Trojaner-Board

Trojaner-Board (https://www.trojaner-board.de/)
-   Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)
-   -   Nach Virus/Maleware kein Ton mehr in diverse Spielen (https://www.trojaner-board.de/176681-virus-maleware-kein-ton-mehr-diverse-spielen.html)

EquinoxRB 08.03.2016 16:21
Nach Virus/Maleware kein Ton mehr in diverse Spielen
 
Hallo erstmal, :)

Ich bin leidenschaftlicher Gamer und lade mir hier und da mal Mods herrunter aber auch nur von vertrauenswürdigen Seiten. Als ich mit letztens mal wieder einen Mod herrunter geladen habe und ihn installiert hab, habe ich mitbekommen das meine CPU Auslastung anstieg also hab ich Malewarebytes Anti-Maleware drüber laufen lassen und das war das Ergebniss: https://gyazo.com/8c8e0c03517b3fd0165159f28cad2d95
Ich hab diese dann entfernt und als ich ein Spiel spielen wollte war im Hauptmenü alles gut Ton alles da. Als ich dann richtig im Spiel war, war der Ton auf einmal weg. Das Problem ist bei allen Rennspielen und bei 2 Shootern.
Eine Neu installation hat nicht geholfen.
Gegenwärtig habe ich auch das Problem mit Windows Media Player das ich immer diese Fehlermeldung bekomme: https://gyazo.com/20c08e93e128bce36eb7908d17037900
Ich hoffe mir kann jemand helfen.
MFG Equinox

Deathkid535 08.03.2016 16:54
:hallo:

Mein Name ist Dennis und ich werde dir bei der Bereinigung helfen.

Bitte beachte, dass es ein paar Regeln gibt:
  • Bitte lies meine Posts komplett durch bevor du sie abarbeitest
  • Wenn ein Problem auftauchen sollte, unterbreche deine Arbeit, poste die entstandenen Logs und schildere dieses so genau wie möglich.
  • Bitte kein Crossposting
  • Installiere oder Deinstalliere keine Software ohne Aufforderung
  • Bitte verwende nur die Tools welche hier im Thread erwähnt werden
  • Antworte innerhalb von 24h um eine sinnvolle Bereinigung zu ermöglichen
  • Poste die Logs immer in CODE-Tags (#-Button), zur Not die Logs einfach aufteilen

Sollte ich nicht innerhalb von 48h antworten, schreibe mir eine PM!

Hast du das MBAM-Log noch? Malwarebytes Anti-Malware Logfile finden - Anleitungen

Schritt # 1: FRST

Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST Download FRST 32-Bit | FRST 64-Bit
(Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
  • Starte jetzt FRST.
  • Ändere ungefragt keine der Checkboxen und klicke auf Untersuchen.
  • Die Logdateien werden nun erstellt und befinden sich danach auf deinem Desktop.
  • Poste mir die FRST.txt und nach dem ersten Scan auch die Addition.txt in deinem Thread (#-Symbol im Eingabefenster der Webseite anklicken)



Schritt # 2: Bitte Posten
  • Die FRST.txt
  • Die Addition.txt

EquinoxRB 08.03.2016 17:35
Hallo Dennis :)

Hier ist die FRST.txt
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von test (Administrator) auf DAT_BRONIE (08-03-2016 17:25:21)
Gestartet von C:\Users\test\Downloads
Geladene Profile: test (Verfügbare Profile: test)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe
(Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Valve Corporation) K:\Steam\Steam.exe
(Valve Corporation) K:\Steam\bin\steamwebhelper.exe
(Valve Corporation) K:\Steam\bin\steamwebhelper.exe
(Valve Corporation) K:\Steam\bin\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Psyonix, Inc) K:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) K:\Steam\GameOverlayUI.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Malwarebytes) C:\Program Files (x86)\Malwarebytes Anti-Malware\mbam.exe
(Farbar) C:\Users\test\Downloads\FRST64 (1).exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [804168 2016-02-18] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Akamai NetSession Interface] => C:\Users\test\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3586848 2016-02-17] (Nota Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2016-02-18]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{1F88B87D-491F-4325-BB7C-F34B09AD1A37}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{EA272E8E-9CBA-4EB6-90F8-A37C6A74570E}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-809088717-832388673-2450759211-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-29] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-10-30] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems)
FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\test\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-12-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-03-04] ()
FF Extension: Flash and Video Download - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-02-27]
FF Extension: anonymoX - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\Extensions\client@anonymox.net.xpi [2015-10-18]

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.de/
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-01-24]
CHR Extension: (My Little Pony) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\amecdmemkaaacggdkgcndmeagijhlgbd [2014-11-11]
CHR Extension: (Google Docs) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-19]
CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03]
CHR Extension: (Google-Suche) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Vinyl Scratch Beat) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlcjanbbdbbeeehhkmgboaglbdiiggp [2015-03-31]
CHR Extension: (Ponyhoof) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\efjjgphedlaihnlgaibiaihhmhaejjdd [2016-01-23]
CHR Extension: (Chrome Remote Desktop) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-17]
CHR Extension: (Google Docs Offline) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (Kopieren und Einfügen in Office Online) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2015-08-08]
CHR Extension: (Agar.io Bot) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnlogedhgopimklhbhmpnliaclegdhg [2015-11-23]
CHR Extension: (Skype) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18]
CHR Extension: (Der Planer der Räume) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-10-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08]
CHR Extension: (Google Mail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [948392 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466408 2016-02-18] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1417592 2016-02-18] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-23] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-12-26] ()
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [162072 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [140448 2016-02-18] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [75472 2015-12-01] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
R3 MBAMSwissArmy; C:\Windows\system32\drivers\MBAMSwissArmy.sys [192216 2016-03-08] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation                          )
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net)
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [X]
S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [X]
S3 VBAudioVACMME; system32\DRIVERS\vbaudio_cable64_win7.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 17:25 - 2016-03-08 17:26 - 00031364 _____ C:\Users\test\Downloads\FRST.txt
2016-03-08 17:25 - 2016-03-08 17:25 - 00000000 ____D C:\FRST
2016-03-08 17:24 - 2016-03-08 17:24 - 02374144 _____ (Farbar) C:\Users\test\Downloads\Nicht bestätigt 897244.crdownload
2016-03-08 17:24 - 2016-03-08 17:24 - 02374144 _____ (Farbar) C:\Users\test\Downloads\FRST64 (1).exe
2016-03-08 16:37 - 2016-03-08 16:37 - 00000202 _____ C:\Users\test\Desktop\Rocket League.url
2016-03-08 15:46 - 2016-03-08 15:46 - 00000000 ____D C:\Users\test\AppData\Local\ElevatedDiagnostics
2016-03-07 16:05 - 2016-03-07 16:05 - 00000199 _____ C:\Users\test\Desktop\Half-Life 2 Episode Two.url
2016-03-05 10:26 - 2016-03-05 12:06 - 00000000 ____D C:\Program Files\Sound+
2016-03-05 10:24 - 2016-03-05 10:24 - 00540004 _____ C:\Users\test\Downloads\Dear Esther Update 1 And 2 SKI Downloader.rar
2016-03-05 09:23 - 2016-03-05 09:23 - 00000459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk
2016-03-05 06:58 - 2016-03-05 06:58 - 00000000 ____D C:\Users\test\Documents\FIFA 15
2016-03-05 06:47 - 2016-03-05 06:47 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\FIFA 15
2016-03-04 19:31 - 2016-03-04 19:31 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-03 18:02 - 2016-03-03 19:20 - 00000000 ____D C:\Users\test\Documents\DayZ
2016-02-29 23:56 - 2016-02-29 23:56 - 00000000 ___HD C:\Users\test\Documents\.updtmp
2016-02-28 22:24 - 2016-02-28 22:24 - 00000868 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Angry IP Scanner.lnk
2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Users\test\.swt
2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Program Files\Angry IP Scanner
2016-02-28 10:16 - 2016-02-28 10:16 - 00000000 ____D C:\Users\test\Documents\NAMCO
2016-02-26 20:35 - 2016-02-26 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-02-26 02:53 - 2016-02-26 02:53 - 00000000 ____D C:\Users\test\Documents\League of Legends
2016-02-25 22:06 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-02-25 22:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-02-25 22:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\Riot Games
2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-02-25 14:40 - 2016-02-25 14:44 - 00000000 ____D C:\Users\test\AppData\Local\CyberGhost
2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\Program Files\TAP-Windows
2016-02-24 14:54 - 2016-02-24 14:54 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\ASIO4ALL v2
2016-02-24 14:54 - 2016-02-24 14:54 - 00000000 ____D C:\Program Files (x86)\ASIO4ALL v2
2016-02-24 14:53 - 2016-02-24 14:53 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-02-24 14:49 - 2016-02-24 14:54 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-02-24 14:21 - 2016-02-27 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-18 00:46 - 2016-03-08 17:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-02-18 00:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-18 00:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-18 00:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-02-17 22:24 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-02-17 22:24 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-02-17 22:24 - 2016-02-09 06:26 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-02-17 22:21 - 2016-02-11 17:56 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-02-17 22:21 - 2016-02-11 17:56 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-02-17 22:21 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-02-17 22:04 - 2016-02-29 14:50 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA
2016-02-17 22:04 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-02-17 22:04 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-02-17 22:04 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-02-17 22:04 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-02-17 15:02 - 2016-02-17 15:02 - 00000000 ____D C:\Users\test\Documents\Scan
2016-02-14 19:24 - 2016-02-18 01:43 - 00001421 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Users\test\AppData\LocalLow\E_Line Media
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Program Files (x86)\LAV Filters
2016-02-09 20:22 - 2016-02-09 20:22 - 00000000 ____D C:\Users\test\Documents\Banished
2016-02-07 20:34 - 2016-03-05 19:02 - 00000000 ____D C:\Users\test\Documents\ArmaMods
2016-02-07 01:59 - 2016-02-07 01:59 - 00000000 ____H C:\Windows\system32\Drivers\Msft_Kernel_xusb21_01009.Wdf

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-08 17:10 - 2014-07-18 22:32 - 00000000 ____D C:\Users\test\AppData\Local\LogMeIn Hamachi
2016-03-08 17:03 - 2014-06-01 00:00 - 00000000 ____D C:\Users\test\Documents\My Games
2016-03-08 16:43 - 2014-05-30 20:27 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-08 16:37 - 2015-11-13 22:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-08 16:29 - 2015-01-19 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-08 16:27 - 2014-08-02 17:08 - 00000000 ___RD C:\Users\test\Desktop\Nützliche
2016-03-08 15:02 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-08 15:02 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-08 14:55 - 2014-11-11 17:24 - 00000000 ____D C:\Users\test\AppData\Local\TSVNCache
2016-03-08 14:55 - 2014-05-30 20:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-08 14:55 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-08 14:54 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-08 06:28 - 2014-07-16 05:55 - 00000000 ____D C:\Users\test\AppData\Local\Adobe
2016-03-07 22:31 - 2014-12-29 13:05 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3
2016-03-07 22:27 - 2014-05-30 23:59 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype
2016-03-05 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-05 23:18 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\The Crew
2016-03-05 23:14 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\ProfileCache
2016-03-05 22:29 - 2014-05-31 00:18 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client
2016-03-05 11:38 - 2016-01-01 06:16 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps
2016-03-05 11:33 - 2014-12-27 17:35 - 00000000 ____D C:\Users\test\AppData\Roaming\vlc
2016-03-05 11:18 - 2015-02-10 02:55 - 00000000 ____D C:\Users\test\AppData\Roaming\uTorrent
2016-03-05 10:31 - 2014-09-05 06:12 - 00000000 ____D C:\ProgramData\Codemasters
2016-03-05 07:34 - 2014-05-31 00:02 - 00000000 ____D C:\ProgramData\Origin
2016-03-05 07:32 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-04 19:30 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Bohemia_Interactive
2016-03-03 18:02 - 2014-06-10 12:28 - 00000000 ____D C:\Users\test\AppData\Local\DayZ
2016-03-02 20:40 - 2014-08-24 16:08 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-02 17:52 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-03-02 17:52 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-03-02 17:52 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-02 17:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-03-02 13:42 - 2015-04-19 08:23 - 00000080 _____ C:\Users\test\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-03-02 12:49 - 2015-07-08 12:26 - 00003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily
2016-03-02 12:49 - 2014-08-26 00:26 - 00003282 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2016-03-02 12:49 - 2014-08-26 00:26 - 00000000 ____D C:\Program Files (x86)\Gyazo
2016-03-01 15:58 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-01 15:28 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 Launcher
2016-03-01 14:54 - 2015-07-19 15:20 - 00000000 ____D C:\Users\test\Documents\Arma 3
2016-02-29 14:50 - 2014-06-15 10:37 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA Corporation
2016-02-28 22:24 - 2014-05-27 15:07 - 00000000 ____D C:\Users\test
2016-02-28 20:22 - 2015-09-08 20:23 - 00000000 ____D C:\Users\test\Documents\TxT-Folder
2016-02-28 11:46 - 2016-02-02 15:25 - 00000000 ____D C:\Users\test\AppData\Local\NXEPassportClient
2016-02-26 20:35 - 2014-05-31 00:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Origin
2016-02-26 02:47 - 2014-08-12 20:37 - 00000000 ____D C:\Users\test\AppData\Roaming\LolClient
2016-02-25 14:40 - 2016-01-28 21:35 - 00000000 ____D C:\Program Files\CyberGhost 5
2016-02-24 14:53 - 2016-01-28 21:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-02-24 14:53 - 2016-01-28 21:57 - 00000000 ____D C:\Program Files\Image-Line
2016-02-23 21:17 - 2014-05-31 00:02 - 00000000 ____D C:\Program Files (x86)\Origin
2016-02-23 14:56 - 2014-06-21 22:14 - 00000000 ____D C:\Users\test\AppData\Roaming\AnvSoft
2016-02-21 13:35 - 2014-06-01 00:10 - 00000000 ____D C:\Users\test\AppData\Roaming\.minecraft
2016-02-19 21:47 - 2014-05-30 20:27 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-18 15:04 - 2014-06-01 08:59 - 00140448 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-02-18 01:43 - 2016-02-01 06:10 - 00000958 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk
2016-02-18 01:43 - 2016-01-07 16:40 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk
2016-02-18 01:43 - 2015-06-17 14:45 - 00000820 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiosurf 2.lnk
2016-02-18 01:43 - 2015-06-04 19:13 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-02-18 01:43 - 2015-04-12 08:10 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk
2016-02-18 01:43 - 2015-04-12 07:46 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-02-18 01:43 - 2014-11-09 19:54 - 00000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\greencube.lnk
2016-02-18 01:43 - 2014-10-07 15:37 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-02-18 01:43 - 2014-08-25 11:25 - 00001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk
2016-02-18 01:43 - 2014-08-01 15:39 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2016-02-18 01:43 - 2014-06-05 22:07 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-02-18 01:43 - 2014-05-30 23:56 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-02-18 01:43 - 2014-05-27 15:03 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-18 01:43 - 2014-05-27 15:03 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-18 01:43 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-02-18 01:43 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-02-18 01:43 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-02-18 01:42 - 2015-04-12 02:45 - 00001147 _____ C:\Users\test\Desktop\Mozilla Firefox.lnk
2016-02-18 01:42 - 2015-02-10 02:56 - 00000829 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-02-18 01:42 - 2014-08-08 09:25 - 00000513 _____ C:\Users\test\Desktop\Programme und Funktionen.lnk
2016-02-18 01:38 - 2015-03-01 03:49 - 00000000 ____D C:\Windows\SysWOW64\csrss
2016-02-18 01:38 - 2015-02-10 02:56 - 00000000 ____D C:\ProgramData\APN
2016-02-17 22:24 - 2014-06-15 10:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-02-17 22:24 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-02-17 22:24 - 2014-05-27 15:20 - 00000000 ____D C:\Temp
2016-02-17 22:23 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-17 22:04 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-17 14:49 - 2015-04-19 08:23 - 00000000 ____D C:\Program Files\Rockstar Games
2016-02-17 14:49 - 2014-08-24 15:14 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-02-16 14:01 - 2014-05-30 23:57 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3 Client
2016-02-15 22:58 - 2014-08-21 21:11 - 00000000 ____D C:\Users\test\AppData\Roaming\SpaceEngineers
2016-02-15 21:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-02-15 11:33 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-02-15 11:24 - 2015-11-26 22:08 - 00000000 ____D C:\Program Files (x86)\Dropbox
2016-02-15 11:24 - 2014-11-14 17:47 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-02-15 01:28 - 2014-05-27 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-15 01:26 - 2015-11-26 22:08 - 00000000 ____D C:\Users\test\AppData\Local\Dropbox
2016-02-15 01:25 - 2016-01-31 18:48 - 00000000 ____D C:\Users\test\Documents\Electronic Arts
2016-02-15 01:17 - 2015-03-01 03:39 - 00000000 __SHD C:\Users\test\Documents\MSDCSC
2016-02-11 17:56 - 2014-06-15 10:47 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-02-10 03:38 - 2014-05-30 20:27 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-10 03:38 - 2014-05-30 20:27 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-10 00:29 - 2015-01-19 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-10 00:29 - 2014-07-03 15:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 00:29 - 2014-07-03 15:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-09 09:39 - 2014-06-15 10:47 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-02-09 09:39 - 2014-06-15 10:47 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-02-09 09:39 - 2014-05-27 15:26 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-02-09 09:39 - 2014-05-27 15:26 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-02-09 09:39 - 2014-05-27 15:25 - 00034905 _____ C:\Windows\system32\nvinfo.pb
2016-02-09 09:39 - 2013-09-12 09:58 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-02-09 09:39 - 2013-09-12 09:58 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-02-09 09:39 - 2013-09-12 09:58 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-02-09 06:41 - 2014-05-27 15:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll
2016-02-07 11:28 - 2016-01-01 03:38 - 00000000 ____D C:\Users\test\Documents\Camtasia Studio
2016-02-07 11:22 - 2014-06-13 22:06 - 00000000 ____D C:\Users\test\Documents\Bandicam
2016-02-07 02:26 - 2016-02-06 18:10 - 00000000 ____D C:\Users\test\AppData\Roaming\Tunngle

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-07-16 06:18 - 2014-07-16 11:33 - 0000312 _____ () C:\Users\test\AppData\Roaming\aps.uninstall.scan.results
2014-06-07 23:42 - 2014-06-09 19:41 - 0000098 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg
2014-09-25 14:16 - 2015-06-14 10:08 - 0001090 _____ () C:\Users\test\AppData\Roaming\SpeedRunnersLog.txt
2014-06-07 23:31 - 2014-06-09 19:39 - 0000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg
2015-06-03 19:10 - 2015-06-03 19:10 - 0000016 _____ () C:\ProgramData\mntemp
2015-06-03 19:10 - 2015-06-03 19:10 - 0004099 _____ () C:\ProgramData\mtbjfghn.xbe

Einige Dateien in TEMP:
====================
C:\Users\test\AppData\Local\Temp\6a246669c4722113966d0cbd29442eb9.dll
C:\Users\test\AppData\Local\Temp\6bbb725da4ced29daf3cdc0080a744e6.dll
C:\Users\test\AppData\Local\Temp\avgnt.exe
C:\Users\test\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\test\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-10 06:24

