Trojaner-Board - MPC Cleaner lässt sich nicht deinstallieren

Trojaner-Board (https://www.trojaner-board.de/)

- Plagegeister aller Art und deren Bekämpfung (https://www.trojaner-board.de/plagegeister-aller-art-deren-bekaempfung/)

- - MPC Cleaner lässt sich nicht deinstallieren (https://www.trojaner-board.de/178605-mpc-cleaner-laesst-deinstallieren.html)

MPC Cleaner lässt sich nicht deinstallieren

Hallo,
leider hat sich gestern Abend bei der installation eines E-Book Readers die Software NPC Cleaner bei mir auf dem Rechner eingenistet.
Daraufhin habe ich versucht diese zu entfernen - das scheitete schon mal daran, dass entgegen der Beschreibungen im Internet, kein neuer Programmeintrag unter deinstallieren/ändern erstellt wurde.
Über den "adwcleaner_5.116" hatte ich versucht die Dateien zu entfernen, aber bei Systemstart und manuell die Verknüpfungen mit den Browsern zu entfernen, aber werden nach Systemneustart wieder Prozesse gestartet die eindeutig zu dem Programm gehören.
Es befindet sich auch weiterhin unter C:\Program Files (x86)\MPC Cleaner

Zusätzlich findet "Avast" bei einem Einzelscan der Dateien, alles mit diesem Programm "vollkommen in Ordnung ist". Ich habe zuästzlich einen komplettscan durchgeführt Avast hat hier auch keine Ergenisse gefunden. - Deshalb hierzu keine Logfile.
Über den RevoUnistaller hatte ich somit auch keine Chance, auch nicht über dessen sogenannten "Jagdmodus" war keine Deinstallation möglich.

Danke für die Hilfe und Grüße

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016

durchgeführt von Liz (Administrator) auf LIZ-PC (11-05-2016 16:35:12)

Gestartet von C:\Users\Liz\Downloads

Geladene Profile: Liz (Verfügbare Profile: Liz)

Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(AVAST Software) D:\Programme\AvastSvc.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Microsoft Corporation) C:\Windows\System32\dllhost.exe

(AVAST Software) D:\Programme\AvastUI.exe

(ROCCAT GmbH) D:\Program Files (x86)\IskuMonitor.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe

() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe

() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray.exe

(DotC United Inc) C:\Program Files (x86)\MPC Cleaner\MPCTray64.exe

(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe

(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(VS Revo Group) C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)

HKLM-x32\...\Run: [AvastUI.exe] => D:\Programme\AvastUI.exe [7391632 2016-05-11] (AVAST Software)

HKLM-x32\...\Run: [RoccatIsku] => D:\Program Files (x86)\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {8d739455-183a-11e5-91b0-806e6f6e6963} - G:\Autorun.exe

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {9eaecd58-1837-11e5-92d3-806e6f6e6963} - G:\.\Bin\ASSETUP.exe

HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => D:\Programme\ashShA64.dll [2016-05-11] (AVAST Software)
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

AutoConfigURL: [S-1-5-21-1654553621-3530598706-921729800-1000] => hxxp://unstops.org/wpad.dat?d6804a85a76645f123e543f4cba709319968704

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{26F0521D-7676-4192-A278-9CA683A0BC9B}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{850C2BEF-6678-4724-94A3-007D3C298F16}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1

ManualProxies: 0hxxp://unstops.org/wpad.dat?d6804a85a76645f123e543f4cba709319968704
 

Internet Explorer:

==================

BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\aswWebRepIE64.dll [2016-05-11] (AVAST Software)

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-10] (Oracle Corporation)

BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> D:\Programme\aswWebRepIE.dll [2016-05-11] (AVAST Software)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-10] (Oracle Corporation)
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_213.dll [2016-04-09] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_213.dll [2016-04-09] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-10] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-10] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2015-12-18] (Adobe Systems Inc.)

FF HKLM\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\WebRep\FF

FF Extension: Avast Online Security - D:\Programme\WebRep\FF [2016-05-11]

FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - D:\Programme\WebRep\FF

FF HKLM-x32\...\Firefox\Extensions: [sp@avast.com] - D:\Programme\SafePrice\FF

FF Extension: Avast SafePrice - D:\Programme\SafePrice\FF [2016-05-11]
 

Chrome: 

=======

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]

CHR Extension: (Adblock Plus) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]

CHR Extension: (Google-Suche) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]

CHR Extension: (CyberGhost VPN - Kostenloser Proxy) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnikgemihknccdjaihjnfbapinljpi [2015-08-09]

CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-21]

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Extension: (Google Präsentationen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-11]

CHR Extension: (Google Docs) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-11]

CHR Extension: (Google Drive) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-11]

CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-11]

CHR Extension: (Avast SafePrice) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\eofcbnmajmjmplflapaojjnihcjkigck [2016-05-11]

CHR Extension: (Google Tabellen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-11]

CHR Extension: (Google Docs Offline) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-11]

CHR Extension: (Avast Online Security) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\gomekmidlodglbbmalcneegieacbdmki [2016-05-11]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-11]

CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-11]

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 2

CHR HKLM-x32\...\Chrome\Extension: [eofcbnmajmjmplflapaojjnihcjkigck] - D:\Programme\WebRep\Chrome\aswWebRepChromeSp.crx [2016-05-11]

CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - D:\Programme\WebRep\Chrome\aswWebRepChrome.crx [2016-05-11]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-04-25] (ASUSTeK Computer Inc.)

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]

R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe [394040 2014-07-17] (ASUSTeK Computer Inc.)

R2 avast! Antivirus; D:\Programme\AvastSvc.exe [243296 2016-05-11] (AVAST Software)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)

R2 MPCProtectService; C:\Program Files (x86)\MPC Cleaner\MPCProtectService.exe [350688 2016-05-10] (DotC United Inc)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)

S3 Origin Client Service; D:\Programs\Origin\OriginClientService.exe [2104840 2016-03-06] (Electronic Arts)

R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()

R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)

S2 Woheghserverservice; "C:\Program Files (x86)\Wohegh\Woheghserverservice.exe" {79740E79-A383-47A7-B513-3DF6563D007F} {A16B1AF7-982D-40C3-B5C1-633E1A6A6678} [X]
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()

R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [37656 2016-05-11] (AVAST Software)

R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [37144 2016-05-11] (AVAST Software)

R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [107792 2016-05-11] (AVAST Software)

R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [103064 2016-05-11] (AVAST Software)

R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [74544 2016-05-11] (AVAST Software)

R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1070904 2016-05-11] (AVAST Software)

R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [465792 2016-05-11] (AVAST Software)

R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [166432 2016-05-11] (AVAST Software)

R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [287528 2016-05-11] (AVAST Software)

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-05-11] ()

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

R1 MPCKpt; C:\Windows\System32\DRIVERS\MPCKpt.sys [60136 2016-05-10] (DotC United Inc)

S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)

R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)

S1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)

R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)

R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)

R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)

R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]

S3 MSICDSetup; \??\G:\CDriver64.sys [X]

S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]

S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-11 16:12 - 2016-05-11 16:12 - 00067119 _____ C:\Users\Liz\Downloads\Addition.txt

2016-05-11 16:11 - 2016-05-11 16:35 - 00017048 _____ C:\Users\Liz\Downloads\FRST.txt

2016-05-11 16:11 - 2016-05-11 16:35 - 00000000 ____D C:\FRST

2016-05-11 16:11 - 2016-05-11 16:11 - 02381312 _____ (Farbar) C:\Users\Liz\Downloads\FRST64.exe

2016-05-11 15:53 - 2016-05-11 15:53 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC

2016-05-11 14:13 - 2016-05-11 14:13 - 00000000 ____D C:\Program Files (x86)\hohobnd

2016-05-11 01:22 - 2016-05-11 01:22 - 00000000 ____D C:\Users\Liz\AppData\Roaming\MCorp

2016-05-11 01:12 - 2016-05-11 01:12 - 02838216 _____ (ESET) C:\Users\Liz\Downloads\eset_smart_security90_live_installer_.exe

2016-05-11 01:11 - 2016-05-11 01:11 - 00003254 _____ C:\Windows\System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9}

2016-05-11 01:03 - 2016-05-11 01:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Liz\Downloads\revosetup.exe

2016-05-11 01:03 - 2016-05-11 01:03 - 00001269 _____ C:\Users\Liz\Desktop\Revo Uninstaller.lnk

2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2016-05-11 00:44 - 2016-05-11 01:16 - 00000000 ____D C:\AdwCleaner

2016-05-11 00:43 - 2016-05-11 00:43 - 03640384 _____ C:\Users\Liz\Downloads\adwcleaner_5.116.exe

2016-05-11 00:17 - 2016-05-11 00:17 - 00398152 _____ (AVAST Software) C:\Windows\system32\aswBoot.exe

2016-05-11 00:17 - 2016-05-11 00:17 - 00052184 _____ (AVAST Software) C:\Windows\avastSS.scr

2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 ____D C:\sh4ldr

2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 _____ C:\autoexec.bat

2016-05-11 00:12 - 2016-05-11 15:53 - 00000000 ____D C:\Program Files\Enigma Software Group

2016-05-11 00:12 - 2016-05-11 00:12 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2016-05-11 00:11 - 2016-05-11 00:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer (1).exe

2016-05-10 23:55 - 2016-05-10 23:55 - 03295920 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer.exe

2016-05-10 23:17 - 2016-05-10 23:17 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Mozilla

2016-05-10 23:06 - 2016-05-10 23:06 - 00000000 ____D C:\Windows\pss

2016-05-10 22:58 - 2016-05-10 22:58 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Brotsoft

2016-05-10 22:53 - 2016-05-10 22:57 - 00000000 ____D C:\Program Files (x86)\MPC Cleaner

2016-05-10 22:53 - 2016-05-10 22:53 - 00060136 ____N (DotC United Inc) C:\Windows\system32\Drivers\MPCKpt.sys

2016-05-10 22:52 - 2016-05-11 00:59 - 00000000 ____D C:\Program Files (x86)\Wohegh

2016-05-10 22:52 - 2016-05-10 22:52 - 00008956 _____ C:\Windows\System32\Tasks\Wohegh Server

2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\Users\Public\Documents\dmp

2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\extensions

2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung.lnk

2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung (2).lnk

2016-05-01 18:07 - 2016-05-01 18:07 - 00001071 _____ C:\Users\Liz\Desktop\FRITZ!Box Fon WLAN 7270 v3 (UI) - Verknüpfung.lnk

2016-04-24 20:49 - 2016-04-24 21:00 - 00000000 ____D C:\Users\Liz\AppData\RoamingLow

2016-04-24 19:29 - 2016-04-24 19:29 - 00000000 ____D C:\Users\Liz\AppData\Roaming\com.ohnoo.Tsioque

2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (3).pdf

2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (2).pdf

2016-04-23 21:36 - 2016-04-23 21:36 - 00027704 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (1).pdf

2016-04-22 22:35 - 2016-04-25 11:41 - 00000000 ____D C:\Users\Liz\AppData\Local\Spotify

2016-04-22 22:35 - 2016-04-22 22:35 - 00001797 _____ C:\Users\Liz\Desktop\Spotify.lnk

2016-04-22 22:35 - 2016-04-22 22:35 - 00001783 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2016-04-22 22:34 - 2016-04-25 11:46 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Spotify

2016-04-22 22:34 - 2016-04-22 22:34 - 00350936 _____ (Spotify Ltd) C:\Users\Liz\Downloads\SpotifySetup.exe

2016-04-12 21:26 - 2016-04-04 20:14 - 00038120 _____ (Microsoft Corporation) C:\Windows\system32\CompatTelRunner.exe

2016-04-12 21:26 - 2016-04-04 20:02 - 01169408 _____ (Microsoft Corporation) C:\Windows\system32\aeinv.dll

2016-04-12 21:26 - 2016-04-02 15:08 - 01386496 _____ (Microsoft Corporation) C:\Windows\system32\appraiser.dll

2016-04-12 21:26 - 2016-03-31 21:25 - 00394952 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-04-12 21:26 - 2016-03-31 20:41 - 00346320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-04-12 21:26 - 2016-03-31 02:40 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-04-12 21:26 - 2016-03-31 02:40 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-04-12 21:26 - 2016-03-31 02:31 - 02892800 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-04-12 21:26 - 2016-03-31 02:28 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-04-12 21:26 - 2016-03-31 02:28 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-04-12 21:26 - 2016-03-31 02:27 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-04-12 21:26 - 2016-03-31 02:21 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-04-12 21:26 - 2016-03-31 02:17 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-04-12 21:26 - 2016-03-31 02:11 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-04-12 21:26 - 2016-03-31 02:03 - 20352512 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-04-12 21:26 - 2016-03-31 02:02 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-04-12 21:26 - 2016-03-31 02:00 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-04-12 21:26 - 2016-03-31 01:59 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-04-12 21:26 - 2016-03-31 01:55 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-04-12 21:26 - 2016-03-31 01:53 - 00496640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-04-12 21:26 - 2016-03-31 01:53 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-04-12 21:26 - 2016-03-31 01:52 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-04-12 21:26 - 2016-03-31 01:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-04-12 21:26 - 2016-03-31 01:52 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-04-12 21:26 - 2016-03-31 01:51 - 02285056 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-04-12 21:26 - 2016-03-31 01:48 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-04-12 21:26 - 2016-03-31 01:48 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-04-12 21:26 - 2016-03-31 01:46 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-04-12 21:26 - 2016-03-31 01:45 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-04-12 21:26 - 2016-03-31 01:45 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-04-12 21:26 - 2016-03-31 01:45 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-04-12 21:26 - 2016-03-31 01:43 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-04-12 21:26 - 2016-03-31 01:43 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-04-12 21:26 - 2016-03-31 01:42 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-04-12 21:26 - 2016-03-31 01:38 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-04-12 21:26 - 2016-03-31 01:34 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-04-12 21:26 - 2016-03-31 01:33 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-04-12 21:26 - 2016-03-31 01:31 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-04-12 21:26 - 2016-03-31 01:30 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-04-12 21:26 - 2016-03-31 01:29 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-04-12 21:26 - 2016-03-31 01:24 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-04-12 21:26 - 2016-03-31 01:23 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-04-12 21:26 - 2016-03-31 01:23 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-04-12 21:26 - 2016-03-31 01:22 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-04-12 21:26 - 2016-03-31 01:21 - 13811712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-04-12 21:26 - 2016-03-31 01:18 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-04-12 21:26 - 2016-03-31 01:06 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-04-12 21:26 - 2016-03-31 01:02 - 01311744 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-04-12 21:26 - 2016-03-31 01:00 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-04-12 21:26 - 2016-03-29 19:53 - 03216896 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-04-12 21:26 - 2016-03-23 16:02 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\aepic.dll

2016-04-12 21:26 - 2016-03-18 01:04 - 05551336 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-04-12 21:26 - 2016-03-18 01:04 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-04-12 21:26 - 2016-03-18 01:04 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-04-12 21:26 - 2016-03-18 01:04 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-04-12 21:26 - 2016-03-18 01:01 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-04-12 21:26 - 2016-03-18 01:01 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2016-04-12 21:26 - 2016-03-18 00:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-04-12 21:26 - 2016-03-18 00:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-04-12 21:26 - 2016-03-18 00:57 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-04-12 21:26 - 2016-03-18 00:57 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-04-12 21:26 - 2016-03-18 00:57 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-04-12 21:26 - 2016-03-18 00:57 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-04-12 21:26 - 2016-03-18 00:57 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-04-12 21:26 - 2016-03-18 00:56 - 02084864 _____ (Microsoft Corporation) C:\Windows\system32\ole32.dll

2016-04-12 21:26 - 2016-03-18 00:56 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-04-12 21:26 - 2016-03-18 00:54 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-04-12 21:26 - 2016-03-18 00:54 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-04-12 21:26 - 2016-03-18 00:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-04-12 21:26 - 2016-03-18 00:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-04-12 21:26 - 2016-03-18 00:53 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-04-12 21:26 - 2016-03-18 00:53 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-04-12 21:26 - 2016-03-18 00:53 - 00731136 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-04-12 21:26 - 2016-03-18 00:53 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:50 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:36 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-04-12 21:26 - 2016-03-18 00:36 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-04-12 21:26 - 2016-03-18 00:33 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-04-12 21:26 - 2016-03-18 00:31 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-04-12 21:26 - 2016-03-18 00:31 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-04-12 21:26 - 2016-03-18 00:31 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-04-12 21:26 - 2016-03-18 00:31 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-04-12 21:26 - 2016-03-18 00:31 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-04-12 21:26 - 2016-03-18 00:30 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-04-12 21:26 - 2016-03-18 00:30 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-04-12 21:26 - 2016-03-18 00:30 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-04-12 21:26 - 2016-03-18 00:29 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-04-12 21:26 - 2016-03-18 00:29 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2016-04-12 21:26 - 2016-03-18 00:29 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-04-12 21:26 - 2016-03-18 00:28 - 01414144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ole32.dll

