x32\...\Wireshark) (Version: 3.4.0 - The Wireshark developer community, hxxps://www.wireshark.org)

Zoom (HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\ZoomUMX) (Version: 5.0 - Zoom Video Communications, Inc.)
 

Packages:

=========

Amazon Music -> C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_8.0.0.0_x86__kc6t79cpj4tp0 [2020-12-11] (AMZN Mobile LLC)

Amazon Prime Video for Windows -> C:\Program Files\WindowsApps\AmazonVideo.PrimeVideo_1.0.42.0_x64__pwbj9vvecjh7j [2020-12-11] (Amazon Development Centre (London) Ltd)

Kali Linux -> C:\Program Files\WindowsApps\KaliLinux.54290C8133FEE_1.6.0.0_x64__ey8k8hqnwqnmg [2020-12-11] (Kali Linux)

Media Engine-Add-On für Fotos -> C:\Program Files\WindowsApps\Microsoft.Photos.MediaEngineDLC_1.0.0.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation)

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation) [MS Ad]

Microsoft Advertising SDK for XAML -> C:\Program Files\WindowsApps\Microsoft.Advertising.Xaml_10.1811.1.0_x86__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation) [MS Ad]

Microsoft Solitaire Collection -> C:\Program Files\WindowsApps\Microsoft.MicrosoftSolitaireCollection_4.7.10142.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Studios) [MS Ad]

Microsoft To Do -> C:\Program Files\WindowsApps\Microsoft.Todos_2.32.33291.0_x64__8wekyb3d8bbwe [2020-12-11] (Microsoft Corporation) [Startup Task]

Netflix -> C:\Program Files\WindowsApps\4DF9E0F8.Netflix_6.97.752.0_x64__mcm4njqhnhss8 [2020-12-11] (Netflix, Inc.)

NVIDIA Control Panel -> C:\Program Files\WindowsApps\NVIDIACorp.NVIDIAControlPanel_8.1.959.0_x64__56jybvy8sckqj [2020-12-11] (NVIDIA Corp.)

Realtek Audio Control -> C:\Program Files\WindowsApps\RealtekSemiconductorCorp.RealtekAudioControl_1.11.217.0_x64__dt26b99r8h8gj [2020-12-11] (Realtek Semiconductor Corp)

Ubuntu -> C:\Program Files\WindowsApps\CanonicalGroupLimited.UbuntuonWindows_2004.2020.812.0_x64__79rhkp1fndgsc [2020-12-11] (Canonical Group Limited)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-3136980708-3557880529-3186569697-1001_Classes\CLSID\{19A6E644-14E6-4A60-B8D7-DD20610A871D}\InprocServer32 -> C:\Users\ilias\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20077.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

CustomCLSID: HKU\S-1-5-21-3136980708-3557880529-3186569697-1001_Classes\CLSID\{CB965DF1-B8EA-49C7-BDAD-5457FDC1BF92}\InprocServer32 -> C:\Users\ilias\AppData\Local\Microsoft\TeamsMeetingAddin\1.0.20077.4\x64\Microsoft.Teams.AddinLoader.dll (Microsoft Corporation -> Microsoft Corporation)

ShellIconOverlayIdentifiers: [                        IDM Shell Extension] -> {CDC95B92-E27C-4745-A8C5-64A52A78855D} => H:\Program Files (x86)\Internet Download Manager\IDMShellExt64.dll [2019-05-02] (Tonec Inc. -> Tonec Inc.)

ShellIconOverlayIdentifiers: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ContextMenuHandlers1: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit)

ContextMenuHandlers1: [ANotepad++64] -> {B298D29A-A6ED-11DE-BA8C-A68E55D89593} => H:\Program Files (x86)\Notepad++\NppShell_06.dll [2020-09-24] (Notepad++ -> )

ContextMenuHandlers1: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

ContextMenuHandlers1: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => G:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-05-25] (IObit Information Technology -> IObit)

ContextMenuHandlers1: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers1-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers2: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit)

ContextMenuHandlers2-x32: [VMDiskMenuHandler] -> {271DC252-6FE1-4D59-9053-E4CF50AB99DE} => G:\Program Files (x86)\VMware\VMware Workstation\vmdkShellExt.dll [2019-05-04] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers2: [VMDiskMenuHandler64] -> {E4D28EDC-8C0B-43EE-9E7D-C8A8682334DC} => G:\Program Files (x86)\VMware\VMware Workstation\x64\vmdkShellExt64.dll [2019-05-04] (VMware, Inc. -> VMware, Inc.)

ContextMenuHandlers3: [00avg] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  -> Keine Datei

ContextMenuHandlers3: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers4: [Advanced SystemCare] -> {2803063F-4B8D-4dc6-8874-D1802487FE2D} => C:\Program Files (x86)\IObit\Advanced SystemCare\ASCExtMenu_64.dll [2020-06-01] (IObit Information Technology -> IObit)

ContextMenuHandlers4: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => G:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-05-25] (IObit Information Technology -> IObit)

ContextMenuHandlers5: [NvCplDesktopContext] -> {3D1975AF-48C6-4f8e-A182-BE0E08FA86A9} => C:\WINDOWS\System32\DriverStore\FileRepository\nv_dispi.inf_amd64_8e68f77150e57b50\nvshext.dll [2020-12-05] (NVIDIA Corporation -> NVIDIA Corporation)

ContextMenuHandlers6: [AVG] -> {472083B1-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVG\Antivirus\ashShell.dll [2020-11-24] (AVG Technologies USA, LLC -> AVG Technologies CZ, s.r.o.)

ContextMenuHandlers6: [IObitUnstaler] -> {836AB26C-2DE4-41D3-AC24-4C6C2699B960} => G:\Program Files (x86)\IObit\IObit Uninstaller\IUMenuRight.dll [2020-05-25] (IObit Information Technology -> IObit)

ContextMenuHandlers6: [MBAMShlExt] -> {57CE581A-0CB6-4266-9CA0-19364C90A0B3} => C:\Program Files\Malwarebytes\Anti-Malware\mbshlext.dll [2020-12-11] (Malwarebytes Corporation -> Malwarebytes)

ContextMenuHandlers6: [WinRAR] -> {B41DB860-64E4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)

ContextMenuHandlers6-x32: [WinRAR32] -> {B41DB860-8EE4-11D2-9906-E49FADC173CA} => C:\Program Files\WinRAR\rarext32.dll [2020-06-25] (win.rar GmbH -> Alexander Roshal)
 

==================== Codecs (Nicht auf der Ausnahmeliste) ====================
 

==================== Verknüpfungen & WMI ========================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

ShortcutWithArgument: C:\Users\ilias\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Chrome-Apps\GeForce Experience Stream Client.lnk -> C:\Program Files (x86)\Google\Chrome\Application\chrome_proxy.exe (Google LLC) ->  --profile-directory=Default --app-id=gjljknijpnfibppaijefibndmiabonep
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) =============
 

2020-11-23 19:03 - 2020-11-23 19:03 - 000629760 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\aac_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000394752 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\ac3_encoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000608256 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\dca_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000751104 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\flv_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 001559040 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\h264_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000818688 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\hevc_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 001800704 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\libx264_encoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 000579072 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\mp3_decoder.dll

2020-11-23 19:03 - 2020-11-23 19:03 - 001268224 _____ () [Datei ist nicht signiert] \\?\C:\Users\ilias\AppData\Local\Plex Media Server\Codecs\7c50c14-3596-windows-x86\mpeg4_decoder.dll

2020-04-30 14:28 - 2020-04-30 14:28 - 001866752 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\BDR_info.dll

2019-08-05 19:50 - 2019-08-05 19:50 - 000009216 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\Phison.dll

2020-12-05 19:23 - 2020-12-05 19:23 - 000182272 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\_cffi_backend.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000034816 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_aes.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000016384 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_aesni.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013312 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_cbc.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_cfb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000014336 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ctr.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000011264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ecb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000015360 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ocb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000012288 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_raw_ofb.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000015360 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Cipher\_Salsa20.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000015872 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_BLAKE2s.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_ghash_clmul.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013824 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_ghash_portable.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000016896 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_MD5.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000019456 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_SHA1.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000022016 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Hash\_SHA256.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000013312 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Protocol\_scrypt.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000011264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Util\_cpuid_c.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000011264 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\Cryptodome\Util\_strxor.cp38-win_amd64.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 003100160 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\cryptography\hazmat\bindings\_openssl.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000572928 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\pythoncom38.dll

2020-12-05 19:23 - 2020-12-05 19:23 - 000142848 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\pywintypes38.dll

2020-12-05 19:23 - 2020-12-05 19:23 - 000134656 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32api.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000539136 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32com\shell\shell.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000027648 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32event.pyd

2020-12-05 19:23 - 2020-12-05 19:23 - 000058880 _____ () [Datei ist nicht signiert] C:\Program Files (x86)\Tautulli\win32service.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000054272 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000039936 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000218624 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000036864 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000024576 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000069632 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\origin_7f53219b-4e2b-4591-9f4f-dfc5f4ba9eb0\yarl\_quoting_c.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000050176 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000225792 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000045056 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:09 - 2020-12-05 13:09 - 000073216 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\psn_38087aea-3c30-439f-867d-ddf9fae8fe6f\yarl\_quoting.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000050176 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000225792 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000045056 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000014848 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\google\protobuf\internal\_api_implementation.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 001055232 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\google\protobuf\pyext\_message.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000118784 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\_elementpath.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 003284992 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\etree.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000161792 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\lxml\html\clean.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000009728 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\websockets\speedups.cp37-win32.pyd

2020-12-05 13:05 - 2020-12-05 13:05 - 000069632 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\steam_ca27391f-2675-49b1-92c0-896d43afa4f8\yarl\_quoting_c.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000231424 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\_yaml.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000050176 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000225792 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000045056 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000034304 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\multidict\_multidict.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000064512 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\psutil\_psutil_windows.cp37-win32.pyd

2020-12-05 13:04 - 2020-12-05 13:04 - 000069632 _____ () [Datei ist nicht signiert] C:\Users\ilias\AppData\Local\GOG.com\Galaxy\plugins\installed\uplay_afb5a69c-b2ee-4d58-b916-f4cd75d4999a\yarl\_quoting_c.cp37-win32.pyd

2020-10-21 19:33 - 2020-10-21 19:33 - 000083604 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libdouble-conversion.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000081585 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libgcc_s_seh-1.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 028408832 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libicudt67.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 003277824 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libicuin67.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 002113536 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libicuuc67.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000339456 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libpcre2-16-0.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000303486 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libsodium-23.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000043429 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libssp-0.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 001752711 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libstdc++-6.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000737792 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\libzstd.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000093720 _____ () [Datei ist nicht signiert] G:\Program Files\KeePassXC\zlib1.dll

2020-12-05 12:55 - 2020-12-04 09:17 - 000064512 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000050176 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000225792 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000045056 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000034304 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000034304 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\multidict\_multidict.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000061952 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\psutil\_psutil_windows.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000073216 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginEpic\yarl\_quoting.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000048128 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_frozenlist.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000036864 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_helpers.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000216064 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_http_parser.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000032256 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_http_writer.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000022528 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\aiohttp\_websocket.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000034304 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\multidict\_multidict.cp37-win32.pyd

2020-12-05 12:55 - 2020-12-04 09:17 - 000073216 _____ () [Datei ist nicht signiert] H:\Program Files (x86)\GOG Galaxy\plugins\GalaxyPluginXbox\yarl\_quoting.cp37-win32.pyd

2019-04-15 15:24 - 2019-04-15 15:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\yccV2.dll

2019-04-15 16:24 - 2019-04-15 16:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\yccV2.dll

2019-04-15 16:24 - 2019-04-15 16:24 - 000155648 _____ (GIGA-BYTE TECHNOLOGY CO., LTD.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\yccV2.DLL

2019-10-29 09:26 - 2019-10-29 09:26 - 000445952 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GVDisplay.dll