==================== Ende von FRST.txt ============================

EquinoxRB 08.03.2016 17:37
Hier die Addition.txt
Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von test (2016-03-08 17:27:03)
Gestartet von C:\Users\test\Downloads
Windows 7 Professional Service Pack 1 (X64) (2014-05-27 14:07:32)
Start-Modus: Normal
==========================================================


==================== Konten: =============================

Administrator (S-1-5-21-809088717-832388673-2450759211-500 - Administrator - Disabled)
Gast (S-1-5-21-809088717-832388673-2450759211-501 - Limited - Disabled)
HomeGroupUser$ (S-1-5-21-809088717-832388673-2450759211-1002 - Limited - Enabled)
test (S-1-5-21-809088717-832388673-2450759211-1000 - Administrator - Enabled) => C:\Users\test

==================== Sicherheits-Center ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installierte Programme ======================

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)

µTorrent (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\uTorrent) (Version: 3.4.5.41712 - BitTorrent Inc.)
Adobe Acrobat 5.0 (HKLM-x32\...\Adobe Acrobat 5.0) (Version: 5.0 - Adobe Systems, Inc.)
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 16.0.0.273 - Adobe Systems Incorporated)
Adobe Creative Cloud (HKLM-x32\...\Adobe Creative Cloud) (Version: 2.9.1.474 - Adobe Systems Incorporated)
Adobe Flash Player 20 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Flash Player 20 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 20.0.0.306 - Adobe Systems Incorporated)
Adobe Help Manager (HKLM-x32\...\chc.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 4.0.244 - Adobe Systems Incorporated)
Adobe Photoshop CC 2014 (HKLM-x32\...\{D7A4F897-B20A-42D0-862D-CB5F6DB7391D}) (Version: 15.2.2 - Adobe Systems Incorporated)
Akamai NetSession Interface (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Akamai) (Version:  - Akamai Technologies, Inc)
Angry IP Scanner (HKLM-x32\...\Angry IP Scanner) (Version: 3.4.1 - Angry IP Scanner)
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
ASIO4ALL (HKLM-x32\...\ASIO4ALL) (Version: 2.12 - Michael Tippach)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.15.141 - Avira Operations GmbH & Co. KG)
Avira Launcher (HKLM-x32\...\{3b87484e-d70b-4b4f-ad59-2ae89571e2cf}) (Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG)
Avira Launcher (x32 Version: 1.1.56.9119 - Avira Operations GmbH & Co. KG) Hidden
Bandicam (HKLM-x32\...\Bandicam) (Version: 2.0.0.638 - Bandisoft.com)
Bandisoft MPEG-1 Decoder (HKLM-x32\...\BandiMPEG1) (Version:  - Bandisoft.com)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
BattlEye for OA Uninstall (HKLM-x32\...\BattlEye for OA) (Version:  - )
BattlEye Uninstall (HKLM-x32\...\BattlEye for A2) (Version:  - )
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.6 Patch (x32 Version: 1.6 - Activision) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version:  - ) Hidden
Call of Duty(R) 4 - Modern Warfare(TM) 1.7 Patch (x32 Version: 1.7 - Activision) Hidden
Camtasia Studio 8 (HKLM-x32\...\{F6EC4C4E-C87B-4F50-851B-1C86E0C94F00}) (Version: 8.6.0.2055 - TechSmith Corporation)
Combat Arms EU (HKLM-x32\...\Combat Arms EU) (Version:  - )
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version:  - Valve)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
DAEMON Tools Lite (HKLM-x32\...\DAEMON Tools Lite) (Version: 4.49.1.0356 - Disc Soft Ltd)
DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.0.732.20 - Electronic Arts Inc.)
EA SPORTS™ FIFA 15 (HKLM-x32\...\{3D4ADA2B-F028-4307-ADF4-6F9AA44725DA}) (Version: 1.4.0.0 - Electronic Arts)
Express Burn (HKLM-x32\...\ExpressBurn) (Version: 4.78 - NCH Software)
FastStone Image Viewer 5.5 (HKLM-x32\...\FastStone Image Viewer) (Version: 5.5 - FastStone Soft)
FL Studio 12 (HKLM-x32\...\FL Studio 12) (Version:  - Image-Line)
FL Studio ASIO (HKLM-x32\...\FL Studio ASIO) (Version:  - Image-Line)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Fraps (remove only) (HKLM-x32\...\Fraps) (Version:  - )
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 48.0.2564.116 - Google Inc.)
Google Earth (HKLM-x32\...\{817750FA-EC6A-485D-9901-0683AE6FFDF1}) (Version: 7.1.5.1557 - Google)
Google Update Helper (x32 Version: 1.3.29.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
greencube (HKLM-x32\...\greencube) (Version: 1.0 - UNKNOWN)
greencube (x32 Version: 1.0 - UNKNOWN) Hidden
Half-Life 2: Episode Two (HKLM-x32\...\Steam App 420) (Version:  - Valve)
HFSExplorer 0.23 (HKLM-x32\...\HFSExplorer) (Version: 0.23 - Catacombae Software)
IL Download Manager (HKLM-x32\...\IL Download Manager) (Version:  - Image-Line)
Intel(R) Control Center (HKLM-x32\...\{F8A9085D-4C7A-41a9-8A77-C8998A96C421}) (Version: 1.2.1.1008 - Intel Corporation)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 8.1.0.1281 - Intel Corporation)
Intel(R) Rapid Storage Technology (HKLM-x32\...\{3E29EE6C-963A-4aae-86C1-DC237C4A49FC}) (Version: 11.1.0.1006 - Intel Corporation)
Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 1.0.5.235 - Intel Corporation)
Java 8 Update 40 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218040F0}) (Version: 8.0.400 - Oracle Corporation)
League of Legends (HKLM-x32\...\League of Legends 3.0.1) (Version: 3.0.1 - Riot Games)
League of Legends (x32 Version: 3.0.1 - Riot Games) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.410 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.410 - LogMeIn, Inc.) Hidden
Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft .NET Framework 4.5.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.50938 - Microsoft Corporation)
Microsoft Chart Controls for Microsoft .NET Framework 3.5 (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.0.0 - Microsoft Corporation)
Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation)
Microsoft Games for Windows Marketplace (HKLM-x32\...\{67F42018-F647-4D3C-BE62-F8CB4FE2FCD5}) (Version: 3.5.67.0 - Microsoft Corporation)
Microsoft Primary Interoperability Assemblies 2010 (HKLM-x32\...\{FA8E7AF5-C70E-3274-9740-9E697FBD5BB7}) (Version: 10.0.30319 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft WSE 3.0 Runtime (HKLM-x32\...\{E3E71D07-CD27-46CB-8448-16D4FB29AA13}) (Version: 3.0.5305.0 - Microsoft Corp.)
Microsoft XNA Framework Redistributable 3.1 (HKLM-x32\...\{19BFDA5D-1FE2-4F25-97F9-1A79DD04EE20}) (Version: 3.1.10527.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 42.0 (x86 de) (HKLM-x32\...\Mozilla Firefox 42.0 (x86 de)) (Version: 42.0 - Mozilla)
Never Alone (Kisima Ingitchuna) (HKLM-x32\...\Steam App 295790) (Version:  - Upper One Games)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.2 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 361.91 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.10.2.40 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.10.2.40 - NVIDIA Corporation)
NVIDIA Grafiktreiber 361.91 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 361.91 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.4 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.4 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenAL (HKLM-x32\...\OpenAL) (Version:  - )
OpenOffice 4.1.1 (HKLM-x32\...\{ACD0FFF9-6B35-43C1-82DB-9FF6990E8602}) (Version: 4.11.9775 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.7.2799 - Electronic Arts, Inc.)
PBO Manager v.1.4 beta (HKLM\...\{127B5371-1802-4EDD-A25A-A43BF761D383}) (Version: 1.4.0 -  )
Plague Inc: Evolved (HKLM\...\Steam App 246620) (Version:  - Ndemic Creations)
POSTAL 2 (HKLM-x32\...\Steam App 223470) (Version:  - Running With Scissors)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.991 - Even Balance, Inc.)
puush (HKLM-x32\...\{C3592426-531E-4110-911D-BFECE2CE284B}) (Version: 1.0.0.0 - Dean Herbert)
Realtek Ethernet Controller Driver (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.67.1226.2012 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6767 - Realtek Semiconductor Corp.)
Rocket League (HKLM-x32\...\Steam App 252950) (Version:  - Psyonix)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.2 - Rockstar Games)
SHIELD Streaming (Version: 5.1.0270 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.10.2.40 - NVIDIA Corporation) Hidden
Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 8.0.0.9103 - Microsoft Corporation)
Skype™ 7.18 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.18.111 - Skype Technologies S.A.)
Source SDK Base 2006 (HKLM-x32\...\Steam App 215) (Version:  - Valve)
Source SDK Base 2007 (HKLM-x32\...\Steam App 218) (Version:  - Valve)
SPEEDLINK TORID (HKLM-x32\...\SPEEDLINK TORID) (Version:  - )
Startfenster (HKLM-x32\...\Startfenster) (Version:  - Startfenster)
Steam (HKLM-x32\...\Steam) (Version:  - Valve Corporation)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
TeamSpeak 3 Client (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\TeamSpeak 3 Client) (Version: 3.0.18.1 - TeamSpeak Systems GmbH)
TeamViewer 9 (HKLM-x32\...\TeamViewer 9) (Version: 9.0.29947 - TeamViewer)
Tom Clancy's Rainbow Six Siege (HKLM-x32\...\Steam App 359550) (Version:  - Ubisoft Montreal)
TortoiseSVN 1.8.8.25755 (64 bit) (HKLM\...\{7DAA9D5A-ED99-40D2-AA9D-386722FE105A}) (Version: 1.8.25755 - TortoiseSVN)
TP-LINK TL-WN725N_TL-WN723N Treiber (HKLM-x32\...\{3C3F9CEB-2C5A-4A47-8EAA-DA76037546BA}) (Version: 1.3.1 - TP-LINK)
TP-LINK-Konfigurationstool (HKLM-x32\...\{319D91C6-3D44-436C-9F79-36C0D22372DC}) (Version: 1.3.1 - TP-LINK)
Turbo Dismount (HKLM\...\Steam App 263760) (Version:  - Secret Exit Ltd.)
Unity Web Player (HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\UnityWebPlayer) (Version: 5.3.0f4 - Unity Technologies ApS)
Unreal Development Kit: 2012-10 (HKLM\...\UDK-b2d9df31-df8c-4834-be3e-542d12ff8125) (Version:  - Epic Games, Inc.)
Unreal Development Kit: 2012-10 (HKLM\...\UDK-eaeb798e-fc03-40f3-8538-57e5172bb46b) (Version:  - Epic Games, Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 12.0 - Ubisoft)
VLC media player (HKLM-x32\...\VLC media player) (Version: 2.1.5 - VideoLAN)
War Thunder (HKLM-x32\...\Steam App 236390) (Version:  - Gaijin Entertainment)
Winamp (HKLM-x32\...\Winamp) (Version: 5.666  - Nullsoft, Inc)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WindowsMangerProtect20.0.0.502 (HKLM-x32\...\WindowsMangerProtect) (Version: 20.0.0.502 - WindowsProtect LIMITED) <==== ACHTUNG
WinRAR 5.01 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.01.0 - win.rar GmbH)

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

Task: {08F2FECE-AC9F-446C-8D53-EB5FF261B913} - System32\Tasks\GyazoUpdateTaskMachine => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-02-17] ()
Task: {2EDE25E0-593D-40F3-B0BB-031B185D6C16} - System32\Tasks\GyazoUpdateTaskMachineDaily => C:\Program Files (x86)\Gyazo\GyazoUpdate.exe [2016-02-17] ()
Task: {30961954-2E32-4437-A94D-B5F7B7D7E661} - System32\Tasks\SidebarExecute => C:\Program Files (x86)\Windows Sidebar\sidebar.exe [2010-11-21] (Microsoft Corporation)
Task: {47F5E480-E3F1-4CBA-97E0-A03B6AE1E31F} - System32\Tasks\{8BDB838C-91E9-4029-8899-0D2B7CD3E48F} => pcalua.exe -a C:\Users\test\Downloads\HSB4b-full.exe -d C:\Users\test\Downloads
Task: {4A899C26-D785-4E7E-88E4-FEC29AB18CC0} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-02-10] (Adobe Systems Incorporated)
Task: {68D8D083-02F9-4A34-981D-F8341F5C5A72} - System32\Tasks\{D7B9746A-E892-4F5A-8E76-A7CD094C4CD7} => Chrome.exe hxxp://ui.skype.com/ui/0/7.3.0.101/de/abandoninstall?page=tsProgressBar
Task: {7506D4C5-4A1D-4339-B6FF-7E8B00A9BA4E} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {80D81F71-59A1-4F7A-A243-F71984C9EC7F} - System32\Tasks\AdobeAAMUpdater-1.0-test-PC-test => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [2015-02-03] (Adobe Systems Incorporated)
Task: {8CD48D91-5C36-4C6D-85E1-23D9A2895E95} - System32\Tasks\{10391957-A673-4800-B15B-A82ED53D59BD} => pcalua.exe -a E:\SETUP.EXE -d E:\
Task: {C9420A85-4F1F-4630-BF7D-409F56DA0D6B} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-30] (Google Inc.)
Task: {E8033DE3-F4FA-427F-8B80-B63F16342A30} - System32\Tasks\{0B40A337-3693-48CB-A5C4-5EB663AD7D25} => pcalua.exe -a "C:\Program Files (x86)\GTA IV Vehicle Mod Installer\v1.2\gtaivvmi.exe" -d "C:\Program Files (x86)\GTA IV Vehicle Mod Installer\v1.2"
Task: {F08833DA-D150-4D85-A9E6-BC4D381E741A} - System32\Tasks\{FEF43B90-CB5A-469F-8D8C-35E9C8DD19F9} => pcalua.exe -a "C:\Users\test\AppData\Local\TeamSpeak 3 Client\package_inst.exe" -d C:\Users\test\Downloads -c "C:\Users\test\Downloads\ts3_DayZ_v1.0.ts3_style"

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Verknüpfungen =============================

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============

2014-05-27 15:26 - 2016-02-09 06:41 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2016-02-29 14:49 - 2016-02-17 07:56 - 01416064 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\MessageBus.dll
2016-02-29 14:49 - 2016-02-17 07:56 - 03613056 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\Poco.dll
2016-02-17 22:04 - 2016-02-17 07:56 - 00299392 _____ () C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamBase.dll
2015-04-06 18:55 - 2015-12-26 10:26 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe
2015-02-11 14:13 - 2015-02-11 14:13 - 00997536 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll
2014-08-10 16:10 - 2014-08-10 16:10 - 00076032 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub.dll
2014-08-10 16:10 - 2014-08-10 16:10 - 00088832 _____ () C:\Program Files\TortoiseSVN\bin\libsasl.dll
2012-06-28 20:21 - 2012-06-28 20:21 - 00019456 _____ () C:\Program Files\PBO Manager v.1.4 beta\PboShellExt.dll
2015-02-11 14:12 - 2015-02-11 14:12 - 05739680 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
2016-02-17 22:04 - 2016-02-17 08:02 - 00020352 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-02-15 13:58 - 2015-02-15 13:58 - 36730032 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libcef.dll
2014-08-10 15:40 - 2014-08-10 15:40 - 00065792 _____ () C:\Program Files\TortoiseSVN\bin\TortoiseStub32.dll
2014-08-10 15:40 - 2014-08-10 15:40 - 00071936 _____ () C:\Program Files\TortoiseSVN\bin\libsasl32.dll
2016-02-19 21:47 - 2016-02-18 05:14 - 01630360 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libglesv2.dll
2016-02-19 21:47 - 2016-02-18 05:14 - 00085656 _____ () C:\Program Files (x86)\Google\Chrome\Application\48.0.2564.116\libegl.dll
2014-06-01 18:12 - 2014-06-01 18:12 - 00172032 _____ () C:\Windows\assembly\NativeImages_v2.0.50727_32\IsdiInterop\00a0b4a9df6e4abf30ae2af3624a77ce\IsdiInterop.ni.dll
2014-05-27 15:19 - 2012-02-01 15:25 - 00059904 _____ () C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IsdiInterop.dll
2014-05-27 15:21 - 2012-07-19 20:55 - 01198912 ____R () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\ACE.dll
2015-02-15 13:58 - 2015-02-15 13:58 - 00746160 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libglesv2.dll
2015-02-15 13:58 - 2015-02-15 13:58 - 00136368 _____ () C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CEF\libegl.dll
2016-03-02 19:59 - 2015-12-15 06:54 - 00782336 _____ () K:\Steam\SDL2.dll
2016-03-02 19:59 - 2015-07-03 17:12 - 04962816 _____ () K:\Steam\v8.dll
2016-03-02 19:59 - 2015-07-03 17:12 - 01556992 _____ () K:\Steam\icui18n.dll
2016-03-02 19:59 - 2015-07-03 17:12 - 01187840 _____ () K:\Steam\icuuc.dll
2016-03-02 19:59 - 2016-02-04 22:02 - 02546768 _____ () K:\Steam\video.dll
2016-03-02 19:59 - 2015-09-24 01:33 - 02549248 _____ () K:\Steam\libavcodec-56.dll
2016-03-02 19:59 - 2015-09-24 01:33 - 00442880 _____ () K:\Steam\libavutil-54.dll
2016-03-02 19:59 - 2015-09-24 01:33 - 00491008 _____ () K:\Steam\libavformat-56.dll
2016-03-02 19:59 - 2015-09-24 01:33 - 00332800 _____ () K:\Steam\libavresample-2.dll
2016-03-02 19:59 - 2015-09-24 01:33 - 00485888 _____ () K:\Steam\libswscale-3.dll
2016-03-02 19:59 - 2016-02-04 22:01 - 00802896 _____ () K:\Steam\bin\chromehtml.DLL
2016-03-02 19:59 - 2015-12-30 02:51 - 00208896 _____ () K:\Steam\bin\openvr_api.dll
2016-03-02 19:59 - 2016-02-04 22:01 - 00139344 _____ () K:\Steam\bin\audio.dll
2016-03-02 19:59 - 2014-11-11 19:48 - 00071680 _____ () K:\Steam\bin\mssmp3.asi
2016-03-02 19:59 - 2014-11-11 19:48 - 00153088 _____ () K:\Steam\bin\mssvoice.asi
2016-03-02 19:59 - 2016-01-06 02:52 - 48387872 _____ () K:\Steam\bin\libcef.dll
2016-03-02 19:59 - 2015-09-25 00:56 - 00119208 _____ () K:\Steam\winh264.dll

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)

AlternateDataStreams: C:\Users\test\AppData\Local\8YRhs3iQ30mJZ:RoGT2usJF0MypjsXLSbtAf8tsn1M [2158]
AlternateDataStreams: C:\Users\test\AppData\Local\Temp:Jj5lgFytAbVSLv6PNnb [1922]
AlternateDataStreams: C:\Users\test\AppData\Local\Temp:ulx5dh4iXRoxLHWLCKnvwC0t [1884]

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Verknüpfungen (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)


==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)


==================== Hosts Inhalt: ==========================

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)

2009-07-14 03:34 - 2016-03-05 10:27 - 00002338 ____A C:\Windows\system32\Drivers\etc\hosts

127.0.0.1 activation.cloud.techsmith.com
127.0.0.1 oscount.techsmith.com
127.0.0.1      down.baidu2016.com
127.0.0.1      123.sogou.com
127.0.0.1      www.czzsyzgm.com
127.0.0.1      www.czzsyzxl.com

==================== Andere Bereiche ============================

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)

HKU\S-1-5-21-809088717-832388673-2450759211-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\test\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.178.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)
Windows Firewall ist aktiviert.