2016-04-12 21:26 - 2016-03-18 00:27 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-04-12 21:26 - 2016-03-18 00:27 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-04-12 21:26 - 2016-03-18 00:27 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-04-12 21:26 - 2016-03-18 00:27 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-04-12 21:26 - 2016-03-18 00:26 - 00553984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-04-12 21:26 - 2016-03-18 00:25 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-04-12 21:26 - 2016-03-18 00:24 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-04-12 21:26 - 2016-03-17 23:53 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-04-12 21:26 - 2016-03-17 23:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-04-12 21:26 - 2016-03-17 23:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-04-12 21:26 - 2016-03-17 23:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-04-12 21:26 - 2016-03-17 23:44 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-04-12 21:26 - 2016-03-17 23:43 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-04-12 21:26 - 2016-03-17 23:41 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-04-12 21:26 - 2016-03-17 23:38 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-04-12 21:26 - 2016-03-17 23:37 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-04-12 21:26 - 2016-03-17 23:37 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-04-12 21:26 - 2016-03-17 23:35 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-04-12 21:26 - 2016-03-17 23:35 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-04-12 21:26 - 2016-03-17 23:30 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-04-12 21:26 - 2016-03-17 23:30 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-04-12 21:26 - 2016-03-17 23:30 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-04-12 21:26 - 2016-03-17 23:30 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-04-12 21:26 - 2016-03-17 23:29 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-04-12 21:26 - 2016-03-17 23:29 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-04-12 21:26 - 2016-03-17 23:29 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-04-12 21:26 - 2016-03-17 23:29 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-04-12 21:26 - 2016-03-17 23:29 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-04-12 21:26 - 2016-03-17 20:04 - 00698368 _____ (Microsoft Corporation) C:\Windows\system32\generaltel.dll

2016-04-12 21:26 - 2016-03-17 20:04 - 00499200 _____ (Microsoft Corporation) C:\Windows\system32\devinv.dll

2016-04-12 21:26 - 2016-03-17 20:04 - 00279040 _____ (Microsoft Corporation) C:\Windows\system32\invagent.dll

2016-04-12 21:26 - 2016-03-17 20:04 - 00076800 _____ (Microsoft Corporation) C:\Windows\system32\acmigration.dll

2016-04-12 21:26 - 2016-03-16 20:50 - 00156672 _____ (Microsoft Corporation) C:\Windows\system32\mtxoci.dll

2016-04-12 21:26 - 2016-03-16 20:28 - 00176128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msorcl32.dll

2016-04-12 21:26 - 2016-03-16 20:28 - 00111616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mtxoci.dll

2016-04-12 21:26 - 2016-03-16 02:16 - 00760320 _____ (Microsoft Corporation) C:\Windows\system32\samsrv.dll

2016-04-12 21:26 - 2016-03-16 02:16 - 00106496 _____ (Microsoft Corporation) C:\Windows\system32\samlib.dll

2016-04-12 21:26 - 2016-03-16 01:53 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\samlib.dll

2016-04-12 21:26 - 2016-03-11 20:57 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-04-12 21:26 - 2016-03-11 20:35 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2016-04-12 21:26 - 2016-03-06 20:53 - 01885696 _____ (Microsoft Corporation) C:\Windows\system32\msxml3.dll

2016-04-12 21:26 - 2016-03-06 20:53 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\msxml3r.dll

2016-04-12 21:26 - 2016-03-06 20:38 - 01240576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3.dll

2016-04-12 21:26 - 2016-03-06 20:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msxml3r.dll

2016-04-12 21:26 - 2016-02-05 20:56 - 00020480 _____ (Microsoft Corporation) C:\Windows\system32\tbs.dll

2016-04-12 21:26 - 2016-02-05 20:54 - 00109568 _____ (Microsoft Corporation) C:\Windows\system32\fveapibase.dll

2016-04-12 21:26 - 2016-02-05 19:33 - 00015360 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tbs.dll

2016-04-12 21:26 - 2016-02-02 20:57 - 00511488 _____ (Microsoft Corporation) C:\Windows\system32\rpcss.dll

2016-04-12 21:26 - 2016-01-21 02:51 - 00073664 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\disk.sys

2016-04-12 21:26 - 2015-06-03 22:21 - 00451080 _____ (Microsoft Corporation) C:\Windows\system32\fveapi.dll

2016-04-12 21:25 - 2016-03-31 02:54 - 25817600 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-04-12 21:25 - 2016-03-31 02:27 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-04-12 21:25 - 2016-03-31 02:27 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-04-12 21:25 - 2016-03-31 02:25 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-04-12 21:25 - 2016-03-31 02:22 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-04-12 21:25 - 2016-03-31 02:19 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-04-12 21:25 - 2016-03-31 02:17 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-04-12 21:25 - 2016-03-31 02:17 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-04-12 21:25 - 2016-03-31 02:17 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-04-12 21:25 - 2016-03-31 02:08 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-04-12 21:25 - 2016-03-31 01:57 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-04-12 21:25 - 2016-03-31 01:56 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-04-12 21:25 - 2016-03-31 01:52 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-04-12 21:25 - 2016-03-31 01:45 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-04-12 21:25 - 2016-03-31 01:42 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-04-12 21:25 - 2016-03-31 01:39 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-04-12 21:25 - 2016-03-31 01:31 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-04-12 21:25 - 2016-03-31 01:30 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-04-12 21:25 - 2016-03-31 01:30 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-04-12 21:25 - 2016-03-31 01:05 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-11 16:20 - 2015-06-21 19:11 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-05-11 16:07 - 2015-06-07 21:49 - 00000000 ____D C:\Steam

2016-05-11 16:00 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-05-11 16:00 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-05-11 15:59 - 2011-04-12 09:43 - 03608530 _____ C:\Windows\system32\perfh007.dat

2016-05-11 15:59 - 2011-04-12 09:43 - 01053368 _____ C:\Windows\system32\perfc007.dat

2016-05-11 15:59 - 2009-07-14 07:13 - 00006434 _____ C:\Windows\system32\PerfStringBackup.INI

2016-05-11 15:58 - 2015-06-21 19:52 - 00000000 _____ C:\Windows\Path.idx

2016-05-11 15:53 - 2015-10-10 21:03 - 00000000 ____D C:\ProgramData\NVIDIA

2016-05-11 15:53 - 2015-06-21 19:47 - 01048576 _____ C:\Windows\PE_Rom.dll

2016-05-11 15:53 - 2015-06-21 19:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-05-11 15:53 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-05-11 15:50 - 2015-07-19 00:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-05-11 14:15 - 2015-06-21 19:11 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2016-05-11 14:15 - 2015-06-21 19:11 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2016-05-11 00:57 - 2015-06-21 20:52 - 00004132 _____ C:\Windows\System32\Tasks\avast! Emergency Update

2016-05-11 00:47 - 2016-03-23 20:03 - 00003908 _____ C:\Windows\System32\Tasks\SafeZone scheduled Autoupdate 1458756190

2016-05-11 00:46 - 2016-03-23 20:03 - 00001009 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avast SafeZone Browser.lnk

2016-05-11 00:46 - 2016-03-23 20:03 - 00000948 _____ C:\Users\Public\Desktop\Avast SafeZone Browser.lnk

2016-05-11 00:46 - 2015-06-21 19:12 - 00001295 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-05-11 00:46 - 2015-06-21 19:12 - 00001283 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-05-11 00:46 - 2015-06-21 19:09 - 00000996 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2016-05-11 00:17 - 2016-03-23 20:03 - 00037144 _____ (AVAST Software) C:\Windows\system32\Drivers\aswKbd.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 01070904 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSnx.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00465792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswSP.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00287528 _____ (AVAST Software) C:\Windows\system32\Drivers\aswVmm.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00166432 _____ (AVAST Software) C:\Windows\system32\Drivers\aswStm.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00107792 _____ (AVAST Software) C:\Windows\system32\Drivers\aswMonFlt.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00103064 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRdr2.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00074544 _____ (AVAST Software) C:\Windows\system32\Drivers\aswRvrt.sys

2016-05-11 00:17 - 2015-06-21 20:52 - 00037656 _____ (AVAST Software) C:\Windows\system32\Drivers\aswHwid.sys

2016-05-11 00:13 - 2015-06-21 19:09 - 00000000 ____D C:\Users\Liz

2016-05-10 23:16 - 2016-03-07 19:27 - 00000000 ____D C:\Program Files (x86)\Raptr Inc

2016-05-10 23:16 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\system32\GWX

2016-05-09 23:36 - 2015-06-25 00:28 - 00000000 ____D C:\Windows\system32\appraiser

2016-05-03 00:08 - 2015-06-23 12:37 - 00002142 _____ C:\Windows\MB.idx

2016-04-28 22:30 - 2015-10-10 15:03 - 00000000 ____D C:\Users\Liz\AppData\Local\ElevatedDiagnostics

2016-04-28 22:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2016-04-22 22:07 - 2015-06-22 20:27 - 00000080 _____ C:\Users\Liz\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦

2016-04-22 22:06 - 2015-06-22 20:26 - 00000000 ____D C:\Program Files\Rockstar Games

2016-04-22 22:06 - 2015-06-21 23:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2016-04-21 15:05 - 2010-11-21 05:27 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2016-04-18 21:03 - 2015-06-21 19:35 - 00000000 ____D C:\Users\Liz\AppData\Local\Ajort

2016-04-17 22:46 - 2015-08-06 20:04 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Raptr

2016-04-14 20:41 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2016-04-13 20:06 - 2009-07-14 06:45 - 00295312 _____ C:\Windows\system32\FNTCACHE.DAT

2016-04-13 00:16 - 2015-06-23 21:37 - 135176864 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-04-13 00:16 - 2015-06-23 21:37 - 00000000 ____D C:\Windows\system32\MRT
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-04-05 20:57 - 2016-04-05 20:57 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

2016-03-30 20:24 - 2016-03-30 20:24 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
 

Einige Dateien in TEMP:

====================

C:\Users\Liz\AppData\Local\Temp\127E.tmp.exe

C:\Users\Liz\AppData\Local\Temp\270.tmp.exe

C:\Users\Liz\AppData\Local\Temp\37F5.tmp.exe

C:\Users\Liz\AppData\Local\Temp\4AFA.tmp.exe

C:\Users\Liz\AppData\Local\Temp\4FF5.tmp.exe

C:\Users\Liz\AppData\Local\Temp\6A28.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7006.tmp.exe

C:\Users\Liz\AppData\Local\Temp\737B.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7468.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7772.tmp.exe

C:\Users\Liz\AppData\Local\Temp\9156.tmp.exe

C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe

C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe

C:\Users\Liz\AppData\Local\Temp\AMDCleanupUtility.exe

C:\Users\Liz\AppData\Local\Temp\AutoDetectUtilApp.exe

C:\Users\Liz\AppData\Local\Temp\AutoWifi.exe

C:\Users\Liz\AppData\Local\Temp\BBB3.tmp.exe

C:\Users\Liz\AppData\Local\Temp\ChromeStandaloneSetup_M31_1650_59.exe

C:\Users\Liz\AppData\Local\Temp\Cleanup.dll

C:\Users\Liz\AppData\Local\Temp\devcon64.exe

C:\Users\Liz\AppData\Local\Temp\E092.tmp.exe

C:\Users\Liz\AppData\Local\Temp\GoogleDriveSync_1_15_6464_0228.exe

C:\Users\Liz\AppData\Local\Temp\GTA_V_Launcher_1_0_393_2.exe

C:\Users\Liz\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe

C:\Users\Liz\AppData\Local\Temp\Gw2.exe

C:\Users\Liz\AppData\Local\Temp\IrxJVuASnC.exe

C:\Users\Liz\AppData\Local\Temp\jre-8u73-windows-au.exe

C:\Users\Liz\AppData\Local\Temp\libeay32.dll

C:\Users\Liz\AppData\Local\Temp\msvcm80.dll

C:\Users\Liz\AppData\Local\Temp\msvcp80.dll

C:\Users\Liz\AppData\Local\Temp\msvcr120.dll

C:\Users\Liz\AppData\Local\Temp\msvcr80.dll

C:\Users\Liz\AppData\Local\Temp\nsl765D.tmp.exe

C:\Users\Liz\AppData\Local\Temp\playstv_patch.exe

C:\Users\Liz\AppData\Local\Temp\raptrpatch.exe

C:\Users\Liz\AppData\Local\Temp\raptr_stub.exe

C:\Users\Liz\AppData\Local\Temp\Social%20Club%20v1.1.6.1%20Setup.exe

C:\Users\Liz\AppData\Local\Temp\Social-Club-v1.1.7.8-Setup.exe

C:\Users\Liz\AppData\Local\Temp\sqlite3.dll

C:\Users\Liz\AppData\Local\Temp\tmp8075.exe

C:\Users\Liz\AppData\Local\Temp\tmpDC7A.exe

C:\Users\Liz\AppData\Local\Temp\Wmga1FZum8.exe

C:\Users\Liz\AppData\Local\Temp\xmlUpdater.exe

C:\Users\Liz\AppData\Local\Temp\ytb.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-05-10 19:17
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016

durchgeführt von Liz (2016-05-11 16:35:22)

Gestartet von C:\Users\Liz\Downloads

Windows 7 Professional Service Pack 1 (X64) (2015-06-21 17:09:01)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1654553621-3530598706-921729800-500 - Administrator - Disabled)

Gast (S-1-5-21-1654553621-3530598706-921729800-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1654553621-3530598706-921729800-1002 - Limited - Enabled)

Liz (S-1-5-21-1654553621-3530598706-921729800-1000 - Administrator - Enabled) => C:\Users\Liz
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B}

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736}

FW: avast! Antivirus (Disabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.010.20060 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.213 - Adobe Systems Incorporated)

Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version:  - Triumph Studios)

AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.83 - ASUSTeK Computer Inc.)

Aj-Driver (HKLM-x32\...\{46180592-ADAC-4144-9159-771781907C0D}) (Version: 1.00.1001 - Ajort)

Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version:  - Spicy Horse Games)

Anno 1404 (HKLM-x32\...\Steam App 33250) (Version:  - Blue Byte)

Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version:  - Blue Byte)

ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version:  - Studio Wildcard)

ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)

Avast Pro Antivirus (HKLM-x32\...\Avast) (Version: 11.2.2262 - AVAST Software)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock 2 (HKLM-x32\...\Steam App 8850) (Version:  - 2K Marin)

Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)

Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden

Borderlands (HKLM-x32\...\Steam App 8980) (Version:  - Gearbox Software)

Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version:  - 2K Australia)

Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version:  - Paradox Development Studio)

CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)

Day of the Tentacle Remastered (HKLM\...\Steam App 388210) (Version:  - Double Fine Productions)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version:  - Rising Star Games)

Dear Esther (HKLM-x32\...\Steam App 203810) (Version:  - thechineseroom & Robert Briscoe)

Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.16.61.1020 - Electronic Arts Inc.)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)

FINAL FANTASY XIII (HKLM-x32\...\Steam App 292120) (Version:  - SQUARE ENIX)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.94 - Google Inc.)

Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden

Grand Ages Medieval (HKLM-x32\...\{A80447F5-5199-4623-87F2-8AEDB61D603E}) (Version: 1.0.0.0 - Gaming Minds Studios GmbH)

Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)

GUILD WARS (HKLM-x32\...\Guild Wars) (Version:  - )

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

H1Z1 (HKLM-x32\...\Steam App 295110) (Version:  - Daybreak Games)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden

Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Jurassic Park: The Game (HKLM-x32\...\Steam App 201830) (Version:  - Telltale Games)

Kingdom Come: Deliverance (Alpha Access) (HKLM-x32\...\Steam App 286860) (Version:  - )

King's Quest (HKLM-x32\...\Steam App 345390) (Version:  - The Odd Gentlemen)

Layers of Fear (HKLM-x32\...\Steam App 391720) (Version:  - Bloober Team SA)

Legend of Grimrock 2 (HKLM-x32\...\Steam App 251730) (Version:  - Almost Human Games)

Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)

Lost Horizon - Demo (HKLM-x32\...\Steam App 40360) (Version:  - Animation Arts)

Magicka 2 (HKLM-x32\...\Steam App 238370) (Version:  - Pieces Interactive)

Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version:  - Forever Entertainment S. A.)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version:  - Rogue Factor)

MSI Kombustor 2.5.9 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version:  - MSI Co., LTD)

MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version:  - Airtight Games)

NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)

Nether (HKLM-x32\...\Steam App 247730) (Version:  - Phosphor Games)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.1 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)

NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)

NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)

OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)

Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)

Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version:  - Ndemic Creations)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)

Raptr (HKLM-x32\...\Raptr) (Version: 5.1.2-r111396-release - Raptr, Inc)

Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)

Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)

Renowned Explorers: International Society (HKLM-x32\...\Steam App 296970) (Version:  - Abbey Games)

Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version:  - Capcom)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)

RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

SafeZone Stable 1.48.2066.101 (x32 Version: 1.48.2066.101 - Avast Software) Hidden

Shadows: Price For Our Sins (HKLM-x32\...\Steam App 260270) (Version:  - 8th Floor Games)

SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)

Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)

Sonic Radar II (HKLM\...\{203BCA8D-BC00-4DD5-85DF-2F84DB803B57}) (Version: 2.1.001 - ASUSTeKcomputer.Inc)

South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\Spotify) (Version: 1.0.27.75.gdc223232 - Spotify AB)

STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts)

STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)

The Detail (HKLM-x32\...\Steam App 319970) (Version:  - Rival Games Ltd)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Lab (HKLM\...\Steam App 450390) (Version:  - Valve)

The Lost Crown (HKLM-x32\...\Steam App 291710) (Version:  - Darkling Room)

The Walking Dead: Michonne (HKLM-x32\...\Steam App 429570) (Version:  - Telltale Games)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

Zombie Army Trilogy (HKLM-x32\...\Steam App 301640) (Version:  - Rebellion)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {1CE5705D-4E51-47AE-9349-4009ED3EFC6C} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)

Task: {227CA069-0FFD-42D3-AFF4-519A6F36B79B} - System32\Tasks\{F3E407B1-C03C-46F9-98BC-CC07966D1DF5} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\Setupx32.exe" -d "C:\Program Files (x86)\MSI\Live Update"

Task: {297F3776-0AD7-41BC-A2A9-96A8A70D21D5} - System32\Tasks\Microsoft\Windows\Setup\gwx\rundetector => C:\Windows\system32\GWX\GWXDetector.exe [2016-04-24] (Microsoft Corporation)

Task: {3BF2E5AA-6852-44AB-84BE-C83F45B91553} - System32\Tasks\Wohegh Server => C:\Program Files (x86)\Wohegh\Woheghservertask.exe [2016-05-10] ()

Task: {5633B10A-8CC2-4C4C-9FBA-8BF87989CE3C} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2014-07-02] ()

Task: {69CA2751-F2C2-496F-AC75-809F6B75AB7F} - System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"

Task: {710770D0-CB56-4B15-A68C-B1D8229D0946} - System32\Tasks\avast! Emergency Update => D:\Programme\AvastEmUpdate.exe [2016-05-11] (AVAST Software)

Task: {8C6326C6-3B88-4122-8793-14E18850D660} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2014-03-27] ()

Task: {A3036338-26A9-42D0-AB49-2FAFAB1E8DB1} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2015-12-14] (Adobe Systems Incorporated)

Task: {AF91B4EA-1E35-4FAF-90B7-C4C79022D40E} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2014-07-02] (TODO: <Company name>)

Task: {B79AE05D-C3EB-495D-B597-570412341958} - System32\Tasks\SafeZone scheduled Autoupdate 1458756190 => C:\Program Files\AVAST Software\SZBrowser\launcher.exe [2016-04-15] (Avast Software)

Task: {C2F5D806-A594-4E8E-A3A6-1167D7083785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {CA2E3590-06B6-4B9B-9E36-9A3BEE3C1A18} - System32\Tasks\{0D8FD790-C011-4F90-93F5-6ED1BADD0E21} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\MSISetup\MSISetup.exe" -d "C:\Program Files (x86)\MSI\Live Update\MSISetup"

Task: {CBAB60EB-E5ED-4B03-80DB-9958213F8BB3} - System32\Tasks\{FB843C46-89EC-4536-A325-CEB922B4505C} => pcalua.exe -a "C:\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Steam\steamapps\common\Left 4 Dead 2" -c /register

Task: {CDD0FAFA-CE46-44F9-A4C6-1103FC158572} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)

Task: {D275A2D5-8035-4889-AB4F-741F906D759B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)

Task: {E961AEE2-7294-4EB3-BFB4-AE431C982A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-04-09] (Adobe Systems Incorporated)

Task: {FB567471-D278-4652-BADC-8CA44508C87C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2014-06-25] (ASUSTeK Computer Inc.)

Task: {FB5C775E-E2A7-4CEA-9480-63E754E10EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {FF4DDFCB-E2B9-49A3-B7F7-4653B91F1194} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-10-10 21:02 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2015-04-15 22:13 - 2015-04-15 22:13 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll

2015-06-21 19:17 - 2014-05-22 10:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll

2015-06-21 19:12 - 2014-01-28 05:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2015-06-21 19:37 - 2014-07-02 17:41 - 01270584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

2015-06-21 19:37 - 2014-03-27 19:33 - 01430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

2015-06-21 19:14 - 2014-04-24 08:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe

2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

2015-06-21 19:38 - 2014-08-01 14:58 - 01065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe

2015-06-21 19:38 - 2014-07-25 16:32 - 00036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

2016-05-11 00:17 - 2016-05-11 00:17 - 00123344 _____ () D:\Programme\log.dll

2016-05-11 00:17 - 2016-05-11 00:17 - 00135816 _____ () D:\Programme\JsonRpcServer.dll

2016-05-11 14:04 - 2016-05-11 14:04 - 02902528 _____ () D:\Programme\defs\16051100\algo.dll

2016-05-11 00:17 - 2016-05-11 00:17 - 00479680 _____ () D:\Programme\ffl2.dll

2015-12-07 00:04 - 2015-12-07 00:04 - 40539648 _____ () D:\Programme\libcef.dll

2016-01-24 17:26 - 2010-11-04 12:48 - 00061440 _____ () D:\Program Files (x86)\hiddriver.dll

2015-06-21 19:12 - 2016-05-11 15:53 - 00043152 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2015-06-21 19:12 - 2014-01-28 05:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2015-06-21 19:37 - 2014-07-09 11:05 - 00711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00851456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00801792 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00807936 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll

2015-06-21 19:37 - 2014-03-27 19:32 - 05778096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll

2015-06-21 19:37 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll

2015-06-21 19:38 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll

2015-06-21 19:38 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll

2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2016-04-30 00:56 - 2016-04-28 01:25 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libglesv2.dll

2016-04-30 00:56 - 2016-04-28 01:25 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.94\libegl.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\clonewarsadventures.com -> clonewarsadventures.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\freerealms.com -> freerealms.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\soe.com -> soe.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\sony.com -> sony.com
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2016-05-10 22:53 - 00001006 ____N C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1       down.baidu2016.com

127.0.0.1       123.sogou.com

127.0.0.1       www.czzsyzgm.com

127.0.0.1       www.czzsyzxl.com

127.0.0.1       union.baidu2019.com
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 8.8.8.8 - 8.8.4.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NarutoOnline.lnk => C:\Windows\pss\NarutoOnline.lnk.CommonStartup

MSCONFIG\startupreg: Aj-DriverV2 => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\AjCl.exe"

MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min

MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60

MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup

MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup

MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Spotify => "C:\Users\Liz\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Liz\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{D0D533DA-E534-4CFF-B98D-B36B06085542}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{7B082FCD-6EF9-433B-A14B-ABCD111DFDA0}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{CE4C3809-D71B-45F5-9D2B-A601DB617801}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{8A6780DB-A24A-443A-AB22-D718D526EDDC}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{716BFE09-2751-4869-88C3-377946FE6406}] => (Allow) C:\Steam\Steam.exe

FirewallRules: [{63253ABC-4B77-427C-BBCD-C34F444BFC31}] => (Allow) C:\Steam\Steam.exe

FirewallRules: [{0EFFD12B-6C33-4E21-A5FF-18248268AA1E}] => (Allow) C:\Steam\bin\steamwebhelper.exe

FirewallRules: [{EF7258DF-5045-446A-BF6A-EEDB0CF5C5C7}] => (Allow) C:\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{DC94BA27-A326-4564-9D5C-8F4556CC4136}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [UDP Query User{BC270F78-4F7B-4A29-8203-F1A07EF24940}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{112F4EB9-8FD8-49FA-8342-F77602D7DF64}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe

FirewallRules: [{46F36197-4208-4EE7-8ED8-3018E94ED72C}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe

FirewallRules: [{3CE5CEE0-77AF-4ADD-880F-5CDB833FB7D0}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe

FirewallRules: [{4167AAD9-BF76-42D9-A404-20DF49616B3C}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe

FirewallRules: [TCP Query User{F5B673CF-5DED-4823-88AB-1E93C1EC773A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe

FirewallRules: [UDP Query User{D260473B-8FA1-428B-9712-EFDB9AB2103A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe

FirewallRules: [TCP Query User{3A3E393A-4D96-474D-B326-5DD14A4B8B34}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe

FirewallRules: [UDP Query User{7ABE9331-02B1-484F-BBBA-D6DCF1C24ABA}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe

FirewallRules: [{3A02A55B-E70D-4139-B0DC-5A62AF685E04}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe

FirewallRules: [{FC1FA25A-E1E1-41D0-9AE9-54DE9E3FA76B}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe

FirewallRules: [{FFD8E5E8-58CA-42DC-8B30-C2E7B92CFF66}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{872EE66E-AA4E-4DDC-BCF5-C0C3CB5FF509}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{DD6ED44D-3F04-4075-8A22-57C092435851}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{47D59FB6-2DD6-4460-9A94-A2A9E5F4254C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{7D832AEF-AA7D-42F6-B232-5AFFF23570A2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{936E869D-5427-460C-A4DE-FE5717DD7E0B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{70C22033-BB7E-49B0-9BE8-F414F003205B}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{C77FEB62-968B-4393-95F7-9AD35437A16C}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{12FFF2A3-F229-4325-B5D8-A31AA45FF425}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{0E2292A5-9F16-41ED-9884-D40E49D78FA0}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{2DB0F342-C2F7-4FE2-B3E7-AB49649EEE5A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{F5863B5C-77BC-46A1-8343-648B9ACA4246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{58819C25-DE51-4AD9-BF25-7FC8D11394DD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{56D8EF6B-25D6-450C-8034-04C33CA8BF0C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{969FAAF2-1467-4F70-B3F4-40C3F2BAA957}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{227B8366-7BE0-42A9-A5E5-A29A3B14E468}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{D756CAF4-AC36-46B9-B26D-994355D68DB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe

FirewallRules: [{13354DCF-542C-41EA-90BF-ECD5A26EDDD6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe

FirewallRules: [{15C944EB-0B67-4983-9CA6-C7333971AC2D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe

FirewallRules: [{D702F2E5-A74D-4EAA-8B8B-84315CF8A475}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe

FirewallRules: [{EF9DF606-600E-45E7-B9BA-CA72B9ECBA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe

FirewallRules: [{627CE05E-328A-4595-A559-9B4D969FF50F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe

FirewallRules: [{D9F849EB-B98B-4270-9E4E-0C105A128005}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe

FirewallRules: [{AF8B9D01-4381-4EA7-8424-6D98332CA833}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe

FirewallRules: [{BC2B9866-9621-424D-B7DF-9D77A9DF6C55}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe

FirewallRules: [{062E7D3C-1DD2-4DEC-AA61-5B0FD0AADF59}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe

FirewallRules: [{BEF417A8-B391-46A6-BF27-AB985734D1BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{64A46AE9-0BAD-4D37-BC9F-80A89B741DC3}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [UDP Query User{A5EB3862-B05D-49FF-B980-D90AB0DE050D}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{51DB3670-22B0-4157-A06C-CFCCB525D17F}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{3B63A56F-F0A4-4927-88D9-95A22CA88DD5}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [TCP Query User{FFC8C3AE-C4BC-45AF-AE4D-D6BF9D6D6535}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe

FirewallRules: [UDP Query User{6458F897-C553-46D7-BA8D-D9B83E3AED81}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe

FirewallRules: [{0DC0524D-67A4-4664-AF48-12F6AE76F74A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{AD370CDA-3467-4006-8D6C-1BC50330DFFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1EC201B4-FABA-4CAD-9BF7-D50A79C400E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe

FirewallRules: [{AE20F5E0-F875-4F82-A553-4226BC95F617}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe

FirewallRules: [TCP Query User{FF8AC426-F8B3-4F58-B315-89232E8CE001}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [UDP Query User{829A50C6-9F72-440B-9C4E-D4BC06985EAB}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{434966BB-6A14-48FD-A4B6-328E10D7A345}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{7C495F63-6777-43DB-9481-E1AA1AE647D9}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{09857451-9C85-4CD9-A0AB-14C7590A04E1}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{0BB5C967-5AA9-40A4-9685-AAAF71E607B8}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{78FC3D24-8387-4188-8B3C-CE0664904376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe

FirewallRules: [{49B118EA-8E11-4B0E-8215-230B01C5CE13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe

FirewallRules: [{27F00A7B-5DBA-45AF-941C-90B508FB2DAD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe

FirewallRules: [{B1B97779-A19B-4BB1-99AD-44B95B477749}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe

FirewallRules: [{C5497FAA-8168-4061-B1E1-B987D3AAA6AA}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{25E8BA67-509D-4388-AC9A-B086043C53B0}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{088F565A-86A1-41F3-8667-74436E520109}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{014A3513-F17A-4A3E-A1CA-DD870368F0C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{3DE5BAE5-AE19-4C14-9CEB-B1766B11437D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{CDB0FE67-F5E3-4AAE-880F-55738E490A53}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{2E17653A-B7AB-460E-B2CD-598C26877283}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe

FirewallRules: [{E6106352-BE9A-4923-AB87-D9E5622F6BB5}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe

FirewallRules: [{DAB75AD6-19CA-426B-93E5-FDFD10482FAF}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe

FirewallRules: [{7284DC57-2475-40D6-A4B0-905851D8F9B3}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe

FirewallRules: [{FC316C36-A6F4-4BD3-AA3F-A362C4A35A36}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe

FirewallRules: [{46A96A42-6C5C-4C61-9434-DF8E73320D3E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe

FirewallRules: [{202DAE5F-2B75-42A1-9C70-1DD4F1C4E6EA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{61F88636-48D0-489C-B318-80856ABD4513}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{E5F77743-8DA3-40EE-B413-9F1CAE8475AC}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe

FirewallRules: [{27158C42-3B38-44BA-A238-E28B6D4DAFCF}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe

FirewallRules: [{5CD5647B-6740-4B31-93CE-0C4A7EF4AC0E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{5F8DA77F-94C1-469D-A417-98A1E78BD137}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{A8E0D916-0171-46D6-956A-E12D44FBEC88}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{35FA0840-3492-498E-B431-BC572D39E821}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{32054994-6E80-4F28-8FA1-BF8D3B974DD1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{0845E5D0-FBCB-48CE-A979-CCA4A210B2AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{BB735E58-5130-4186-9D90-B58561EA1B98}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe

FirewallRules: [{943B24AE-6227-496A-886E-3C4BF2064E4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe

FirewallRules: [{E98772CC-43A2-43A3-9AE8-DD98B52572F5}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe

FirewallRules: [{99AD5144-B305-49D6-B5A5-80A32E221AE8}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe

FirewallRules: [{76E5C617-18E2-493C-8D37-83B944229067}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe

FirewallRules: [{FB771EFD-D000-4E1E-BB38-4CA90A0CFC5B}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe

FirewallRules: [{5DAB3ED1-0252-495B-9C56-1ED6E035198D}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe

FirewallRules: [{A6AE2D3B-CB89-488B-972F-F85FF5537F79}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe

FirewallRules: [{75A2C7E5-19FF-47D9-A0DF-8120615D287A}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{A1C44C9E-E20A-4825-96B6-052B4864A3C1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{31FC1A73-AE87-47D3-9D43-A0ECFC2B06A1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{318F1635-826B-466A-BB56-85B11F35311F}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{44538836-F358-4810-98E1-5A0CF740AABB}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{CF455795-CA5D-450C-82A5-BE87F347CD93}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{9DE8B198-9FD6-4D5B-BC74-248D23601427}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{E5EF64D1-87FA-4D0A-A6E3-8B195146EEAE}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{62980061-5F5B-495A-9665-DC2968802264}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe

FirewallRules: [{22421502-A1F5-4C4D-B7C3-8E120A502F0A}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe

FirewallRules: [{8A027618-FE9B-4F8A-ACE8-BA8912205362}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe

FirewallRules: [{A15C2F34-B811-408B-88BA-59D8DB9D2233}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe

FirewallRules: [{2CCD6FCE-C8F7-4268-BE5D-CF765CC15E07}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe

FirewallRules: [{A5401947-B780-4B22-A180-0AC079FA9840}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe

FirewallRules: [{412E9CE9-4DFD-4C75-BE97-4ED3C7CA5F6A}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe

FirewallRules: [{77E5627B-67F5-476A-962F-3375990D5577}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe

FirewallRules: [{8981D155-3718-446A-9BE9-D2DB78AC81B8}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe

FirewallRules: [{3C15950E-C546-401D-B636-F1F782D7AF7F}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe

FirewallRules: [{9BC4E78B-9D2A-463A-8228-6F6C1A0D4E9D}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{834CA4AD-9085-458F-A77A-1E9F33C764DF}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{F8343B38-AE33-4BB6-A8EE-A080CE11C97C}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe

FirewallRules: [{CF1650F2-AA96-4C66-A91E-29D14A2211D6}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe

FirewallRules: [{1DD42EA1-54A6-480D-AD05-908F6828DE9C}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe

FirewallRules: [{07298826-0F22-450A-9A5A-6E6026B89AB3}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe

FirewallRules: [{6FF52AF5-5489-493C-A4D1-49826A2DD8F3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe

FirewallRules: [{D5092F15-9D81-4A75-AB15-10606000AA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe

FirewallRules: [{240D4B54-0FCB-431F-B004-22736495650B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe

FirewallRules: [{F222BB73-CF25-41F1-B747-8D368020B457}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe

FirewallRules: [{5C0CE3AB-C689-4202-B1C0-587D64DF2883}] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{EEFC172E-7045-4AAA-9CD3-B8474390B248}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{27E4AD63-98B6-49D7-9F4F-30E96700A80C}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{675F1295-9ABA-4AD3-BD10-CF54EF3006A2}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe

FirewallRules: [{A89D27B6-DD9D-4474-AAF3-6E94B0BCA3A9}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe

FirewallRules: [{A5B79F7B-B1BA-49FF-9D52-9AF6D1D79242}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{4BFC07DA-E59D-48E2-9A09-BB12800727C7}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{DE27C5BC-0825-4B21-AB4C-40CFFB8490A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{03E299FA-DD0B-49B2-ABEC-FE8721849655}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{96E3EF00-D194-4449-A40E-D368D9003C89}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{12EE714E-833D-455C-B6CF-09748EEE3CD8}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{4A9C02CD-69DC-48E8-A42C-9E4A1A17FE99}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe

FirewallRules: [{E79C4C6D-827C-49FF-8ADA-78E8479BC79D}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe

FirewallRules: [{EFD02DE3-EE48-4D6D-9FF6-88F2715AC226}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{D7688BCB-BC38-42DE-B1A9-99D6B33A12A1}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{9CCA2959-A539-4DD2-8D48-0C42ED8EB627}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{C3280A9B-4EC4-4501-ADA0-70DD9644C22E}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{AB08F33F-D745-44C7-B1B4-B009D50F0BE8}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe

FirewallRules: [{58139E46-138F-4F96-ACA1-7D0914FBB80E}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe

FirewallRules: [{63450445-8A2C-48EF-BFE3-1FF2BE5EAD37}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{746F0301-A6F2-4A7F-BBBB-ACB0BF7104DD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{330FDF04-9237-4E4C-85F4-BAE9107B186E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe

FirewallRules: [{6819C55B-2527-40E7-958D-E123190C701E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe

FirewallRules: [{3263CF1D-10B1-4B7C-B04D-B339478AFB43}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{06E65D6F-BB14-47F2-BBC6-C07683167C04}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{17D27C45-E96E-4C49-837C-81792007A126}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{5CDD8F66-3E91-43DF-B1ED-47D2884E3592}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{A567B55C-E958-4AE6-ADF8-2922FFA85C8C}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe

FirewallRules: [{F46D2CAA-EA3E-4290-85B1-46790CF049DE}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe

FirewallRules: [{9CF9DEAA-D273-4184-88A9-958C7043CADF}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe

FirewallRules: [{45AE9EA9-F828-46B3-A14B-8A53A55C182B}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe

FirewallRules: [{2DEE0519-5666-4895-9B63-44515FD8D9A6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe

FirewallRules: [{7C3A7B1E-5045-402E-BF6C-DC7F4B5D30F6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe

FirewallRules: [{8198FD95-5629-470B-837E-1695EE4BAEE3}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe

FirewallRules: [{FF7CC7C4-8FCA-4643-A2CE-58C9976BA0A6}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe

FirewallRules: [{E6967845-2DC9-4CBD-89E9-4880FE48EC0E}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe

FirewallRules: [{1CE25EDB-5AA8-4609-AA6C-E2EC6E9A6FB4}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe

FirewallRules: [{60E09E6B-CF9E-4972-B62B-15525F181894}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe

FirewallRules: [{58E420D7-4EE9-482B-907E-D53DCFACA0C0}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe

FirewallRules: [{A4C296E2-131B-457E-A9FC-DD0AACC04EC7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe

FirewallRules: [{6C72DAC0-F7E7-472E-92A7-D8EDA6C011D7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe

FirewallRules: [{816880C7-C545-49BA-BF34-9C6EDFE3B559}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe

FirewallRules: [{87D14756-408E-4F3A-87A5-7757A6AFDC71}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe

FirewallRules: [{DFC28088-CFFA-49CD-B7D4-61742D15A3C5}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe

FirewallRules: [{5C587DE7-B7BE-4007-AE58-2226FACCEC0F}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe

FirewallRules: [{8F5FDED0-05C4-4B8F-82A5-5D309AF22771}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{EF12EB5E-E442-4220-A21E-B50F45BD5CC9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{54654BF7-3929-4B5C-8D9E-A721095736D4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{37C2C869-4AE4-4C10-958C-E96C2339FDEE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{438A9EF5-E1EC-4FE1-8733-FF6B2F60969B}] => (Allow) D:\Program Files (x86)\KALYPSO\GRAND AGES MEDIEVAL\GrandAgesMedieval.exe

FirewallRules: [{95B11CE4-EDE2-4205-A538-5BD20F7DEE4D}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe

FirewallRules: [{8412E8EC-F7B9-41BB-8CC1-C1367CFBB7E8}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe

FirewallRules: [{64B74A07-D854-4000-BE0B-A1AD480DE421}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe

FirewallRules: [{D6BC693A-F6AA-4929-AF11-45FCC212CECF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe

FirewallRules: [{09186219-FFB9-4079-A2F1-99276BD937C6}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe

FirewallRules: [{79A8589B-B383-4A3C-9FB6-5E7FABC958CC}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe

FirewallRules: [{0798DD72-3708-4BAD-835D-1A50CE2FC649}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{F4CF59AD-AC69-4A81-BE26-12D904631817}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{FB8EAB63-F7FF-48E2-B390-8DE43A023734}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe

FirewallRules: [{00D8A63D-8F14-4693-9CA9-0C1234839181}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe

FirewallRules: [{B79AD18B-3A68-4EEF-82CD-2DEA2DD02F1D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe

FirewallRules: [{DA8D1985-F053-48A6-A47A-745AD3680C98}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe

FirewallRules: [{83816F82-B5D7-4B65-B44D-FA086AE6503E}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe

FirewallRules: [{88C8BF0F-06C1-4C50-BE54-F9D0DECC86C9}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe

FirewallRules: [{45D860EC-B45B-4752-B99C-DF2107C4A765}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe

FirewallRules: [{EA47C8DA-557B-43AC-90D7-9339D4A38CB9}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe

FirewallRules: [{0266EDCA-C5D9-4EF5-8B67-97F77F1CE0FA}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe

FirewallRules: [{C430923E-5157-4D29-A9BD-D009000D8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe

FirewallRules: [{3505485B-F7AE-480C-BDFB-043DBF68A620}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{8B0C7E66-D5D6-48E1-A73A-C4940AD7CA7C}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{AC885FCC-9EA1-4212-A206-7049AC8DA686}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{771AE705-4891-4130-8908-3A9E60908014}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{D7544463-56A5-424E-8DB9-261492657F1A}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{AA8A03F2-397F-44B5-8680-47A38B0CB3E9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{F6F2D53B-8256-4DF8-BA4B-690AFED30A58}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{74E711FF-7D76-4347-8DC0-41911114C0BC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{B7FC6943-8865-442C-A4D0-F0306FC250C1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{1905CF96-C39F-4337-A372-E72DA83B98D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{FD023914-D3EF-4C9C-8CB4-D72277641343}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe

FirewallRules: [{ABA95E06-7387-4E2D-AA8E-03EEBAD85E03}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe

FirewallRules: [{0FADC9B1-8E04-4A57-8A74-A581371CA25B}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe

FirewallRules: [{56BE55EC-ABB6-4E22-A9DE-010734FC75CF}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe

FirewallRules: [{129C13B1-62EC-44FD-84FB-C440BD906FDE}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe

FirewallRules: [{A994F333-464C-4833-AB09-A80EE0508249}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe

FirewallRules: [{447A8060-8D55-42D7-9D90-1522C492AE1B}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{98AFBDB6-0491-4940-9D8C-8E5DCAA1295D}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

FirewallRules: [{C2B8F7E9-64E9-415E-9D07-28F580DF4430}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
 

==================== Wiederherstellungspunkte =========================
 

19-04-2016 20:12:27 Windows Update

23-04-2016 11:34:07 Windows Update

27-04-2016 18:39:26 Windows Update

09-05-2016 19:49:22 Windows Update

09-05-2016 23:36:04 Windows Update

11-05-2016 15:49:57 Revo Uninstaller's restore point - SpyHunter 4

11-05-2016 15:56:30 Revo Uninstaller's restore point - RivaTuner Statistics Server 6.2.0

11-05-2016 16:01:52 Revo Uninstaller's restore point - Revo Uninstaller 1.95
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/11/2016 03:59:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/11/2016 03:59:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/11/2016 03:59:23 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/11/2016 03:53:09 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/11/2016 02:10:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/11/2016 02:10:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/11/2016 02:10:15 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/11/2016 02:03:22 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/11/2016 01:23:54 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/11/2016 01:23:54 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
 

Systemfehler:

=============

Error: (05/11/2016 03:55:13 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Wohegh Server" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/11/2016 03:53:10 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/11/2016 02:05:25 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Wohegh Server" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/11/2016 02:03:22 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/11/2016 01:19:11 AM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Wohegh Server" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%2
 

Error: (05/11/2016 01:17:00 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "DeleteFlag" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Security" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Security" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 

Error: (05/11/2016 01:16:14 AM) (Source: Service Control Manager) (EventID: 7006) (User: )

Description: Der Aufruf "ScRegSetValueExW" ist für "Security" aufgrund folgenden Fehlers fehlgeschlagen: 

%%5
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz

Prozentuale Nutzung des RAM: 22%

Installierter physikalischer RAM: 16326.84 MB

Verfügbarer physikalischer RAM: 12651.85 MB

Summe virtueller Speicher: 32651.88 MB

Verfügbarer virtueller Speicher: 28871.87 MB
 

==================== Laufwerke ================================
 

Drive c: (Chaos) (Fixed) (Total:465.66 GB) (Free:276.28 GB) NTFS

Drive d: (Demeter) (Fixed) (Total:931.51 GB) (Free:32.22 GB) NTFS

Drive e: (Erebos) (Fixed) (Total:911.51 GB) (Free:644.98 GB) NTFS

Drive f: (RECOVER) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS

Drive g: (GRANDAGESMEDIEVAL_18711_EFIGS) (CDROM) (Total:4.27 GB) (Free:0 GB) UDF
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A7957AA7)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A7957AA3)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)

Partition 1: (Active) - (Size=911.5 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
 

==================== Ende von Addition.txt ============================

Bitte Avast deinstallieren. Das Teil können wir einfach nicht mehr guten Gewissens empfehlen. => Antivirensoftware: Schutz Für Ihre Dateien, Aber Auf Kosten Ihrer Privatsphäre? | Emsisoft Blog

Auch andere Freewareanbieter wie Avira, AVG oder Panda springen auf diesen oder ähnlichen Zügen rauf, basteln Junkware in die Setups, arbeiten mit ASK zusammen etc; so was ist bei Sicherheitssoftware einfach inakzeptabel.

Gib Bescheid wenn Avast weg ist; wenn wir hier durch sind, kannst du auf einen anderen Virenscanner umsteigen, Infos folgen dann im Abschlussposting. Bitte JETZT nix mehr ohne Absprache installieren!

Malwarebytes Anti-Rootkit (MBAR)

Downloade dir bitte

Malwarebytes Anti-Rootkit und speichere es auf deinem Desktop.

Starte bitte die mbar.exe.
Folge den Anweisungen auf deinem Bildschirm gemäß Anleitung zu Malwarebytes Anti-Rootkit
Aktualisiere unbedingt die Datenbank und erlaube dem Tool, dein System zu scannen.
Klicke auf den CleanUp Button und erlaube den Neustart.
Während dem Neustart wird MBAR die gefundenen Objekte entfernen, also bleib geduldig.
Nach dem Neustart starte die mbar.exe erneut.
Sollte nochmal was gefunden werden, wiederhole den CleanUp Prozess.

Das Tool wird im erstellten Ordner eine Logfile ( mbar-log-<Jahr-Monat-Tag>.txt ) erzeugen. Bitte poste diese hier.

Starte keine andere Datei in diesem Ordner ohne Anweisung eines Helfers

Lesestoff:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR oder 7Z-Archiv zu packen erschwert mir massiv die Arbeit.
Auch wenn die Logs für einen Beitrag zu groß sein sollten, bitte ich dich die Logs direkt und notfalls über mehrere Beiträge verteilt zu posten.
Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

http://www.trojaner-board.de/picture...&pictureid=307

Code:

Malwarebytes Anti-Rootkit BETA 1.9.3.1001

www.malwarebytes.org
 

Database version:

  main:    v2016.05.11.04

  rootkit: v2016.05.06.01
 

Windows 7 Service Pack 1 x64 NTFS

Internet Explorer 11.0.9600.18282

Liz :: LIZ-PC [administrator]
 

11.05.2016 18:25:28

mbar-log-2016-05-11 (18-25-28).txt
 

Scan type: Quick scan

Scan options enabled: Anti-Rootkit | Drivers | MBR | Physical Sectors | Memory | Startup | Registry | File System | Heuristics/Extra | Heuristics/Shuriken

Scan options disabled: 

Objects scanned: 289158

Time elapsed: 3 minute(s), 56 second(s)
 

Memory Processes Detected: 0

(No malicious items detected)
 

Memory Modules Detected: 0

(No malicious items detected)
 

Registry Keys Detected: 0

(No malicious items detected)
 

Registry Values Detected: 0

(No malicious items detected)
 

Registry Data Items Detected: 0

(No malicious items detected)
 

Folders Detected: 0

(No malicious items detected)
 

Files Detected: 0

(No malicious items detected)
 

Physical Sectors Detected: 0

(No malicious items detected)
 

(end)

Adware/Junkware/Toolbars entfernen

Alte Versionen von adwCleaner und falls vorhanden JRT vorher löschen, danach neu runterladen auf den Desktop!
Virenscanner jetzt vor dem Einsatz dieser Tools bitte komplett deaktivieren!

1. Schritt: adwCleaner

Downloade Dir bitte

AdwCleaner auf deinen Desktop.

Schließe alle offenen Programme und Browser. Bebilderte Anleitung zu AdwCleaner.
Starte die AdwCleaner.exe mit einem Doppelklick.
Stimme den Nutzungsbedingungen zu.
Klicke auf Optionen und vergewissere dich, dass die folgenden Punkte ausgewählt sind:
- "Tracing" Schlüssel löschen
- Winsock Einstellungen zurücksetzen
- Proxy Einstellungen zurücksetzen
- Internet Explorer Richtlinien zurücksetzen
- Chrome Richtlinien zurücksetzen
- Stelle sicher, dass alle 5 Optionen wie hier dargestellt, ausgewählt sind
Klicke auf Suchlauf und warte bis dieser abgeschlossen ist.
Klicke nun auf Löschen und bestätige auftretende Hinweise mit Ok.
Dein Rechner wird automatisch neu gestartet. Nach dem Neustart öffnet sich eine Textdatei. Poste mir deren Inhalt mit deiner nächsten Antwort.
Die Logdatei findest du auch unter C:\AdwCleaner\AdwCleaner[Cx].txt. (x = fortlaufende Nummer).

2. Schritt: JRT - Junkware Removal Tool

Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
Bitte lade Junkware Removal Tool auf Deinen Desktop

Starte das Tool mit Doppelklick. Ab Windows Vista (oder höher) bitte mit Rechtsklick "als Administrator ausführen" starten.
Drücke eine beliebige Taste, um das Tool zu starten.
Je nach System kann der Scan eine Weile dauern.
Wenn das Tool fertig ist wird das Logfile (JRT.txt) auf dem Desktop gespeichert und automatisch geöffnet.
Bitte poste den Inhalt der JRT.txt in Deiner nächsten Antwort.