2018-09-11 19:53 - 2018-09-11 19:53 - 000237056 _____ (GIGABYTE Technology Co.,Ltd.) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GvIllumLib.dll

2020-06-18 08:01 - 2020-06-18 08:01 - 002057216 _____ (GIGABYTE) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACPCIeSSD_Lib.dll

2020-06-18 08:01 - 2020-06-18 08:01 - 002057728 _____ (GIGABYTE) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\AACSSD_Lib.dll

2010-08-06 10:15 - 2010-08-06 10:15 - 000071680 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzinw12.dll

2010-08-06 10:15 - 2010-08-06 10:15 - 000089600 _____ (Hewlett-Packard) [Datei ist nicht signiert] c:\windows\system32\hpzipm12.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 000058539 _____ (MingW-W64 Project. All rights reserved.) [Datei ist nicht signiert] G:\Program Files\KeePassXC\libwinpthread-1.dll

2018-08-30 16:26 - 2018-08-30 16:26 - 000053760 _____ (MS) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\MsIo32_Galax.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 006992719 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] G:\Program Files\KeePassXC\Qt5Core.dll

2020-10-21 19:33 - 2020-10-21 19:33 - 002549349 _____ (The Qt Company Ltd.) [Datei ist nicht signiert] G:\Program Files\KeePassXC\Qt5Network.dll

2015-10-14 00:15 - 2015-10-14 00:15 - 002042368 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\AppCenter\osvi.dll

2019-07-04 18:06 - 2019-07-04 18:06 - 001988608 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\EasyTuneEngineService\GbtNvGpuLib.dll

2017-10-05 15:26 - 2017-10-05 15:26 - 002247168 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\CRtive.dll

2018-12-08 08:22 - 2018-12-08 08:22 - 002059264 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GHidApi.dll

2020-07-06 19:33 - 2020-07-06 19:33 - 000478720 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\GvLedLib.dll

2020-05-08 14:55 - 2020-05-08 14:55 - 002107392 _____ (TODO: <Company name>) [Datei ist nicht signiert] C:\Program Files (x86)\GIGABYTE\RGBFusion\SMBCtrl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 

AlternateDataStreams: C:\Users\ilias\AppData\Local\Temp:$DATA [16]
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ==================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\MBAMService => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\MBAMService => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) =================
 

==================== Internet Explorer (Nicht auf der Ausnahmeliste) ==========
 

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://go.microsoft.com/fwlink/p/?LinkId=619797&pc=UE01&ocid=UE01DHP

BHO: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> H:\Program Files (x86)\Internet Download Manager\IDMIECC64.dll [2020-01-21] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)

BHO: ExplorerWnd Helper -> {10921475-03CE-4E04-90CE-E2E7EF20C814} -> G:\Program Files (x86)\IObit\IObit Uninstaller\UninstallExplorer.dll [2020-01-31] (IObit Information Technology -> IObit)

BHO: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\Office16\OCHelper.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_261\bin\ssv.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_261\bin\jp2ssv.dll [2020-09-19] (Oracle America, Inc. -> Oracle Corporation)

BHO-x32: IDM integration (IDMIEHlprObj Class) -> {0055C089-8582-441B-A0BF-17B458C2A3A8} -> H:\Program Files (x86)\Internet Download Manager\IDMIECC.dll [2020-01-21] (Tonec Inc. -> Internet Download Manager, Tonec Inc.)

BHO-x32: Skype for Business Browser Helper -> {31D09BA0-12F5-4CCE-BE8A-2923E76605DA} -> C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\OCHelper.dll [2020-09-17] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb-roaming.16 - {83C25742-A9F7-49FB-9138-434302C88D07} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: mso-minsb.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf-roaming.16 - {42089D2D-912D-4018-9087-2B87803E93FB} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)

Handler-x32: osf.16 - {5504BE45-A83B-4808-900A-3A5C36E7F77A} - C:\Program Files\Microsoft Office\root\VFS\ProgramFilesX86\Microsoft Office\Office16\MSOSB.DLL [2020-12-04] (Microsoft Corporation -> Microsoft Corporation)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\sharepoint.com -> hxxps://jgumainz-files.sharepoint.com
 

==================== Hosts Inhalt: =========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2019-12-07 10:14 - 2020-06-06 12:01 - 000000862 _____ C:\WINDOWS\system32\drivers\etc\hosts

127.0.0.1       activate.navicat.com
 

2020-05-31 16:10 - 2020-12-09 18:35 - 000000435 _____ C:\WINDOWS\system32\drivers\etc\hosts.ics

172.31.128.1 Friday.mshome.net # 2025 12 1 8 17 35 43 429
 

==================== Andere Bereiche ===========================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKLM\System\CurrentControlSet\Control\Session Manager\Environment\\Path -> C:\Program Files (x86)\Common Files\Oracle\Java\javapath;C:\WINDOWS\system32;C:\WINDOWS;C:\WINDOWS\System32\Wbem;C:\WINDOWS\System32\WindowsPowerShell\v1.0\;C:\WINDOWS\System32\OpenSSH\;C:\Program Files\NVIDIA Corporation\NVIDIA NvDLISR;C:\Program Files (x86)\NVIDIA Corporation\PhysX\Common

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\Control Panel\Desktop\\Wallpaper -> H:\Downloads\Compressed\WD2_Wallpapers\3\16_9\3_2560x1440.jpg

DNS Servers: 192.168.178.1

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer => (SmartScreenEnabled: )

 ist aktiviert.
 

Network Binding:

=============

Ethernet: VMware Bridge Protocol -> vmware_bridge (enabled) 

Ethernet: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

Ethernet: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

Ethernet: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

LAN-Verbindung: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

LAN-Verbindung: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

LAN-Verbindung: VMware Bridge Protocol -> vmware_bridge (enabled) 

LAN-Verbindung: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

VMware Network Adapter VMnet1: VMware Bridge Protocol -> vmware_bridge (disabled) 

VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

VMware Network Adapter VMnet1: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

LAN-Verbindung 2: VMware Bridge Protocol -> vmware_bridge (enabled) 

LAN-Verbindung 2: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

LAN-Verbindung 2: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 

LAN-Verbindung 2: cFosSpeed for faster Internet connections (NDIS 6) -> cfosspeed (enabled) 

VMware Network Adapter VMnet8: VMware Bridge Protocol -> vmware_bridge (disabled) 

VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) -> INSECURE_NPCAP (enabled) 

VMware Network Adapter VMnet8: Npcap Packet Driver (NPCAP) (Wi-Fi) -> INSECURE_NPCAP_WIFI (enabled) 
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

HKLM\...\StartupApproved\StartupFolder: => "HP Digital Imaging Monitor.lnk"

HKLM\...\StartupApproved\Run: => "XboxStat"

HKLM\...\StartupApproved\Run: => "Riot Vanguard"

HKLM\...\StartupApproved\Run32: => "RazerCortex"

HKLM\...\StartupApproved\Run32: => "HP Software Update"

HKLM\...\StartupApproved\Run32: => "vmware-tray.exe"

HKLM\...\StartupApproved\Run32: => "TeamsMachineInstaller"

HKLM\...\StartupApproved\Run32: => "PDFPrint"

HKLM\...\StartupApproved\Run32: => "SunJavaUpdateSched"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\StartupFolder: => "GIGABYTE AORUS GRAPHICS ENGINE.lnk"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "OneDrive"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "IDMan"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "CCleaner Smart Cleaning"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "Discord"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "EpicGamesLauncher"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "Steam"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "OPENVPN-GUI"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "com.squirrel.Teams.Teams"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "Advanced SystemCare"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "MyDriveConnect.exe"

HKU\S-1-5-21-3136980708-3557880529-3186569697-1001\...\StartupApproved\Run: => "35C0DD69A13B47FAAE527F030D7053F7FAB3A98B._service_run"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [{DAE1B244-2654-4C22-9C03-8F75C38131C2}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{8953D7FC-E6A6-478A-90A0-192C1EC81428}] => (Allow) C:\Program Files\Mozilla Firefox\firefox.exe (Mozilla Corporation -> Mozilla Corporation)

FirewallRules: [{884ADA83-A667-4B8B-A28F-6FC912E29B66}] => (Allow) H:\Program Files (x86)\Steam\steam.exe (Valve -> Valve Corporation)

FirewallRules: [{6AB88638-B0AF-4021-9D7A-ABA0FBA7FAA7}] => (Allow) H:\Program Files (x86)\Steam\steam.exe (Valve -> Valve Corporation)

FirewallRules: [{4238A560-8AA9-4999-B7FF-B21258D3FBA4}] => (Allow) H:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{A4C491AB-9C55-4D6B-81B8-8ABF16EEA7B6}] => (Allow) H:\Program Files (x86)\Steam\bin\cef\cef.win7x64\steamwebhelper.exe (Valve -> Valve Corporation)

FirewallRules: [{E9269052-FE64-44E4-BC31-5899E47CD50D}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{6233A909-02E2-4441-BC45-52BC23EC49D7}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{AEE1DF78-731F-49A9-9064-990E95B5CC82}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{D619D246-E916-4FE4-8167-8C3899C9457B}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{7B5A16C2-03C8-437A-91F8-888B020401E3}] => (Allow) LPort=9009

FirewallRules: [{F8441524-0FC2-4B58-8620-D25FBB8BF5A9}] => (Allow) LPort=9009

FirewallRules: [{71652B94-8D03-4E8D-9E5E-FDD09E09ABD9}] => (Allow) LPort=9009

FirewallRules: [{E585C08C-AAC7-47CB-8D65-2F8A060309BA}] => (Allow) LPort=9009

FirewallRules: [{79F958CA-7658-464F-AD6D-B57E92AA87C6}] => (Allow) LPort=9009

FirewallRules: [{70E69257-630E-4CAE-B394-50B2A5F8C725}] => (Allow) LPort=9009

FirewallRules: [{39E5249B-6E84-4C31-898D-0D676F464C6D}] => (Allow) LPort=9009

FirewallRules: [{92A762F5-71D4-480C-AFFD-1EFF1A88F178}] => (Allow) LPort=9009

FirewallRules: [{FFA17206-E769-43F6-BDCF-D33465CE9A83}] => (Allow) LPort=9009

FirewallRules: [{7558928D-63E2-4718-8141-71ABF2DD86BD}] => (Allow) LPort=9009

FirewallRules: [{3257E1C0-E035-46F5-95C8-BB203AD797C2}] => (Allow) LPort=9009

FirewallRules: [{093B834C-2C0F-4545-9DDE-8E835519F4C8}] => (Allow) LPort=9009

FirewallRules: [{20F30550-43F8-4C2E-B616-093EA22D65F0}] => (Allow) LPort=9009

FirewallRules: [{540C48AD-2635-4F95-984C-9949129C1BF7}] => (Allow) LPort=9009

FirewallRules: [{BCB17D5B-80F3-491E-BD8F-8C25CB2414D0}] => (Allow) LPort=9009

FirewallRules: [{D14AC5A1-CFFB-4C41-A210-9096E8E8B3A6}] => (Allow) LPort=9009

FirewallRules: [{6653C6AB-652C-4448-8389-D476501673A1}] => (Allow) LPort=9009

FirewallRules: [{32E7A7CB-3833-435A-B181-94EC250C604A}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Origins\ACOrigins_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{4E3AE518-57EC-4907-A69B-C468C65FF1C5}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Origins\ACOrigins_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{26C20AEF-BD2D-491B-A067-3F4851939276}] => (Allow) LPort=9009

FirewallRules: [{80513380-7748-4F98-99FB-00A23CC8642B}] => (Allow) LPort=9009

FirewallRules: [{4DC846C7-943A-4A2F-BBEB-282F08D8B471}] => (Allow) LPort=9009

FirewallRules: [{4BACDBCD-84E1-4E91-BECB-24970AEBA7B3}] => (Allow) LPort=9009

FirewallRules: [{2152E9D9-6A7F-493F-B133-CE52714DE524}] => (Allow) LPort=9009

FirewallRules: [{7BA34BAB-84FC-4E05-AC16-280CFA7378B1}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [{CD655D27-EE12-4F43-8349-411302EE893C}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-authd.exe (VMware, Inc. -> VMware, Inc.)