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)


==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe
FirewallRules: [{695D3911-EDEB-4C46-9634-8B5DCB466B12}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{A146946D-4D54-4D11-A81E-2E2799B8DCEF}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [TCP Query User{B1021062-B547-40D0-9A62-38F653323914}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Block) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [UDP Query User{7783A60B-AA02-41F8-8233-F4274E66110F}C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe] => (Block) C:\program files (x86)\steam\steamapps\common\arma 2 operation arrowhead\expansion\beta\arma2oa.exe
FirewallRules: [{DBAD7BBD-97AD-466F-A6E1-64B86686BA56}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{4DAF6791-52F7-41B9-8488-A35D0B8BB977}] => (Allow) LPort=2869
FirewallRules: [{3F9668DE-85FA-4474-8E90-FE7B14C2B0EC}] => (Allow) LPort=1900
FirewallRules: [{EFD5986D-AE48-4A8C-BF7C-25AD0E567E65}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [TCP Query User{2C2CA005-2D16-43AC-9A15-6906C002AC74}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe
FirewallRules: [UDP Query User{76C0FB7B-9FCA-4774-B9AF-D936EFA6C987}C:\games\world_of_warplanes\wowplauncher.exe] => (Allow) C:\games\world_of_warplanes\wowplauncher.exe
FirewallRules: [TCP Query User{B6AB152C-18D3-470F-954D-20530AD0EC61}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\test\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{4435343B-EFE1-4EA1-A22D-22B9F62EB129}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\test\appdata\local\akamai\netsession_win.exe
FirewallRules: [{B2360F16-D143-413F-A995-7D26CC9FC69B}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{4244F561-932D-45D1-8F7F-A35BF76333DA}] => (Allow) C:\ProgramData\NexonEU\NGM\NGM.exe
FirewallRules: [{C348F4F7-CCF7-4C33-9A50-C9B1888BDAAC}] => (Allow) LPort=80
FirewallRules: [{E34E7409-608C-45B9-88DA-76AC40EFD7ED}] => (Allow) LPort=443
FirewallRules: [{18618FA6-7CE0-451D-87D5-334F8F000E07}] => (Allow) LPort=20010
FirewallRules: [{904528E2-E247-438F-9240-7784171F5D7E}] => (Allow) LPort=3478
FirewallRules: [{EBAD38C0-4AB5-4B44-BDE3-BEC3D372E16B}] => (Allow) LPort=7850
FirewallRules: [{B27067C3-9035-4F09-9898-F4F6AD574FEF}] => (Allow) LPort=7852
FirewallRules: [{28A31963-4D65-4414-A409-8F67BBCAF8CE}] => (Allow) LPort=7853
FirewallRules: [{B8F8229A-1F87-420A-896F-DCFE8AC66DC3}] => (Allow) LPort=27022
FirewallRules: [{3B19357B-89C3-47FC-AFA4-BFA2D6C68CC9}] => (Allow) LPort=6881
FirewallRules: [{ACA44267-2340-4C98-9E25-990607970904}] => (Allow) LPort=33333
FirewallRules: [{B957009B-AF19-49AC-8692-D5AF01A0E5C8}] => (Allow) LPort=20443
FirewallRules: [{5BE2AC7E-8A6C-49BA-8367-ABFE42730047}] => (Allow) LPort=8090
FirewallRules: [{0DE33E54-84AA-4441-AD27-668536C3FFB1}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [{782D1C10-DE04-4F95-8F8A-A392949CA108}] => (Allow) C:\Program Files (x86)\WarThunder\launcher.exe
FirewallRules: [TCP Query User{7A0129F4-08D6-4E7D-BA8F-948846B0896B}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [UDP Query User{0355AA8F-05CA-4474-8326-F1E151A98A5C}C:\programdata\electronic arts\need for speed world\data\nfsw.exe] => (Allow) C:\programdata\electronic arts\need for speed world\data\nfsw.exe
FirewallRules: [TCP Query User{CE6AF90D-F6C8-49E6-82A2-5F536CFCCB49}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [UDP Query User{8388A23B-07AD-4503-81BA-6A39A996C119}C:\program files (x86)\warthunder\aces.exe] => (Allow) C:\program files (x86)\warthunder\aces.exe
FirewallRules: [TCP Query User{D840D84C-BA6E-49F9-8EAD-53D8141A1F91}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\test\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{D251B362-0F98-48E7-8343-18AACB06CE52}C:\users\test\appdata\local\akamai\netsession_win.exe] => (Block) C:\users\test\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{94CCDDA7-C34B-45E4-A102-3268AC9F41A3}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [UDP Query User{94FA350B-8B60-4A2E-9215-EAC337BEDC1F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe
FirewallRules: [{519477C3-8FCB-4D3A-833A-7CBD35EE6049}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [{419AD47D-7C4A-4C1E-995C-7F1ECB6C2CE3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe
FirewallRules: [TCP Query User{39C0478F-5F0B-4464-9FF4-9AD15879FD53}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [UDP Query User{B6D79009-B8AF-42CC-9439-7A0332E7629E}C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\thehunter\game\thehunter.exe
FirewallRules: [{94F91BB7-9FD5-4270-8ECE-7FF220F138F0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [{B9FD7034-F284-4651-8875-EB1E50F30812}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ.exe
FirewallRules: [TCP Query User{1C5FACEF-F205-4DC4-A3FD-4CDC93A4CA98}C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{94642D68-D20B-4B1C-B4E0-0EC1D7512D92}C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv\gtaiv\gtaiv.exe
FirewallRules: [{010C22CE-9FB9-4CF4-9BB5-DA6FAECA0A31}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{DCDA85A1-95DF-4A7C-BC7F-5BE2B7C9ADE1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{D3A03F56-C6B8-4418-AC80-4EC04E5B0777}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C531EB9B-7418-499A-8D46-AABB8F3C0B64}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{22A27629-72E3-40B3-AC3D-1B4095DE6B69}C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe
FirewallRules: [UDP Query User{679DAA39-7B1B-458F-8E6F-4D24047C2D26}C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe] => (Allow) C:\program files (x86)\gta iv sanandreas\gtaiv\gtaiv.exe
FirewallRules: [TCP Query User{EF3AA14E-45DD-4E13-84D9-1C70ED246C54}C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe] => (Allow) C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe
FirewallRules: [UDP Query User{057863BD-23DC-41F3-B025-F9139AFC4E8F}C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe] => (Allow) C:\users\test\appdata\local\temp\rar$exa0.019\spintires.exe
FirewallRules: [TCP Query User{D1443E68-ECB9-4747-94F5-DC1B704D946F}C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe] => (Block) C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe
FirewallRules: [UDP Query User{589314FB-8347-448A-9264-AB51762B4979}C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe] => (Block) C:\users\test\appdata\local\temp\rar$exa0.864\spintires.exe
FirewallRules: [{A32A816D-E93C-4B5B-B7CB-F29A922CE7CE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe
FirewallRules: [{2D09CC8A-DB3F-4DF9-893A-D244F579C909}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\theHunter\launcher\launcher.exe
FirewallRules: [TCP Query User{587AA4E9-0D3B-4B20-B2FE-05925075F694}C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe
FirewallRules: [UDP Query User{2289C16B-5938-4D7B-88B8-0B87844998FE}C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe
FirewallRules: [{C917C010-E053-4C15-ACCA-4BCE7C88AFBE}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{C773B014-954F-46FD-93D0-BA0578B83C2F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warface\live\nw.exe
FirewallRules: [{07B3DC89-DB6A-4BF2-8209-CC907E4469FB}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{5047515D-B209-4618-9AF2-87FAA313F918}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer.exe
FirewallRules: [{CBF63EE0-1DF3-4340-A319-CB6B6AE64E33}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [{5119F37C-3E34-49B5-B7F5-A1FD142DA8FC}] => (Allow) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
FirewallRules: [TCP Query User{95F18B6D-D745-4C99-8398-D0C75A864F62}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [UDP Query User{22E72116-B803-4855-ABDA-91A4C122931F}C:\program files\java\jre8\bin\javaw.exe] => (Allow) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{27A94EE4-79A3-4E4F-9697-D4D933F28FA3}] => (Block) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{1C468C03-1480-4856-8D2E-49CF1BFF0390}] => (Block) C:\program files\java\jre8\bin\javaw.exe
FirewallRules: [{70F5E229-F19D-4C62-AA4B-F139AE6FC6D7}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{900DB2D3-025E-4C85-9758-D4774B1383C2}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{14BDCB6B-85C8-416A-88A2-9E6C09C1E723}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{7C48745E-6890-4BB5-B15F-35B9A3230E1E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base\hl2.exe
FirewallRules: [{F68EC52B-3B00-4B59-923F-5A67F1A21504}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Zombie_Driver_HD\bin\ZombieDriverHD.exe
FirewallRules: [{D89E13EA-59DE-4730-9748-A82631110B45}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Zombie_Driver_HD\bin\ZombieDriverHD.exe
FirewallRules: [TCP Query User{92206178-D212-4019-A23D-3D1218F54F68}C:\program files\java\jre1.8.0_20\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_20\bin\javaw.exe
FirewallRules: [UDP Query User{76AA402F-DCFA-40F3-AA90-B6C686EB83B4}C:\program files\java\jre1.8.0_20\bin\javaw.exe] => (Block) C:\program files\java\jre1.8.0_20\bin\javaw.exe
FirewallRules: [{41838D09-EAFA-4817-8C93-ED9AF24A95B1}] => (Allow) C:\Program Files (x86)\GameforgeLive\gfl_client.exe
FirewallRules: [TCP Query User{286EB823-FDF4-4692-A83D-4BDAE585784D}C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [UDP Query User{FACB5F39-191F-458F-A07F-0ED0E8AAB403}C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{DC4C31B1-E160-4B28-9BC1-779028D45492}] => (Block) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{2ED05937-D237-40A3-80A2-F9031824A8D7}] => (Block) C:\program files (x86)\steam\steamapps\common\life is feudal your own\server\cm_yo_server.exe
FirewallRules: [{B73B83F9-00C7-4E42-A75C-81633C673515}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\S.K.I.L.L\Binaries\Win32\sf2.exe
FirewallRules: [{7050735F-3F30-4FEC-AA32-E6C2A617ED7B}] => (Allow) C:\Program Files (x86)\GameforgeLive\Games\DEU_deu\S.K.I.L.L\Binaries\Win32\sf2.exe
FirewallRules: [{0D85148A-0E19-41E8-BF5B-0370A1E6A223}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{B73FDCC0-D128-4264-94D1-EFB19A492ACD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Source SDK Base 2007\hl2.exe
FirewallRules: [{B2EB7DEE-9C7A-4AE3-B3CA-12D02A50DD81}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{EA40CBDE-4D57-4916-8D4A-6434515DA263}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{EFFB0444-40D2-4BA2-BFFD-80C0CE56AFD7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{14D76610-B467-4F12-9F9F-90AC47728206}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{1FCA8C06-D26E-4A33-8F80-254A3D2A9297}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{9DCC6AD1-AE64-4929-B831-29F22A30B301}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{3D6D4416-50E9-4EE7-8E17-3CC924DFBEFA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{CE925793-8D8D-40F8-AE27-5F7E0BD6E662}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{4305D72E-3651-4F3B-9EB1-4F1320411233}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{33E69FFA-1E93-4D8F-9025-6E07302CAE62}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{72D994A7-C455-4E3F-A11A-3959F5EAB975}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [UDP Query User{31547FDB-F7E5-4200-A9D4-5F56DAFBF5E3}C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{DAC09195-A9CC-4633-9391-0014CC1450EB}] => (Block) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{CF6C490D-4C7F-44DA-A8D4-8CE2774659C3}] => (Block) C:\program files (x86)\steam\steamapps\common\starbound\win32\starbound_server.exe
FirewallRules: [{1688195D-A529-4F2B-AE60-EC4AA64A490C}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{B2557DD8-0150-46B2-BA89-E6A2500511F4}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{403F4D9A-71C4-4104-B8A2-82CC02F9B7C4}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{A5351725-AB79-4943-BF3F-371E869797C2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{DF5CDDE5-203D-4D70-9AEA-6C5909DBA95E}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{0C6DBCFE-7341-4406-AFDD-FFFF1C9DD4CC}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\MxUp.exe
FirewallRules: [{5E1E228C-F8E9-4315-A2D4-298FEC0606F2}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{73F3CEB2-D014-4D45-9208-25E0BAF6D9FE}] => (Allow) C:\Program Files (x86)\Maxthon\Bin\Maxthon.exe
FirewallRules: [{CFCF8603-41AB-499A-835F-DB54C42E0485}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{66AB3240-0BD0-4054-8F8D-BA4810D2AEEC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe
FirewallRules: [{557D5C2B-F783-499C-9DFA-7C372735F013}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TacticalIntervention\bin\tacint.exe
FirewallRules: [{BE96512C-D0C0-4AB6-968A-7F4B85F79BE3}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TacticalIntervention\bin\tacint.exe
FirewallRules: [{64317F2D-D7AE-4CB7-9093-E2FF11D957E4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [{1EE7A09A-CEE1-4DAA-8AEC-7A38542E766D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3.exe
FirewallRules: [TCP Query User{F6E6F2C6-5B61-41F5-9048-0A83EBC21D2D}C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe] => (Allow) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe
FirewallRules: [UDP Query User{9975B013-72AB-4FAA-B175-190253FD09F7}C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe] => (Allow) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe
FirewallRules: [{81C068F7-8F85-4EB8-9F10-C4F7C59166A0}] => (Block) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe
FirewallRules: [{7655A79D-26E4-45A6-9D70-CAAC77B89CD2}] => (Block) C:\users\test\appdata\local\apps\2.0\bh0l26mj.l7t\4ro5ogvp.mkr\epoc..tion_0000000000000000_0000.0000_995cb3e97261413b\epoch launcher.exe
FirewallRules: [{D805A79D-5959-40BD-94F1-8718C2531A27}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{8814A175-AD93-4E73-9619-1CA75F0F535B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe
FirewallRules: [{F99AB413-6C3B-48C2-BC8D-EB7A7D68B3E0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{DE4A34E8-017F-4984-B83D-6D0FC28271AD}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe
FirewallRules: [{D6AADE89-DCA6-458A-9895-65ACE9391015}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{6EFB359F-0D1D-43BC-9CCD-E9450A9C4028}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe
FirewallRules: [{B6B5C86D-4402-41DD-9ACB-C9AE45485900}] => (Allow) C:\Users\test\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [{9BAB0C8E-B14D-47C2-89E4-9F17E7A270FE}] => (Allow) C:\Users\test\AppData\Roaming\uTorrent\uTorrent.exe
FirewallRules: [TCP Query User{4F931EF8-B5D0-4D5B-8FB8-DFA212ED5C1E}C:\program files (x86)\lex mortis\bin32\lexmortis.exe] => (Allow) C:\program files (x86)\lex mortis\bin32\lexmortis.exe
FirewallRules: [UDP Query User{FA42190D-1156-46B7-96C5-6F7649AE9967}C:\program files (x86)\lex mortis\bin32\lexmortis.exe] => (Allow) C:\program files (x86)\lex mortis\bin32\lexmortis.exe
FirewallRules: [{3B4C68F5-CED3-4E63-A95A-8A0EF6A2113A}] => (Block) C:\program files (x86)\lex mortis\bin32\lexmortis.exe
FirewallRules: [{1A84B4FE-BAA9-4074-8717-0377B0CB3029}] => (Block) C:\program files (x86)\lex mortis\bin32\lexmortis.exe
FirewallRules: [TCP Query User{7CCFF8D2-0AAF-45E4-8040-7AF76E7288EC}C:\users\test\appdata\roaming\target folder\drop name.exe] => (Allow) C:\users\test\appdata\roaming\target folder\drop name.exe
FirewallRules: [UDP Query User{F0B97BA4-E195-4DC4-A6AF-1FCE9E5A9EB3}C:\users\test\appdata\roaming\target folder\drop name.exe] => (Allow) C:\users\test\appdata\roaming\target folder\drop name.exe
FirewallRules: [{E58264B0-7053-454C-91EB-E2FDC34670BD}] => (Block) C:\users\test\appdata\roaming\target folder\drop name.exe
FirewallRules: [{EC396983-1D0D-4EEE-B5CC-51D96930BAAB}] => (Block) C:\users\test\appdata\roaming\target folder\drop name.exe
FirewallRules: [TCP Query User{5E73DA8F-9401-42B2-BC8B-76A64ABBF452}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [UDP Query User{CFABDAC6-BD48-4184-85CD-939471DFA3C6}C:\games\counter-strike\hl.exe] => (Allow) C:\games\counter-strike\hl.exe
FirewallRules: [{04EBE04F-E4A4-411C-A216-677863C6BA20}] => (Block) C:\games\counter-strike\hl.exe
FirewallRules: [{09CA7EC3-82AC-462D-BA4A-E987F6D66D18}] => (Block) C:\games\counter-strike\hl.exe
FirewallRules: [{F36AE5D5-F9EA-46F4-86DB-DAAFF302CA22}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [{562AE7C4-9F96-4360-BC59-8AFC97BB8637}] => (Allow) C:\Program Files (x86)\Winamp\winamp.exe
FirewallRules: [TCP Query User{F71AF288-44A6-44FF-BE62-488F853A5867}C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe] => (Block) C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [UDP Query User{AFBFB99C-ABE8-4E35-8E0F-25973BF666DC}C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe] => (Block) C:\program files (x86)\activision\call of duty 4 - modern warfare\iw3mp.exe
FirewallRules: [{6571AFFA-05A8-4012-9549-A279ED5211C8}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe
FirewallRules: [{E0E08838-B85B-4556-B7C5-4F6FE44CD774}] => (Allow) C:\Program Files (x86)\Activision\Call of Duty 4 - Modern Warfare\iw3mp.exe
FirewallRules: [{AE608D28-F688-4085-8060-3EEEA6CBD585}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Squishy\bin\squishy.exe
FirewallRules: [{6319706C-6ECC-41F8-8446-D4AE396D3778}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Squishy\bin\squishy.exe
FirewallRules: [{42A744B6-DDEE-4E9B-9A81-623EC930D143}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [{1680FB6A-3020-4323-9F4B-DAD87A5195B2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe
FirewallRules: [TCP Query User{7C038DB0-C362-4952-8649-4BBA8FCEAF31}C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe] => (Allow) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe
FirewallRules: [UDP Query User{C8863B92-EA8E-47D5-BB86-AAFDDD74FC78}C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe] => (Allow) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe
FirewallRules: [{71ADD3AC-79FB-4789-9490-4C22108EFD70}] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe
FirewallRules: [{1C06506C-268A-446B-A150-17EC71AE64D7}] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14_x86.exe
FirewallRules: [TCP Query User{5F6D1AFB-AAB4-49DE-BF0A-AD3ECFF9FB9E}C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe] => (Allow) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe
FirewallRules: [UDP Query User{F3570179-C202-431E-9D08-BF0694FCB02C}C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe] => (Allow) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe
FirewallRules: [{D1D2C884-A636-49D9-8F07-85A169B18F20}] => (Block) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe
FirewallRules: [{A25ACC99-94F2-48F3-81BD-CC0F0EECBEBD}] => (Block) C:\program files (x86)\ea games\need for speed most wanted\nfs13.exe
FirewallRules: [TCP Query User{2A70E4A7-FF53-4D05-9FC3-625C4B991CE7}C:\program files (x86)\origin games\need for speed rivals\nfs14.exe] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14.exe
FirewallRules: [UDP Query User{4E16C786-B37D-488E-A599-4B25DD807655}C:\program files (x86)\origin games\need for speed rivals\nfs14.exe] => (Block) C:\program files (x86)\origin games\need for speed rivals\nfs14.exe
FirewallRules: [TCP Query User{C8654B5F-3295-4AC4-AB3C-81F9A9E73C43}C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe
FirewallRules: [UDP Query User{FD1E0844-A5B9-4320-A5FE-303272855EDE}C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe
FirewallRules: [{CA277EBE-B157-4ACE-9278-C30DB8EEA565}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe
FirewallRules: [{135B6DFD-5695-4A90-88F2-7C62869C43D1}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6sp.exe
FirewallRules: [TCP Query User{DA7D8957-B55C-4C44-BDEE-95B356E2188B}C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe
FirewallRules: [UDP Query User{773064BE-9505-416A-9312-06800D948FB3}C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe] => (Allow) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe
FirewallRules: [{1F05855F-125F-4B50-A3A2-69DB97DB1C64}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe
FirewallRules: [{360F1D26-1122-4619-9A47-C0438B29CBD8}] => (Block) C:\program files (x86)\activision\call of duty black ops 2\t6zm.exe
FirewallRules: [TCP Query User{E94B85C0-4756-4BC8-ABB9-0DE077C903FE}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe
FirewallRules: [UDP Query User{FF4D681C-B564-40E4-87B8-418CC5850287}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe
FirewallRules: [{8AD6B78A-4E8C-4DDA-BCE9-518B4381095B}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe
FirewallRules: [{9F7DEB42-FE95-41A8-AACF-AB1005E2E3BC}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6sp.exe
FirewallRules: [TCP Query User{C1646F47-879F-41EE-A227-398D6BE1A2D2}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe
FirewallRules: [UDP Query User{C096216D-29D4-4C7F-AF54-D3CFB4AED2FA}C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe
FirewallRules: [{08D96FAC-7969-45C1-B678-4ED45A11FE73}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe
FirewallRules: [{CE39905A-95FA-4142-89C2-32E4754ED2BE}] => (Block) C:\program files (x86)\steam\steamapps\common\call of duty black ops 2\t6mp.exe
FirewallRules: [{11362248-90FE-462D-89AF-6DF1CF9CB64C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{F1692A2D-BF85-4792-883F-B484B63C922F}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [TCP Query User{9CE11FAC-1406-4B60-B29A-70C01AA8751E}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [UDP Query User{016A1442-84A8-424A-86F9-B3CA6CF6B2C9}C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{F94D1B30-8591-426E-B38B-010FB5D6ECA5}] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [{640CFAEB-811E-4A99-812C-4BF292122CF7}] => (Block) C:\program files (x86)\java\jre1.8.0_40\bin\javaw.exe
FirewallRules: [TCP Query User{12C206E5-FA63-46AF-89A9-7B4198BFC8BC}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{33E24441-C23F-444B-B55C-BA16D0D27771}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [TCP Query User{73AC774E-31DC-4800-89F3-F13F4936DD8E}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [UDP Query User{CBDACC70-BDBE-4EA7-9618-CA021584247D}C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [{B041AA26-51B2-4924-9B98-620FF6296751}] => (Block) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [{00C176F8-2B11-444C-ACE2-B850347CBE02}] => (Block) C:\program files (x86)\steam\steamapps\common\terraria\terrariaserver.exe
FirewallRules: [TCP Query User{B3EEEF12-C728-47C1-8C0C-38DCEFAC3B48}C:\server\srcds.exe] => (Allow) C:\server\srcds.exe
FirewallRules: [UDP Query User{B767B565-189D-493E-BD5F-0E9D89250C87}C:\server\srcds.exe] => (Allow) C:\server\srcds.exe
FirewallRules: [{83608F75-C617-4127-B5BE-1FD143B309D7}] => (Block) C:\server\srcds.exe
FirewallRules: [{D0005207-363C-4CB0-A563-A1F3C504AFDB}] => (Block) C:\server\srcds.exe
FirewallRules: [TCP Query User{54AD8FA4-C5CD-4C9F-9B8D-ED451C409911}C:\program files (x86)\the stanley parable\stanley.exe] => (Allow) C:\program files (x86)\the stanley parable\stanley.exe
FirewallRules: [UDP Query User{7EAE675B-6CCB-4D6B-9610-C5947D1F2189}C:\program files (x86)\the stanley parable\stanley.exe] => (Allow) C:\program files (x86)\the stanley parable\stanley.exe
FirewallRules: [{46AECE65-5920-495A-8EF5-730400FC5012}] => (Block) C:\program files (x86)\the stanley parable\stanley.exe
FirewallRules: [{5A768D07-1BF7-498F-A6CD-DF89808878B1}] => (Block) C:\program files (x86)\the stanley parable\stanley.exe
FirewallRules: [{950F1596-DD55-4671-879E-9C06487388AC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [{E9CA229E-822F-42D3-881A-80DF7AC14BE4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTA5.exe
FirewallRules: [TCP Query User{44A0898C-96C9-4C72-8453-3F213C626501}C:\games\paintball2\paintball2.exe] => (Allow) C:\games\paintball2\paintball2.exe
FirewallRules: [UDP Query User{D919C857-4E09-41DC-848C-B7F567E3D9BC}C:\games\paintball2\paintball2.exe] => (Allow) C:\games\paintball2\paintball2.exe
FirewallRules: [{16BE9F17-DE9E-498F-8926-085437391AA5}] => (Block) C:\games\paintball2\paintball2.exe
FirewallRules: [{953B699B-4AA1-400F-BD81-C1534B823E3B}] => (Block) C:\games\paintball2\paintball2.exe
FirewallRules: [TCP Query User{803E331F-28CC-491A-AE18-BA0F0E238E90}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [UDP Query User{59810101-0269-4055-872C-7B386F022903}C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{964C98A0-7C93-4E69-AE72-66F4E0C6B105}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [{2BF8FD6E-6C99-4660-85EC-85CBCA5F0651}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\aces.exe
FirewallRules: [TCP Query User{D10E42C0-D39A-45B0-BF6C-C54752F2197B}C:\users\test\downloads\ogar-windows-9bec584.exe] => (Allow) C:\users\test\downloads\ogar-windows-9bec584.exe
FirewallRules: [UDP Query User{E760562A-C5B3-4D95-8757-23AC50FDB0FD}C:\users\test\downloads\ogar-windows-9bec584.exe] => (Allow) C:\users\test\downloads\ogar-windows-9bec584.exe
FirewallRules: [{39214554-C8A9-4967-819E-12B219F473CA}] => (Block) C:\users\test\downloads\ogar-windows-9bec584.exe
FirewallRules: [{79FA1763-7C51-4533-B065-465FB0D87F7E}] => (Block) C:\users\test\downloads\ogar-windows-9bec584.exe
FirewallRules: [{7CC0EF3C-F708-4988-8274-A41DD7A95F3D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [{9FB3BC4A-E2A3-46D1-844C-E9AC5D3C5F05}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Dishonored\Binaries\Win32\Dishonored.exe
FirewallRules: [TCP Query User{0BB5A880-3567-4975-9EEC-E05DDF8BD1FF}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [UDP Query User{48500F73-1CC1-452F-8A62-624A661FB4DB}C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [{3247D0DA-7431-4A06-84C7-EA69576A2E61}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [{5E4EE28B-A894-40F6-81DC-471177035DF3}] => (Block) C:\program files (x86)\steam\steamapps\common\war thunder\win64\aces.exe
FirewallRules: [{431FDECD-FF9B-48D6-858D-3D7C9ADBD492}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{9BD98A53-3DFA-481D-981C-90F043007883}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\bin\SDKLauncher.exe
FirewallRules: [{85BDEA30-C904-464C-B87D-79AC2A21F3A7}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{F7DC39BD-D5C9-4065-BC7B-5CEB61A3EE2F}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{61506067-FC5D-4307-BD5D-048DD501390E}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{E03BD74E-391F-47EA-A723-DE438C0215BC}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{DECC4ADC-0915-4CC9-97C9-EE0738D20461}] => (Allow) LPort=8317
FirewallRules: [{0AF83E1C-9AB2-49BD-83FF-F499BCF9379C}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{EA6A3F20-67E8-4949-A3B2-90816F60FF3A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x86\eurotrucks2.exe
FirewallRules: [{37F122B4-11D1-4824-8A6D-76B2CD4632C7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{F1B7DD6E-47AD-4407-A972-806C1B477D91}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Euro Truck Simulator 2\bin\win_x64\eurotrucks2.exe
FirewallRules: [{E6894958-BA90-4C25-A675-E9DC8C5D96BC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{7630E3EE-8B80-4509-B135-6D2C5BA31DB9}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{DC98BE1B-3729-40A0-817B-8D95ADCC8500}C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe] => (Allow) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe
FirewallRules: [UDP Query User{D9DB2C64-D993-452A-93F4-3ADC502F6F63}C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe] => (Allow) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe
FirewallRules: [{D2A1CB6B-B54C-4080-9240-ED3FC4BE6CFC}] => (Block) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe
FirewallRules: [{67130DF9-12B5-496F-B761-F3F3A27B16F3}] => (Block) C:\users\test\desktop\neuer ordner\ogar-windows-bae606f.exe
FirewallRules: [{52B4F510-0BFA-48AE-83D2-9C75719E3191}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{581781B0-2A4E-4966-B6DC-2E5386C13854}] => (Allow) C:\Program Files (x86)\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{04F88A0B-7AD7-415D-B5D9-8680060A2072}] => (Allow) C:\Program Files (x86)\CombatArms\CombatArms_EU\NMService.exe
FirewallRules: [{5830E212-5D57-4A2B-847C-4F587105A092}] => (Allow) C:\Program Files (x86)\CombatArms\CombatArms_EU\NMService.exe
FirewallRules: [TCP Query User{591C2ED8-0A05-4A0A-91D6-15CEBB0EF3CB}C:\games\dying light\dyinglightgame.exe] => (Allow) C:\games\dying light\dyinglightgame.exe
FirewallRules: [UDP Query User{A98E3C76-4230-4CD7-8A6E-392D0C9D495B}C:\games\dying light\dyinglightgame.exe] => (Allow) C:\games\dying light\dyinglightgame.exe
FirewallRules: [{D73CEF7F-0EBE-465C-B596-4A7C32D66B32}] => (Block) C:\games\dying light\dyinglightgame.exe
FirewallRules: [{77CED018-863D-4B77-A8DF-B0560A9214C8}] => (Block) C:\games\dying light\dyinglightgame.exe
FirewallRules: [{0E748FD1-ECF5-4BEF-8CB9-D564C3B32076}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{B8A4971E-BE83-4BF7-9074-4DDC86111807}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{86FFBF48-B83D-4CE2-A2F7-94B1DE9C33C8}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{CB4DF907-D32A-4F37-A977-217ED22AE4B7}] => (Allow) C:\Program Files (x86)\Tunngle\TnglCtrl.exe
FirewallRules: [{76B7C432-7DDE-456B-887A-9444CA57645A}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{FB3283BA-765E-486A-9927-A491849AB2A6}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{D34D8911-9411-42D8-B8DF-3F7734EC72FF}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{C05A3D2A-13D3-457E-AD67-93C3BF7EB5ED}] => (Allow) C:\Program Files (x86)\Tunngle\Tunngle.exe
FirewallRules: [{FCB29C6C-EA35-4D02-8B4D-2F14BD74056F}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\NeverAlone\Never_Alone.exe
FirewallRules: [{88633B51-7390-4FD8-9070-6DFC1E47079B}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\NeverAlone\Never_Alone.exe
FirewallRules: [{21A4C154-7C64-4B58-A49F-2390665FCB7E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\War Thunder\launcher.exe
FirewallRules: [{36F70973-676B-465C-AB23-779C6D5BD51A}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\War Thunder\launcher.exe
FirewallRules: [{B885DAD9-5C54-4FCD-8457-E24E2021CD0D}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{27A92616-4F2D-4016-AE32-2266ABA2255E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{B68DCCAA-0DBF-42A1-8E00-E9538DA385DD}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E63E9F15-BDCE-4453-B370-F3CD28B7EB06}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{E2E3C7A4-F21E-4CA9-9AA9-D859DA409534}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{3A6F2C8D-DCD2-4F8F-ADD4-AE73B376CC0C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{88D55BBF-D8DA-4AD2-A4FE-6B0BC7F3CB69}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{A1182067-3C1D-4D31-8E28-884C1EA6C5DB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{15437F99-C1C3-4843-9A37-201F81034D35}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{73FD70EF-647E-4EAB-A9D3-CB428F9137C4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{07B4032F-E3EC-4851-A222-2BDF0BAAAF59}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B53B9135-D027-479C-A36A-E8D405FD4119}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{396A92DB-1A6C-4906-BFE2-02E021A2D695}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{3BC256D2-DC7C-4A94-A2AB-E3140BB12792}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{3B7A6FEA-2E57-4E11-A595-54F8D394FCDE}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A07D85D9-C61F-4F66-A506-3311C05A684C}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{20CC6732-F3E4-4D69-AB97-F6FD68A6FF99}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{2EAB7CCE-B356-42D0-94C6-596AEA7998D0}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{D2C860F7-E9BB-4FC8-BCA7-E109F429FFAA}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TurboDismount\TurboDismount.exe
FirewallRules: [{C09A498D-DA56-45BE-8750-C39D0CE3F55E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\TurboDismount\TurboDismount.exe
FirewallRules: [TCP Query User{32812463-6892-4B77-9CA2-E78CBE74BBAD}K:\steam\steam.exe] => (Block) K:\steam\steam.exe
FirewallRules: [UDP Query User{CCF357A8-0E8B-4B4B-93F4-69760CBBC6F1}K:\steam\steam.exe] => (Block) K:\steam\steam.exe
FirewallRules: [{9A09BD8E-F6F1-495E-AEBE-471120AA316F}] => (Allow) K:\Steam\Steam.exe
FirewallRules: [{40304954-5428-4990-924E-F7E90EE0CD50}] => (Allow) K:\Steam\Steam.exe
FirewallRules: [{8E2CA30F-BEFE-4A2F-8600-1C99E9C26387}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{651DED02-0176-4FE6-8497-AE9BAADC52F5}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{36DCDEEE-1F33-44E8-8817-43039C398439}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{C2221272-0F2F-4EDB-8EC3-F7D9B68984EA}] => (Allow) K:\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [TCP Query User{686ED634-6DB6-498B-BCB1-A3F56EC60AAD}K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe] => (Allow) K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe
FirewallRules: [UDP Query User{69B47672-84A5-402D-A97E-CE7D0919241E}K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe] => (Allow) K:\steam\steamapps\common\rocketleague\binaries\win32\rocketleague.exe
FirewallRules: [{474D1E28-757E-4B3E-AA78-53FACC960B46}] => (Allow) K:\Steam\bin\steamwebhelper.exe
FirewallRules: [{D4077FC1-4198-4947-840C-63AC3E27C05B}] => (Allow) K:\Steam\bin\steamwebhelper.exe
FirewallRules: [{1446E7FE-B260-4907-BE3C-B85C472A1C2E}] => (Allow) K:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{0E0676F8-57F4-4BD6-98ED-731CC72C311F}] => (Allow) K:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{7E6B01E4-E3BA-4BB7-95E9-945AD22C3AF7}] => (Allow) K:\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{6D911E27-1297-4586-8C42-2F750AC04466}] => (Allow) K:\Steam\SteamApps\common\Arma 3\arma3launcher.exe
FirewallRules: [{789802B4-C3B8-44CE-B184-16BFDBFB86D8}] => (Allow) K:\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [{52C4A810-6E31-4795-ABB1-92E6B1047E02}] => (Allow) K:\Steam\SteamApps\common\DayZ\DayZ_BE.exe
FirewallRules: [TCP Query User{D58B4AAA-82C9-4233-96BD-761C34C907A6}K:\steam\steamapps\common\dayz\dayz.exe] => (Allow) K:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [UDP Query User{2C02E508-23C2-4911-9A86-9E11AC113214}K:\steam\steamapps\common\dayz\dayz.exe] => (Allow) K:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{99651565-BB77-4AE0-8B70-559215A8B594}] => (Block) K:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{9BC0E2E2-94F0-474D-9071-81887431CA39}] => (Block) K:\steam\steamapps\common\dayz\dayz.exe
FirewallRules: [{4DAFE24A-B576-4C84-B372-6F17BFDB2384}] => (Allow) K:\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{84FBEEC0-BC3F-43C6-A32E-39E2DB58EEDC}] => (Allow) K:\Steam\SteamApps\common\Tom Clancy's Rainbow Six Siege\RainbowSix.exe
FirewallRules: [{8AD0BCF9-6372-4F98-8567-C9147A251A2C}] => (Allow) K:\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{07DD24E4-29BC-4442-A3DB-1CD499FB2965}] => (Allow) K:\Steam\SteamApps\common\PlagueInc\PlagueIncEvolved.exe
FirewallRules: [{55318ACB-4C63-4011-9CEF-77F515793D06}] => (Allow) C:\Users\test\AppData\Local\Temp\Rar$EXa0.930\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [{7AE4E8A3-80B8-4B5E-BE6C-16DEF7C2F7C9}] => (Allow) C:\Users\test\AppData\Local\Temp\Rar$EXa0.930\FIFA 15\fifasetup\fifaconfig.exe
FirewallRules: [TCP Query User{A8D93093-DA99-464E-89AD-EA93FCA45309}K:\steam\steamapps\common\arma 3\arma3.exe] => (Allow) K:\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{90DDEC39-9088-403E-9459-0EF1C0EACEDF}K:\steam\steamapps\common\arma 3\arma3.exe] => (Allow) K:\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{C52A2147-383D-402A-AEB0-2B7A3A8378A3}] => (Block) K:\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{835C5309-105D-43EE-9B9B-CB2892C18358}] => (Block) K:\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{E3C8E145-7E93-4EAB-86BE-CA945D1D188E}] => (Allow) K:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{F1C75A3F-261A-47E9-BFF4-7976DACFF0E9}] => (Allow) K:\Steam\SteamApps\common\Half-Life 2\hl2.exe
FirewallRules: [{4A398AD0-16C5-475F-B6C2-541EA2F2F523}] => (Allow) LPort=49191
FirewallRules: [{50DC1A0F-AEB5-4CAE-A7A2-7757E39D3AD3}] => (Allow) LPort=5000
FirewallRules: [{C0DDDB59-5FCB-40D3-87E3-D12839AF2BCA}] => (Allow) K:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe
FirewallRules: [{6C1C67CF-109D-4969-9A01-B275B619B1A6}] => (Allow) K:\Steam\SteamApps\common\rocketleague\Binaries\Win32\RocketLeague.exe

==================== Wiederherstellungspunkte =========================

05-03-2016 07:32:13 Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610

==================== Fehlerhafte Geräte im Gerätemanager =============

Name: Teredo Tunneling Pseudo-Interface
Description: Microsoft-Teredo-Tunneling-Adapter
Class Guid: {4d36e972-e325-11ce-bfc1-08002be10318}
Manufacturer: Microsoft
Service: tunnel
Problem: : This device cannot start. (Code10)
Resolution: Device failed to start. Click "Update Driver" to update the drivers for this device.
On the "General Properties" tab of the device, click "Troubleshoot" to start the troubleshooting wizard.