Code:

# AdwCleaner v5.116 - Bericht erstellt am 15/05/2016 um 18:26:18

# Aktualisiert am 09/05/2016 von Xplode

# Datenbank : 2016-05-15.2 [Server]

# Betriebssystem : Windows 7 Professional Service Pack 1 (X64)

# Benutzername : Liz - LIZ-PC

# Gestartet von : C:\Users\Liz\Desktop\AdwCleaner_5.116.exe

# Option : Löschen

# Unterstützung : hxxp://toolslib.net/forum
 

***** [ Dienste ] *****
 

[-] Dienst gelöscht : MPCProtectService

[-] Dienst gelöscht : MPCKpt

[-] Dienst gelöscht : Woheghserverservice
 

***** [ Ordner ] *****
 

[-] Ordner gelöscht : C:\ProgramData\Microsoft\Windows\Start Menu\Programs\MPC

[-] Ordner gelöscht : C:\Program Files (x86)\MPC Cleaner

[-] Ordner gelöscht : C:\Program Files (x86)\hohobnd

[-] Ordner gelöscht : C:\Program Files (x86)\Wohegh
 

***** [ Dateien ] *****
 

[-] Datei gelöscht : C:\Users\Public\Desktop\MPC Cleaner.lnk
 

***** [ DLLs ] *****
 
 

***** [ WMI ] *****
 
 

***** [ Verknüpfungen ] *****
 
 

***** [ Aufgabenplanung ] *****
 

[-] Geplante Aufgabe gelöscht : Wohegh Server
 

***** [ Registrierungsdatenbank ] *****
 

[-] Schlüssel gelöscht : HKLM\SOFTWARE\MPC

[-] Schlüssel gelöscht : HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}

[-] Schlüssel gelöscht : [x64] HKLM\SOFTWARE\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}

[-] Schlüssel gelöscht : HKU\.DEFAULT\Software\{A16B1AF7-982D-40C3-B5C1-633E1A6A6678}

[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\mpc.am

[-] Schlüssel gelöscht : HKCU\Software\Microsoft\Internet Explorer\DOMStorage\search.mpc.am
 

***** [ Internetbrowser ] *****
 
 

*************************
 

:: "Tracing" Schlüssel gelöscht

:: Proxy Einstellungen zurückgesetzt

:: Winsock Einstellungen zurückgesetzt

:: Internet Explorer Richtlinien gelöscht

:: Chrome Einstellungen zurückgesetzt : C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default
 

*************************
 

C:\AdwCleaner\AdwCleaner[C1].txt - [3479 Bytes] - [11/05/2016 00:46:17]

C:\AdwCleaner\AdwCleaner[C2].txt - [2023 Bytes] - [11/05/2016 00:55:40]

C:\AdwCleaner\AdwCleaner[C3].txt - [1701 Bytes] - [11/05/2016 01:16:13]

C:\AdwCleaner\AdwCleaner[C4].txt - [2159 Bytes] - [15/05/2016 18:26:18]

C:\AdwCleaner\AdwCleaner[S1].txt - [4239 Bytes] - [11/05/2016 00:44:16]

C:\AdwCleaner\AdwCleaner[S2].txt - [1866 Bytes] - [11/05/2016 00:52:23]

C:\AdwCleaner\AdwCleaner[S3].txt - [1485 Bytes] - [11/05/2016 01:15:13]

C:\AdwCleaner\AdwCleaner[S4].txt - [2251 Bytes] - [15/05/2016 18:25:59]
 

########## EOF - C:\AdwCleaner\AdwCleaner[C4].txt - [2524 Bytes] ##########

JRT

Code:

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Junkware Removal Tool (JRT) by Malwarebytes

Version: 8.0.6 (04.25.2016)

Operating System: Windows 7 Professional x64 

Ran by Liz (Administrator) on 15.05.2016 at 18:27:47,26

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
 
 
 
 

File System: 32 
 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\198YJ4X0 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3XX0BRED (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6WPXJEOI (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ALPAUJ47 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9MUZRC0 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIJAGAFX (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J0EYS63M (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LR8K4TCS (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M1NDXTSA (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P0LZ5NY7 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1VSQO51 (Temporary Internet Files Folder) 

Successfully deleted: C:\Users\Liz\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YA689WP6 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\0PS72R2M (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\198YJ4X0 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\3XX0BRED (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\62AXOPQ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\6WPXJEOI (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\ALPAUJ47 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\FZG8CKJ5 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\H9MUZRC0 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\HIJAGAFX (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\J0EYS63M (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LIXMVQOA (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LR8K4TCS (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\M1NDXTSA (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\P0LZ5NY7 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\X1VSQO51 (Temporary Internet Files Folder) 

Successfully deleted: C:\Windows\System32\config\systemprofile\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\YA689WP6 (Temporary Internet Files Folder) 
 
 
 

Registry: 0 
 
 
 
 
 

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Scan was completed on 15.05.2016 at 18:28:27,33

End of JRT log

~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~

Dann zeig mal frische FRST Logs. Haken setzen bei addition.txt dann auf Untersuchen klicken

http://www.trojaner-board.de/picture...&pictureid=611

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:09-05-2016

durchgeführt von Liz (Administrator) auf LIZ-PC (16-05-2016 10:20:28)

Gestartet von C:\Users\Liz\Downloads

Geladene Profile: Liz (Verfügbare Profile: Liz)

Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe

() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(ROCCAT GmbH) D:\Program Files (x86)\IskuMonitor.exe

(Intel(R) Corporation) C:\Program Files\Intel\NCS2\WMIProv\ncs2prov.exe

(CyberGhost S.R.L) C:\Program Files\CyberGhost 5\Service.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)

HKLM-x32\...\Run: [RoccatIsku] => D:\Program Files (x86)\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {8d739455-183a-11e5-91b0-806e6f6e6963} - G:\Autorun.exe

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {9eaecd58-1837-11e5-92d3-806e6f6e6963} - G:\.\Bin\ASSETUP.exe

HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{26F0521D-7676-4192-A278-9CA683A0BC9B}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{850C2BEF-6678-4724-94A3-007D3C298F16}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
 

Internet Explorer:

==================

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-10] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-10] (Oracle Corporation)
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-10] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-10] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]

CHR Extension: (Adblock Plus) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]

CHR Extension: (Google Search) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]

CHR Extension: (CyberGhost VPN - Free Proxy) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnikgemihknccdjaihjnfbapinljpi [2015-08-09]

CHR Extension: (Gmail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-21]

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 2

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3

CHR Extension: (Google Präsentationen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-15]

CHR Extension: (Google Docs) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-15]

CHR Extension: (Google Drive) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-15]

CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-15]

CHR Extension: (Google Tabellen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-15]

CHR Extension: (Google Docs Offline) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-15]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]

CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-15]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-04-25] (ASUSTeK Computer Inc.)

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]

R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe [394040 2014-07-17] (ASUSTeK Computer Inc.)

R2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)

S3 Origin Client Service; D:\Programs\Origin\OriginClientService.exe [2104840 2016-03-06] (Electronic Arts)

R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()

R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()

R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-05-11] ()

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)

R4 IOMap; C:\Windows\system32\drivers\IOMap64.sys [24824 2014-07-02] (ASUSTeK Computer Inc.)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)

R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)

S1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)

R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)

R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)

R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)

S3 MSICDSetup; \??\G:\CDriver64.sys [X]

S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]

S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-15 18:28 - 2016-05-15 18:28 - 00005769 _____ C:\Users\Liz\Desktop\JRT.txt

2016-05-15 18:27 - 2016-05-15 18:27 - 00002610 _____ C:\Users\Liz\Desktop\AdwCleaner[C4].txt

2016-05-15 18:27 - 2014-07-02 11:41 - 00024824 _____ (ASUSTeK Computer Inc.) C:\Windows\system32\Drivers\IOMap64.sys

2016-05-15 18:19 - 2016-05-15 18:19 - 01610816 _____ (Malwarebytes) C:\Users\Liz\Downloads\JRT.exe

2016-05-15 18:17 - 2016-05-15 18:17 - 03640384 _____ C:\Users\Liz\Desktop\AdwCleaner_5.116.exe

2016-05-11 18:12 - 2016-05-12 19:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-05-11 18:12 - 2016-05-11 18:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-05-11 18:12 - 2016-05-11 18:12 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-05-11 18:10 - 2016-05-11 18:29 - 00000000 ____D C:\Users\Liz\Desktop\mbar

2016-05-11 18:10 - 2016-05-11 18:25 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2016-05-11 18:06 - 2016-05-11 18:06 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Liz\Downloads\mbar-1.09.3.1001.exe

2016-05-11 17:01 - 2016-05-11 17:01 - 00205152 _____ C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren.html

2016-05-11 17:01 - 2016-05-11 17:01 - 00000000 ____D C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren_files

2016-05-11 16:24 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-05-11 16:24 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-05-11 16:24 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-05-11 16:24 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-05-11 16:24 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-05-11 16:24 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-05-11 16:24 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-05-11 16:24 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-05-11 16:24 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-05-11 16:24 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-05-11 16:24 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-05-11 16:24 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-05-11 16:24 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-05-11 16:24 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-05-11 16:24 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-05-11 16:24 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-05-11 16:24 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-05-11 16:24 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-05-11 16:24 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-05-11 16:24 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-05-11 16:24 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-05-11 16:24 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-05-11 16:24 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-05-11 16:24 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-05-11 16:24 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-05-11 16:24 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-05-11 16:24 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-05-11 16:24 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-05-11 16:24 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-05-11 16:24 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-05-11 16:24 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-05-11 16:24 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-05-11 16:24 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-05-11 16:24 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-05-11 16:24 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-05-11 16:24 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-05-11 16:24 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-05-11 16:24 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-05-11 16:24 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-05-11 16:24 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-05-11 16:24 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-05-11 16:24 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-05-11 16:24 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-05-11 16:24 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-05-11 16:24 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-05-11 16:24 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-05-11 16:24 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-05-11 16:24 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-05-11 16:24 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-05-11 16:24 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-05-11 16:24 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-05-11 16:24 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-05-11 16:24 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-05-11 16:24 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-05-11 16:24 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-05-11 16:24 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-05-11 16:24 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-05-11 16:24 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-05-11 16:24 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-05-11 16:24 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-05-11 16:24 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-05-11 16:24 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-05-11 16:24 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2016-05-11 16:24 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2016-05-11 16:24 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-05-11 16:24 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-05-11 16:24 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-05-11 16:24 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-05-11 16:24 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2016-05-11 16:24 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-05-11 16:24 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2016-05-11 16:24 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-05-11 16:24 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2016-05-11 16:24 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2016-05-11 16:24 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll

2016-05-11 16:23 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2016-05-11 16:23 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-05-11 16:23 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-05-11 16:23 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-05-11 16:23 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-05-11 16:23 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-05-11 16:23 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-05-11 16:23 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-05-11 16:23 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-05-11 16:23 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-05-11 16:23 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-05-11 16:23 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-05-11 16:23 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-05-11 16:23 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-05-11 16:23 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-05-11 16:23 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-05-11 16:23 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-05-11 16:23 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-05-11 16:23 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-05-11 16:23 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-05-11 16:23 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-05-11 16:23 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-05-11 16:23 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-05-11 16:23 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2016-05-11 16:23 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2016-05-11 16:12 - 2016-05-11 16:35 - 00067083 _____ C:\Users\Liz\Downloads\Addition.txt

2016-05-11 16:11 - 2016-05-16 10:20 - 00013764 _____ C:\Users\Liz\Downloads\FRST.txt

2016-05-11 16:11 - 2016-05-16 10:20 - 00000000 ____D C:\FRST

2016-05-11 16:11 - 2016-05-11 16:11 - 02381312 _____ (Farbar) C:\Users\Liz\Downloads\FRST64.exe

2016-05-11 01:22 - 2016-05-11 01:22 - 00000000 ____D C:\Users\Liz\AppData\Roaming\MCorp

2016-05-11 01:12 - 2016-05-11 01:12 - 02838216 _____ (ESET) C:\Users\Liz\Downloads\eset_smart_security90_live_installer_.exe

2016-05-11 01:11 - 2016-05-11 01:11 - 00003254 _____ C:\Windows\System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9}

2016-05-11 01:03 - 2016-05-11 01:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Liz\Downloads\revosetup.exe

2016-05-11 01:03 - 2016-05-11 01:03 - 00001269 _____ C:\Users\Liz\Desktop\Revo Uninstaller.lnk

2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2016-05-11 00:44 - 2016-05-15 18:26 - 00000000 ____D C:\AdwCleaner

2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 ____D C:\sh4ldr

2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 _____ C:\autoexec.bat

2016-05-11 00:12 - 2016-05-11 15:53 - 00000000 ____D C:\Program Files\Enigma Software Group

2016-05-11 00:12 - 2016-05-11 00:12 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2016-05-11 00:11 - 2016-05-11 00:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer (1).exe

2016-05-10 23:55 - 2016-05-10 23:55 - 03295920 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer.exe

2016-05-10 23:17 - 2016-05-10 23:17 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Mozilla

2016-05-10 23:06 - 2016-05-10 23:06 - 00000000 ____D C:\Windows\pss

2016-05-10 22:58 - 2016-05-10 22:58 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Brotsoft

2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\Users\Public\Documents\dmp

2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\extensions

2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung.lnk

2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung (2).lnk

2016-05-01 18:07 - 2016-05-01 18:07 - 00001071 _____ C:\Users\Liz\Desktop\FRITZ!Box Fon WLAN 7270 v3 (UI) - Verknüpfung.lnk

2016-04-24 20:49 - 2016-04-24 21:00 - 00000000 ____D C:\Users\Liz\AppData\RoamingLow

2016-04-24 19:29 - 2016-04-24 19:29 - 00000000 ____D C:\Users\Liz\AppData\Roaming\com.ohnoo.Tsioque

2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (3).pdf

2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (2).pdf

2016-04-23 21:36 - 2016-04-23 21:36 - 00027704 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (1).pdf

2016-04-22 22:35 - 2016-04-25 11:41 - 00000000 ____D C:\Users\Liz\AppData\Local\Spotify

2016-04-22 22:35 - 2016-04-22 22:35 - 00001797 _____ C:\Users\Liz\Desktop\Spotify.lnk

2016-04-22 22:35 - 2016-04-22 22:35 - 00001783 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Spotify.lnk

2016-04-22 22:34 - 2016-04-25 11:46 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Spotify

2016-04-22 22:34 - 2016-04-22 22:34 - 00350936 _____ (Spotify Ltd) C:\Users\Liz\Downloads\SpotifySetup.exe
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-16 10:20 - 2015-06-21 19:11 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-05-16 10:19 - 2011-04-12 09:43 - 03710324 _____ C:\Windows\system32\perfh007.dat

2016-05-16 10:19 - 2011-04-12 09:43 - 01084994 _____ C:\Windows\system32\perfc007.dat

2016-05-16 10:19 - 2009-07-14 07:13 - 00006434 _____ C:\Windows\system32\PerfStringBackup.INI

2016-05-16 10:15 - 2015-10-10 21:03 - 00000000 ____D C:\ProgramData\NVIDIA

2016-05-16 10:15 - 2015-06-21 19:47 - 01048576 _____ C:\Windows\PE_Rom.dll

2016-05-16 10:15 - 2015-06-21 19:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-05-16 10:15 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-05-15 23:50 - 2015-07-19 00:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-05-15 23:04 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-05-15 23:04 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-05-15 19:52 - 2015-06-21 19:52 - 00000000 _____ C:\Windows\Path.idx

2016-05-15 19:22 - 2015-06-23 12:37 - 00002142 _____ C:\Windows\MB.idx

2016-05-15 18:48 - 2015-06-07 21:49 - 00000000 ____D C:\Steam

2016-05-15 18:20 - 2015-06-21 19:12 - 00002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-05-15 18:20 - 2015-06-21 19:12 - 00002180 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-05-15 18:05 - 2015-06-25 00:28 - 00000000 ____D C:\Windows\system32\appraiser

2016-05-12 22:59 - 2015-06-21 19:59 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2016-05-12 22:59 - 2015-06-21 19:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-05-12 22:50 - 2015-07-19 00:27 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-05-12 22:50 - 2015-07-19 00:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-05-12 22:50 - 2015-07-19 00:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2016-05-12 19:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2016-05-12 19:15 - 2009-07-14 06:45 - 00295312 _____ C:\Windows\system32\FNTCACHE.DAT

2016-05-12 19:14 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal

2016-05-11 22:47 - 2015-06-23 21:37 - 00000000 ____D C:\Windows\system32\MRT

2016-05-11 22:44 - 2015-06-23 21:37 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-05-11 17:44 - 2015-06-21 20:52 - 00000000 ____D C:\Program Files\avast software

2016-05-11 17:44 - 2015-06-21 20:21 - 00000000 ____D C:\ProgramData\AVAST Software

2016-05-11 14:15 - 2015-06-21 19:11 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2016-05-11 14:15 - 2015-06-21 19:11 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2016-05-11 00:46 - 2015-06-21 19:09 - 00000996 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2016-05-11 00:13 - 2015-06-21 19:09 - 00000000 ____D C:\Users\Liz

2016-05-10 23:16 - 2016-03-07 19:27 - 00000000 ____D C:\Program Files (x86)\Raptr Inc

2016-05-10 23:16 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\system32\GWX

2016-04-28 22:30 - 2015-10-10 15:03 - 00000000 ____D C:\Users\Liz\AppData\Local\ElevatedDiagnostics

2016-04-28 22:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2016-04-22 22:07 - 2015-06-22 20:27 - 00000080 _____ C:\Users\Liz\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦

2016-04-22 22:06 - 2015-06-22 20:26 - 00000000 ____D C:\Program Files\Rockstar Games

2016-04-22 22:06 - 2015-06-21 23:07 - 00000000 ____D C:\Program Files (x86)\Rockstar Games

2016-04-21 15:05 - 2010-11-21 05:27 - 00453288 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe

2016-04-18 21:03 - 2015-06-21 19:35 - 00000000 ____D C:\Users\Liz\AppData\Local\Ajort

2016-04-17 22:46 - 2015-08-06 20:04 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Raptr
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-04-05 20:57 - 2016-04-05 20:57 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

2016-03-30 20:24 - 2016-03-30 20:24 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
 

Einige Dateien in TEMP:

====================

C:\Users\Liz\AppData\Local\Temp\127E.tmp.exe

C:\Users\Liz\AppData\Local\Temp\270.tmp.exe

C:\Users\Liz\AppData\Local\Temp\37F5.tmp.exe

C:\Users\Liz\AppData\Local\Temp\4AFA.tmp.exe

C:\Users\Liz\AppData\Local\Temp\4FF5.tmp.exe

C:\Users\Liz\AppData\Local\Temp\6A28.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7006.tmp.exe

C:\Users\Liz\AppData\Local\Temp\737B.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7468.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7772.tmp.exe