FirewallRules: [{1E82349B-7870-44A1-800B-4DE6C661A138}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )

FirewallRules: [{7AD85ACA-0D91-4770-A511-8946D0A5A20A}] => (Allow) G:\Program Files (x86)\VMware\VMware Workstation\vmware-hostd.exe (VMware, Inc. -> )

FirewallRules: [{230FA1FA-90E8-4224-8C59-F2071BAAC89B}] => (Allow) LPort=9009

FirewallRules: [{776C6B29-8999-42F1-BE34-377AD0295116}] => (Allow) LPort=9009

FirewallRules: [{2D7BAD1D-1489-494A-A623-5F4C89A9D998}] => (Allow) LPort=9009

FirewallRules: [{54C21C80-B054-4099-9E76-19F198F065A6}] => (Allow) LPort=9009

FirewallRules: [{27DEAD8C-1074-4CD3-8356-145D2B147ED3}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\BeamNG.drive\BeamNG.drive.exe (BeamNG GmbH) [Datei ist nicht signiert]

FirewallRules: [{4AEA242F-4724-44BF-B58D-C0CF88E42BF6}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\BeamNG.drive\BeamNG.drive.exe (BeamNG GmbH) [Datei ist nicht signiert]

FirewallRules: [{E89F7144-8877-45F2-A916-4AA8F78DDAA4}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )

FirewallRules: [{C842A5DE-0D43-41F2-B624-C7579A943852}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Counter-Strike Global Offensive\csgo.exe (Valve -> )

FirewallRules: [{1920091C-16C5-4FF9-993D-411EA8E6C4F7}] => (Allow) LPort=9009

FirewallRules: [{298444CD-4F5D-44D1-A78B-81FD66B05E92}] => (Allow) LPort=9009

FirewallRules: [{F1D5B639-4A0E-43AE-B1D1-EE1C57E2EFE7}] => (Allow) LPort=9009

FirewallRules: [{C97A7AEA-DD0A-410B-9332-8E0A4E070F54}] => (Allow) LPort=9009

FirewallRules: [{8844F677-8A28-4AFF-BB8D-36C715E786C2}] => (Allow) LPort=9009

FirewallRules: [{F238437D-94F2-4657-BF0E-886F77F217A4}] => (Allow) LPort=9009

FirewallRules: [{500043C5-D2D9-4AAA-8B5E-369AAC125985}] => (Allow) LPort=9009

FirewallRules: [{4437032A-A84D-4446-B2E4-E376156E3FA7}] => (Allow) LPort=9009

FirewallRules: [{DB080CB2-DBAC-4FAF-8A4C-F091CA7930DB}] => (Allow) LPort=9009

FirewallRules: [{89C27047-0265-4D30-A9B3-A2F700E38227}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Allods Online My.com\AllodsMycomSteamLoader.exe (Mail.Ru LLC -> )

FirewallRules: [{0F15FEC3-0EE0-4F41-8556-1A7064B2A426}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Allods Online My.com\AllodsMycomSteamLoader.exe (Mail.Ru LLC -> )

FirewallRules: [{0E4B8310-D4C6-45AD-BAD6-FACE249BD8E7}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Allods Online My.com\Allods Online DE\bin\Launcher.exe (LLC MAIL.RU -> © 2008-2019 Allods Team, Mail.Ru Games)

FirewallRules: [TCP Query User{A9E1CF12-2656-4B8A-B67C-984D441B4176}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\ilias\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [UDP Query User{DC2926A0-F60F-4B0E-851F-5F2782E74326}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\ilias\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [{3775C925-8205-41C2-8EAF-B263CA3B52B7}] => (Allow) G:\Programme\Uplay\Assassin's Creed Odyssey\ACOdyssey_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{FCDF7798-1206-4109-B228-EE7ED48C787F}] => (Allow) G:\Programme\Uplay\Assassin's Creed Odyssey\ACOdyssey_plus.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{5ECD9456-BAE5-49CF-80BE-202009E6D589}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest_x64.exe () [Datei ist nicht signiert]

FirewallRules: [{C271ABFC-434D-4914-9361-C575F25CCF70}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest_x64.exe () [Datei ist nicht signiert]

FirewallRules: [{10D42B82-D1BB-4016-B299-9F4C7700DCBC}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest.exe () [Datei ist nicht signiert]

FirewallRules: [{D4A3137A-4F0B-40F7-A90A-62EF6CAA7D38}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Wreckfest\Wreckfest.exe () [Datei ist nicht signiert]

FirewallRules: [{EF6BD5E2-8357-478E-BE90-5B51401E7CB3}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\ApCent.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{4A6BA015-1596-4A95-B131-340F084CDF2E}] => (Allow) C:\Program Files (x86)\GIGABYTE\AppCenter\gcupd.exe (GIGA-BYTE TECHNOLOGY CO., LTD. -> )

FirewallRules: [{9CC8AC29-BAB1-4AB8-A2A5-E8B21E4FB5C3}] => (Allow) LPort=9009

FirewallRules: [{41AFF113-3D49-43FE-8D12-9F8B39755813}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{B769692B-4E38-42C0-B5A8-AB58A649F489}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{F6401DCF-0AA0-4BF1-B4AD-1CC1B5DFBF32}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin_plus\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{1730AC81-1750-4CD0-96BE-7F8654C94C2F}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\bin_plus\WatchDogs2.exe (Blue Byte GmbH -> Ubisoft Entertainment)

FirewallRules: [{73A037D6-AA68-4BE5-8023-093CF12D6DF0}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\EAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{9E1C9D18-A17E-4822-A5ED-68713DAB55DF}] => (Allow) G:\Programme\Uplay\WATCH_DOGS2\EAC.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{9651F030-D1E6-406B-9897-5AFAEAA1D429}] => (Allow) LPort=9009

FirewallRules: [{3C458199-E8D5-47D4-915D-E0B6CE784E49}] => (Allow) LPort=9009

FirewallRules: [{FA40DA03-697A-4BC8-802C-189E111B7521}] => (Allow) LPort=9009

FirewallRules: [{665FF16B-2402-4E78-B20C-E59C3093A21F}] => (Allow) LPort=9009

FirewallRules: [{902CCB86-526F-4C35-A60E-B9BD8CC82DBF}] => (Allow) LPort=9009

FirewallRules: [{0C23F0E1-76F2-4B50-B8A2-A9CE75A0C88A}] => (Allow) LPort=9009

FirewallRules: [{FCECE2A5-8655-4E13-9A61-DD278CD8E7B3}] => (Allow) LPort=9009

FirewallRules: [{336BEA9B-BF7D-4E49-9F1E-C78BE0AA5B96}] => (Allow) LPort=9009

FirewallRules: [{E25D0CD7-ED3B-4BBE-B991-2AF39D30381F}] => (Allow) C:\Users\ilias\AppData\Roaming\Zoom\bin\Zoom.exe (Zoom Video Communications, Inc. -> Zoom Video Communications, Inc.)

FirewallRules: [{91E6759A-758A-4EDB-A369-ABC3CF8F54D4}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Syndicate\ACS.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{B634680D-29BE-4184-A686-8962295DB8A6}] => (Allow) LPort=9009

FirewallRules: [{7EEB199B-2474-4FEC-B4E8-048D4D2C9A89}] => (Allow) LPort=9009

FirewallRules: [{F5C7F79B-0FCB-4B42-9243-43E0C169AE84}] => (Allow) LPort=9009

FirewallRules: [{7F8AA965-8883-4DCB-A9EF-298E2DF8FE19}] => (Allow) H:\Programme\Uplay\games\Watch_Dogs\bin\Watch_Dogs.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{A21B38AD-4976-4F94-A93E-1350888A32CE}] => (Allow) H:\Programme\Uplay\games\Watch_Dogs\bin\Watch_Dogs.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{313DD029-0170-4028-BBDF-AA39AF187908}] => (Allow) LPort=9009

FirewallRules: [{AF340386-CB3C-4705-9B50-4D34F517D474}] => (Allow) LPort=9009

FirewallRules: [{EF463F9B-102D-4A1E-B0E0-5C6BBE8948F1}] => (Allow) LPort=9009

FirewallRules: [{3770FD15-5B33-40EA-BC19-EBAFDDC062F2}] => (Allow) LPort=9009

FirewallRules: [{9958AF36-41DB-4526-9502-98B57ED63366}] => (Allow) LPort=9009

FirewallRules: [{CF11565B-CA51-46C3-B677-BF0296848677}] => (Allow) LPort=9009

FirewallRules: [{94C3C4B4-BD1A-44EF-B14E-E41495A88F7E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{F69665A2-2B24-4355-9E06-3569D87CC5EB}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\Lync.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{67AF3586-FFFC-4F4B-9FBD-744D151BF6C2}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{48001033-9119-43D6-9926-41E0131D1A27}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\UcMapi.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{CD276B12-4AD6-4F46-A620-C869659E279C}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Besiege\Besiege.exe () [Datei ist nicht signiert]

FirewallRules: [{BB070AAD-6B52-42EC-8E38-934E6DA54915}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Besiege\Besiege.exe () [Datei ist nicht signiert]