==================== Fehlereinträge in der Ereignisanzeige: =========================

Applikationsfehler:
==================
Error: (03/08/2016 02:55:33 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/08/2016 06:18:46 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/07/2016 02:48:18 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/06/2016 10:53:14 AM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/05/2016 11:12:02 PM) (Source: Application Hang) (EventID: 1002) (User: )
Description: Programm wmplayer.exe, Version 12.0.7601.18150 kann nicht mehr unter Windows ausgeführt werden und wurde beendet. Überprüfen Sie den Problemverlauf in der Wartungscenter-Systemsteuerung, um nach weiteren Informationen zum Problem zu suchen.

Prozess-ID: 1c64

Startzeit: 01d1772bc495b6f3

Endzeit: 10

Anwendungspfad: C:\Program Files (x86)\Windows Media Player\wmplayer.exe

Berichts-ID: 46bda431-e31f-11e5-b031-bcee7b772580

Error: (03/05/2016 12:07:51 PM) (Source: WinMgmt) (EventID: 10) (User: )
Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003

Error: (03/05/2016 11:38:30 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CamtasiaStudio.exe, Version: 8.6.0.2055, Zeitstempel: 0x55de2a14
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000005
Fehleroffset: 0x0002e41b
ID des fehlerhaften Prozesses: 0x24cc
Startzeit der fehlerhaften Anwendung: 0xCamtasiaStudio.exe0
Pfad der fehlerhaften Anwendung: CamtasiaStudio.exe1
Pfad des fehlerhaften Moduls: CamtasiaStudio.exe2
Berichtskennung: CamtasiaStudio.exe3

Error: (03/05/2016 11:37:20 AM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: CamtasiaStudio.exe, Version: 8.6.0.2055, Zeitstempel: 0x55de2a14
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.18247, Zeitstempel: 0x521ea8e7
Ausnahmecode: 0xc0000374
Fehleroffset: 0x000ce753
ID des fehlerhaften Prozesses: 0x24cc
Startzeit der fehlerhaften Anwendung: 0xCamtasiaStudio.exe0
Pfad der fehlerhaften Anwendung: CamtasiaStudio.exe1
Pfad des fehlerhaften Moduls: CamtasiaStudio.exe2
Berichtskennung: CamtasiaStudio.exe3

Error: (03/05/2016 10:31:11 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Der angegebene Server kann den angeforderten Vorgang nicht ausführen.
.

Error: (03/05/2016 10:31:11 AM) (Source: Microsoft-Windows-CAPI2) (EventID: 4101) (User: )
Description: Fehler bei der automatischen Aktualisierung des Drittanbieterstammzertifikats von <hxxp://ctldl.windowsupdate.com/msdownload/update/v3/static/trustedr/en/02FAF3E291435468607857694DF5E45B68851868.crt>. Fehler: Dieser Vorgang wurde wegen Zeitüberschreitung zurückgegeben.
.


Systemfehler:
=============
Error: (03/08/2016 02:55:29 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
papycpu2
papyjoy

Error: (03/08/2016 02:55:00 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (03/08/2016 02:54:51 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papyjoy.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (03/08/2016 02:54:51 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papycpu2.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (03/08/2016 06:18:44 AM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
papycpu2
papyjoy

Error: (03/08/2016 06:18:12 AM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126

Error: (03/08/2016 06:18:01 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papyjoy.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (03/08/2016 06:18:01 AM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \SystemRoot\SysWow64\DRIVERS\papycpu2.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.

Error: (03/07/2016 02:48:18 PM) (Source: Service Control Manager) (EventID: 7026) (User: )
Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen:
papycpu2
papyjoy

Error: (03/07/2016 02:47:24 PM) (Source: Microsoft-Windows-WLAN-AutoConfig) (EventID: 10000) (User: NT-AUTORITÄT)
Description: Das WLAN-Erweiterungsmodul konnte nicht gestartet werden.

Modulpfad: C:\Windows\system32\Rtlihvs.dll
Fehlercode: 126


CodeIntegrity:
===================================
  Date: 2016-03-05 10:29:28.231
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:29:23.950
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:29:23.310
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:29:22.089
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:29:11.396
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:29:03.267
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:28:42.640
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:28:42.520
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:28:42.470
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.

  Date: 2016-03-05 10:28:42.360
  Description: Die Abbildintegrität der Datei "\Device\HarddiskVolume2\Program Files\Sound+\SoundP.dll" konnte nicht überprüft werden, da der Satz seitenbezogener Abbildhashes auf dem System nicht gefunden wurde.


==================== Speicherinformationen ===========================

Prozessor: Intel(R) Core(TM) i5-3340 CPU @ 3.10GHz
Prozentuale Nutzung des RAM: 42%
Installierter physikalischer RAM: 8100.93 MB
Verfügbarer physikalischer RAM: 4658.66 MB
Summe virtueller Speicher: 16500.05 MB
Verfügbarer virtueller Speicher: 12488.46 MB

==================== Laufwerke ================================

Drive c: () (Fixed) (Total:465.66 GB) (Free:302.91 GB) NTFS
Drive k: (Games) (Fixed) (Total:931.51 GB) (Free:671.65 GB) NTFS

==================== MBR & Partitionstabelle ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: B44B87F2)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 1F3BC101)
Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)

==================== Ende von Addition.txt ============================
Und zu guter letzt das MBAM-Log
Code:
Malwarebytes Anti-Malware
www.malwarebytes.org

Suchlaufdatum: 05-Mar-16
Suchlaufzeit: 11:19
Protokolldatei: Logfile.txt
Administrator: Ja

Version: 2.2.0.1024
Malware-Datenbank: v2016.03.05.03
Rootkit-Datenbank: v2016.02.27.01
Lizenz: Kostenlose Version
Malware-Schutz: Deaktiviert
Schutz vor bösartigen Websites: Deaktiviert
Selbstschutz: Deaktiviert

Betriebssystem: Windows 7 Service Pack 1
CPU: x64
Dateisystem: NTFS
Benutzer: test

Suchlauftyp: Bedrohungssuchlauf
Ergebnis: Abgeschlossen
Durchsuchte Objekte: 510051
Abgelaufene Zeit: 44 Min., 56 Sek.

Speicher: Aktiviert
Start: Aktiviert
Dateisystem: Aktiviert
Archive: Aktiviert
Rootkits: Deaktiviert
Heuristik: Aktiviert
PUP: Aktiviert
PUM: Aktiviert

Prozesse: 1
PUP.Optional.SpaceSoundPro, C:\Program Files\Sound+\idscservice.exe, 4424, Löschen bei Neustart, [eb3cbcc866338babd4676f85ae5352ae]

Module: 0
(keine bösartigen Elemente erkannt)

Registrierungsschlüssel: 3
PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{28EB90E0-EFE7-498D-8899-490D31FC2A03}, Löschen bei Neustart, [ca5db4d040591a1c7a3119f0768d7c84],
PUP.Optional.AnySend, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ASPackage, In Quarantäne, [cb5c5e26a7f21e18520bd6a37c88916f],
PUP.Optional.Tuto4PC, HKLM\SOFTWARE\WOW6432NODE\WIN\win_en_77, In Quarantäne, [96911470c1d892a4b9be0d6c24e042be],

Registrierungswerte: 2
PUP.Optional.RegCleanerPro, HKLM\SOFTWARE\MICROSOFT\WINDOWS NT\CURRENTVERSION\SCHEDULE\TASKCACHE\TASKS\{28EB90E0-EFE7-498D-8899-490D31FC2A03}|Path, \ASP, Löschen bei Neustart, [ca5db4d040591a1c7a3119f0768d7c84]
PUP.Optional.AnySend, HKLM\SOFTWARE\WOW6432NODE\MICROSOFT\WINDOWS\CURRENTVERSION\UNINSTALL\ASPACKAGE|DisplayName, AnySend, In Quarantäne, [bd6abfc56831f83e8b12dc8e848005fb]

Registrierungsdaten: 0
(keine bösartigen Elemente erkannt)

Ordner: 5
PUP.Optional.ConvertAd.Gen, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580, In Quarantäne, [ab7c22623663b284764683f313f1ab55],
PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8],
PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77\win_en_77, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8],
PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77\win_en_77\1.20, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8],
PUP.Optional.Tuto4PC, C:\Program Files (x86)\win_en_77, In Quarantäne, [c760c6bee7b2a5912ed0a85ff60dac54],

Dateien: 14
PUP.Optional.SpaceSoundPro, C:\Program Files\Sound+\idscservice.exe, Löschen bei Neustart, [eb3cbcc866338babd4676f85ae5352ae],
Adware.ConvertAd, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\Uninstall.exe, In Quarantäne, [9d8a572db0e9cd693a4f9865a75a7789],
Adware.ConvertAd, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\vnsy8E15.tmp, In Quarantäne, [c661cfb59801df572c5dc439e61bcb35],
PUP.Optional.SoundPlus, C:\Users\test\AppData\Local\Temp\DAQ0XFN2CE.exe, In Quarantäne, [8e993d47c6d3f145438a942606fbf907],
PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\Dear Esther Update 1 And 2 SKI Downloader__3687_i1887652305_il2164222.exe, In Quarantäne, [35f2592ba0f9ea4ce3eef308877a9967],
PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\Temp\KNVDR94SIO\win.exe, In Quarantäne, [e542bbc95346c47225c42539798728d8],
PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\Rar$EXb0.426\Dear Esther Update 1 And 2 SKI Downloader__3687_i1887652305_il2164222.exe, In Quarantäne, [fa2d22625c3dc86e547da25944bda65a],
PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\Rar$EXb0.968\Dear Esther Update 1 And 2 SKI Downloader__3687_i1887652305_il2164222.exe, In Quarantäne, [dc4b91f34455092db71a04f71de43ec2],
PUP.Optional.ConvertAd.Gen, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\vnsy8E15.tmp, In Quarantäne, [ab7c22623663b284764683f313f1ab55],
PUP.Optional.ConvertAd.Gen, C:\Program Files (x86)\37559B00-1457170058-11DD-A5C0-BCEE7B772580\Uninstall.exe, In Quarantäne, [ab7c22623663b284764683f313f1ab55],
PUP.Optional.Tuto4PC, C:\Users\test\AppData\Local\win_en_77\win_en_77\1.20\cnf.cyl, In Quarantäne, [9c8b7e06d8c1e15516e77f880af948b8],
PUP.Optional.Tuto4PC, C:\Program Files (x86)\win_en_77\win_en_77 - uninstall.dat, In Quarantäne, [c760c6bee7b2a5912ed0a85ff60dac54],
PUP.Optional.Tuto4PC, C:\Program Files (x86)\win_en_77\win_en_77 - uninstall.exe, In Quarantäne, [c760c6bee7b2a5912ed0a85ff60dac54],
PUP.Optional.Amonetize, C:\Users\test\AppData\Local\Temp\amipixel.cfg, In Quarantäne, [48df87fd3960072f9918ea499e67718f],

Physische Sektoren: 0
(keine bösartigen Elemente erkannt)


(end)

Deathkid535 08.03.2016 23:23
Hi,

Schritt # 1: AttentionUninstaller

Deaktiviere deinen Virenscanner, damit AttentionUninstaller sauber durchläuft!

Bitte lade dir die passende Version von AttentionUninstaller auf deinen Desktop: http://deathkid.trojaner-board.de/to.../icon/icon.png AttentionUninstaller 32-Bit | AttentionUninstaller 64-Bit
  • Starte jetzt AttentionUninstaller
  • Warte, bis das Tool fertig gearbeitet hat.
  • Dein Rechner wird gegebenfalls neustarten.
  • Auf deinem Desktop befindet sich nun eine AttentionUninstallerLog.txt. Poste mir deren Inhalt hier.



Schritt # 2: AdwCleaner

Downloade Dir bitte AdwCleaner Logo Icon AdwCleaner auf deinen Desktop.
  • Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
  • Starte die AdwCleaner.exe mit einem Doppelklick.
  • Stimme den Nutzungsbedingungen zu.
  • Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
    • "Tracing" Schlüssel löschen
    • Winsock Einstellungen zurücksetzen
    • Proxy Einstellungen zurücksetzen
    • Internet Explorer Richtlinien zurücksetzen
    • Chrome Richtlinien zurücksetzen
    • Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
  • Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
  • Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
  • Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
  • Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).


Schritt # 3: FRST

Bitte noch ein frisches FRST-Log.



Schritt # 4: Bitte Posten
  • Das Log vom AttentionUninstaller
  • Das Log von AdwCleaner
  • Das frische FRST-Log

EquinoxRB 09.03.2016 00:51
Guten Abend,
ich habe wieder alles so gemacht wie beschriben und hie ist das AU-Log
Code:
ATTENTION UNINSTALLER by Deathkid
Version 1.2

===========================================================

09-Mar-16 00:20:27: Deinstallation gestartet...
09-Mar-16 00:20:27: WindowsMangerProtect20.0.0.502 wird deinstalliert.

------------------------- [EOF] ---------------------------
Das ADWCleaner-Log
Code:
# AdwCleaner v5.101 - Bericht erstellt am 09/03/2016 um 00:33:12
# Aktualisiert am 07/03/2016 von Xplode
# Datenbank : 2016-03-08.1 [Server]
# Betriebssystem : Windows 7 Professional Service Pack 1 (x64)
# Benutzername : test - DAT_BRONIE
# Gestartet von : C:\Users\test\Desktop\AdwCleaner_5.101.exe
# Option : Löschen
# Unterstützung : hxxp://toolslib.net/forum

***** [ Dienste ] *****


***** [ Ordner ] *****

[-] Ordner Gelöscht : C:\Program Files\SOUND+
[-] Ordner Gelöscht : C:\Program Files (x86)\Startfenster
[-] Ordner Gelöscht : C:\ProgramData\apn
[#] Ordner Gelöscht : C:\ProgramData\mntemp
[-] Ordner Gelöscht : C:\Users\test\AppData\Local\globalUpdate

***** [ Dateien ] *****

[-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bestialitycrawler.com_0.localstorage
[-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_bestialitycrawler.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage
[-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_primeshare.tv_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage
[-] Datei Gelöscht : C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Local Storage\hxxp_st.chatango.com_0.localstorage-journal
[-] Datei Gelöscht : C:\Users\test\AppData\Roaming\aps.uninstall.scan.results

***** [ DLLs ] *****


***** [ Verknüpfungen ] *****


***** [ Aufgabenplanung ] *****


***** [ Registrierungsdatenbank ] *****

[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{459DD0F7-0D55-D3DC-67BC-E6BE37E9D762}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\TypeLib\{A2D733A7-73B0-4C6B-B0C7-06A432950B66}
[-] Wert Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\Ext\CLSID [{3593C8B9-8E18-4B4B-B7D3-CB8BEB1AA42C}]
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{4E6354DE-9115-4AEE-BD21-C46C3E8A49DB}
[-] Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Classes\Interface\{FC073BDA-C115-4A1D-9DF9-9B5C461482E5}
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Tinstalls
[-] Schlüssel Gelöscht : HKCU\Software\OCS
[-] Schlüssel Gelöscht : HKCU\Software\Reg\Clean
[-] Schlüssel Gelöscht : HKCU\Software\Softonic
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Reg\Clean
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\WIN
[-] Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Uninstall\Startfenster
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\watch4.de
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\www.watch4.de
[-] Schlüssel Gelöscht : HKCU\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\sweet-page.com

***** [ Internetbrowser ] *****

[-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : trovi.search
[-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : sweet-page.com
[-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Web Data] [Search Provider] Gelöscht : sweet-page
[-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : booedmolknjekdopkepjjeckmjkdpfgl
[-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : bopakagnckmlgajfccecajhnimjiiedh
[-] [C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Secure Preferences] [Extension] Gelöscht : flpcjncodpafbgdpnkljologafpionhb

*************************

:: "Tracing" Schlüssel gelöscht
:: Proxy Einstellungen zurückgesetzt
:: Winsock Einstellungen zurückgesetzt
:: Internet Explorer Richtlinien gelöscht
:: Chrome Richtlinien gelöscht

*************************

C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [4274 Bytes] - [09/03/2016 00:33:12]
C:\Program Files (x86)\AdwCleaner\AdwCleaner[S1].txt - [4075 Bytes] - [09/03/2016 00:29:49]

########## EOF - C:\Program Files (x86)\AdwCleaner\AdwCleaner[C1].txt - [4460 Bytes] ##########
und das frische FRST-Log
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von test (Administrator) auf DAT_BRONIE (09-03-2016 00:39:16)
Gestartet von C:\Users\test\Desktop
Geladene Profile: test (Verfügbare Profile: test)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(NVIDIA Corporation) C:\Users\test\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [807392 2016-03-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Akamai NetSession Interface] => C:\Users\test\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3586848 2016-02-17] (Nota Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2016-02-18]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\..\Interfaces\{1F88B87D-491F-4325-BB7C-F34B09AD1A37}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{EA272E8E-9CBA-4EB6-90F8-A37C6A74570E}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-809088717-832388673-2450759211-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [Keine Datei]
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-29] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-10-30] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems)
FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\test\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-12-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-03-04] ()
FF Extension: Flash and Video Download - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-02-27]
FF Extension: anonymoX - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\Extensions\client@anonymox.net.xpi [2015-10-18]