C:\Users\Liz\AppData\Local\Temp\9156.tmp.exe

C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe

C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe

C:\Users\Liz\AppData\Local\Temp\AMDCleanupUtility.exe

C:\Users\Liz\AppData\Local\Temp\AutoDetectUtilApp.exe

C:\Users\Liz\AppData\Local\Temp\AutoWifi.exe

C:\Users\Liz\AppData\Local\Temp\BBB3.tmp.exe

C:\Users\Liz\AppData\Local\Temp\ChromeStandaloneSetup_M31_1650_59.exe

C:\Users\Liz\AppData\Local\Temp\Cleanup.dll

C:\Users\Liz\AppData\Local\Temp\devcon64.exe

C:\Users\Liz\AppData\Local\Temp\E092.tmp.exe

C:\Users\Liz\AppData\Local\Temp\GoogleDriveSync_1_15_6464_0228.exe

C:\Users\Liz\AppData\Local\Temp\GTA_V_Launcher_1_0_393_2.exe

C:\Users\Liz\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe

C:\Users\Liz\AppData\Local\Temp\Gw2.exe

C:\Users\Liz\AppData\Local\Temp\IrxJVuASnC.exe

C:\Users\Liz\AppData\Local\Temp\jre-8u73-windows-au.exe

C:\Users\Liz\AppData\Local\Temp\libeay32.dll

C:\Users\Liz\AppData\Local\Temp\msvcm80.dll

C:\Users\Liz\AppData\Local\Temp\msvcp80.dll

C:\Users\Liz\AppData\Local\Temp\msvcr120.dll

C:\Users\Liz\AppData\Local\Temp\msvcr80.dll

C:\Users\Liz\AppData\Local\Temp\nsl765D.tmp.exe

C:\Users\Liz\AppData\Local\Temp\playstv_patch.exe

C:\Users\Liz\AppData\Local\Temp\raptrpatch.exe

C:\Users\Liz\AppData\Local\Temp\raptr_stub.exe

C:\Users\Liz\AppData\Local\Temp\Social%20Club%20v1.1.6.1%20Setup.exe

C:\Users\Liz\AppData\Local\Temp\Social-Club-v1.1.7.8-Setup.exe

C:\Users\Liz\AppData\Local\Temp\sqlite3.dll

C:\Users\Liz\AppData\Local\Temp\tmp8075.exe

C:\Users\Liz\AppData\Local\Temp\tmpDC7A.exe

C:\Users\Liz\AppData\Local\Temp\Wmga1FZum8.exe

C:\Users\Liz\AppData\Local\Temp\xmlUpdater.exe

C:\Users\Liz\AppData\Local\Temp\ytb.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-05-10 19:17
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:09-05-2016

durchgeführt von Liz (2016-05-16 10:20:39)

Gestartet von C:\Users\Liz\Downloads

Windows 7 Professional Service Pack 1 (X64) (2015-06-21 17:09:01)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1654553621-3530598706-921729800-500 - Administrator - Disabled)

Gast (S-1-5-21-1654553621-3530598706-921729800-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1654553621-3530598706-921729800-1002 - Limited - Enabled)

Liz (S-1-5-21-1654553621-3530598706-921729800-1000 - Administrator - Enabled) => C:\Users\Liz
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20039 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)

Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version:  - Triumph Studios)

AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.83 - ASUSTeK Computer Inc.)

Aj-Driver (HKLM-x32\...\{46180592-ADAC-4144-9159-771781907C0D}) (Version: 1.00.1001 - Ajort)

Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version:  - Spicy Horse Games)

Anno 1404 (HKLM-x32\...\Steam App 33250) (Version:  - Blue Byte)

Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version:  - Blue Byte)

ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version:  - Studio Wildcard)

ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock 2 (HKLM-x32\...\Steam App 8850) (Version:  - 2K Marin)

Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)

Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden

Borderlands (HKLM-x32\...\Steam App 8980) (Version:  - Gearbox Software)

Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version:  - 2K Australia)

Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version:  - Paradox Development Studio)

CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)

Day of the Tentacle Remastered (HKLM\...\Steam App 388210) (Version:  - Double Fine Productions)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version:  - Rising Star Games)

Dear Esther (HKLM-x32\...\Steam App 203810) (Version:  - thechineseroom & Robert Briscoe)

Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.16.61.1020 - Electronic Arts Inc.)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)

FINAL FANTASY XIII (HKLM-x32\...\Steam App 292120) (Version:  - SQUARE ENIX)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)

Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden

Grand Ages Medieval (HKLM-x32\...\{A80447F5-5199-4623-87F2-8AEDB61D603E}) (Version: 1.0.0.0 - Gaming Minds Studios GmbH)

Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)

GUILD WARS (HKLM-x32\...\Guild Wars) (Version:  - )

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

H1Z1 (HKLM-x32\...\Steam App 295110) (Version:  - Daybreak Games)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden

Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Jurassic Park: The Game (HKLM-x32\...\Steam App 201830) (Version:  - Telltale Games)

Kingdom Come: Deliverance (Alpha Access) (HKLM-x32\...\Steam App 286860) (Version:  - )

King's Quest (HKLM-x32\...\Steam App 345390) (Version:  - The Odd Gentlemen)

Layers of Fear (HKLM-x32\...\Steam App 391720) (Version:  - Bloober Team SA)

Legend of Grimrock 2 (HKLM-x32\...\Steam App 251730) (Version:  - Almost Human Games)

Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)

Lost Horizon - Demo (HKLM-x32\...\Steam App 40360) (Version:  - Animation Arts)

Magicka 2 (HKLM-x32\...\Steam App 238370) (Version:  - Pieces Interactive)

Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version:  - Forever Entertainment S. A.)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version:  - Rogue Factor)

MSI Kombustor 2.5.9 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version:  - MSI Co., LTD)

MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version:  - Airtight Games)

NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)

Nether (HKLM-x32\...\Steam App 247730) (Version:  - Phosphor Games)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.1 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)

NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)

NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)

OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)

Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)

Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version:  - Ndemic Creations)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)

Raptr (HKLM-x32\...\Raptr) (Version: 5.1.2-r111396-release - Raptr, Inc)

Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)

Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)

Renowned Explorers: International Society (HKLM-x32\...\Steam App 296970) (Version:  - Abbey Games)

Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version:  - Capcom)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)

RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

Shadows: Price For Our Sins (HKLM-x32\...\Steam App 260270) (Version:  - 8th Floor Games)

SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)

Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)

Sonic Radar II (HKLM\...\{203BCA8D-BC00-4DD5-85DF-2F84DB803B57}) (Version: 2.1.001 - ASUSTeKcomputer.Inc)

South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\Spotify) (Version: 1.0.27.75.gdc223232 - Spotify AB)

STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts)

STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)

The Detail (HKLM-x32\...\Steam App 319970) (Version:  - Rival Games Ltd)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Lab (HKLM\...\Steam App 450390) (Version:  - Valve)

The Lost Crown (HKLM-x32\...\Steam App 291710) (Version:  - Darkling Room)

The Walking Dead: Michonne (HKLM-x32\...\Steam App 429570) (Version:  - Telltale Games)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

Zombie Army Trilogy (HKLM-x32\...\Steam App 301640) (Version:  - Rebellion)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {1CE5705D-4E51-47AE-9349-4009ED3EFC6C} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)

Task: {227CA069-0FFD-42D3-AFF4-519A6F36B79B} - System32\Tasks\{F3E407B1-C03C-46F9-98BC-CC07966D1DF5} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\Setupx32.exe" -d "C:\Program Files (x86)\MSI\Live Update"

Task: {297F3776-0AD7-41BC-A2A9-96A8A70D21D5} - System32\Tasks\Microsoft\Windows\Setup\gwx\rundetector => C:\Windows\system32\GWX\GWXDetector.exe [2016-04-24] (Microsoft Corporation)

Task: {5633B10A-8CC2-4C4C-9FBA-8BF87989CE3C} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2014-07-02] ()

Task: {69CA2751-F2C2-496F-AC75-809F6B75AB7F} - System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"

Task: {8C6326C6-3B88-4122-8793-14E18850D660} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2014-03-27] ()

Task: {AB2C19BA-8B48-412B-B768-AE8F0B5AE4A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {AF91B4EA-1E35-4FAF-90B7-C4C79022D40E} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2014-07-02] (TODO: <Company name>)

Task: {C2F5D806-A594-4E8E-A3A6-1167D7083785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {CA2E3590-06B6-4B9B-9E36-9A3BEE3C1A18} - System32\Tasks\{0D8FD790-C011-4F90-93F5-6ED1BADD0E21} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\MSISetup\MSISetup.exe" -d "C:\Program Files (x86)\MSI\Live Update\MSISetup"

Task: {CBAB60EB-E5ED-4B03-80DB-9958213F8BB3} - System32\Tasks\{FB843C46-89EC-4536-A325-CEB922B4505C} => pcalua.exe -a "C:\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Steam\steamapps\common\Left 4 Dead 2" -c /register

Task: {CDD0FAFA-CE46-44F9-A4C6-1103FC158572} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)

Task: {D275A2D5-8035-4889-AB4F-741F906D759B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)

Task: {E961AEE2-7294-4EB3-BFB4-AE431C982A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-12] (Adobe Systems Incorporated)

Task: {FB567471-D278-4652-BADC-8CA44508C87C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2014-06-25] (ASUSTeK Computer Inc.)

Task: {FB5C775E-E2A7-4CEA-9480-63E754E10EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {FF4DDFCB-E2B9-49A3-B7F7-4653B91F1194} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-06-21 19:12 - 2014-01-28 05:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2015-10-10 21:02 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2015-06-21 19:14 - 2014-04-24 08:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe

2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

2015-06-21 19:37 - 2014-07-02 17:41 - 01270584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

2015-06-21 19:37 - 2014-03-27 19:33 - 01430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

2015-06-21 19:17 - 2014-05-22 10:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll

2015-06-21 19:38 - 2014-08-01 14:58 - 01065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe

2015-06-21 19:38 - 2014-07-25 16:32 - 00036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

2015-06-21 19:12 - 2016-05-16 10:15 - 00043152 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2015-06-21 19:12 - 2014-01-28 05:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2015-06-21 19:37 - 2014-07-09 11:05 - 00711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00851456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00801792 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00807936 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll

2015-06-21 19:37 - 2014-03-27 19:32 - 05778096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll

2015-06-21 19:37 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Log4cxxWrapper.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll

2015-06-21 19:37 - 2014-07-17 11:42 - 04095488 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\Log4cxxWrapper.dll

2015-06-21 19:37 - 2014-02-25 16:53 - 01138176 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00827392 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Version\Version.dll

2015-06-21 19:37 - 2014-07-02 11:41 - 00053248 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Exeio.dll

2015-06-21 19:37 - 2014-07-02 11:41 - 00278528 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Vender.dll

2015-06-21 19:30 - 2014-04-25 00:03 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMLib.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\IccHelper.dll

2015-06-21 19:38 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll

2016-01-24 17:26 - 2010-11-04 12:48 - 00061440 _____ () D:\Program Files (x86)\hiddriver.dll

2015-06-21 19:38 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll

2015-06-21 19:38 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll

2016-05-15 18:20 - 2016-05-11 13:48 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll

2016-05-15 18:20 - 2016-05-11 13:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll

2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\clonewarsadventures.com -> clonewarsadventures.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\freerealms.com -> freerealms.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\soe.com -> soe.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\sony.com -> sony.com
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2016-05-10 22:53 - 00001006 ____N C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1       down.baidu2016.com

127.0.0.1       123.sogou.com

127.0.0.1       www.czzsyzgm.com

127.0.0.1       www.czzsyzxl.com

127.0.0.1       union.baidu2019.com
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 8.8.8.8 - 8.8.4.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NarutoOnline.lnk => C:\Windows\pss\NarutoOnline.lnk.CommonStartup

MSCONFIG\startupreg: Aj-DriverV2 => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\AjCl.exe"

MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min

MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60

MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup

MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup

MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Spotify => "C:\Users\Liz\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Liz\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{D0D533DA-E534-4CFF-B98D-B36B06085542}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{7B082FCD-6EF9-433B-A14B-ABCD111DFDA0}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{CE4C3809-D71B-45F5-9D2B-A601DB617801}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{8A6780DB-A24A-443A-AB22-D718D526EDDC}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{716BFE09-2751-4869-88C3-377946FE6406}] => (Allow) C:\Steam\Steam.exe

FirewallRules: [{63253ABC-4B77-427C-BBCD-C34F444BFC31}] => (Allow) C:\Steam\Steam.exe

FirewallRules: [{0EFFD12B-6C33-4E21-A5FF-18248268AA1E}] => (Allow) C:\Steam\bin\steamwebhelper.exe

FirewallRules: [{EF7258DF-5045-446A-BF6A-EEDB0CF5C5C7}] => (Allow) C:\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{DC94BA27-A326-4564-9D5C-8F4556CC4136}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [UDP Query User{BC270F78-4F7B-4A29-8203-F1A07EF24940}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{112F4EB9-8FD8-49FA-8342-F77602D7DF64}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe

FirewallRules: [{46F36197-4208-4EE7-8ED8-3018E94ED72C}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe

FirewallRules: [{3CE5CEE0-77AF-4ADD-880F-5CDB833FB7D0}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe

FirewallRules: [{4167AAD9-BF76-42D9-A404-20DF49616B3C}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe

FirewallRules: [TCP Query User{F5B673CF-5DED-4823-88AB-1E93C1EC773A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe

FirewallRules: [UDP Query User{D260473B-8FA1-428B-9712-EFDB9AB2103A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe

FirewallRules: [TCP Query User{3A3E393A-4D96-474D-B326-5DD14A4B8B34}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe

FirewallRules: [UDP Query User{7ABE9331-02B1-484F-BBBA-D6DCF1C24ABA}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe

FirewallRules: [{3A02A55B-E70D-4139-B0DC-5A62AF685E04}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe

FirewallRules: [{FC1FA25A-E1E1-41D0-9AE9-54DE9E3FA76B}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe

FirewallRules: [{FFD8E5E8-58CA-42DC-8B30-C2E7B92CFF66}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{872EE66E-AA4E-4DDC-BCF5-C0C3CB5FF509}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{DD6ED44D-3F04-4075-8A22-57C092435851}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{47D59FB6-2DD6-4460-9A94-A2A9E5F4254C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{7D832AEF-AA7D-42F6-B232-5AFFF23570A2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{936E869D-5427-460C-A4DE-FE5717DD7E0B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{70C22033-BB7E-49B0-9BE8-F414F003205B}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{C77FEB62-968B-4393-95F7-9AD35437A16C}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{12FFF2A3-F229-4325-B5D8-A31AA45FF425}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{0E2292A5-9F16-41ED-9884-D40E49D78FA0}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{2DB0F342-C2F7-4FE2-B3E7-AB49649EEE5A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{F5863B5C-77BC-46A1-8343-648B9ACA4246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{58819C25-DE51-4AD9-BF25-7FC8D11394DD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{56D8EF6B-25D6-450C-8034-04C33CA8BF0C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{969FAAF2-1467-4F70-B3F4-40C3F2BAA957}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{227B8366-7BE0-42A9-A5E5-A29A3B14E468}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{D756CAF4-AC36-46B9-B26D-994355D68DB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe

FirewallRules: [{13354DCF-542C-41EA-90BF-ECD5A26EDDD6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe

FirewallRules: [{15C944EB-0B67-4983-9CA6-C7333971AC2D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe

FirewallRules: [{D702F2E5-A74D-4EAA-8B8B-84315CF8A475}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe

FirewallRules: [{EF9DF606-600E-45E7-B9BA-CA72B9ECBA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe

FirewallRules: [{627CE05E-328A-4595-A559-9B4D969FF50F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe

FirewallRules: [{D9F849EB-B98B-4270-9E4E-0C105A128005}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe

FirewallRules: [{AF8B9D01-4381-4EA7-8424-6D98332CA833}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe

FirewallRules: [{BC2B9866-9621-424D-B7DF-9D77A9DF6C55}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe

FirewallRules: [{062E7D3C-1DD2-4DEC-AA61-5B0FD0AADF59}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe

FirewallRules: [{BEF417A8-B391-46A6-BF27-AB985734D1BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{64A46AE9-0BAD-4D37-BC9F-80A89B741DC3}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [UDP Query User{A5EB3862-B05D-49FF-B980-D90AB0DE050D}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{51DB3670-22B0-4157-A06C-CFCCB525D17F}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{3B63A56F-F0A4-4927-88D9-95A22CA88DD5}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [TCP Query User{FFC8C3AE-C4BC-45AF-AE4D-D6BF9D6D6535}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe

FirewallRules: [UDP Query User{6458F897-C553-46D7-BA8D-D9B83E3AED81}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe

FirewallRules: [{0DC0524D-67A4-4664-AF48-12F6AE76F74A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{AD370CDA-3467-4006-8D6C-1BC50330DFFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1EC201B4-FABA-4CAD-9BF7-D50A79C400E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe

FirewallRules: [{AE20F5E0-F875-4F82-A553-4226BC95F617}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe

FirewallRules: [TCP Query User{FF8AC426-F8B3-4F58-B315-89232E8CE001}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [UDP Query User{829A50C6-9F72-440B-9C4E-D4BC06985EAB}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{434966BB-6A14-48FD-A4B6-328E10D7A345}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{7C495F63-6777-43DB-9481-E1AA1AE647D9}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{09857451-9C85-4CD9-A0AB-14C7590A04E1}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{0BB5C967-5AA9-40A4-9685-AAAF71E607B8}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{78FC3D24-8387-4188-8B3C-CE0664904376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe

FirewallRules: [{49B118EA-8E11-4B0E-8215-230B01C5CE13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe

FirewallRules: [{27F00A7B-5DBA-45AF-941C-90B508FB2DAD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe

FirewallRules: [{B1B97779-A19B-4BB1-99AD-44B95B477749}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe

FirewallRules: [{C5497FAA-8168-4061-B1E1-B987D3AAA6AA}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{25E8BA67-509D-4388-AC9A-B086043C53B0}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{088F565A-86A1-41F3-8667-74436E520109}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{014A3513-F17A-4A3E-A1CA-DD870368F0C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{3DE5BAE5-AE19-4C14-9CEB-B1766B11437D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{CDB0FE67-F5E3-4AAE-880F-55738E490A53}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{2E17653A-B7AB-460E-B2CD-598C26877283}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe

FirewallRules: [{E6106352-BE9A-4923-AB87-D9E5622F6BB5}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe

FirewallRules: [{DAB75AD6-19CA-426B-93E5-FDFD10482FAF}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe

FirewallRules: [{7284DC57-2475-40D6-A4B0-905851D8F9B3}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe

FirewallRules: [{FC316C36-A6F4-4BD3-AA3F-A362C4A35A36}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe

FirewallRules: [{46A96A42-6C5C-4C61-9434-DF8E73320D3E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe

FirewallRules: [{202DAE5F-2B75-42A1-9C70-1DD4F1C4E6EA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{61F88636-48D0-489C-B318-80856ABD4513}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{E5F77743-8DA3-40EE-B413-9F1CAE8475AC}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe

FirewallRules: [{27158C42-3B38-44BA-A238-E28B6D4DAFCF}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe

FirewallRules: [{5CD5647B-6740-4B31-93CE-0C4A7EF4AC0E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{5F8DA77F-94C1-469D-A417-98A1E78BD137}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{A8E0D916-0171-46D6-956A-E12D44FBEC88}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{35FA0840-3492-498E-B431-BC572D39E821}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{32054994-6E80-4F28-8FA1-BF8D3B974DD1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{0845E5D0-FBCB-48CE-A979-CCA4A210B2AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{BB735E58-5130-4186-9D90-B58561EA1B98}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe

FirewallRules: [{943B24AE-6227-496A-886E-3C4BF2064E4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe

FirewallRules: [{E98772CC-43A2-43A3-9AE8-DD98B52572F5}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe

FirewallRules: [{99AD5144-B305-49D6-B5A5-80A32E221AE8}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe

FirewallRules: [{76E5C617-18E2-493C-8D37-83B944229067}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe

FirewallRules: [{FB771EFD-D000-4E1E-BB38-4CA90A0CFC5B}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe

FirewallRules: [{5DAB3ED1-0252-495B-9C56-1ED6E035198D}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe

FirewallRules: [{A6AE2D3B-CB89-488B-972F-F85FF5537F79}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe

FirewallRules: [{75A2C7E5-19FF-47D9-A0DF-8120615D287A}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{A1C44C9E-E20A-4825-96B6-052B4864A3C1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{31FC1A73-AE87-47D3-9D43-A0ECFC2B06A1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{318F1635-826B-466A-BB56-85B11F35311F}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{44538836-F358-4810-98E1-5A0CF740AABB}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{CF455795-CA5D-450C-82A5-BE87F347CD93}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{9DE8B198-9FD6-4D5B-BC74-248D23601427}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{E5EF64D1-87FA-4D0A-A6E3-8B195146EEAE}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{62980061-5F5B-495A-9665-DC2968802264}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe

FirewallRules: [{22421502-A1F5-4C4D-B7C3-8E120A502F0A}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe

FirewallRules: [{8A027618-FE9B-4F8A-ACE8-BA8912205362}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe

FirewallRules: [{A15C2F34-B811-408B-88BA-59D8DB9D2233}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe

FirewallRules: [{2CCD6FCE-C8F7-4268-BE5D-CF765CC15E07}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe

FirewallRules: [{A5401947-B780-4B22-A180-0AC079FA9840}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe

FirewallRules: [{412E9CE9-4DFD-4C75-BE97-4ED3C7CA5F6A}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe

FirewallRules: [{77E5627B-67F5-476A-962F-3375990D5577}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe

FirewallRules: [{8981D155-3718-446A-9BE9-D2DB78AC81B8}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe

FirewallRules: [{3C15950E-C546-401D-B636-F1F782D7AF7F}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe

FirewallRules: [{9BC4E78B-9D2A-463A-8228-6F6C1A0D4E9D}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{834CA4AD-9085-458F-A77A-1E9F33C764DF}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{F8343B38-AE33-4BB6-A8EE-A080CE11C97C}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe

FirewallRules: [{CF1650F2-AA96-4C66-A91E-29D14A2211D6}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe

FirewallRules: [{1DD42EA1-54A6-480D-AD05-908F6828DE9C}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe

FirewallRules: [{07298826-0F22-450A-9A5A-6E6026B89AB3}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe

FirewallRules: [{6FF52AF5-5489-493C-A4D1-49826A2DD8F3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe

FirewallRules: [{D5092F15-9D81-4A75-AB15-10606000AA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe

FirewallRules: [{240D4B54-0FCB-431F-B004-22736495650B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe

FirewallRules: [{F222BB73-CF25-41F1-B747-8D368020B457}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe

FirewallRules: [{5C0CE3AB-C689-4202-B1C0-587D64DF2883}] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{EEFC172E-7045-4AAA-9CD3-B8474390B248}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{27E4AD63-98B6-49D7-9F4F-30E96700A80C}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{675F1295-9ABA-4AD3-BD10-CF54EF3006A2}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe

FirewallRules: [{A89D27B6-DD9D-4474-AAF3-6E94B0BCA3A9}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe

FirewallRules: [{A5B79F7B-B1BA-49FF-9D52-9AF6D1D79242}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{4BFC07DA-E59D-48E2-9A09-BB12800727C7}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{DE27C5BC-0825-4B21-AB4C-40CFFB8490A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{03E299FA-DD0B-49B2-ABEC-FE8721849655}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{96E3EF00-D194-4449-A40E-D368D9003C89}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{12EE714E-833D-455C-B6CF-09748EEE3CD8}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{4A9C02CD-69DC-48E8-A42C-9E4A1A17FE99}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe

FirewallRules: [{E79C4C6D-827C-49FF-8ADA-78E8479BC79D}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe

FirewallRules: [{EFD02DE3-EE48-4D6D-9FF6-88F2715AC226}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{D7688BCB-BC38-42DE-B1A9-99D6B33A12A1}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{9CCA2959-A539-4DD2-8D48-0C42ED8EB627}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{C3280A9B-4EC4-4501-ADA0-70DD9644C22E}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{AB08F33F-D745-44C7-B1B4-B009D50F0BE8}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe

FirewallRules: [{58139E46-138F-4F96-ACA1-7D0914FBB80E}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe

FirewallRules: [{63450445-8A2C-48EF-BFE3-1FF2BE5EAD37}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{746F0301-A6F2-4A7F-BBBB-ACB0BF7104DD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{330FDF04-9237-4E4C-85F4-BAE9107B186E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe

FirewallRules: [{6819C55B-2527-40E7-958D-E123190C701E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe

FirewallRules: [{3263CF1D-10B1-4B7C-B04D-B339478AFB43}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{06E65D6F-BB14-47F2-BBC6-C07683167C04}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{17D27C45-E96E-4C49-837C-81792007A126}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{5CDD8F66-3E91-43DF-B1ED-47D2884E3592}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{A567B55C-E958-4AE6-ADF8-2922FFA85C8C}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe

FirewallRules: [{F46D2CAA-EA3E-4290-85B1-46790CF049DE}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe

FirewallRules: [{9CF9DEAA-D273-4184-88A9-958C7043CADF}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe

FirewallRules: [{45AE9EA9-F828-46B3-A14B-8A53A55C182B}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe

FirewallRules: [{2DEE0519-5666-4895-9B63-44515FD8D9A6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe

FirewallRules: [{7C3A7B1E-5045-402E-BF6C-DC7F4B5D30F6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe

FirewallRules: [{8198FD95-5629-470B-837E-1695EE4BAEE3}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe

FirewallRules: [{FF7CC7C4-8FCA-4643-A2CE-58C9976BA0A6}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe

FirewallRules: [{E6967845-2DC9-4CBD-89E9-4880FE48EC0E}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe

FirewallRules: [{1CE25EDB-5AA8-4609-AA6C-E2EC6E9A6FB4}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe

FirewallRules: [{60E09E6B-CF9E-4972-B62B-15525F181894}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe

FirewallRules: [{58E420D7-4EE9-482B-907E-D53DCFACA0C0}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe

FirewallRules: [{A4C296E2-131B-457E-A9FC-DD0AACC04EC7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe

FirewallRules: [{6C72DAC0-F7E7-472E-92A7-D8EDA6C011D7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe

FirewallRules: [{816880C7-C545-49BA-BF34-9C6EDFE3B559}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe

FirewallRules: [{87D14756-408E-4F3A-87A5-7757A6AFDC71}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe

FirewallRules: [{DFC28088-CFFA-49CD-B7D4-61742D15A3C5}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe

FirewallRules: [{5C587DE7-B7BE-4007-AE58-2226FACCEC0F}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe

FirewallRules: [{8F5FDED0-05C4-4B8F-82A5-5D309AF22771}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{EF12EB5E-E442-4220-A21E-B50F45BD5CC9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{54654BF7-3929-4B5C-8D9E-A721095736D4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{37C2C869-4AE4-4C10-958C-E96C2339FDEE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{438A9EF5-E1EC-4FE1-8733-FF6B2F60969B}] => (Allow) D:\Program Files (x86)\KALYPSO\GRAND AGES MEDIEVAL\GrandAgesMedieval.exe

FirewallRules: [{95B11CE4-EDE2-4205-A538-5BD20F7DEE4D}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe

FirewallRules: [{8412E8EC-F7B9-41BB-8CC1-C1367CFBB7E8}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe

FirewallRules: [{64B74A07-D854-4000-BE0B-A1AD480DE421}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe

FirewallRules: [{D6BC693A-F6AA-4929-AF11-45FCC212CECF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe

FirewallRules: [{09186219-FFB9-4079-A2F1-99276BD937C6}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe

FirewallRules: [{79A8589B-B383-4A3C-9FB6-5E7FABC958CC}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe

FirewallRules: [{0798DD72-3708-4BAD-835D-1A50CE2FC649}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{F4CF59AD-AC69-4A81-BE26-12D904631817}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{FB8EAB63-F7FF-48E2-B390-8DE43A023734}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe

FirewallRules: [{00D8A63D-8F14-4693-9CA9-0C1234839181}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe

FirewallRules: [{B79AD18B-3A68-4EEF-82CD-2DEA2DD02F1D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe

FirewallRules: [{DA8D1985-F053-48A6-A47A-745AD3680C98}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe

FirewallRules: [{83816F82-B5D7-4B65-B44D-FA086AE6503E}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe

FirewallRules: [{88C8BF0F-06C1-4C50-BE54-F9D0DECC86C9}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe

FirewallRules: [{45D860EC-B45B-4752-B99C-DF2107C4A765}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe

FirewallRules: [{EA47C8DA-557B-43AC-90D7-9339D4A38CB9}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe

FirewallRules: [{0266EDCA-C5D9-4EF5-8B67-97F77F1CE0FA}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe

FirewallRules: [{C430923E-5157-4D29-A9BD-D009000D8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe

FirewallRules: [{3505485B-F7AE-480C-BDFB-043DBF68A620}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{8B0C7E66-D5D6-48E1-A73A-C4940AD7CA7C}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{AC885FCC-9EA1-4212-A206-7049AC8DA686}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{771AE705-4891-4130-8908-3A9E60908014}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{D7544463-56A5-424E-8DB9-261492657F1A}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{AA8A03F2-397F-44B5-8680-47A38B0CB3E9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{F6F2D53B-8256-4DF8-BA4B-690AFED30A58}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{74E711FF-7D76-4347-8DC0-41911114C0BC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{B7FC6943-8865-442C-A4D0-F0306FC250C1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{1905CF96-C39F-4337-A372-E72DA83B98D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{FD023914-D3EF-4C9C-8CB4-D72277641343}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe

FirewallRules: [{ABA95E06-7387-4E2D-AA8E-03EEBAD85E03}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe

FirewallRules: [{0FADC9B1-8E04-4A57-8A74-A581371CA25B}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe

FirewallRules: [{56BE55EC-ABB6-4E22-A9DE-010734FC75CF}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe

FirewallRules: [{129C13B1-62EC-44FD-84FB-C440BD906FDE}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe

FirewallRules: [{A994F333-464C-4833-AB09-A80EE0508249}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe

FirewallRules: [{38838EB8-7122-43A6-A0CC-576BD4CA0C27}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{2AB4B2BC-A047-4EA7-93D7-5D7BB096D424}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

FirewallRules: [{4D5FED67-5627-4EBB-8DE1-602C286D6EDB}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
 

==================== Wiederherstellungspunkte =========================
 

09-05-2016 19:49:22 Windows Update

09-05-2016 23:36:04 Windows Update

11-05-2016 15:49:57 Revo Uninstaller's restore point - SpyHunter 4

11-05-2016 15:56:30 Revo Uninstaller's restore point - RivaTuner Statistics Server 6.2.0

11-05-2016 16:01:52 Revo Uninstaller's restore point - Revo Uninstaller 1.95

11-05-2016 18:16:33 Malwarebytes Anti-Rootkit Restore Point

11-05-2016 18:24:04 Malwarebytes Anti-Rootkit Restore Point

11-05-2016 22:43:49 Windows Update

15-05-2016 18:05:16 Windows Update

15-05-2016 18:27:47 JRT Pre-Junkware Removal
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/16/2016 10:19:44 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/16/2016 10:19:44 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/16/2016 10:19:44 AM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/16/2016 10:15:35 AM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/15/2016 06:31:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/15/2016 06:31:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/15/2016 06:31:07 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/15/2016 06:26:58 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/15/2016 06:06:35 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/15/2016 06:06:35 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
 

Systemfehler:

=============

Error: (05/16/2016 10:15:36 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/15/2016 06:27:50 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "NVIDIA Display Driver Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/15/2016 06:26:59 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Modules Installer" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 120000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Dynamic Application Loader Host Interface Service" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Rapid Storage Technology" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Media Player-Netzwerkfreigabedienst" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Search" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 30000 Millisekunden durchgeführt: Neustart des Diensts.
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7034) (User: )

Description: Dienst "Intel(R) Integrated Clock Controller Service - Intel(R) ICCS" wurde unerwartet beendet. Dies ist bereits 1 Mal passiert.
 

Error: (05/15/2016 06:26:18 PM) (Source: Service Control Manager) (EventID: 7031) (User: )

Description: Der Dienst "Windows Presentation Foundation-Schriftartcache 3.0.0.0" wurde unerwartet beendet. Dies ist bereits 1 Mal vorgekommen. Folgende Korrekturmaßnahmen werden in 0 Millisekunden durchgeführt: Neustart des Diensts.
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz

Prozentuale Nutzung des RAM: 12%

Installierter physikalischer RAM: 16326.84 MB

Verfügbarer physikalischer RAM: 14205.28 MB

Summe virtueller Speicher: 32651.87 MB

Verfügbarer virtueller Speicher: 30338.54 MB
 

==================== Laufwerke ================================
 

Drive c: (Chaos) (Fixed) (Total:465.66 GB) (Free:275.75 GB) NTFS

Drive d: (Demeter) (Fixed) (Total:931.51 GB) (Free:32.78 GB) NTFS

Drive e: (Erebos) (Fixed) (Total:911.51 GB) (Free:644.98 GB) NTFS

Drive f: (RECOVER) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS

Drive g: (GRANDAGESMEDIEVAL_18711_EFIGS) (CDROM) (Total:4.27 GB) (Free:0 GB) UDF
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A7957AA7)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A7957AA3)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)

Partition 1: (Active) - (Size=911.5 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
 

==================== Ende von Addition.txt ============================

sry dein thread ist untergegangen. Nach einer fast Woche sind die Logs zu alt, mach bitte neue FRST-Logs

Code:

Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version:23-05-2016

durchgeführt von Liz (Administrator) auf LIZ-PC (23-05-2016 21:09:14)

Gestartet von C:\Users\Liz\Downloads\FRST-OlderVersion

Geladene Profile: Liz (Verfügbare Profile: Liz)

Platform: Windows 7 Professional Service Pack 1 (X64) Sprache: Deutsch (Deutschland)

Internet Explorer Version 11 (Standard-Browser: Chrome)

Start-Modus: Normal

Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
 

==================== Prozesse (Nicht auf der Ausnahmeliste) =================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
 

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe

(Intel Corporation) C:\Windows\System32\igfxCUIService.exe

() C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe

() C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe

(Intel Corporation) C:\Windows\System32\IPROSetMonitor.exe

() C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

() C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

() C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe

(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe

(Razer, Inc.) C:\Program Files (x86)\Razer\Core\64bit\RzOvlMon.exe

(ROCCAT GmbH) D:\Program Files (x86)\IskuMonitor.exe

(Microsoft Corporation) C:\Program Files\Microsoft SQL Server\90\Shared\sqlwriter.exe