FirewallRules: [{826571B4-AD43-4555-9565-606B8D1C96EC}] => (Allow) LPort=9009

FirewallRules: [{D81723F0-799E-4FA9-93F9-019325772670}] => (Allow) LPort=9009

FirewallRules: [{F7F54016-1A1E-4830-89AF-F9A8CEDFC8C6}] => (Allow) LPort=9009

FirewallRules: [{0A788C13-0189-48F1-890B-E06369E7DEF4}] => (Allow) LPort=9009

FirewallRules: [{423E12D6-0D79-4E08-A4E7-F6B5A7DAC5EE}] => (Allow) LPort=9009

FirewallRules: [{3BD60476-133B-46E8-8229-5F5C294AE233}] => (Allow) LPort=9009

FirewallRules: [{89D7626B-8331-4775-86F8-598C41A2A979}] => (Allow) LPort=9009

FirewallRules: [{73111904-FC32-442C-A1C5-83F271630428}] => (Allow) LPort=9009

FirewallRules: [{D947EB54-FD26-4F6B-A8C7-76E4347CBE25}] => (Allow) LPort=9009

FirewallRules: [{B4AF0129-BEC0-4F98-BDA8-1550049EDA37}] => (Allow) LPort=9009

FirewallRules: [{47167BB2-DB19-4F8E-8FA5-668C7A962FE5}] => (Allow) LPort=9009

FirewallRules: [{B0F494FC-3211-4705-AFBE-7654896D98E9}] => (Allow) LPort=9009

FirewallRules: [{8C9C5FBA-EBCA-4298-97F2-829568403AF9}] => (Allow) LPort=9009

FirewallRules: [{F65F57DA-48F1-4403-A469-1A816C1EDA68}] => (Allow) LPort=9009

FirewallRules: [{CB953820-00B6-4890-82B1-6C9F9F24AD29}] => (Allow) LPort=9009

FirewallRules: [{B78BB03D-0D62-4625-BC5C-E32EB9C89524}] => (Allow) LPort=9009

FirewallRules: [{4B39B479-9339-4477-9AD5-609D8A5FDC7A}] => (Allow) LPort=9009

FirewallRules: [{36C1CE74-5400-4108-B20E-0BBCA1F1650C}] => (Allow) LPort=9009

FirewallRules: [{C0DA0D50-A282-4DC2-8A66-27B4F788726F}] => (Allow) LPort=9009

FirewallRules: [{8C445951-DDA3-4012-BE57-33CD2FB1BC45}] => (Allow) LPort=9009

FirewallRules: [{EB3603CA-F786-4711-A74E-6F18A7528218}] => (Allow) LPort=9009

FirewallRules: [{7B7C164C-7698-4937-91FA-16DDF623FDA5}] => (Allow) LPort=9009

FirewallRules: [{D151D9B4-69AB-49C6-A1CC-7FA20CE42159}] => (Allow) LPort=9009

FirewallRules: [{0208A22B-0C03-4DF3-ACEB-04DDF745AAF1}] => (Allow) LPort=9009

FirewallRules: [{6AF6A2BA-1AD8-47FA-BABB-FF472A23F98A}] => (Allow) LPort=9009

FirewallRules: [{6715DBFF-A385-4979-9B78-06E0D1236B05}] => (Allow) LPort=9009

FirewallRules: [{71DA14A0-C1F9-4CC4-9CB7-07CF6916E11A}] => (Allow) LPort=9009

FirewallRules: [{CD0CCEB7-0155-49CB-8D4E-3C743676BC69}] => (Allow) LPort=9009

FirewallRules: [{B88AB3AA-20E5-4627-AB4B-422CFA83741C}] => (Allow) LPort=9009

FirewallRules: [{649204E0-8FF7-4482-8C16-50A502B7CEBD}] => (Allow) LPort=9009

FirewallRules: [{B8B1B2D3-A1CC-4A25-81D6-9F6CB9BD8CF8}] => (Allow) LPort=9009

FirewallRules: [{F6F33401-293B-4F8D-AAFC-7B6F5C4E1948}] => (Allow) LPort=9009

FirewallRules: [{7C027969-982F-45C9-B03F-DC52E1E072F7}] => (Allow) LPort=9009

FirewallRules: [{F24147DC-5C0D-4118-A2F9-BFEEEBA9F80D}] => (Allow) LPort=9009

FirewallRules: [{A07A76B5-06AE-4357-8E27-D51E507B9B69}] => (Allow) LPort=9009

FirewallRules: [{2CBE5144-5521-4151-9959-2087CF58B131}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{8038F798-E538-458B-BBAB-6CA4DFF7C523}G:\program files (x86)\the knight\rage 2\rage2.exe] => (Allow) G:\program files (x86)\the knight\rage 2\rage2.exe () [Datei ist nicht signiert]

FirewallRules: [UDP Query User{2D0544CE-01CA-4DF4-8D2F-07BD0A60961E}G:\program files (x86)\the knight\rage 2\rage2.exe] => (Allow) G:\program files (x86)\the knight\rage 2\rage2.exe () [Datei ist nicht signiert]

FirewallRules: [{EF6D7BBD-12E2-4087-AC19-13221B5D0E52}] => (Allow) LPort=9009

FirewallRules: [{F46FFAAC-EF19-4E2B-89D4-3D0706A201D9}] => (Allow) LPort=9009

FirewallRules: [{901609A1-24C2-42D2-B02E-EB0B6C6A2583}] => (Allow) LPort=9009

FirewallRules: [{7DDDC26B-89AF-4329-B0AA-6A8A9A433C26}] => (Allow) LPort=9009

FirewallRules: [{5AF7EE4C-8E9D-4337-97DC-117C775BCD98}] => (Allow) LPort=9009

FirewallRules: [{28D55537-8EF4-4913-B3FA-DDAEFB2B48FD}] => (Allow) LPort=9009

FirewallRules: [{6BA14A00-0E55-4FDD-8176-A60B0AB0312D}] => (Allow) LPort=9009

FirewallRules: [{A9EDA5FF-316F-4637-8DD2-5E7F3AAA517E}] => (Allow) LPort=9009

FirewallRules: [{6ACBF067-C968-48A5-98BC-DCF3E49983E5}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]

FirewallRules: [{4DBDD82D-D712-4224-9F83-DB375D1178A7}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\PAYDAY 2\payday2_win32_release.exe () [Datei ist nicht signiert]

FirewallRules: [{1274570E-F929-4371-9B91-92EECC0EE6B5}] => (Allow) LPort=9009

FirewallRules: [{AA259895-23A8-4638-805D-1EAE06BBD5BD}] => (Allow) LPort=9009

FirewallRules: [{E0879C28-E438-4948-A68B-16ABF9E34825}] => (Allow) LPort=9009

FirewallRules: [{6CEE1229-C96D-42E3-A191-A00B1746C818}] => (Allow) LPort=93

FirewallRules: [{8E6323E3-7481-48B8-A6C5-6929545D4348}] => (Allow) LPort=9009

FirewallRules: [{98579FAF-90A3-4459-B8EB-3439AFD0B49A}] => (Allow) LPort=9009

FirewallRules: [{E468DEC2-9E1F-4D14-9280-C5A2C0673B6D}] => (Allow) LPort=9009

FirewallRules: [{78868E05-8EBC-4917-8C8B-235F9DD08690}] => (Allow) LPort=9009

FirewallRules: [{10C28EED-B248-4AAB-86B9-B421D124EE84}] => (Allow) LPort=9009

FirewallRules: [{883691ED-79C4-4C55-9930-47E727FCDE9A}] => (Allow) LPort=9009

FirewallRules: [{70A148D2-EC84-44BE-925F-5C7869E7FCBE}] => (Allow) LPort=9009

FirewallRules: [{2453CC66-2ED7-4451-A2C9-AE77792D4065}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{F0C934A0-B3F4-4D9A-8F2B-6B0502AF23A6}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{C88135CA-F1E0-4687-802E-BB3F76F8D211}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\apache24\bin\spp-httpd.exe (Apache Software Foundation) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{BD216EDE-6A0C-4278-99C8-AAF8D861B52B}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe (MariaDB Corporation Ab -> )

FirewallRules: [UDP Query User{3FCD227C-6102-4281-AF42-8CAE65421532}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\database\bin\mysqld.exe (MariaDB Corporation Ab -> )

FirewallRules: [TCP Query User{E4199A6A-DA0D-4C3C-A320-770B4F3EC150}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [UDP Query User{A49FFB1E-EE35-4232-A6DB-8145D49ABAB3}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\nodejs\node.exe (Node.js Foundation -> Node.js)

FirewallRules: [TCP Query User{1CCD513A-D05F-4DE7-A964-668BC97CDAB0}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{4AF40930-0DE9-441E-93A1-DDF69FDD44D7}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\bnetserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{D52E00C1-A812-4F43-AC0B-BAB8C9BA21CD}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{0A45418E-3CD3-4C46-8909-FBB139EF5281}G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe] => (Allow) G:\program files (x86)\wow server\singlecore_legion 11\spp-legion\server\bin64\worldserver.exe (SingleCore Developers) [Datei ist nicht signiert]

FirewallRules: [{E4677943-4809-41F4-AA1B-7386B1BDD8B9}] => (Allow) LPort=9009

FirewallRules: [{02C12C4E-1514-4540-9A40-F1F8C2258F11}] => (Allow) LPort=9009

FirewallRules: [{E2B7545F-F8F2-452A-883D-DA1B8C5C14D7}] => (Allow) LPort=9009

FirewallRules: [{E886355F-7504-4955-AA73-98021821A3DC}] => (Allow) LPort=9009

FirewallRules: [{8F8A5180-FD08-4631-A7A9-F8AEE9AD3819}] => (Allow) LPort=9009

FirewallRules: [{EED15B78-6086-4DCF-8A6F-9813B27CDF21}] => (Allow) LPort=9009

FirewallRules: [{2A00541F-E9DB-478B-A4FA-95502773AAC1}] => (Allow) LPort=9009

FirewallRules: [{FF505FD8-7377-45E3-82C7-4F85D5F92858}] => (Allow) LPort=9009

FirewallRules: [{457DE54F-6E38-4D34-A3FF-26B8F93FAF54}] => (Allow) LPort=9009

FirewallRules: [{1797903C-E973-4A1C-B756-B4DAA03E15FF}] => (Allow) LPort=9009

FirewallRules: [{8A95BADA-C539-4E36-878D-0FC83CD039B8}] => (Allow) LPort=9009

FirewallRules: [{8C18C03E-BC22-4418-B6F6-E53BD9D37C35}] => (Allow) LPort=9009

FirewallRules: [{38AB4A76-A973-4ED8-9E06-A528F73E2D5B}] => (Allow) LPort=9009

FirewallRules: [{C1FDFAA9-2D0C-4B7F-AA22-BAC16DDDD975}] => (Allow) LPort=9009

FirewallRules: [{98987678-49BC-402B-9256-DF66E18CF71B}] => (Allow) LPort=9009

FirewallRules: [{39A4F60A-36B7-481E-AB97-7B92C07ECFF3}] => (Allow) LPort=9009

FirewallRules: [{EB3B11F7-4173-4169-8173-339E6B283E16}] => (Allow) LPort=9009

FirewallRules: [{F743F4E2-991E-47D5-8AF3-EDC27E70BF31}] => (Allow) LPort=9009

FirewallRules: [{7C1B9F43-4F85-498B-BFA2-4BD1D7FFE53C}] => (Allow) LPort=9009

FirewallRules: [{10EC20FD-6BEE-48EA-80AA-7F082D38C427}] => (Allow) LPort=9009

FirewallRules: [{21E8B3AD-84CE-474A-855E-F8E02505AA59}] => (Allow) LPort=9009

FirewallRules: [{6FB6C9E9-9468-4C07-96AE-96C234EC9D1C}] => (Allow) LPort=9009

FirewallRules: [{BBCC23F3-D543-4DD2-B1A5-B645643123DA}] => (Allow) LPort=9009

FirewallRules: [{F86E22EB-8CF4-4705-8200-9E7F85B8D54D}] => (Allow) LPort=9009

FirewallRules: [{9052F49F-751D-4D4F-A699-C55374F0720D}] => (Allow) LPort=9009

FirewallRules: [{6FF09F31-68B5-4FD6-81BE-467020294980}] => (Allow) LPort=9009

FirewallRules: [{10713C94-AE25-4D74-B62C-F415C66B003C}] => (Allow) LPort=9009

FirewallRules: [{7763BD91-1F1D-451A-8570-2F7E3F7F0CC1}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{5C47F3BA-2A49-43C9-BC11-F28D23192A1E}H:\programme\rockstar games\grand theft auto v\gta5.exe] => (Allow) H:\programme\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [UDP Query User{A08F555D-810C-4C70-BE2C-8909612E1DBB}H:\programme\rockstar games\grand theft auto v\gta5.exe] => (Allow) H:\programme\rockstar games\grand theft auto v\gta5.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [{9B5B8FA4-5ECC-457A-AA48-802BF2D8CB1C}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{C7E780B7-2916-459A-80A3-24A4EF243FB2}G:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) G:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [UDP Query User{2D31F209-16D4-4065-8A6B-F9060FA67C89}G:\program files\rockstar games\red dead redemption 2\rdr2.exe] => (Allow) G:\program files\rockstar games\red dead redemption 2\rdr2.exe (Rockstar Games, Inc. -> Rockstar Games)

FirewallRules: [{0A15C446-9831-4EED-864A-21129DEB6130}] => (Allow) LPort=9009

FirewallRules: [{0A52F091-B959-4862-92B4-2E023793F300}] => (Allow) LPort=9009

FirewallRules: [{43F0F9CF-1D18-4803-9485-013AE8D61DB5}] => (Allow) LPort=9009

FirewallRules: [{EA2AF9DB-AAA8-4DF3-9B52-DA1C4A622B99}] => (Allow) LPort=9009

FirewallRules: [{56E60533-054A-4BCB-AA39-5AC520E4A2B9}] => (Allow) LPort=9009

FirewallRules: [{BD0CF392-6D73-46CD-BFB9-2533CE95C359}] => (Allow) LPort=9009

FirewallRules: [{46571334-AA20-4217-B4BE-21EAC4F4F5A3}] => (Allow) LPort=9009

FirewallRules: [{EBA797CB-F355-4959-9BF9-C83F057924C5}] => (Allow) LPort=9009

FirewallRules: [{2994E284-A0BC-489A-98BB-CFE4890338D8}] => (Allow) LPort=9009

FirewallRules: [{A53CDD86-DF9D-44BE-B309-210A6879869B}] => (Allow) LPort=9009

FirewallRules: [{BE712C6E-F468-4FF1-B449-B8DB94B7959B}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{750959BD-167F-4B3C-BD44-1C66A5629413}G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe] => (Block) G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{3B8323FA-69CD-4EE7-8D1C-962EDD08C87E}G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe] => (Block) G:\program files (x86)\the sims 4\game\bin\ts4_x64.exe (Electronic Arts, Inc. -> Electronic Arts Inc.) [Datei ist nicht signiert]