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.de/
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-01-24]
CHR Extension: (My Little Pony) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\amecdmemkaaacggdkgcndmeagijhlgbd [2014-11-11]
CHR Extension: (Google Docs) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-19]
CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03]
CHR Extension: (Google-Suche) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Vinyl Scratch Beat) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlcjanbbdbbeeehhkmgboaglbdiiggp [2015-03-31]
CHR Extension: (Ponyhoof) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\efjjgphedlaihnlgaibiaihhmhaejjdd [2016-01-23]
CHR Extension: (Chrome Remote Desktop) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-17]
CHR Extension: (Google Docs Offline) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (Kopieren und Einfügen in Office Online) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2015-08-08]
CHR Extension: (Agar.io Bot) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnlogedhgopimklhbhmpnliaclegdhg [2015-11-23]
CHR Extension: (Skype) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18]
CHR Extension: (Der Planer der Räume) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-10-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08]
CHR Extension: (Google Mail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [955736 2016-03-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1424880 2016-03-08] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-23] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-12-26] ()
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-03-08] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [133168 2016-03-08] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69888 2016-03-08] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation                          )
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net)
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [X]
S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [X]
S3 VBAudioVACMME; system32\DRIVERS\vbaudio_cable64_win7.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-09 00:39 - 2016-03-09 00:39 - 00030396 _____ C:\Users\test\Desktop\FRST.txt
2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Downloads\FRST64.exe
2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Desktop\FRST64.exe
2016-03-09 00:28 - 2016-03-09 00:33 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-09 00:27 - 2016-03-09 00:27 - 01524224 _____ C:\Users\test\Downloads\AdwCleaner_5.101.exe
2016-03-09 00:20 - 2016-03-09 00:20 - 00000000 ____D C:\Users\test\AppData\Local\Data
2016-03-09 00:18 - 2016-03-09 00:22 - 00002180 _____ C:\Users\test\AppData\Local\settings.ini
2016-03-09 00:18 - 2016-03-09 00:22 - 00000297 _____ C:\Users\test\Desktop\AttentionUninstallerLog.txt
2016-03-09 00:17 - 2016-03-09 00:17 - 03741464 _____ (Igor Pavlov) C:\Users\test\Downloads\AttentionUninstaller64.exe
2016-03-08 17:27 - 2016-03-08 17:28 - 00082890 _____ C:\Users\test\Downloads\Addition.txt
2016-03-08 17:25 - 2016-03-09 00:39 - 00000000 ____D C:\FRST
2016-03-08 17:25 - 2016-03-08 17:28 - 00055725 _____ C:\Users\test\Downloads\FRST.txt
2016-03-08 15:46 - 2016-03-08 15:46 - 00000000 ____D C:\Users\test\AppData\Local\ElevatedDiagnostics
2016-03-05 09:23 - 2016-03-05 09:23 - 00000459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk
2016-03-04 19:31 - 2016-03-04 19:31 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-03 18:02 - 2016-03-03 19:20 - 00000000 ____D C:\Users\test\Documents\DayZ
2016-02-29 23:56 - 2016-02-29 23:56 - 00000000 ___HD C:\Users\test\Documents\.updtmp
2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Users\test\.swt
2016-02-28 10:16 - 2016-02-28 10:16 - 00000000 ____D C:\Users\test\Documents\NAMCO
2016-02-26 20:35 - 2016-02-26 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-02-26 02:53 - 2016-02-26 02:53 - 00000000 ____D C:\Users\test\Documents\League of Legends
2016-02-25 22:06 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-02-25 22:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-02-25 22:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\Riot Games
2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-02-25 14:40 - 2016-02-25 14:44 - 00000000 ____D C:\Users\test\AppData\Local\CyberGhost
2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2016-02-24 14:53 - 2016-02-24 14:53 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-02-24 14:49 - 2016-03-08 22:54 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-02-24 14:21 - 2016-02-27 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-18 00:46 - 2016-03-08 17:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-02-18 00:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-18 00:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-18 00:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-02-17 22:24 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-02-17 22:24 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-02-17 22:24 - 2016-02-09 06:26 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-02-17 22:21 - 2016-02-11 17:56 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-02-17 22:21 - 2016-02-11 17:56 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-02-17 22:21 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-02-17 22:04 - 2016-02-29 14:50 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA
2016-02-17 22:04 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-02-17 22:04 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-02-17 22:04 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-02-17 22:04 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-02-17 15:02 - 2016-02-17 15:02 - 00000000 ____D C:\Users\test\Documents\Scan
2016-02-14 19:24 - 2016-02-18 01:43 - 00001421 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Users\test\AppData\LocalLow\E_Line Media
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Program Files (x86)\LAV Filters

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-09 00:34 - 2014-07-18 22:32 - 00000000 ____D C:\Users\test\AppData\Local\LogMeIn Hamachi
2016-03-09 00:34 - 2014-05-30 20:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-09 00:34 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-09 00:34 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-09 00:31 - 2014-08-02 17:08 - 00000000 ___RD C:\Users\test\Desktop\Nützliche
2016-03-09 00:31 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-09 00:31 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-09 00:29 - 2015-01-19 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-09 00:23 - 2014-11-11 17:24 - 00000000 ____D C:\Users\test\AppData\Local\TSVNCache
2016-03-09 00:17 - 2015-02-10 02:55 - 00000000 ____D C:\Users\test\AppData\Roaming\uTorrent
2016-03-08 23:43 - 2014-05-30 20:27 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-08 23:02 - 2015-02-10 14:01 - 00000000 ____D C:\Games
2016-03-08 22:59 - 2014-06-12 06:15 - 00000000 ____D C:\Users\test\Documents\Rockstar Games
2016-03-08 22:56 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Program Files\Image-Line
2016-03-08 22:52 - 2014-12-27 17:32 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-08 22:24 - 2015-11-13 22:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-08 19:06 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-08 19:05 - 2014-06-01 08:59 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2016-03-08 19:05 - 2014-06-01 08:59 - 00133168 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-03-08 19:05 - 2014-06-01 08:59 - 00069888 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2016-03-08 17:03 - 2014-06-01 00:00 - 00000000 ____D C:\Users\test\Documents\My Games
2016-03-08 06:28 - 2014-07-16 05:55 - 00000000 ____D C:\Users\test\AppData\Local\Adobe
2016-03-07 22:31 - 2014-12-29 13:05 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3
2016-03-07 22:27 - 2014-05-30 23:59 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype
2016-03-05 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-05 23:18 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\The Crew
2016-03-05 23:14 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\ProfileCache
2016-03-05 22:29 - 2014-05-31 00:18 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client
2016-03-05 19:02 - 2016-02-07 20:34 - 00000000 ____D C:\Users\test\Documents\ArmaMods
2016-03-05 11:38 - 2016-01-01 06:16 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps
2016-03-05 10:31 - 2014-09-05 06:12 - 00000000 ____D C:\ProgramData\Codemasters
2016-03-05 07:34 - 2014-05-31 00:02 - 00000000 ____D C:\ProgramData\Origin
2016-03-04 19:30 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Bohemia_Interactive
2016-03-03 18:02 - 2014-06-10 12:28 - 00000000 ____D C:\Users\test\AppData\Local\DayZ
2016-03-02 20:40 - 2014-08-24 16:08 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-02 17:52 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-03-02 17:52 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-03-02 17:52 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-02 17:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-03-02 13:42 - 2015-04-19 08:23 - 00000080 _____ C:\Users\test\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2016-03-02 12:49 - 2015-07-08 12:26 - 00003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily
2016-03-02 12:49 - 2014-08-26 00:26 - 00003282 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2016-03-02 12:49 - 2014-08-26 00:26 - 00000000 ____D C:\Program Files (x86)\Gyazo
2016-03-01 15:28 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 Launcher
2016-03-01 14:54 - 2015-07-19 15:20 - 00000000 ____D C:\Users\test\Documents\Arma 3
2016-02-29 14:50 - 2014-06-15 10:37 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA Corporation
2016-02-28 22:24 - 2014-05-27 15:07 - 00000000 ____D C:\Users\test
2016-02-28 20:22 - 2015-09-08 20:23 - 00000000 ____D C:\Users\test\Documents\TxT-Folder
2016-02-28 11:46 - 2016-02-02 15:25 - 00000000 ____D C:\Users\test\AppData\Local\NXEPassportClient
2016-02-26 20:35 - 2014-05-31 00:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Origin
2016-02-26 02:47 - 2014-08-12 20:37 - 00000000 ____D C:\Users\test\AppData\Roaming\LolClient
2016-02-25 14:40 - 2016-01-28 21:35 - 00000000 ____D C:\Program Files\CyberGhost 5
2016-02-23 21:17 - 2014-05-31 00:02 - 00000000 ____D C:\Program Files (x86)\Origin
2016-02-23 14:56 - 2014-06-21 22:14 - 00000000 ____D C:\Users\test\AppData\Roaming\AnvSoft
2016-02-21 13:35 - 2014-06-01 00:10 - 00000000 ____D C:\Users\test\AppData\Roaming\.minecraft
2016-02-19 21:47 - 2014-05-30 20:27 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-18 01:43 - 2016-02-01 06:10 - 00000958 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk
2016-02-18 01:43 - 2016-01-07 16:40 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk
2016-02-18 01:43 - 2015-06-17 14:45 - 00000820 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiosurf 2.lnk
2016-02-18 01:43 - 2015-06-04 19:13 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-02-18 01:43 - 2015-04-12 08:10 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk
2016-02-18 01:43 - 2015-04-12 07:46 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-02-18 01:43 - 2014-11-09 19:54 - 00000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\greencube.lnk
2016-02-18 01:43 - 2014-10-07 15:37 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-02-18 01:43 - 2014-08-25 11:25 - 00001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk
2016-02-18 01:43 - 2014-08-01 15:39 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2016-02-18 01:43 - 2014-06-05 22:07 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-02-18 01:43 - 2014-05-30 23:56 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-02-18 01:43 - 2014-05-27 15:03 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-18 01:43 - 2014-05-27 15:03 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-18 01:43 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-02-18 01:43 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-02-18 01:43 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-02-18 01:42 - 2015-04-12 02:45 - 00001147 _____ C:\Users\test\Desktop\Mozilla Firefox.lnk
2016-02-18 01:42 - 2015-02-10 02:56 - 00000829 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-02-18 01:42 - 2014-08-08 09:25 - 00000513 _____ C:\Users\test\Desktop\Programme und Funktionen.lnk
2016-02-18 01:38 - 2015-03-01 03:49 - 00000000 ____D C:\Windows\SysWOW64\csrss
2016-02-17 22:24 - 2014-06-15 10:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-02-17 22:24 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-02-17 22:24 - 2014-05-27 15:20 - 00000000 ____D C:\Temp
2016-02-17 22:23 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-17 22:04 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-17 14:49 - 2015-04-19 08:23 - 00000000 ____D C:\Program Files\Rockstar Games
2016-02-17 14:49 - 2014-08-24 15:14 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-02-16 14:01 - 2014-05-30 23:57 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3 Client
2016-02-15 22:58 - 2014-08-21 21:11 - 00000000 ____D C:\Users\test\AppData\Roaming\SpaceEngineers
2016-02-15 21:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-02-15 11:33 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-02-15 11:24 - 2014-11-14 17:47 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-02-15 01:28 - 2014-05-27 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-15 01:26 - 2015-11-26 22:08 - 00000000 ____D C:\Users\test\AppData\Local\Dropbox
2016-02-15 01:25 - 2016-01-31 18:48 - 00000000 ____D C:\Users\test\Documents\Electronic Arts
2016-02-15 01:17 - 2015-03-01 03:39 - 00000000 __SHD C:\Users\test\Documents\MSDCSC
2016-02-11 17:56 - 2014-06-15 10:47 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-02-10 03:38 - 2014-05-30 20:27 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-10 03:38 - 2014-05-30 20:27 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-10 00:29 - 2015-01-19 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-10 00:29 - 2014-07-03 15:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 00:29 - 2014-07-03 15:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-09 09:39 - 2014-06-15 10:47 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-02-09 09:39 - 2014-06-15 10:47 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-02-09 09:39 - 2014-05-27 15:26 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-02-09 09:39 - 2014-05-27 15:26 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-02-09 09:39 - 2014-05-27 15:25 - 00034905 _____ C:\Windows\system32\nvinfo.pb
2016-02-09 09:39 - 2013-09-12 09:58 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-02-09 09:39 - 2013-09-12 09:58 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-02-09 09:39 - 2013-09-12 09:58 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-02-09 06:41 - 2014-05-27 15:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-06-07 23:42 - 2014-06-09 19:41 - 0000098 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg
2014-09-25 14:16 - 2015-06-14 10:08 - 0001090 _____ () C:\Users\test\AppData\Roaming\SpeedRunnersLog.txt
2014-06-07 23:31 - 2014-06-09 19:39 - 0000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg
2016-03-09 00:18 - 2016-03-09 00:22 - 0002180 _____ () C:\Users\test\AppData\Local\settings.ini
2015-06-03 19:10 - 2015-06-03 19:10 - 0004099 _____ () C:\ProgramData\mtbjfghn.xbe

Einige Dateien in TEMP:
====================
C:\Users\test\AppData\Local\Temp\6a246669c4722113966d0cbd29442eb9.dll
C:\Users\test\AppData\Local\Temp\6bbb725da4ced29daf3cdc0080a744e6.dll
C:\Users\test\AppData\Local\Temp\avgnt.exe
C:\Users\test\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\test\AppData\Local\Temp\nvStInst.exe
C:\Users\test\AppData\Local\Temp\sqlite3.dll


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-10 06:24

==================== Ende von FRST.txt ============================
MFG Equinox

Deathkid535 09.03.2016 07:15
Hi,

Schritt # 1: FRST Fix

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe
C:\Users\test\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
EmptyTemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).
  • Starte nun FRST erneut und klicke den Entfernen Button.
  • Das Tool erstellt eine Fixlog.txt.
  • Poste mir deren Inhalt.



Schritt # 2: ESET


ESET Online Scanner

  • Hier findest du eine bebilderte Anleitung zu ESET Online Scanner
  • Lade und starte Eset Online Scanner
  • Setze einen Haken bei Ja, ich bin mit den Nutzungsbedingungen einverstanden und klicke auf Starten.
  • Aktiviere die "Erkennung von eventuell unerwünschten Anwendungen" und wähle folgende Einstellungen.
  • Klicke auf Starten.
  • Die Signaturen werden heruntergeladen, der Scan beginnt automatisch.
  • Klicke am Ende des Suchlaufs auf Fertig stellen.
  • Schließe das Fenster von ESET.
  • Explorer öffnen.
  • C:\Programme\Eset\EsetOnlineScanner\log.txt (bei 64 Bit auch C:\Programme (x86)\Eset\EsetOnlineScanner\log.txt) suchen und mit Deinem Editor öffnen (bebildert).
  • Logfile hier posten.
  • Deinstallation: Systemsteuerung => Software / Programme deinstallieren => Eset Online Scanner V3 entfernen.
  • Manuell folgenden Ordner löschen und Papierkorb leeren => C:\Programme\Eset



Schritt # 3: FRST

Und noch ein frisches FRST-Log bitte.



Schritt # 2: Frage

Besteht das Problem noch? :)



Schritt # 4: Bitte Posten
  • Das Fixlog von FRST
  • Das Log von ESET
  • Das frische FRST-Log
  • Die Antwort auf meine Frage

EquinoxRB 09.03.2016 15:59
Hallo,
Also hier ist das FRST Fixlog
Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:05-03-2016 01
durchgeführt von test (2016-03-09 13:52:27) Run:1
Gestartet von C:\Users\test\Desktop
Geladene Profile: test (Verfügbare Profile: test)
Start-Modus: Normal
==============================================

fixlist Inhalt:
*****************
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [AdobeBridge] => [X]
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\MountPoints2: {055d8156-e5a7-11e3-a196-806e6f6e6963} - D:\ZToolBar.exe
C:\Users\test\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
EmptyTemp:
*****************

HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Windows\CurrentVersion\Run\\AdobeBridge => Wert erfolgreich entfernt
"HKU\S-1-5-21-809088717-832388673-2450759211-1000\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\MountPoints2\{055d8156-e5a7-11e3-a196-806e6f6e6963}" => Schlüssel erfolgreich entfernt
HKCR\CLSID\{055d8156-e5a7-11e3-a196-806e6f6e6963} => Schlüssel nicht gefunden.
C:\Users\test\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦 => erfolgreich verschoben
EmptyTemp: => 7.4 GB temporäre Dateien entfernt.


Das System musste neu gestartet werden.

==== Ende von Fixlog 13:57:56 ====
Das ESET-Log
Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=45603979733876409c187b4a6074e88e
# end=init
# utc_time=2016-03-09 01:06:58
# local_time=2016-03-09 02:06:58 (+0100, Mitteleuropäische Zeit)
# country="United States"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Download
Update Finalize
Updated modules version: 28497
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=45603979733876409c187b4a6074e88e
# end=updated
# utc_time=2016-03-09 01:09:53
# local_time=2016-03-09 02:09:53 (+0100, Mitteleuropäische Zeit)
# country="United States"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=45603979733876409c187b4a6074e88e
# engine=28497
# end=finished
# remove_checked=true
# archives_checked=false
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-03-09 02:27:43
# local_time=2016-03-09 03:27:43 (+0100, Mitteleuropäische Zeit)
# country="United States"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776574 100 94 55893132 209163513 0 0
# scanned=419775
# found=0
# cleaned=0
# scan_time=4669
Das neuste FRST-Log
Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:05-03-2016 01
durchgeführt von test (Administrator) auf DAT_BRONIE (09-03-2016 15:32:09)
Gestartet von C:\Users\test\Desktop
Geladene Profile: test (Verfügbare Profile: test)
Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Prozesse (Nicht auf der Ausnahmeliste) =================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe
(Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(Intel(R) Corporation) C:\Program Files\Intel\iCLS Client\HeciServer.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\Jhi_service.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe
() C:\Windows\SysWOW64\PnkBstrA.exe
(TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\Version9\TeamViewer_Service.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.29.5\GoogleCrashHandler64.exe
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE
(Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe
(hxxp://tortoisesvn.net) C:\Program Files\TortoiseSVN\bin\TSVNCache.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(Pixart Imaging Inc) C:\Windows\System32\TiltWheelMouse.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe
(Nota Inc.) C:\Program Files (x86)\Gyazo\GyStation.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
() C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Akamai Technologies, Inc.) C:\Users\test\AppData\Local\Akamai\netsession_win.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\IPC\AdobeIPCBroker.exe
() C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSync\CoreSync.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\Launcher\Avira.Systray.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
(Adobe Systems Incorporated) C:\Program Files (x86)\Adobe\Adobe Creative Cloud\HEX\Adobe CEF Helper.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\UNS\UNS.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) K:\Steam\Steam.exe
(Valve Corporation) K:\Steam\bin\steamwebhelper.exe
(Valve Corporation) K:\Steam\bin\steamwebhelper.exe
(Valve Corporation) K:\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(NVIDIA Corporation) C:\Users\test\AppData\Local\NVIDIA\NvBackend\ApplicationOntology\NvOAWrapperCache.exe
(Microsoft Corporation) C:\Windows\System32\dllhost.exe