FirewallRules: [{FE266EC5-971A-484B-9BF3-17CDCCC25B90}] => (Allow) LPort=9009

FirewallRules: [{18425415-E593-49D6-A15C-F904E8C0A79A}] => (Allow) LPort=9009

FirewallRules: [{D4E33953-CB8D-4DDA-B0B7-49ABFF98376C}] => (Allow) LPort=9009

FirewallRules: [{48367F9E-45A5-4807-BE8C-AB0C8E92A225}] => (Allow) LPort=9009

FirewallRules: [{BBE9D50C-E652-49EB-95AE-3DC9DEF3F34E}] => (Allow) LPort=9009

FirewallRules: [{D94D92B1-A4A3-493F-A0FE-FCA8B2ECB72B}] => (Allow) LPort=9009

FirewallRules: [{123809A6-483D-4CE9-8C4C-F560C7D85A2D}] => (Allow) LPort=9009

FirewallRules: [{ED9A5ABA-A271-4E82-B252-EAE99C1109DB}] => (Allow) LPort=9009

FirewallRules: [{CBE8EC1F-AB28-469E-B059-D5697B02C384}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe (Rocksteady Studios Ltd.) [Datei ist nicht signiert]

FirewallRules: [{3EDC1276-8EF2-4B44-9685-7303162F0D85}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Batman Arkham Knight\Binaries\Win64\BatmanAK.exe (Rocksteady Studios Ltd.) [Datei ist nicht signiert]

FirewallRules: [{20229675-488C-47A1-BA8C-872AFBECF00E}] => (Allow) LPort=9009

FirewallRules: [{AF68E724-E020-4F6B-A026-349C1CBAE12A}] => (Allow) LPort=9009

FirewallRules: [{3BE2B281-98E5-420C-9BF4-2755FAC94BB3}] => (Allow) LPort=9009

FirewallRules: [{C64AAD90-8DDC-4102-9548-3652A9401107}] => (Allow) LPort=9009

FirewallRules: [{2CCC1F91-7F72-4D15-A2B8-1F47BC9D1233}] => (Allow) LPort=9009

FirewallRules: [{F5327578-8ABD-45BD-9777-06FD91D43380}] => (Allow) LPort=9009

FirewallRules: [{DFCE7B1B-A0C3-41A0-9BF8-D76045534B4E}] => (Allow) LPort=9009

FirewallRules: [{5AB0CA45-9DFA-4418-ABE0-00DC1FC6FBCD}] => (Allow) LPort=9009

FirewallRules: [{24D22571-BA95-4C02-9826-C7DE60DBE5E3}] => (Allow) LPort=9009

FirewallRules: [{39BBA9B3-BAA3-4BD5-87E8-CA01E36CCA0C}] => (Allow) LPort=9009

FirewallRules: [{4AE806B5-B721-4A9C-8671-042F75B34908}] => (Allow) LPort=9009

FirewallRules: [{E89AF2BA-C7D6-427E-94CD-3446AE5C0C9D}] => (Allow) LPort=9009

FirewallRules: [{12059972-E222-4862-9C07-B4A00710AD2D}] => (Allow) LPort=9009

FirewallRules: [{6F8BC16D-0C27-4E81-9291-716E336845E4}] => (Allow) LPort=9009

FirewallRules: [{72B9AA28-1076-48FE-A2A6-D2FA815D8A1F}] => (Allow) LPort=9009

FirewallRules: [{F78DB957-7379-4E96-9018-A21CCD7D0C0A}] => (Allow) LPort=9009

FirewallRules: [{29282BB5-BA4A-4B01-93DD-CD614C4D2AFD}] => (Allow) LPort=9009

FirewallRules: [{5AB6FA1F-282A-4D03-971B-1613B37D69A8}] => (Allow) LPort=9009

FirewallRules: [{A8CDC7C0-9AC6-45C1-A50B-EED3CEE41834}] => (Allow) LPort=9009

FirewallRules: [{D80B3F1C-FFDF-4BF6-A95C-79ED20D657EF}] => (Allow) LPort=9009

FirewallRules: [{18598FC2-DAA7-4C26-BF8B-715C396394E9}] => (Allow) LPort=9009

FirewallRules: [{5C12FE61-258E-412D-B7CA-4DE887A2BA6C}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe (Activision Publishing Inc -> )

FirewallRules: [{CACD8413-E65B-4060-AADE-CDFC27486E73}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Call of Duty Black Ops III\BlackOps3.exe (Activision Publishing Inc -> )

FirewallRules: [{2A1FDF6D-CDA1-4662-9CAE-3F47407DAE2A}] => (Allow) LPort=9009

FirewallRules: [{20AB9A4B-E953-47E9-BF54-F581ECE229E4}] => (Allow) LPort=9009

FirewallRules: [{BFF448E9-8CA7-4533-B79D-B34ACA0BFB46}] => (Allow) LPort=9009

FirewallRules: [{ABA7653C-CA3C-4FEB-9698-65CC5D935B67}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe (Square Enix) [Datei ist nicht signiert]

FirewallRules: [{CE258CEE-6668-4C68-8F90-15FDDE53F61F}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe (Square Enix) [Datei ist nicht signiert]

FirewallRules: [TCP Query User{698DF1BC-393E-47C6-A19C-3D96345DF257}G:\program files\epic games\totalwarsagatroy\troy.exe] => (Allow) G:\program files\epic games\totalwarsagatroy\troy.exe => Keine Datei

FirewallRules: [UDP Query User{BE74110F-2F42-4B2A-9457-39F695E4E51D}G:\program files\epic games\totalwarsagatroy\troy.exe] => (Allow) G:\program files\epic games\totalwarsagatroy\troy.exe => Keine Datei

FirewallRules: [{E71EE8D8-F343-4C28-BBA1-2DD299F0BFB8}] => (Allow) LPort=9009

FirewallRules: [{334F5ABA-96A5-4AF6-9598-FF64BD5F366B}] => (Allow) LPort=9009

FirewallRules: [{5647784A-286B-4287-8A4C-9B43D2EE6427}] => (Allow) LPort=9009

FirewallRules: [{55BB64EC-2EDC-47EB-8ECA-30F8F8F3BD59}] => (Allow) LPort=9009

FirewallRules: [{A73D8F82-E203-4943-9274-7A2F72FB2C7A}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{68AC0099-9881-45D0-B2D9-ABF26FD4B350}G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe] => (Block) G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe (Focus Home Interactive -> Focus Home Interactive) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{6666A672-8D84-4AC9-B4E1-FB0ABA950E00}G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe] => (Block) G:\program files (x86)\corepack\vampyr\avgame\binaries\win64\avgame-win64-shipping.exe (Focus Home Interactive -> Focus Home Interactive) [Datei ist nicht signiert]

FirewallRules: [{8423AC61-EF99-49B1-9750-C1B3F6F6CE8A}] => (Allow) LPort=9009

FirewallRules: [{23F1FCF6-D340-4C7F-9A6F-D95F60383A9C}] => (Allow) LPort=9009

FirewallRules: [{4A6CF62E-A374-46CC-81BD-2A1D8B6BE888}] => (Allow) LPort=9009

FirewallRules: [{0E762191-4784-4B9B-AD14-8880ECF23EFE}] => (Allow) LPort=9009

FirewallRules: [{4FECC383-A40A-4AA9-BE82-C59619A370C9}] => (Allow) LPort=9009

FirewallRules: [{7FAA19FA-AB6A-47E1-9A83-F95DEB13A8DE}] => (Allow) LPort=9009

FirewallRules: [{64FC1124-B27C-474A-8240-0C8C5E57C0F9}] => (Allow) LPort=9009

FirewallRules: [{3838EDAA-0AB3-4C64-AA02-8EF5CCF57FF4}] => (Allow) LPort=9009

FirewallRules: [{7321BAE3-5279-4D84-9610-C887763C5789}] => (Allow) LPort=9009

FirewallRules: [{C18C1CE6-3C94-4FB2-8677-DA1B98781729}] => (Allow) LPort=9009

FirewallRules: [{DB9FB736-7271-42F1-9A19-7EF4F35004CC}] => (Allow) LPort=9009

FirewallRules: [{8B8F9B53-6D76-44B0-BE8D-07F2270C5231}] => (Allow) LPort=9009

FirewallRules: [{EB0F0988-50AF-47AE-A132-581E29BDFB74}] => (Allow) LPort=9009

FirewallRules: [{09ABCFFD-E654-4863-91A7-CE227CEE67F4}] => (Allow) LPort=9009

FirewallRules: [{59362B8C-B63A-4A98-9866-4521F6D1F8E1}] => (Allow) LPort=9009

FirewallRules: [{CDF246BE-D52A-4BB3-9026-D9BE252CE1D5}] => (Allow) LPort=9009

FirewallRules: [{26FAC9F2-0943-4189-AA21-96794B2D7AA3}] => (Allow) LPort=9009

FirewallRules: [{2271A30C-FF29-40D1-A7ED-738FED189A3D}] => (Allow) LPort=9009

FirewallRules: [{E8304080-290B-4617-BEA2-D55A0AEDE061}] => (Allow) LPort=9009

FirewallRules: [{51DA6998-7245-4E88-9A56-133C5B3EA00C}] => (Allow) LPort=9009

FirewallRules: [{35B9EF1D-D0EE-4943-AB6E-72A808688AEF}] => (Allow) LPort=9009

FirewallRules: [{4E2DF05E-A687-4151-8D16-D9AB53B9BD15}] => (Allow) LPort=9009

FirewallRules: [{3A320DA6-F912-4BFD-9707-23B2B11A84C8}] => (Allow) LPort=9009

FirewallRules: [{9984CACD-8722-4B4C-B1DA-11C721DEDF47}] => (Allow) LPort=9009

FirewallRules: [{32777281-C16F-49E4-9A3E-701C8217457B}] => (Allow) LPort=9009

FirewallRules: [{34B503B2-F927-4F88-BEBB-F0B96AE1C509}] => (Allow) LPort=9009

FirewallRules: [{BBDA2AA3-D30A-457A-AB0F-711DA960A60B}] => (Allow) LPort=9009

FirewallRules: [{12605487-706C-4A72-BC94-E80EBF4AAF28}] => (Allow) LPort=9009

FirewallRules: [{E4FB5E86-94A6-4F5B-A384-FC9908DE3B5E}] => (Allow) LPort=9009

FirewallRules: [{B46BBFF9-7472-4B08-9610-97AE3165D0B9}] => (Allow) LPort=9009

FirewallRules: [{AEB75F9E-16D9-4742-B600-2D32FDE8EB5D}] => (Allow) LPort=9009

FirewallRules: [{E66859C3-FD3D-4924-9E80-213AFA364A4C}] => (Allow) G:\Programme\Uplay\Tom Clancy's The Division\TheDivision.exe (Ubisoft Entertainment Sweden AB -> Ubisoft)

FirewallRules: [{AF357AE8-BC03-45B0-BECE-CDF254A86EF5}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{77F09BE0-845B-47AA-9824-EDF96A67788D}G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe

FirewallRules: [UDP Query User{E50D1F95-3391-4B8D-AF5A-CE0EF2D76C22}G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe] => (Allow) G:\program files (x86)\minecraft launcher\runtime\jre-x64\bin\javaw.exe

FirewallRules: [{9DE3BFB7-4066-4458-BF82-A0243E23C031}] => (Allow) LPort=9009

FirewallRules: [{4000C567-593B-4444-86F1-5E5F982FA105}] => (Allow) LPort=9009

FirewallRules: [{D2C949DA-8081-4F46-B782-2710E335F9A6}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )

FirewallRules: [{715084A9-3B08-4B5F-8780-BB62BF73D198}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe (Even Balance, Inc. -> )

FirewallRules: [{0F109C04-2AD2-4D0C-BF4F-076C686BADFD}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )

FirewallRules: [{B10A27C3-5699-4820-AD43-5DD38AC6C2B0}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe (Even Balance, Inc. -> )

FirewallRules: [TCP Query User{2E6A6070-CCAA-4D83-AD54-64E3807CF8D6}H:\programme\uplay\games\far cry 3\bin\farcry3.exe] => (Allow) H:\programme\uplay\games\far cry 3\bin\farcry3.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [UDP Query User{E56AFF91-3832-4A59-97F1-585242CE710C}H:\programme\uplay\games\far cry 3\bin\farcry3.exe] => (Allow) H:\programme\uplay\games\far cry 3\bin\farcry3.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{290A0F71-7DB1-4C65-A87C-98C2EE42984D}] => (Allow) LPort=9009

FirewallRules: [{350BD6AF-9EAC-4C89-B91D-3D17F6D47DF6}] => (Allow) LPort=9009

FirewallRules: [{4A74DA9F-7EEB-400A-B3C4-B7F5813C70A7}] => (Allow) LPort=9009

FirewallRules: [{BEF1DFA3-B825-4095-A67F-D60864226C19}] => (Allow) LPort=9009

FirewallRules: [{3F4F6B64-901A-4B25-A468-933AE8507EB4}] => (Allow) LPort=9009

FirewallRules: [{84613B71-181C-452F-9D00-FC53A6FCA31A}] => (Allow) LPort=9009

FirewallRules: [{BE45E5F6-7D71-49CB-B397-5D94566B33E9}] => (Allow) LPort=9009

FirewallRules: [{4A8C8987-CF43-4A57-87FD-4E57785D198A}] => (Allow) LPort=9009

FirewallRules: [{74C2CC5F-B2F4-4DDB-B72F-1375AC1384DC}] => (Allow) LPort=9009

FirewallRules: [{8B411965-2AD6-4417-9959-B62A7EB5D536}] => (Allow) LPort=9009

FirewallRules: [{933EA8E6-CCE8-44B7-A944-BC63F2ED99A2}] => (Allow) LPort=9009

FirewallRules: [{7478E4D0-0C93-4335-A355-A0018E660F60}] => (Allow) LPort=9009

FirewallRules: [{0543F3AC-07FB-41C1-BE36-EA297CFD3258}] => (Allow) LPort=9009

FirewallRules: [{263E2E95-A836-46BB-9A1D-E14C5586B83B}] => (Allow) LPort=9009

FirewallRules: [{5207F52F-EA83-49A3-892A-4FDE46C054AE}] => (Allow) LPort=9009

FirewallRules: [{133B78F4-D967-434D-8AA3-0C4B9C5C6155}] => (Allow) LPort=9009

FirewallRules: [{2269EC4F-4351-4123-B082-BE1878E02837}] => (Allow) LPort=9009

FirewallRules: [{9B45757D-38B2-42EE-B25A-71F52AD796C2}] => (Allow) LPort=9009

FirewallRules: [{75A4087C-E563-4D0C-BE60-23630E43E14D}] => (Allow) LPort=9009

FirewallRules: [{B6F06ACE-1105-46BB-BF21-DA188A49E134}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{3F9DE2F1-CA4E-4A33-BE9C-556A650C4FD9}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Dead by Daylight\DeadByDaylight.exe (EasyAntiCheat Oy -> EasyAntiCheat Ltd)

FirewallRules: [{5FD4D251-712B-43BD-9FCC-AB1A942FA6A1}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{89CB9AD8-FED3-43B2-B285-836A7495805A}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{C60C5437-4AA9-4558-BEE2-BDA2200AC77A}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{B8007968-D965-461D-A9F5-5BE9A48339EF}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{AE129111-D405-483C-A43B-D7CC4F8BC550}] => (Allow) LPort=9009

FirewallRules: [{2BB73D0F-A28A-4629-97BC-F7FE2F91492A}] => (Allow) LPort=9009

FirewallRules: [{77F7029E-5DCF-4924-94D9-4C69E885973D}] => (Allow) LPort=9009

FirewallRules: [{0A74855A-7364-4283-B408-C6886CEA9A3B}] => (Allow) LPort=9009

FirewallRules: [{119A234C-0970-4EBD-A866-F675EDE4AD79}] => (Allow) LPort=9009

FirewallRules: [{7F59DC3F-D8CA-44E9-8B27-B93CAAFF1978}] => (Allow) LPort=9009

FirewallRules: [{0CA452AA-CCB6-4648-8DCF-A95F1C277B85}] => (Allow) LPort=9009

FirewallRules: [{8D6AE2D4-FDAA-4DA8-AFA5-CB78C1F54278}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{CFB02508-51DD-4E0E-8A27-92D516143BF9}H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe (Daybreak Game Company, LLC.) [Datei ist nicht signiert]

FirewallRules: [UDP Query User{88B41455-C7B7-4CE1-BC17-D9D8CEF77A8F}H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe] => (Allow) H:\program files (x86)\steam\steamapps\common\dc universe online\unreal3\binaries\win32\dcgame.exe (Daybreak Game Company, LLC.) [Datei ist nicht signiert]

FirewallRules: [{CD26041B-8C5B-478A-94BE-E7F46A9CD02B}] => (Allow) LPort=9009

FirewallRules: [{59F2FD82-6BD0-4139-B874-7786F3222AA7}] => (Allow) LPort=9009

FirewallRules: [{3AC845A9-026F-4A02-BAF2-F9A7A36A906E}] => (Allow) LPort=9009

FirewallRules: [{3C381993-E7FB-45E1-92E7-E1B39F25D249}] => (Allow) LPort=9009

FirewallRules: [{387988D9-766F-4F3B-9ACB-D83BFC009280}] => (Allow) LPort=9009

FirewallRules: [{17EDAB59-8FAE-4CAC-B3A0-8B61DB44A5DA}] => (Allow) LPort=9009

FirewallRules: [{16A61BCE-69A5-41A7-9112-EB1BEF2459AA}] => (Allow) LPort=9009

FirewallRules: [{D0B2F476-A286-4D72-8277-9F48849E5DCE}] => (Allow) LPort=9009

FirewallRules: [{E3D3BC2D-89CF-4FEA-AC34-BD0FB1C1FB3F}] => (Allow) LPort=9009

FirewallRules: [{F599E881-A26A-45D1-9AD7-78148130619C}] => (Allow) LPort=9009

FirewallRules: [{BFE7515F-4EBE-4095-B3C4-425AA1C2B023}] => (Allow) LPort=9009

FirewallRules: [{74DCAE55-5ECE-478A-8C6A-735820525C5B}] => (Allow) LPort=9009

FirewallRules: [{CE44F4A0-E747-4270-8107-E059216C635F}] => (Allow) LPort=9009

FirewallRules: [{10FCB8AC-9F39-4C36-B92C-B176DAFEB1FC}] => (Allow) LPort=9009

FirewallRules: [{07389942-80F1-4123-B88F-79EE5A44E7F8}] => (Allow) LPort=9009

FirewallRules: [{AF67C518-4FDD-43BE-9120-548D932849CF}] => (Allow) LPort=9009

FirewallRules: [{1C6DF141-7D53-4D23-B713-2926E4B84C2A}] => (Allow) LPort=9009

FirewallRules: [{9DF5ADAB-A78C-4288-B7EE-DF82177F59B3}] => (Allow) LPort=9009

FirewallRules: [{54074D1C-D06B-48BB-B0B7-40EF4849A32F}] => (Allow) LPort=9009

FirewallRules: [{2EC281BA-0F4B-4832-A162-5D977E5F9869}] => (Allow) LPort=9009

FirewallRules: [{1C26207A-A8E4-425D-BA45-8FF854AC8A93}] => (Allow) LPort=9009

FirewallRules: [{04484E54-35CA-4CD2-8562-3B5E824836E4}] => (Allow) LPort=9009

FirewallRules: [{3E3FA7C2-6680-41C9-9CB6-0F45DD65BEA8}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Datei ist nicht signiert]

FirewallRules: [{9A9F9476-3878-49CC-9F33-01C399BA9E8A}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Among Us\Among Us.exe () [Datei ist nicht signiert]

FirewallRules: [{19BEFEDA-6530-4BEF-890D-8B3E67C52AAD}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{A654C92C-F202-4402-B02B-6A3C9F1AF739}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{F09514B6-1E6A-4487-A0FC-3D491B3D295E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{6499315F-D645-4164-9B5E-3225EFA52C36}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe (NVIDIA Corporation -> NVIDIA Corporation)

FirewallRules: [{1342BC9F-73EA-45EA-8010-D95EA1C88D60}] => (Allow) LPort=9009

FirewallRules: [{629EFD93-35A6-465D-9455-023C587B7286}] => (Allow) LPort=9009

FirewallRules: [{4C3E6C68-643D-44E2-976C-BFD6AF83879C}] => (Allow) LPort=9009

FirewallRules: [{6D288172-E941-444A-A18C-5A01735E9554}] => (Allow) LPort=9009

FirewallRules: [{68FD928D-20E7-4559-9911-4A450FA2EBC0}] => (Allow) LPort=9009

FirewallRules: [{2584C026-7BF8-4B87-AFD8-3FB8CC57DD9F}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{F608652E-A605-410E-BAD2-43FA5CFA1C82}G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe] => (Allow) G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe (Ubisoft Blue Byte GmbH -> Ubisoft)

FirewallRules: [UDP Query User{FEE53804-1CD7-4EA2-AFC6-846750D3EC76}G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe] => (Allow) G:\programme\steamlibrary\steamapps\common\for honor\forhonor.exe (Ubisoft Blue Byte GmbH -> Ubisoft)

FirewallRules: [TCP Query User{D8A56D9E-7FEF-45BA-B9F9-E1C610676C98}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\ilias\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [UDP Query User{151EC62C-A23F-4B62-A3EB-CB86CEF63310}C:\users\ilias\appdata\local\gamecenter\gamecenter.exe] => (Allow) C:\users\ilias\appdata\local\gamecenter\gamecenter.exe (Mail.Ru LLC -> )

FirewallRules: [{295E8900-1F3D-4199-8804-E4E16139D308}] => (Allow) LPort=9009

FirewallRules: [{50F77767-A997-4E4B-9BB3-A7ABD9A4BA6A}] => (Allow) LPort=9009

FirewallRules: [{5BF11EAD-2B25-42E7-A719-BF214DB6160F}] => (Allow) LPort=9009

FirewallRules: [{85726FFC-5921-4D01-B508-29DE0D40AE02}] => (Allow) LPort=9009

FirewallRules: [{16863DDD-CCA1-4238-8BCD-37E2342E2B68}] => (Allow) LPort=9009

FirewallRules: [{0A707DFE-79D6-47C7-BD8D-E7D7F3210BBD}] => (Allow) LPort=9009

FirewallRules: [{7343CF5D-79DD-43C0-8907-36C42B2E86C9}] => (Allow) LPort=9009

FirewallRules: [{8FA726A7-61BE-46AE-97CB-B60C29471293}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{B5941CD9-D6B7-49F0-AF8F-CC74E054C46D}G:\program files\videolan\vlc\vlc.exe] => (Allow) G:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [UDP Query User{45A82BE5-0D8A-4F77-A1A7-FD259C7392B2}G:\program files\videolan\vlc\vlc.exe] => (Allow) G:\program files\videolan\vlc\vlc.exe (VideoLAN -> VideoLAN)

FirewallRules: [TCP Query User{4F2987B9-E54F-437F-9DFD-281A1E1C3B46}G:\program files (x86)\samsung dex\samsungdex.exe] => (Allow) G:\program files (x86)\samsung dex\samsungdex.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

FirewallRules: [UDP Query User{F33D234D-9ABB-434E-ACAB-B36E95094B76}G:\program files (x86)\samsung dex\samsungdex.exe] => (Allow) G:\program files (x86)\samsung dex\samsungdex.exe (Samsung Electronics CO., LTD. -> Samsung Electronics Co., Ltd.)