==================== Registry (Nicht auf der Ausnahmeliste) ===========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [6843024 2012-10-29] (Realtek Semiconductor)
HKLM\...\Run: [MouseDriver] => C:\Windows\system32\TiltWheelMouse.exe [241152 2012-12-19] (Pixart Imaging Inc)
HKLM\...\Run: [AdobeAAMUpdater-1.0] => C:\Program Files (x86)\Common Files\Adobe\OOBE\PDApp\UWA\UpdaterStartupUtility.exe [557768 2015-02-03] (Adobe Systems Incorporated)
HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2789248 2016-02-17] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [IAStorIcon] => C:\Program Files (x86)\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe [284440 2012-02-01] (Intel Corporation)
HKLM-x32\...\Run: [USB3MON] => C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe [291648 2012-05-22] (Intel Corporation)
HKLM-x32\...\Run: [IMSS] => C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IMSS\PIconStartup.exe [133440 2012-07-20] (Intel Corporation)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [807392 2016-03-08] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [Adobe Creative Cloud] => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\ACC\Creative Cloud.exe [2694320 2015-02-15] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [Avira SystrayStartTrigger] => C:\Program Files (x86)\Avira\Launcher\Avira.SystrayStartTrigger.exe [66328 2016-01-27] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [5565448 2015-11-12] (LogMeIn Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Overwolf] => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Akamai NetSession Interface] => C:\Users\test\AppData\Local\Akamai\netsession_win.exe [4691384 2015-09-10] (Akamai Technologies, Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [Gyazo] => C:\Program Files (x86)\Gyazo\GyStation.exe [3586848 2016-02-17] (Nota Inc.)
HKU\S-1-5-21-809088717-832388673-2450759211-1000\...\Run: [DAEMON Tools Lite] => C:\Program Files (x86)\DAEMON Tools Lite\DTLite.exe [3696912 2014-03-04] (Disc Soft Ltd)
ShellIconOverlayIdentifiers: [ AccExtIco1] -> {AB9CF9F8-8A96-4F9D-BF21-CE85714C3A47} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco2] -> {853B7E05-C47D-4985-909A-D0DC5C6D7303} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [ AccExtIco3] -> {42D38F2E-98E9-4382-B546-E24E4D6D04BB} => C:\Program Files (x86)\Adobe\Adobe Creative Cloud\CoreSyncExtension\CoreSync_x64.dll [2015-02-11] ()
ShellIconOverlayIdentifiers: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX64.dll Keine Datei
ShellIconOverlayIdentifiers: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [###MegaShellExtPending] -> {056D528D-CE28-4194-9BA3-BA2E9197FF8C} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSynced] -> {05B38830-F4E9-4329-978B-1DD28605D202} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [###MegaShellExtSyncing] -> {0596C850-7BDD-4C9D-AFDF-873BE6890637} => C:\Users\test\AppData\Local\MEGAsync\ShellExtX32.dll Keine Datei
ShellIconOverlayIdentifiers-x32: [1TortoiseNormal] -> {C5994560-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [2TortoiseModified] -> {C5994561-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [3TortoiseConflict] -> {C5994562-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [4TortoiseLocked] -> {C5994563-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [5TortoiseReadOnly] -> {C5994564-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [6TortoiseDeleted] -> {C5994565-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [7TortoiseAdded] -> {C5994566-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [8TortoiseIgnored] -> {C5994567-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
ShellIconOverlayIdentifiers-x32: [9TortoiseUnversioned] -> {C5994568-53D9-4125-87C9-F193FC689CB2} => C:\Program Files (x86)\Common Files\TortoiseOverlays\TortoiseOverlays.dll [2011-06-13] (hxxp://tortoisesvn.net)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\TP-LINK-Konfigurationstool.lnk [2016-02-18]
ShortcutTarget: TP-LINK-Konfigurationstool.lnk -> C:\Program Files (x86)\TP-LINK\TP-LINK-Konfigurationstool\TWCU.exe ()

==================== Internet (Nicht auf der Ausnahmeliste) ====================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt
Tcpip\Parameters: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{1F88B87D-491F-4325-BB7C-F34B09AD1A37}: [DhcpNameServer] 192.168.178.1
Tcpip\..\Interfaces\{EA272E8E-9CBA-4EB6-90F8-A37C6A74570E}: [DhcpNameServer] 192.168.178.1

Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Start Page = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = hxxps://search.avira.net/#web/result?source=art&q=
HKU\S-1-5-21-809088717-832388673-2450759211-1000\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxps://search.avira.net/#web/result?source=art&q=
SearchScopes: HKLM -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKLM-x32 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
SearchScopes: HKU\S-1-5-21-809088717-832388673-2450759211-1000 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL =
BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: AcroIEHlprObj Class -> {06849E9F-C8D7-4D59-B87D-784B7D6BE0B3} -> C:\Program Files (x86)\Adobe\Acrobat 5.0\Reader\ActiveX\AcroIEHelper.ocx [2001-04-16] ()
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\ssv.dll [2015-03-29] (Oracle Corporation)
BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.)
BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\jp2ssv.dll [2015-03-29] (Oracle Corporation)
Handler-x32: skype4com - {FFC8B962-9B40-4DFF-9458-1830C7DD7F5D} - C:\Program Files (x86)\Common Files\Skype\Skype4COM.dll [2014-05-02] (Skype Technologies)
Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2016-01-08] (Microsoft Corporation)
Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2016-01-08] (Microsoft Corporation)

FireFox:
========
FF ProfilePath: C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_20_0_0_306.dll [2016-02-10] ()
FF Plugin: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [Keine Datei]
FF Plugin: adobe.com/AdobeAAMDetect_x86_64 -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect64.dll [2015-02-15] (Adobe Systems)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_20_0_0_306.dll [2016-02-10] ()
FF Plugin-x32: @esn/esnlaunch,version=2.3.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.3.0\npesnlaunch.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.5.0 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.0\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @Google.com/GoogleEarthPlugin -> C:\Program Files (x86)\Google\Google Earth\plugin\npgeplugin.dll [2015-05-20] (Google)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=2.1.42 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2012-06-08] (Intel Corporation)
FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2012-06-08] (Intel Corporation)
FF Plugin-x32: @java.com/DTPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\dtplugin\npDeployJava1.dll [2015-03-29] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.40.2 -> C:\Program Files (x86)\Java\jre1.8.0_40\bin\plugin2\npjp2.dll [2015-03-29] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @ngm.nexoneu.com/NxGame -> C:\ProgramData\NexonEU\NGM\npNxGameEU.dll [2015-10-30] (Nexon)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-02-09] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll [Keine Datei]
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.29.5\npGoogleUpdate3.dll [2016-02-10] (Google Inc.)
FF Plugin-x32: adobe.com/AdobeAAMDetect -> C:\Program Files (x86)\Adobe\Adobe Creative Cloud\Utils\npAdobeAAMDetect32.dll [2015-02-15] (Adobe Systems)
FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: @unity3d.com/UnityPlayer,version=1.0 -> C:\Users\test\AppData\LocalLow\Unity\WebPlayer\loader\npUnity3D32.dll [2015-12-07] (Unity Technologies ApS)
FF Plugin HKU\S-1-5-21-809088717-832388673-2450759211-1000: ubisoft.com/uplaypc -> C:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\npuplaypc.dll [2016-03-04] ()
FF Extension: Flash and Video Download - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\extensions\{bee6eb20-01e0-ebd1-da83-080329fb9a3a} [2016-02-27]
FF Extension: anonymoX - C:\Users\test\AppData\Roaming\Mozilla\Firefox\Profiles\v3ldv9hb.default\Extensions\client@anonymox.net.xpi [2015-10-18]

Chrome:
=======
CHR HomePage: Default -> hxxps://www.google.de/
CHR StartupUrls: Default -> "hxxps://www.google.de/"
CHR Profile: C:\Users\test\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (ProxFlow) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aakchaleigkohafkfjfjbblobjifikek [2016-01-24]
CHR Extension: (My Little Pony) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\amecdmemkaaacggdkgcndmeagijhlgbd [2014-11-11]
CHR Extension: (Google Docs) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-21]
CHR Extension: (WOT: Web of Trust, Website Reputation Ratings) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\bhmmomiinigofkjcapegjjndpbikblnp [2015-11-19]
CHR Extension: (YouTube) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-02-03]
CHR Extension: (Google-Suche) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Vinyl Scratch Beat) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\edlcjanbbdbbeeehhkmgboaglbdiiggp [2015-03-31]
CHR Extension: (Ponyhoof) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\efjjgphedlaihnlgaibiaihhmhaejjdd [2016-01-23]
CHR Extension: (Chrome Remote Desktop) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\gbchcmhmhahfdphkhkmpfmihenigjmpp [2016-02-17]
CHR Extension: (Google Docs Offline) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2015-11-17]
CHR Extension: (Kopieren und Einfügen in Office Online) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\ifbmcpbgkhlpfcodhjhdbllhiaomkdej [2015-08-08]
CHR Extension: (Agar.io Bot) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\jlnlogedhgopimklhbhmpnliaclegdhg [2015-11-23]
CHR Extension: (Skype) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\lifbcibllhkdhoafpjfnlhfpfgnpldfl [2015-12-18]
CHR Extension: (Der Planer der Räume) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\mcafejemebbngbglfoinpoaannbihjna [2014-10-31]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-08-08]
CHR Extension: (Google Mail) - C:\Users\test\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR HKLM-x32\...\Chrome\Extension: [lifbcibllhkdhoafpjfnlhfpfgnpldfl] - C:\Program Files (x86)\Skype\Toolbars\ChromeExtension\skype_chrome_extension.crx [2016-01-08]

==================== Dienste (Nicht auf der Ausnahmeliste) ========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [955736 2016-03-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [466504 2016-03-08] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1424880 2016-03-08] (Avira Operations GmbH & Co. KG)
R2 Avira.ServiceHost; C:\Program Files (x86)\Avira\Launcher\Avira.ServiceHost.exe [260456 2016-01-27] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1345056 2016-02-11] ()
R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1433216 2016-01-08] (Microsoft Corporation)
R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1773696 2016-01-08] (Microsoft Corporation)
R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65128 2016-01-11] (CyberGhost S.R.L)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1164672 2016-02-17] (NVIDIA Corporation)
S3 IDriverT; C:\Program Files (x86)\Common Files\InstallShield\Driver\1150\Intel 32\IDriverT.exe [69632 2005-11-14] (Macrovision Corporation) [Datei ist nicht signiert]
R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [166720 2012-07-20] (Intel Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-11-12] (LogMeIn, Inc.)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1135416 2015-10-05] (Malwarebytes)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1880960 2016-02-17] (NVIDIA Corporation)
R3 NvStreamNetworkSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe [6474112 2016-02-17] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamService.exe [2609024 2016-02-17] (NVIDIA Corporation)
S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2104840 2016-02-23] (Electronic Arts)
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-12-26] ()
R2 Themes; C:\Windows\system32\themeservice.dll [44544 2015-01-05] (Microsoft Corporation) [Datei ist nicht signiert]
S3 TunngleService; C:\Program Files (x86)\Tunngle\TnglCtrl.exe [814064 2015-12-22] (Tunngle.net GmbH)
S3 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [154816 2016-03-08] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\System32\DRIVERS\avipbb.sys [133168 2016-03-08] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\System32\DRIVERS\avkmgr.sys [28600 2014-05-09] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\System32\DRIVERS\avnetflt.sys [69888 2016-03-08] (Avira Operations GmbH & Co. KG)
R1 dtsoftbus01; C:\Windows\System32\DRIVERS\dtsoftbus01.sys [283064 2015-02-10] (Disc Soft Ltd)
S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-10-05] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-10-05] (Malwarebytes Corporation)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [28032 2016-02-17] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47760 2015-12-18] (NVIDIA Corporation)
R3 RtlWlanu; C:\Windows\System32\DRIVERS\rtwlanu.sys [1528976 2013-03-05] (Realtek Semiconductor Corporation                          )
R3 tap0901t; C:\Windows\System32\DRIVERS\tap0901t.sys [47736 2015-12-21] (Tunngle.net)
S3 t_mouse.sys; C:\Windows\System32\DRIVERS\t_mouse.sys [6144 2012-12-19] ()
S3 EagleX64; \??\C:\Windows\system32\drivers\EagleX64.sys [X]
S0x01000000 papycpu2; \SystemRoot\System32\DRIVERS\papycpu2.sys [X]
S0x01000000 papyjoy; \SystemRoot\System32\DRIVERS\papyjoy.sys [X]
S3 VBAudioVACMME; system32\DRIVERS\vbaudio_cable64_win7.sys [X]
S3 VBoxNetFlt; system32\DRIVERS\VBoxNetFlt.sys [X]
S3 xhunter1; \??\C:\Windows\xhunter1.sys [X]

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)


==================== Ein Monat: Erstellte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-09 14:06 - 2016-03-09 14:06 - 02870984 _____ (ESET) C:\Users\test\Downloads\esetsmartinstaller_deu.exe
2016-03-09 14:06 - 2016-03-09 14:06 - 02870984 _____ (ESET) C:\Users\test\Desktop\esetsmartinstaller_deu.exe
2016-03-09 14:06 - 2016-03-09 14:06 - 00000000 ____D C:\Program Files (x86)\ESET
2016-03-09 13:52 - 2016-03-09 13:57 - 00001307 _____ C:\Users\test\Desktop\Fixlog.txt
2016-03-09 00:42 - 2016-03-09 00:43 - 00078608 _____ C:\Users\test\Desktop\Addition.txt
2016-03-09 00:39 - 2016-03-09 15:32 - 00030879 _____ C:\Users\test\Desktop\FRST.txt
2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Downloads\FRST64.exe
2016-03-09 00:38 - 2016-03-09 00:38 - 02374144 _____ (Farbar) C:\Users\test\Desktop\FRST64.exe
2016-03-09 00:28 - 2016-03-09 00:33 - 00000000 ____D C:\Program Files (x86)\AdwCleaner
2016-03-09 00:27 - 2016-03-09 00:27 - 01524224 _____ C:\Users\test\Downloads\AdwCleaner_5.101.exe
2016-03-09 00:20 - 2016-03-09 00:20 - 00000000 ____D C:\Users\test\AppData\Local\Data
2016-03-09 00:18 - 2016-03-09 00:22 - 00002180 _____ C:\Users\test\AppData\Local\settings.ini
2016-03-09 00:18 - 2016-03-09 00:22 - 00000297 _____ C:\Users\test\Desktop\AttentionUninstallerLog.txt
2016-03-09 00:17 - 2016-03-09 00:17 - 03741464 _____ (Igor Pavlov) C:\Users\test\Downloads\AttentionUninstaller64.exe
2016-03-08 17:27 - 2016-03-08 17:28 - 00082890 _____ C:\Users\test\Downloads\Addition.txt
2016-03-08 17:25 - 2016-03-09 15:32 - 00000000 ____D C:\FRST
2016-03-08 17:25 - 2016-03-08 17:28 - 00055725 _____ C:\Users\test\Downloads\FRST.txt
2016-03-08 15:46 - 2016-03-08 15:46 - 00000000 ____D C:\Users\test\AppData\Local\ElevatedDiagnostics
2016-03-05 09:23 - 2016-03-05 09:23 - 00000459 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\DiRT Rally.lnk
2016-03-04 19:31 - 2016-03-04 19:31 - 00000000 ____D C:\Program Files (x86)\Steam
2016-03-03 18:02 - 2016-03-03 19:20 - 00000000 ____D C:\Users\test\Documents\DayZ
2016-02-29 23:56 - 2016-02-29 23:56 - 00000000 ___HD C:\Users\test\Documents\.updtmp
2016-02-28 22:24 - 2016-02-28 22:24 - 00000000 ____D C:\Users\test\.swt
2016-02-28 10:16 - 2016-02-28 10:16 - 00000000 ____D C:\Users\test\Documents\NAMCO
2016-02-26 20:35 - 2016-02-26 20:35 - 00000000 ____D C:\Program Files (x86)\Origin Games
2016-02-26 02:53 - 2016-02-26 02:53 - 00000000 ____D C:\Users\test\Documents\League of Legends
2016-02-25 22:06 - 2008-07-12 08:18 - 03851784 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DX9_39.dll
2016-02-25 22:06 - 2008-07-12 08:18 - 01493528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\D3DCompiler_39.dll
2016-02-25 22:06 - 2008-07-12 08:18 - 00467984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3dx10_39.dll
2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\Riot Games
2016-02-25 22:05 - 2016-02-25 22:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\League of Legends
2016-02-25 14:40 - 2016-02-25 14:44 - 00000000 ____D C:\Users\test\AppData\Local\CyberGhost
2016-02-25 14:40 - 2016-02-25 14:40 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CyberGhost 5
2016-02-24 14:53 - 2016-02-24 14:53 - 00000000 ____D C:\Program Files (x86)\VstPlugins
2016-02-24 14:49 - 2016-03-08 22:54 - 00000000 ____D C:\Program Files (x86)\Image-Line
2016-02-24 14:21 - 2016-02-27 23:08 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox
2016-02-18 00:46 - 2016-03-08 17:16 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-02-18 00:46 - 2016-02-18 00:46 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-02-18 00:46 - 2015-10-05 09:50 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-02-18 00:46 - 2015-10-05 09:50 - 00063704 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-02-18 00:46 - 2015-10-05 09:50 - 00025816 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-02-17 22:24 - 2016-02-09 06:41 - 00530368 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshext.dll
2016-02-17 22:24 - 2016-02-09 06:41 - 00081856 _____ (NVIDIA Corporation) C:\Windows\system32\nv3dappshextr.dll
2016-02-17 22:24 - 2016-02-09 06:26 - 00111672 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe
2016-02-17 22:21 - 2016-02-11 17:56 - 00205456 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys
2016-02-17 22:21 - 2016-02-11 17:56 - 00039240 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 42982336 _____ C:\Windows\system32\nvcompiler.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 37616696 _____ C:\Windows\SysWOW64\nvcompiler.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 31081920 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 24916536 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 21193032 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 20733832 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 17625136 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 17218792 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 16995576 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 12383288 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys
2016-02-17 22:21 - 2016-02-09 09:39 - 03145272 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 02722872 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 01924152 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6436191.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 01571776 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6436191.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00950328 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00880576 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00747064 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00691256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00502080 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00469144 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00423360 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00423080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00388560 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00379448 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00175368 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00153208 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00151368 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll
2016-02-17 22:21 - 2016-02-09 09:39 - 00128696 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll
2016-02-17 22:04 - 2016-02-29 14:50 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA
2016-02-17 22:04 - 2016-02-17 07:40 - 01903344 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01571624 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 01316184 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2016-02-17 22:04 - 2016-02-17 07:40 - 00112216 _____ C:\Windows\system32\NvRtmpStreamer64.dll
2016-02-17 22:04 - 2015-12-18 07:11 - 00047760 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2016-02-17 22:04 - 2015-12-18 07:10 - 00099472 _____ (NVIDIA Corporation) C:\Windows\system32\nvaudcap64v.dll
2016-02-17 22:04 - 2015-12-18 07:10 - 00090768 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2016-02-17 15:02 - 2016-02-17 15:02 - 00000000 ____D C:\Users\test\Documents\Scan
2016-02-14 19:24 - 2016-02-18 01:43 - 00001421 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Users\test\AppData\LocalLow\E_Line Media
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LAV Filters
2016-02-10 11:31 - 2016-02-10 11:31 - 00000000 ____D C:\Program Files (x86)\LAV Filters

==================== Ein Monat: Geänderte Dateien und Ordner ========

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)