FirewallRules: [{7B648AB0-9D5D-46C0-8E93-9202F0CD8A68}] => (Allow) LPort=9009

FirewallRules: [{0F745A3D-2648-4DAE-BD4A-689129CEFA2A}] => (Allow) LPort=9009

FirewallRules: [{2FCFCC1F-96D6-4A8C-98BA-2F904F83E2D5}] => (Allow) LPort=9009

FirewallRules: [{86F7C0F0-59DB-4B3A-B91A-8AC234D2AB57}] => (Allow) LPort=9009

FirewallRules: [{CC471296-97B6-42E9-843A-4D70F078F6FD}] => (Allow) LPort=9009

FirewallRules: [{B1409BBA-4E37-4333-8582-923CCD4B8F6A}] => (Allow) LPort=9009

FirewallRules: [{ACB11644-9D84-4B56-B781-54000F97F9C4}] => (Allow) LPort=9009

FirewallRules: [{9CA6CD96-9658-48B7-AD9E-C252EAD2BDB0}] => (Allow) LPort=9009

FirewallRules: [{1171263F-3B4D-4F31-92B1-6E00C2996E59}] => (Allow) LPort=9009

FirewallRules: [{339DE54B-0F39-4DDF-81C8-FC7B884073BC}] => (Allow) LPort=9009

FirewallRules: [{24BED14F-ACEF-4770-8337-FC704AC84BD3}] => (Allow) LPort=9009

FirewallRules: [{659FB545-E6E0-48BE-9F29-587E522B878A}] => (Allow) LPort=9009

FirewallRules: [{D8B799AF-57B3-49FF-9C5C-16BB4ADC87F6}] => (Allow) LPort=9009

FirewallRules: [{046D3204-C914-42BE-B56A-EF8AF9E48903}] => (Allow) LPort=9009

FirewallRules: [{23F29C1B-7213-4FA1-AC0A-FCB8020E1E8D}] => (Allow) LPort=9009

FirewallRules: [{DBF265BF-89D1-40AA-8EDB-CF49F29C1CD7}] => (Allow) LPort=9009

FirewallRules: [{38497A56-3196-4F86-8E1E-154F42FAA7D3}] => (Allow) LPort=9009

FirewallRules: [{78A8E1DE-41CD-4B12-88FC-D3C4ABB2BB31}] => (Allow) LPort=9009

FirewallRules: [{6C1B6F87-D969-4350-9DB7-08B8A2A55420}] => (Allow) LPort=9009

FirewallRules: [{EC77EBAF-554C-484F-B364-6F46243BA51A}] => (Allow) LPort=9009

FirewallRules: [{6F44C766-B4AC-4496-A149-1E8B8E03704A}] => (Allow) LPort=9009

FirewallRules: [{C0D74F91-3E05-4D16-AA01-5FBB01D3447D}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{B6C9EBE8-8DB2-4EDA-BB19-BA910A898A53}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\Assassin's Creed Unity\ACU.exe (UBISOFT ENTERTAINMENT INC. -> )

FirewallRules: [{1F455AEB-C2EC-4821-AC7F-5B3C8E74AADF}] => (Allow) LPort=9009

FirewallRules: [{CE301B76-1CDB-4C47-8CC8-5964812A5726}] => (Allow) LPort=9009

FirewallRules: [{EE8904A4-275D-44CB-AEFA-0C97458FF105}] => (Allow) LPort=9009

FirewallRules: [{9A0F51AA-C58D-48BE-BA0A-572DE26B23D6}] => (Allow) C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_8.0.0.0_x86__kc6t79cpj4tp0\Amazon Music Helper.exe (Amazon.com Services LLC) [Datei ist nicht signiert]

FirewallRules: [{D020BEF7-D1FE-490F-B28A-185678BBC212}] => (Allow) C:\Program Files\WindowsApps\AmazonMobileLLC.AmazonMusic_8.0.0.0_x86__kc6t79cpj4tp0\Amazon Music Helper.exe (Amazon.com Services LLC) [Datei ist nicht signiert]

FirewallRules: [{1E28815A-ECA4-437A-9A2F-B37B939AABCD}] => (Allow) LPort=9009

FirewallRules: [{646E9AE4-288F-4E98-985B-9B2649DA747E}] => (Allow) LPort=9009

FirewallRules: [{D2D0D84F-2713-4D48-97BE-49BAD0D7AC65}] => (Allow) LPort=9009

FirewallRules: [{E48051BD-EE50-4560-8952-446B1986705E}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{B3506CE9-057A-423F-B740-69463DA6553F}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{7459A16F-9FB3-48D1-9DB9-C03F81F2E16A}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{A3A5CAEE-A7A2-4239-BEE5-60DDA98BCE85}] => (Allow) C:\Program Files\WindowsApps\Microsoft.SkypeApp_15.66.77.0_x86__kzf8qxf38zg5c\Skype\Skype.exe (Skype Software Sarl -> Skype Technologies S.A.)

FirewallRules: [{C8546D42-67C4-4930-89C5-51C4F26FCDA1}] => (Allow) LPort=9009

FirewallRules: [{797DB6DE-990F-4A71-98EA-BC44E09B35E8}] => (Allow) LPort=9009

FirewallRules: [{00D52345-1403-49F2-8BC9-DA69C497FD52}] => (Allow) LPort=9009

FirewallRules: [{06598DB5-C76B-472E-8977-16F3ECD792F0}] => (Allow) LPort=9009

FirewallRules: [{BED43A43-1E1A-4537-8F06-F9F718D4EB25}] => (Allow) LPort=9009

FirewallRules: [{EA430E3D-8104-430A-9386-205BCD166483}] => (Allow) LPort=9009

FirewallRules: [{23831084-6F55-47D7-BA70-611C57C47AFD}] => (Allow) LPort=9009

FirewallRules: [{97930381-2451-46F2-8BE4-EBD7D24DB8F9}] => (Allow) LPort=9009

FirewallRules: [{2E2DF32B-C6D1-4364-A769-D3178BE1E7FA}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert]

FirewallRules: [{C9C5ABCF-5AA4-4F84-A697-7F42C466AA45}] => (Allow) G:\Programme\SteamLibrary\steamapps\common\rocketleague\Binaries\Win64\RocketLeague.exe (Psyonix, LLC) [Datei ist nicht signiert]

FirewallRules: [{016BDD9B-A569-4860-917C-AB0951818E59}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)

FirewallRules: [{7E9EEBB3-B284-4B0C-A4DC-736344DC2978}] => (Allow) H:\Program Files (x86)\Steam\steamapps\common\Sid Meier's Civilization VI\LaunchPad\LaunchPad.exe (Xsolla (USA), Inc -> 2K)

FirewallRules: [{4D17AEAA-F858-4C0B-B8F8-34AB17A584B3}] => (Allow) LPort=9009

FirewallRules: [{9829E6ED-D0BC-4852-9D05-01066CFD3374}] => (Allow) LPort=9009

FirewallRules: [{182D2CEB-4845-40E4-92E8-C0383931C817}] => (Allow) LPort=9009

FirewallRules: [{8155DD57-9746-4846-BA26-CBDF93926B2E}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{40F2E5B1-7CF1-4854-AF42-1CE0155D5BD1}H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe] => (Block) H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [UDP Query User{6D966027-33B3-464D-9857-3D40F1877D2C}H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe] => (Block) H:\programme\uplay\games\far cry 3\bin\farcry3_d3d11.exe (Ubisoft Entertainment -> Ubisoft Entertainment)

FirewallRules: [{862F156B-60DB-4A0A-BDDC-BE25873846FC}] => (Allow) LPort=9009

FirewallRules: [{6D32D14C-1F7B-4B3A-BC9A-BA7751CE1E77}] => (Allow) LPort=9009

FirewallRules: [{1EAF73EE-F1B3-4E40-AA00-08C3459BD57A}] => (Allow) LPort=9009

FirewallRules: [{A9A16F19-6878-4356-A6F3-18D2BCFAD9DB}] => (Allow) LPort=9009

FirewallRules: [{77BD1EB1-2F04-4064-831E-40FFAC211787}] => (Allow) LPort=9009

FirewallRules: [{124C864A-F31E-4660-97A4-D564DB412703}] => (Allow) LPort=9009

FirewallRules: [{CADEAA8D-FA7F-4178-95D9-71841612D3A4}] => (Allow) G:\Programme\Uplay\Watch Dogs Legion\bin\WatchDogsLegion.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)

FirewallRules: [{3A55B6DA-6786-4059-8F30-4FB4DA5A3345}] => (Allow) G:\Programme\Uplay\Watch Dogs Legion\bin\WatchDogsLegion.exe (UBISOFT ENTERTAINMENT INC. -> Ubisoft Entertainment)

FirewallRules: [{E6DF3F11-D621-470A-ACA7-9CBD8414951F}] => (Allow) LPort=9009

FirewallRules: [{C0F307DD-7F9F-4D8B-861F-23BA801A3ECE}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{D95D2CC7-B930-4B92-97B3-935A622F8F01}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{D9E3A425-38D4-44E4-A10D-27492E3C80AC}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{3FF6B4AD-7853-4B57-BCEA-D166B30CD6B4}] => (Allow) G:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (TeamViewer Germany GmbH -> TeamViewer Germany GmbH)

FirewallRules: [{2E132007-944D-4A53-A460-99376130BDCF}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Liberation HD\ac3lhd_32.exe (Ubisoft Entertainment SA -> )

FirewallRules: [{909974B3-FA4F-4159-8484-196A6C18A110}] => (Allow) H:\Programme\Uplay\games\Assassin's Creed Liberation HD\ac3lhd_64.exe => Keine Datei

FirewallRules: [{0509F46A-5613-412A-9200-F761252C73ED}] => (Allow) LPort=9009

FirewallRules: [{703AA02F-A5AA-4D5F-9DB7-7BB8407B2931}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\Plex Media Server.exe (Plex, Inc. -> Plex, Inc.)

FirewallRules: [{9F1C4D51-EF49-4254-8A72-4CB575A32822}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\PlexScriptHost.exe (Plex, Inc. -> Python Software Foundation)

FirewallRules: [{17E93FC6-DC97-416B-81A7-829F8BA7CA57}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\Plex DLNA Server.exe (Plex, Inc. -> Plex, Inc.)

FirewallRules: [{2E743466-C370-4A5B-9AD4-0332285BA91D}] => (Allow) H:\Program Files (x86)\Plex\Plex Media Server\Plex Tuner Service.exe (Plex, Inc. -> )

FirewallRules: [{722CBD6E-4BCB-424F-8C33-D0ADB0E76605}] => (Allow) LPort=9009

FirewallRules: [{F0FCA94B-2DAD-4164-9C10-0E45B0803F47}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe (Google LLC -> Google LLC)

FirewallRules: [{FD3AAC5E-2BC2-487C-8C2B-91792EE0E69E}] => (Allow) C:\Program Files\Microsoft Office\root\Office16\outlook.exe (Microsoft Corporation -> Microsoft Corporation)

FirewallRules: [{7E58BA1D-4BE8-421C-A119-1A6DACD770D6}] => (Allow) LPort=9009

FirewallRules: [{C088EBAE-FE2F-4A7C-909B-02D15FBC8F5F}] => (Allow) LPort=9009

FirewallRules: [{4A237A44-59C5-4F4A-9A5C-3C4626B02DBC}] => (Allow) LPort=9009

FirewallRules: [{B8797BCB-C345-4B3B-A17A-2EE6D335825E}] => (Allow) LPort=9009

FirewallRules: [{9EEDB966-BC01-4CEB-A48B-5B13F80EB056}] => (Allow) LPort=9009

FirewallRules: [{B0C52258-1F31-4AA7-B8E3-5F132240EF7C}] => (Allow) LPort=9009

FirewallRules: [{B2C82F77-17A0-4AE4-9247-49EF80A32AAE}] => (Allow) LPort=9009

FirewallRules: [{276A4A59-7174-48F5-AA3D-03A50C8AF9BF}] => (Allow) LPort=9009

FirewallRules: [{2B8F2737-5552-4C27-B5E7-5845D07C5AFB}] => (Allow) LPort=9009

FirewallRules: [{B22319EB-71F4-4854-A694-EDCFEBA84A68}] => (Allow) LPort=9009

FirewallRules: [{53CE5125-FDC2-43E6-AF58-223CAA2A4F8F}] => (Allow) LPort=9009

FirewallRules: [{C6FDECDC-7BFF-4398-8779-A9B1C976F477}] => (Allow) LPort=9009

FirewallRules: [{905132DB-173B-437D-80BE-866B249D805D}] => (Allow) LPort=9009

FirewallRules: [TCP Query User{1970B036-0320-4B58-A5FF-3622E74BCA3D}C:\program files (x86)\tautulli\tautulli.exe] => (Allow) C:\program files (x86)\tautulli\tautulli.exe () [Datei ist nicht signiert]

FirewallRules: [UDP Query User{94E85D38-CF7A-431C-A846-71475413A649}C:\program files (x86)\tautulli\tautulli.exe] => (Allow) C:\program files (x86)\tautulli\tautulli.exe () [Datei ist nicht signiert]

FirewallRules: [{06760A6B-4BD9-4C8D-88E0-16A7B261DC62}] => (Allow) LPort=9009

FirewallRules: [{153D3772-D01F-4F04-8EA1-8EBFDB67F1B8}] => (Allow) LPort=9009

FirewallRules: [{9A60008D-F16F-4924-BC50-FA10EB101101}] => (Allow) LPort=9009

ilias2

11.12.2020 23:13

Rest vom Addition.txt

Code:

==================== Wiederherstellungspunkte =========================
 

10-12-2020 06:35:49 Windows Modules Installer

10-12-2020 06:36:59 Windows Modules Installer

11-12-2020 16:48:56 Windows Modules Installer

11-12-2020 16:59:00 Wiederherstellungsvorgang
 

==================== Fehlerhafte Geräte im Gerätemanager ============
 

Name: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)

Description: Unbekanntes USB-Gerät (Fehler beim Anfordern einer Gerätebeschreibung.)

Class Guid: {36fc9e60-c465-11cf-8056-444553540000}

Manufacturer: (Standard-USB-Hostcontroller)

Service: 

Problem: : Windows has stopped this device because it has reported problems. (Code 43)

Resolution: One of the drivers controlling the device notified the operating system that the device failed in some manner. For more information about how to diagnose the problem, see the hardware documentation. 
 
 

==================== Fehlereinträge in der Ereignisanzeige: ========================
 

Applikationsfehler:

==================

Error: (12/11/2020 10:07:09 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: AORUS.exe, Version: 1.9.2.0, Zeitstempel: 0x5fa3b862

Name des fehlerhaften Moduls: MSVCR90.dll, Version: 9.0.30729.9625, Zeitstempel: 0x5db2747f

Ausnahmecode: 0x40000015

Fehleroffset: 0x0005beae

ID des fehlerhaften Prozesses: 0x429c

Startzeit der fehlerhaften Anwendung: 0x01d6cfd97949a403

Pfad der fehlerhaften Anwendung: G:\Program Files (x86)\GIGABYTE\AORUS ENGINE\AORUS.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\WinSxS\x86_microsoft.vc90.crt_1fc8b3b9a1e18e3b_9.0.30729.9625_none_508ef7e4bcbbe589\MSVCR90.dll

Berichtskennung: 8609782a-c7df-478f-9cb4-7a5c046d78b9

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 

Error: (12/11/2020 05:19:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)

Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Program Files\AVG\TuneUp\TuneupSvc.exe, PID: 5672, ProfSvc PID: 2708.
 

Error: (12/11/2020 05:19:36 PM) (Source: Microsoft-Windows-User Profiles Service) (EventID: 1552) (User: NT-AUTORITÄT)

Description: Die Benutzerstruktur wurde von einem anderen Prozess geladen (Registrierungssperre). Prozessname: C:\Program Files\AVG\TuneUp\TuneupSvc.exe, PID: 5672, ProfSvc PID: 2708.
 

Error: (12/11/2020 05:18:45 PM) (Source: ESENT) (EventID: 455) (User: )

Description: svchost (5652,R,98) SRUJet: Fehler -1811 (0xfffff8ed) beim Öffnen von Protokolldatei C:\WINDOWS\system32\SRU\SRU033F7.log.
 

Error: (12/11/2020 05:18:43 PM) (Source: Microsoft-Windows-CAPI2) (EventID: 257) (User: )

Description: Vom Kryptografiedienst konnte die Katalogdatenbank nicht initialisiert werden. "ESENT"-Fehler: -550.
 

Error: (12/11/2020 04:59:58 PM) (Source: VSS) (EventID: 8193) (User: )

Description: Volumeschattenkopie-Dienstfehler: Beim Aufrufen von Routine "CoCreateInstance" ist ein unerwarteter Fehler aufgetreten. hr = 0x8007045b, Der Computer wird heruntergefahren.

.
 

Error: (12/11/2020 04:59:58 PM) (Source: VSS) (EventID: 13) (User: )

Description: Volumenschattenkopie-Dienst-Informationen: Der COM-Server mit CLSID {4e14fba2-2e22-11d1-9964-00c04fbbb345} und dem Namen "CEventSystem" kann nicht gestartet werden. [0x8007045b, Der Computer wird heruntergefahren.

]
 

Error: (12/11/2020 04:50:42 PM) (Source: Application Error) (EventID: 1000) (User: )

Description: Name der fehlerhaften Anwendung: explorer.exe, Version: 10.0.19041.662, Zeitstempel: 0x996782f8

Name des fehlerhaften Moduls: fhcfg.dll, Version: 10.0.19041.1, Zeitstempel: 0x93b89db8

Ausnahmecode: 0xc0000005

Fehleroffset: 0x0000000000023f4f

ID des fehlerhaften Prozesses: 0x2428

Startzeit der fehlerhaften Anwendung: 0x01d6cfd55bed6fe3

Pfad der fehlerhaften Anwendung: C:\WINDOWS\explorer.exe

Pfad des fehlerhaften Moduls: C:\WINDOWS\System32\fhcfg.dll

Berichtskennung: f2851fac-2122-4db4-86cc-961a21bb0253

Vollständiger Name des fehlerhaften Pakets: 

Anwendungs-ID, die relativ zum fehlerhaften Paket ist:
 
 

Systemfehler:

=============

Error: (12/11/2020 04:25:28 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:25:28 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:23:03 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:23:03 PM) (Source: Schannel) (EventID: 4103) (User: NT-AUTORITÄT)

Description: Schwerwiegender Fehler beim Erstellen der Client-Anmeldeinformationen für TLS. Der interne Fehlerstatus ist 10013.
 

Error: (12/11/2020 04:16:57 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/11/2020 04:16:57 PM) (Source: DCOM) (EventID: 10010) (User: )

Description: Der Server "{AB8902B4-09CA-4BB6-B78D-A8F59079A8D5}" konnte innerhalb des angegebenen Zeitabschnitts mit DCOM nicht registriert werden.
 

Error: (12/11/2020 04:15:14 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 

Error: (12/11/2020 04:15:14 PM) (Source: DCOM) (EventID: 10005) (User: NT-AUTORITÄT)

Description: Fehler "1115" in DCOM, als der Dienst "wuauserv" mit den Argumenten "Nicht verfügbar" gestartet wurde, um den folgenden Server zu verwenden:

{E60687F7-01A1-40AA-86AC-DB1CBF673334}
 
 

CodeIntegrity:

===================================
 

Date: 2020-12-11 18:25:18.9540000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 18:24:51.5920000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 18:24:51.5610000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:32:01.7090000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:32:01.7030000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:32:01.6840000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:25:17.5230000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

Date: 2020-12-11 17:25:17.5180000Z

Description: 

Code Integrity determined that a process (\Device\HarddiskVolume2\Windows\System32\svchost.exe) attempted to load \Device\HarddiskVolume2\Program Files\AVG\Antivirus\aswAMSI.dll that did not meet the Windows signing level requirements.
 

==================== Speicherinformationen =========================== 
 

BIOS: American Megatrends Inc. F30 04/18/2019

Hauptplatine: Gigabyte Technology Co., Ltd. AX370-Gaming K5-CF

Prozessor: AMD Ryzen 5 1600 Six-Core Processor 

Prozentuale Nutzung des RAM: 56%

Installierter physikalischer RAM: 16332.29 MB

Verfügbarer physikalischer RAM: 7104.98 MB

Summe virtueller Speicher: 26572.29 MB

Verfügbarer virtueller Speicher: 10400.87 MB
 

==================== Laufwerke ================================
 

Drive c: () (Fixed) (Total:231.56 GB) (Free:123.07 GB) NTFS

Drive g: (HDD 2TB) (Fixed) (Total:1863.01 GB) (Free:66.31 GB) NTFS

Drive h: (HDD) (Fixed) (Total:931.51 GB) (Free:14.58 GB) NTFS
 

\\?\Volume{b1edee0f-0000-0000-0000-100000000000}\ (System-reserviert) (Fixed) (Total:0.49 GB) (Free:0.46 GB) NTFS

\\?\Volume{b1edee0f-0000-0000-0000-80033a000000}\ () (Fixed) (Total:0.83 GB) (Free:0.39 GB) NTFS
 

==================== MBR & Partitionstabelle ====================
 

==================== Ende von Addition.txt =======================

M-K-D-B

12.12.2020 10:41

Schritt 1
Die folgenden Programme sind veraltet, stören die Bereinigung oder es handelt sich um Werbesoftware bzw. unerwünschte Software (Adware, PUP) und müssen entfernt werden.

Deinstalliere über Start > Einstellungen > Apps bzw. Start > Systemsteuerung > Programme deinstallieren die folgenden Programme:
- AVG AntiVirus
- AVG TuneUp
Starte den Rechner im Anschluss neu auf.
Gib eine kurze Rückmeldung, ob die Deinstallation erfolgreich war.

Schritt 2
Führe Malwarebytes' AntiMalware (MBAM) gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.

Schritt 3
Führe AdwCleaner gemäß der bebilderten Anleitung aus und poste abschließend die Logdatei.

Schritt 4

Starte FRST erneut. Vergewissere dich, dass vor Addition.txt ein Haken gesetzt ist und drücke auf Untersuchen.
FRST erstellt wieder zwei Logdateien (FRST.txt und Addition.txt).
Poste mir beide Logdateien mit deiner nächsten Antwort.

Bitte poste mit deiner nächsten Antwort:

eine Rückmeldung bezüglich der Deinstallationen
die Logdatei von MBAM
die Logdatei von AdwCleaner
die beiden neuen Logdateien von FRST (FRST.txt und Addition.txt)

cosinus

13.12.2020 02:18

Zitat:

Hosts: 127.0.0.1 activate.navicat.com

Nur mal so als Hinweis.

Alle Zeitangaben in WEZ +1. Es ist jetzt 11:56 Uhr.

Seite 1 von 2

100 Beiträge dieses Themas auf einer Seite anzeigen

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131