2016-03-09 15:29 - 2015-01-19 13:15 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-03-09 14:43 - 2014-05-30 20:27 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-03-09 14:07 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-03-09 14:07 - 2009-07-14 05:45 - 00025280 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-03-09 14:00 - 2014-07-18 22:32 - 00000000 ____D C:\Users\test\AppData\Local\LogMeIn Hamachi
2016-03-09 13:59 - 2014-11-11 17:24 - 00000000 ____D C:\Users\test\AppData\Local\TSVNCache
2016-03-09 13:59 - 2014-05-30 20:27 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-03-09 13:59 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA
2016-03-09 13:59 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-03-09 13:52 - 2014-06-10 11:29 - 00000000 ____D C:\Users\test\AppData\LocalLow\Temp
2016-03-09 06:11 - 2014-07-16 05:55 - 00000000 ____D C:\Users\test\AppData\Local\Adobe
2016-03-09 00:31 - 2014-08-02 17:08 - 00000000 ___RD C:\Users\test\Desktop\Nützliche
2016-03-09 00:17 - 2015-02-10 02:55 - 00000000 ____D C:\Users\test\AppData\Roaming\uTorrent
2016-03-08 23:02 - 2015-02-10 14:01 - 00000000 ____D C:\Games
2016-03-08 22:59 - 2014-06-12 06:15 - 00000000 ____D C:\Users\test\Documents\Rockstar Games
2016-03-08 22:56 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Package Cache
2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Image-Line
2016-03-08 22:54 - 2016-01-28 21:57 - 00000000 ____D C:\Program Files\Image-Line
2016-03-08 22:52 - 2014-12-27 17:32 - 00000000 ____D C:\Program Files (x86)\VideoLAN
2016-03-08 22:24 - 2015-11-13 22:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam
2016-03-08 19:06 - 2014-06-01 08:57 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2016-03-08 19:05 - 2014-06-01 08:59 - 00154816 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2016-03-08 19:05 - 2014-06-01 08:59 - 00133168 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2016-03-08 19:05 - 2014-06-01 08:59 - 00069888 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avnetflt.sys
2016-03-08 17:03 - 2014-06-01 00:00 - 00000000 ____D C:\Users\test\Documents\My Games
2016-03-07 22:31 - 2014-12-29 13:05 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3
2016-03-07 22:27 - 2014-05-30 23:59 - 00000000 ____D C:\Users\test\AppData\Roaming\Skype
2016-03-05 23:20 - 2009-07-14 06:32 - 00000000 ___RD C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Games
2016-03-05 23:18 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\The Crew
2016-03-05 23:14 - 2015-11-27 06:12 - 00000000 ____D C:\Users\test\Documents\ProfileCache
2016-03-05 22:29 - 2014-05-31 00:18 - 00000000 ____D C:\Users\test\AppData\Roaming\TS3Client
2016-03-05 19:02 - 2016-02-07 20:34 - 00000000 ____D C:\Users\test\Documents\ArmaMods
2016-03-05 11:38 - 2016-01-01 06:16 - 00000000 ____D C:\Users\test\AppData\Local\CrashDumps
2016-03-05 10:31 - 2014-09-05 06:12 - 00000000 ____D C:\ProgramData\Codemasters
2016-03-05 07:34 - 2014-05-31 00:02 - 00000000 ____D C:\ProgramData\Origin
2016-03-04 19:30 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Bohemia_Interactive
2016-03-03 18:02 - 2014-06-10 12:28 - 00000000 ____D C:\Users\test\AppData\Local\DayZ
2016-03-02 20:40 - 2014-08-24 16:08 - 00000000 ____D C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Games
2016-03-02 17:52 - 2010-11-21 07:50 - 00698688 _____ C:\Windows\system32\perfh007.dat
2016-03-02 17:52 - 2010-11-21 07:50 - 00148828 _____ C:\Windows\system32\perfc007.dat
2016-03-02 17:52 - 2009-07-14 06:13 - 01618320 _____ C:\Windows\system32\PerfStringBackup.INI
2016-03-02 17:52 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-03-02 12:49 - 2015-07-08 12:26 - 00003408 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachineDaily
2016-03-02 12:49 - 2014-08-26 00:26 - 00003282 _____ C:\Windows\System32\Tasks\GyazoUpdateTaskMachine
2016-03-02 12:49 - 2014-08-26 00:26 - 00000000 ____D C:\Program Files (x86)\Gyazo
2016-03-01 15:28 - 2015-07-19 15:19 - 00000000 ____D C:\Users\test\AppData\Local\Arma 3 Launcher
2016-03-01 14:54 - 2015-07-19 15:20 - 00000000 ____D C:\Users\test\Documents\Arma 3
2016-02-29 14:50 - 2014-06-15 10:37 - 00000000 ____D C:\Users\test\AppData\Local\NVIDIA Corporation
2016-02-28 22:24 - 2014-05-27 15:07 - 00000000 ____D C:\Users\test
2016-02-28 20:22 - 2015-09-08 20:23 - 00000000 ____D C:\Users\test\Documents\TxT-Folder
2016-02-28 11:46 - 2016-02-02 15:25 - 00000000 ____D C:\Users\test\AppData\Local\NXEPassportClient
2016-02-26 20:35 - 2014-05-31 00:03 - 00000000 ____D C:\Users\test\AppData\Roaming\Origin
2016-02-26 02:47 - 2014-08-12 20:37 - 00000000 ____D C:\Users\test\AppData\Roaming\LolClient
2016-02-25 14:40 - 2016-01-28 21:35 - 00000000 ____D C:\Program Files\CyberGhost 5
2016-02-23 21:17 - 2014-05-31 00:02 - 00000000 ____D C:\Program Files (x86)\Origin
2016-02-23 14:56 - 2014-06-21 22:14 - 00000000 ____D C:\Users\test\AppData\Roaming\AnvSoft
2016-02-21 13:35 - 2014-06-01 00:10 - 00000000 ____D C:\Users\test\AppData\Roaming\.minecraft
2016-02-19 21:47 - 2014-05-30 20:27 - 00002204 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk
2016-02-18 01:43 - 2016-02-01 06:10 - 00000958 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\The Sims 4.lnk
2016-02-18 01:43 - 2016-01-07 16:40 - 00001168 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Express Burn.lnk
2016-02-18 01:43 - 2015-06-17 14:45 - 00000820 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audiosurf 2.lnk
2016-02-18 01:43 - 2015-06-04 19:13 - 00002144 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Earth.lnk
2016-02-18 01:43 - 2015-04-12 08:10 - 00001072 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Photoshop CC 2014.lnk
2016-02-18 01:43 - 2015-04-12 07:46 - 00001297 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Creative Cloud.lnk
2016-02-18 01:43 - 2014-11-09 19:54 - 00000881 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\greencube.lnk
2016-02-18 01:43 - 2014-10-07 15:37 - 00000985 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Adobe Help.lnk
2016-02-18 01:43 - 2014-08-25 11:25 - 00001251 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader 5.0.lnk
2016-02-18 01:43 - 2014-08-01 15:39 - 00001162 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\TeamViewer 9.lnk
2016-02-18 01:43 - 2014-06-05 22:07 - 00001007 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Audacity.lnk
2016-02-18 01:43 - 2014-05-30 23:56 - 00001362 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2016-02-18 01:43 - 2014-05-27 15:03 - 00001333 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Media Center.lnk
2016-02-18 01:43 - 2014-05-27 15:03 - 00001314 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows DVD Maker.lnk
2016-02-18 01:43 - 2009-07-14 06:01 - 00001282 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Default Programs.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001535 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Media Player.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001340 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Anytime Upgrade.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001318 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Sidebar.lnk
2016-02-18 01:43 - 2009-07-14 05:57 - 00001234 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\XPS Viewer.lnk
2016-02-18 01:43 - 2009-07-14 05:54 - 00001198 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Fax and Scan.lnk
2016-02-18 01:43 - 2009-07-14 05:49 - 00001266 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Windows Update.lnk
2016-02-18 01:42 - 2015-04-12 02:45 - 00001147 _____ C:\Users\test\Desktop\Mozilla Firefox.lnk
2016-02-18 01:42 - 2015-02-10 02:56 - 00000829 _____ C:\Users\test\AppData\Roaming\Microsoft\Windows\Start Menu\µTorrent.lnk
2016-02-18 01:42 - 2014-08-08 09:25 - 00000513 _____ C:\Users\test\Desktop\Programme und Funktionen.lnk
2016-02-18 01:38 - 2015-03-01 03:49 - 00000000 ____D C:\Windows\SysWOW64\csrss
2016-02-17 22:24 - 2014-06-15 10:37 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation
2016-02-17 22:24 - 2014-05-27 15:26 - 00000000 ____D C:\ProgramData\NVIDIA Corporation
2016-02-17 22:24 - 2014-05-27 15:20 - 00000000 ____D C:\Temp
2016-02-17 22:23 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files\NVIDIA Corporation
2016-02-17 22:04 - 2014-05-27 15:26 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation
2016-02-17 14:49 - 2015-04-19 08:23 - 00000000 ____D C:\Program Files\Rockstar Games
2016-02-17 14:49 - 2014-08-24 15:14 - 00000000 ____D C:\Program Files (x86)\Rockstar Games
2016-02-16 14:01 - 2014-05-30 23:57 - 00000000 ____D C:\Users\test\AppData\Local\TeamSpeak 3 Client
2016-02-15 22:58 - 2014-08-21 21:11 - 00000000 ____D C:\Users\test\AppData\Roaming\SpaceEngineers
2016-02-15 21:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\LiveKernelReports
2016-02-15 11:33 - 2009-07-14 06:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD
2016-02-15 11:24 - 2014-11-14 17:47 - 00000000 ____D C:\Program Files (x86)\Ubisoft
2016-02-15 01:28 - 2014-05-27 15:17 - 00000000 ___HD C:\Program Files (x86)\InstallShield Installation Information
2016-02-15 01:26 - 2015-11-26 22:08 - 00000000 ____D C:\Users\test\AppData\Local\Dropbox
2016-02-15 01:25 - 2016-01-31 18:48 - 00000000 ____D C:\Users\test\Documents\Electronic Arts
2016-02-15 01:17 - 2015-03-01 03:39 - 00000000 __SHD C:\Users\test\Documents\MSDCSC
2016-02-11 17:56 - 2014-06-15 10:47 - 01572496 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdagenco6420103.dll
2016-02-10 03:38 - 2014-05-30 20:27 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2016-02-10 03:38 - 2014-05-30 20:27 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2016-02-10 00:29 - 2015-01-19 13:15 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-02-10 00:29 - 2014-07-03 15:18 - 00796864 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-02-10 00:29 - 2014-07-03 15:18 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-02-09 09:39 - 2014-06-15 10:47 - 18758400 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll
2016-02-09 09:39 - 2014-06-15 10:47 - 16327896 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll
2016-02-09 09:39 - 2014-05-27 15:26 - 00213952 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll
2016-02-09 09:39 - 2014-05-27 15:26 - 00201664 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll
2016-02-09 09:39 - 2014-05-27 15:25 - 00034905 _____ C:\Windows\system32\nvinfo.pb
2016-02-09 09:39 - 2013-09-12 09:58 - 14016576 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll
2016-02-09 09:39 - 2013-09-12 09:58 - 03684072 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll
2016-02-09 09:39 - 2013-09-12 09:58 - 03259688 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 06368824 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 02993720 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 02563128 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 01264696 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe
2016-02-09 06:41 - 2014-05-27 15:26 - 00392128 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll
2016-02-09 06:41 - 2014-05-27 15:26 - 00069568 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======

2014-06-07 23:42 - 2014-06-09 19:41 - 0000098 _____ () C:\Users\test\AppData\Roaming\LauncherSettings_live.cfg
2014-09-25 14:16 - 2015-06-14 10:08 - 0001090 _____ () C:\Users\test\AppData\Roaming\SpeedRunnersLog.txt
2014-06-07 23:31 - 2014-06-09 19:39 - 0000039 _____ () C:\Users\test\AppData\Roaming\TheHunterSettings_steam_live.cfg
2016-03-09 00:18 - 2016-03-09 00:22 - 0002180 _____ () C:\Users\test\AppData\Local\settings.ini
2015-06-03 19:10 - 2015-06-03 19:10 - 0004099 _____ () C:\ProgramData\mtbjfghn.xbe

Einige Dateien in TEMP:
====================
C:\Users\test\AppData\Local\Temp\avgnt.exe


==================== Bamital & volsnap =================

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)

C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert


LastRegBack: 2016-02-10 06:24

==================== Ende von FRST.txt ============================
Es tut mir leid es zu sagen aber ich habe weitergehend keinen Ton in diversen Spielen trotz einer erneuten neu installation eines davon.
Desweiteren funktioniert WMP weitergehend nicht.

Deathkid535 10.03.2016 15:13
Aber ausserhalb von Spielen hast du Ton? Beziehungsweise in manchen davon?

Mach mal bitte das: Windows reparieren - so geht's - Anleitungen

EquinoxRB 11.03.2016 17:21
Hallo Dennis,

nach dem Windows repair hatte ich immernoch das selbe problem doch als ich Heute meinen PC startete und erst etwas gearbeitet hab und mich dann einem Spiel gewidmet habe, habe ich mitbekommen das dieses Ton hatte. Also habe ich es nochmal beendet und dem WMP getestet und da konnte ich auch wieder Musik hören.
Ich möchte hiermit nur sagen das jetzt alles wieder funktioniert und ich möchte mich bei dir von ganzem Herzen gedanken das du mir helfen konntest.

MFG Equinox

Deathkid535 12.03.2016 13:42
Hi,

freut mich :)

Dann wären wir hier durch. Deine Logs sind sauber :)

Falls du deine Passwörter nicht regelmäßig änderst - jetzt ist der Zeitpunkt dafür!

Schritt # 1: Entfernen unserer Tools

Die Reihenfolge ist hier entscheidend.
  1. Falls Defogger benutzt wurde: Defogger nochmal starten und auf re-enable klicken.
  2. Falls Combofix benutzt wurde: (Alternativ in uninstall.exe umbenennen und starten)
    • Windowstaste + R > Combofix /Uninstall (eingeben) > OK
    • Alternative: Combofix.exe in uninstall.exe umbenennen und starten
    • Combofix wird jetzt starten, sich evtl updaten und dann alle Reste von sich selbst entfernen.
  3. Downloade Dir bitte auf jeden Fall DelFix Download DelFix auf deinen Desktop:
    • Schließe alle offenen Programme.
    • Starte die delfix.exe mit einem Doppelklick.
    • Setze vor jede Funktion ein Häkchen.
    • Klicke auf Start.
    • Hinweis: DelFix entfernt u. a. alle verwendeten Programme, die Quarantäne unserer Scanner, den Java-Cache und löscht sich abschließend selbst.
    • Starte deinen Rechner abschließend neu.
  4. Sollten jetzt noch Programme aus unserer Bereinigung übrig sein kannst du sie bedenkenlos löschen.



Abschließend noch ein paar Tipps von mir:

Schritt # 2: Empfohlene Software

Habe immer ein aktuelles Antivirenprogramm deiner Wahl installiert und aktiviere die automatischen Updates (standardmäßig eingeschaltet).

Ich empfehle:

Verwende nach Möglichkeit nicht den Internet Explorer, da dieser viele Sicherheitslücken enthält. Achte aber darauf, dass er immer up to date bleibt, weil viele Programme diesen zum Anzeigen von Websites benutzen.

Alternativ kannst du verwenden:Dazu sind folgende Add-ons empfehlenswert:

http://i1366.photobucket.com/albums/...psgqd3flcy.pnguBlock Origin (Chrome) --> Blockiert Werbung. Werbung kann sehr nervig sein, aber auch auf schädliche Links verweisen. uBlock ist effizienter als der Konkurrent AdblockPlus.
http://filepony.de/icon/tiny/ghostery_chrome.pngGhostery --> Blockiert Tracker und Cookies, welche dich im Internet nachverfolgen können. Stelle jedoch bei der Installation sicher, dass du Ghostrank nicht zustimmst.

Du kannst auch http://filepony.de/icon/tiny/malware...ti_exploit.pngMalwarebytes Anti-Exploit verwenden, um aktuelle Sicherheitslücken zu stopfen.

Halte immer deine Plug-ins und Software aktuell, vor allem:Du kannst diese komfortabel regelmäßig hiermit überprüfen:

PluginCheck
Filehippo App Manager



Schritt # 3: Tipps um eine Neuinfektion zu vermeiden

Downloade nach Möglichkeit immer direkt von der Herstellerseite oder alternativ von einem sauberen Download-Portal wie FilePony.de. Von Downloadern wie die von Chip, Softonic und Sourceforge raten wir ab: CHIP-Installer - was ist das? - Anleitungen

Auch versuchen sich immer mehr Programme durch Installationsroutinen auf den PC "durchzumogeln". Das klappt ganz gut, weil viele Anwender sich diese nicht genau durchlesen und schnell durchklicken. Manchmal steht auch in den Lizenzvereinbarungen, dass ein Programm, was eigentlich als Freeware angepriesen wird, nur genutzt werden kann, wenn man sich bestimmte Toolbars oder andere Programme mitinstallieren lässt.
Da hilft es nur aufmerksam zu sein.

Ein Tool, welches dich dabei gut unterstützen kann, ist: http://filepony.de/icon/tiny/unchecky.pngUnchecky. Dieses überwacht im Hintergrund Installationsprozesse und hakt automatisch nervige Adwarekomponenten wie Toolbars ab. Falls man etwas übersieht, warnt noch ein Pop-up, bevor man fortfahren kann.

Wir raten von jeglichen Optimizern, Cleanern, SpeedUps und Ähnlichem ab, da diese Softwareprodukte meist keinen Performancegewinn bringen. Du kannst jedoch regelmäßig deinen PC mit der windowsinternen Datenträgerbereinigung behandeln.

Überprüfe regelmäßig (mind. 1x pro Monat) deinen PC mit http://filepony.de/icon/tiny/malware...ti_malware.png Malwarebytes Anti-Malware und http://filepony.de/icon/tiny/eset_online_scanner.pngESET.

Falls du dir unsicher bist, ob ein Download wirklich sauber ist, kannst du immer https://www.virustotal.com/ zurate ziehen.



Schritt # 4: Unterstütze uns!

Wenn du uns mit einer kleinen Spende unterstützen möchtest, so kannst du dies hier tun: http://www.trojaner-board.de/79994-s...ndenkonto.html :party:

Es reicht aber auch schon ein simples :dankeschoen: hier, wenn du mit uns zufrieden warst. :)

http://3.bp.blogspot.com/--h4eLCX9kl...ike-symbol.png unsere Facebook-Seite!

Bitte gib mir bescheid, wenn du das alles gelesen hast und alles klar ist, damit ich dieses Thema aus meinen Abos löschen kann.

EquinoxRB 13.03.2016 13:52
Tag Dennis,

Ich habe die letzten Schritte alle befolgt und mir die ein und andere Software heruntergelade um mich besser zu schützen.
Ich möchte mich ganz besonders bei dir bedanken für deine tolle hilfe und algemein für das bestehen dieser Seite bedanken.

Dankeschoen an Trojaner-Board für die schnelle und verständliche Hilfe <3<3

MFG Equinox

Deathkid535 13.03.2016 20:44
Gerne :)


Alle Zeitangaben in WEZ +1. Es ist jetzt 12:58 Uhr.

Copyright ©2000-2025, Trojaner-Board


Search Engine Optimization by vBSEO ©2011, Crawlability, Inc.

1 2 3 4 5 6 7 8 9 10 11 12 13 14 15 16 17 18 19 20 21 22 23 24 25 26 27 28 29 30 31 32 33 34 35 36 37 38 39 40 41 42 43 44 45 46 47 48 49 50 51 52 53 54 55 56 57 58 59 60 61 62 63 64 65 66 67 68 69 70 71 72 73 74 75 76 77 78 79 80 81 82 83 84 85 86 87 88 89 90 91 92 93 94 95 96 97 98 99 100 101 102 103 104 105 106 107 108 109 110 111 112 113 114 115 116 117 118 119 120 121 122 123 124 125 126 127 128 129 130 131