(ASUSTeK Computer Inc.) C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr64.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe

() C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

(Microsoft Corporation) C:\Windows\System32\GWX\GWX.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Integrated Clock Controller Service\ICCProxy.exe

(Microsoft Corporation) C:\Windows\Microsoft.NET\Framework64\v3.0\WPF\PresentationFontCache.exe

(Intel Corporation) C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe

(Intel Corporation) C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\LMS.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
 
 

==================== Registry (Nicht auf der Ausnahmeliste) ===========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
 

HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7634288 2014-06-13] (Realtek Semiconductor)

HKLM-x32\...\Run: [RoccatIsku] => D:\Program Files (x86)\IskuMonitor.EXE [536576 2013-10-30] (ROCCAT GmbH)

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {8d739455-183a-11e5-91b0-806e6f6e6963} - G:\Autorun.exe

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\MountPoints2: {9eaecd58-1837-11e5-92d3-806e6f6e6963} - G:\.\Bin\ASSETUP.exe

HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei
 

==================== Internet (Nicht auf der Ausnahmeliste) ====================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
 

Hosts: Es ist mehr als ein Eintrag in der Hosts Datei zu finden. Siehe Hosts-Bereich in Addition.txt

Tcpip\Parameters: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{26F0521D-7676-4192-A278-9CA683A0BC9B}: [DhcpNameServer] 192.168.178.1

Tcpip\..\Interfaces\{850C2BEF-6678-4724-94A3-007D3C298F16}: [NameServer] 8.8.8.8,8.8.4.4,4.2.2.1,4.2.2.2,208.67.222.222,208.67.220.220,8.26.56.26,8.20.247.20,156.154.70.1,156.154.71.1
 

Internet Explorer:

==================

BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\ssv.dll [2015-10-10] (Oracle Corporation)

BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\jp2ssv.dll [2015-10-10] (Oracle Corporation)
 

FireFox:

========

FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_21_0_0_242.dll [2016-05-12] ()

FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_21_0_0_242.dll [2016-05-12] ()

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI ipt;version=4.0.5 -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIIPT.dll [2014-03-20] (Intel Corporation)

FF Plugin-x32: @intel-webapi.intel.com/Intel WebAPI updater -> C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\IPT\npIntelWebAPIUpdater.dll [2014-03-20] (Intel Corporation)

FF Plugin-x32: @java.com/DTPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\dtplugin\npDeployJava1.dll [2015-10-10] (Oracle Corporation)

FF Plugin-x32: @java.com/JavaPlugin,version=11.60.2 -> C:\Program Files (x86)\Java\jre1.8.0_60\bin\plugin2\npjp2.dll [2015-10-10] (Oracle Corporation)

FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.41212.0\npctrl.dll [2015-12-12] ( Microsoft Corporation)

FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-10-03] (NVIDIA Corporation)

FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-10-03] (NVIDIA Corporation)

FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.30.3\npGoogleUpdate3.dll [2016-05-11] (Google Inc.)

FF Plugin-x32: @videolan.org/vlc,version=2.2.1 -> C:\Program Files (x86)\VideoLAN\VLC\npvlc.dll [2015-04-13] (VideoLAN)

FF Plugin-x32: Adobe Reader -> C:\Program Files (x86)\Adobe\Acrobat Reader DC\Reader\AIR\nppdf32.dll [2016-05-03] (Adobe Systems Inc.)
 

Chrome: 

=======

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default

CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-27]

CHR Extension: (Adblock Plus) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-03-09]

CHR Extension: (Google Search) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-28]

CHR Extension: (CyberGhost VPN - Free Proxy) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\fcbnikgemihknccdjaihjnfbapinljpi [2015-08-09]

CHR Extension: (Gmail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-06-21]

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 1

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 2

CHR Profile: C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3

CHR Extension: (Google Präsentationen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2016-05-15]

CHR Extension: (Google Docs) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\aohghmighlieiainnegkcijnfilokake [2016-05-15]

CHR Extension: (Google Drive) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\apdfllckaahabafndbhieahigkjlhalf [2016-05-15]

CHR Extension: (YouTube) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2016-05-15]

CHR Extension: (Google Tabellen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2016-05-15]

CHR Extension: (Google Docs Offline) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-05-15]

CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-05-15]

CHR Extension: (Google Mail) - C:\Users\Liz\AppData\Local\Google\Chrome\User Data\Profile 3\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2016-05-15]
 

==================== Dienste (Nicht auf der Ausnahmeliste) ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R2 asComSvc; C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe [936728 2014-01-28] ()

R2 asHmComSvc; C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMSvc.exe [954648 2014-04-25] (ASUSTeK Computer Inc.)

R2 AsSysCtrlService; C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe [1360016 2014-04-24] () [Datei ist nicht signiert]

R2 AsusFanControlService; C:\Program Files (x86)\ASUS\AsusFanControlService\1.06.11\AsusFanControlService.exe [394040 2014-07-17] (ASUSTeK Computer Inc.)

S2 CGVPNCliService; C:\Program Files\CyberGhost 5\Service.exe [65640 2015-11-05] (CyberGhost S.R.L)

R2 IAStorDataMgrSvc; C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorDataMgrSvc.exe [16232 2014-05-28] (Intel Corporation)

R2 igfxCUIService1.0.0.0; C:\Windows\system32\igfxCUIService.exe [355232 2015-08-09] (Intel Corporation)

S3 Intel(R) Capability Licensing Service TCP IP Interface; C:\Program Files\Intel\iCLS Client\SocketHeciServer.exe [887232 2014-01-31] (Intel(R) Corporation)

R2 jhi_service; C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\DAL\jhi_service.exe [154584 2014-03-20] (Intel Corporation)

S3 npggsvc; C:\Windows\SysWOW64\GameMon.des [3916368 2016-01-09] (INCA Internet Co., Ltd.)

S3 Origin Client Service; D:\Programs\Origin\OriginClientService.exe [2104840 2016-03-06] (Electronic Arts)

R2 Razer Game Scanner Service; C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe [187072 2015-02-05] ()

R2 RzOvlMon; C:\Program Files (x86)\Razer\Core\64bit\rzovlmon.exe [32960 2014-04-18] (Razer, Inc.)

R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
 

===================== Treiber (Nicht auf der Ausnahmeliste) ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

R1 AsIO; C:\Windows\SysWow64\drivers\AsIO.sys [15232 2014-01-28] ()

R1 AsUpIO; C:\Windows\SysWow64\drivers\AsUpIO.sys [14464 2014-02-24] ()

R3 ASUSFILTER; C:\Windows\SysWow64\drivers\ASUSFILTER.sys [46152 2011-09-20] (MCCI Corporation)

R3 e1dexpress; C:\Windows\System32\DRIVERS\e1d62x64.sys [487704 2014-03-14] (Intel Corporation)

S3 ebdrv; C:\Windows\system32\drivers\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)

S3 EsgScanner; C:\Windows\System32\DRIVERS\EsgScanner.sys [22704 2016-05-11] ()

R0 iaStorF; C:\Windows\System32\DRIVERS\iaStorF.sys [28008 2014-05-28] (Intel Corporation)

R3 MEIx64; C:\Windows\System32\DRIVERS\TeeDriverx64.sys [129312 2014-09-30] (Intel Corporation)

S3 RzDxgk; C:\Windows\system32\drivers\RzDxgk.sys [129472 2014-04-18] (Razer, Inc.)

R3 rzendpt; C:\Windows\System32\DRIVERS\rzendpt.sys [39592 2014-12-30] (Razer Inc)

S1 RzFilter; C:\Windows\system32\drivers\RzFilter.sys [74432 2014-04-18] (Razer, Inc.)

R3 rzmpos; C:\Windows\System32\DRIVERS\rzmpos.sys [35496 2014-12-30] (Razer Inc)

R2 rzpmgrk; C:\Windows\system32\drivers\rzpmgrk.sys [37184 2015-02-05] (Razer, Inc.)

R2 rzpnk; C:\Windows\system32\drivers\rzpnk.sys [129600 2015-03-03] (Razer, Inc.)

R4 IOMap; \??\C:\Windows\system32\drivers\IOMap64.sys [X]

S3 MSICDSetup; \??\G:\CDriver64.sys [X]

S3 NTIOLib_1_0_4; \??\C:\Program Files (x86)\MSI\Live Update\NTIOLib_X64.sys [X]

S3 NTIOLib_1_0_C; \??\G:\NTIOLib_X64.sys [X]
 

==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 
 

==================== Ein Monat: Erstellte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-23 21:07 - 2016-05-23 21:09 - 00000000 ____D C:\Users\Liz\Downloads\FRST-OlderVersion

2016-05-15 18:28 - 2016-05-15 18:28 - 00005769 _____ C:\Users\Liz\Desktop\JRT.txt

2016-05-15 18:27 - 2016-05-15 18:27 - 00002610 _____ C:\Users\Liz\Desktop\AdwCleaner[C4].txt

2016-05-15 18:19 - 2016-05-15 18:19 - 01610816 _____ (Malwarebytes) C:\Users\Liz\Downloads\JRT.exe

2016-05-15 18:17 - 2016-05-15 18:17 - 03640384 _____ C:\Users\Liz\Desktop\AdwCleaner_5.116.exe

2016-05-11 18:12 - 2016-05-12 19:14 - 00000000 ____D C:\ProgramData\Malwarebytes' Anti-Malware (portable)

2016-05-11 18:12 - 2016-05-11 18:25 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys

2016-05-11 18:12 - 2016-05-11 18:12 - 00000000 ____D C:\ProgramData\Malwarebytes

2016-05-11 18:10 - 2016-05-11 18:29 - 00000000 ____D C:\Users\Liz\Desktop\mbar

2016-05-11 18:10 - 2016-05-11 18:25 - 00109272 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys

2016-05-11 18:06 - 2016-05-11 18:06 - 16563352 _____ (Malwarebytes Corp.) C:\Users\Liz\Downloads\mbar-1.09.3.1001.exe

2016-05-11 17:01 - 2016-05-11 17:01 - 00205152 _____ C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren.html

2016-05-11 17:01 - 2016-05-11 17:01 - 00000000 ____D C:\Users\Liz\Desktop\MPC Cleaner lässt sich nicht deinstallieren_files

2016-05-11 16:24 - 2016-04-23 19:08 - 00394960 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll

2016-05-11 16:24 - 2016-04-23 18:24 - 00346312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll

2016-05-11 16:24 - 2016-04-23 07:25 - 25816064 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll

2016-05-11 16:24 - 2016-04-23 07:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb

2016-05-11 16:24 - 2016-04-23 07:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll

2016-05-11 16:24 - 2016-04-23 07:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 02893312 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 00571904 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec

2016-05-11 16:24 - 2016-04-23 07:00 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll

2016-05-11 16:24 - 2016-04-23 07:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll

2016-05-11 16:24 - 2016-04-23 06:52 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll

2016-05-11 16:24 - 2016-04-23 06:51 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll

2016-05-11 16:24 - 2016-04-23 06:48 - 00615936 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll

2016-05-11 16:24 - 2016-04-23 06:47 - 00817664 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll

2016-05-11 16:24 - 2016-04-23 06:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll

2016-05-11 16:24 - 2016-04-23 06:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe

2016-05-11 16:24 - 2016-04-23 06:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe

2016-05-11 16:24 - 2016-04-23 06:46 - 06052352 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll

2016-05-11 16:24 - 2016-04-23 06:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe

2016-05-11 16:24 - 2016-04-23 06:36 - 00489984 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll

2016-05-11 16:24 - 2016-04-23 06:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll

2016-05-11 16:24 - 2016-04-23 06:27 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll

2016-05-11 16:24 - 2016-04-23 06:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll

2016-05-11 16:24 - 2016-04-23 06:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll

2016-05-11 16:24 - 2016-04-23 06:21 - 00315392 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll

2016-05-11 16:24 - 2016-04-23 06:20 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb

2016-05-11 16:24 - 2016-04-23 06:20 - 00152064 _____ (Microsoft Corporation) C:\Windows\system32\occache.dll

2016-05-11 16:24 - 2016-04-23 06:11 - 20350464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll

2016-05-11 16:24 - 2016-04-23 06:09 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll

2016-05-11 16:24 - 2016-04-23 06:08 - 00497152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll

2016-05-11 16:24 - 2016-04-23 06:08 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll

2016-05-11 16:24 - 2016-04-23 06:08 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll

2016-05-11 16:24 - 2016-04-23 06:07 - 00725504 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe

2016-05-11 16:24 - 2016-04-23 06:07 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec

2016-05-11 16:24 - 2016-04-23 06:07 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll

2016-05-11 16:24 - 2016-04-23 06:06 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll

2016-05-11 16:24 - 2016-04-23 06:06 - 00806400 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll

2016-05-11 16:24 - 2016-04-23 06:05 - 02131968 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl

2016-05-11 16:24 - 2016-04-23 06:04 - 02285568 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll

2016-05-11 16:24 - 2016-04-23 06:02 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll

2016-05-11 16:24 - 2016-04-23 06:01 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll

2016-05-11 16:24 - 2016-04-23 06:00 - 15415808 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll

2016-05-11 16:24 - 2016-04-23 05:59 - 00476160 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll

2016-05-11 16:24 - 2016-04-23 05:58 - 00663552 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll

2016-05-11 16:24 - 2016-04-23 05:58 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll

2016-05-11 16:24 - 2016-04-23 05:58 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe

2016-05-11 16:24 - 2016-04-23 05:51 - 02596864 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll

2016-05-11 16:24 - 2016-04-23 05:50 - 00416256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll

2016-05-11 16:24 - 2016-04-23 05:45 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll

2016-05-11 16:24 - 2016-04-23 05:44 - 00091136 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inseng.dll

2016-05-11 16:24 - 2016-04-23 05:43 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll

2016-05-11 16:24 - 2016-04-23 05:41 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll

2016-05-11 16:24 - 2016-04-23 05:40 - 00279040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll

2016-05-11 16:24 - 2016-04-23 05:39 - 01547776 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll

2016-05-11 16:24 - 2016-04-23 05:39 - 00130048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\occache.dll

2016-05-11 16:24 - 2016-04-23 05:36 - 04611072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll

2016-05-11 16:24 - 2016-04-23 05:33 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll

2016-05-11 16:24 - 2016-04-23 05:31 - 00693248 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll

2016-05-11 16:24 - 2016-04-23 05:30 - 02056192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl

2016-05-11 16:24 - 2016-04-23 05:30 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll

2016-05-11 16:24 - 2016-04-23 05:28 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll

2016-05-11 16:24 - 2016-04-23 05:26 - 13811200 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll

2016-05-11 16:24 - 2016-04-23 05:12 - 02121216 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll

2016-05-11 16:24 - 2016-04-23 05:09 - 01312256 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll

2016-05-11 16:24 - 2016-04-23 05:07 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll

2016-05-11 16:24 - 2016-04-14 15:49 - 00603648 _____ (Microsoft Corporation) C:\Windows\SysWOW64\d3d10level9.dll

2016-05-11 16:24 - 2016-04-14 15:21 - 00647680 _____ (Microsoft Corporation) C:\Windows\system32\d3d10level9.dll

2016-05-11 16:24 - 2016-04-09 09:01 - 00986344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgkrnl.sys

2016-05-11 16:24 - 2016-04-09 09:01 - 00264936 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\dxgmms1.sys

2016-05-11 16:24 - 2016-04-09 08:58 - 00002048 _____ (Microsoft Corporation) C:\Windows\system32\tzres.dll

2016-05-11 16:24 - 2016-04-09 08:57 - 00405504 _____ (Microsoft Corporation) C:\Windows\system32\gdi32.dll

2016-05-11 16:24 - 2016-04-09 08:57 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\cdd.dll

2016-05-11 16:24 - 2016-04-09 08:54 - 00312832 _____ (Microsoft Corporation) C:\Windows\SysWOW64\gdi32.dll

2016-05-11 16:24 - 2016-04-09 08:54 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\tzres.dll

2016-05-11 16:24 - 2016-04-09 07:49 - 03217408 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys

2016-05-11 16:24 - 2016-04-06 17:27 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\jnwmon.dll

2016-05-11 16:24 - 2016-03-09 20:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\system32\InkEd.dll

2016-05-11 16:24 - 2016-03-09 20:34 - 00216064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\InkEd.dll

2016-05-11 16:23 - 2016-04-09 09:02 - 00631176 _____ (Microsoft Corporation) C:\Windows\system32\winresume.efi

2016-05-11 16:23 - 2016-04-09 09:01 - 05546216 _____ (Microsoft Corporation) C:\Windows\system32\ntoskrnl.exe

2016-05-11 16:23 - 2016-04-09 09:01 - 00706280 _____ (Microsoft Corporation) C:\Windows\system32\winload.efi

2016-05-11 16:23 - 2016-04-09 09:01 - 00154344 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecpkg.sys

2016-05-11 16:23 - 2016-04-09 09:01 - 00095464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ksecdd.sys

2016-05-11 16:23 - 2016-04-09 08:59 - 03998952 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntkrnlpa.exe

2016-05-11 16:23 - 2016-04-09 08:59 - 03943144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntoskrnl.exe

2016-05-11 16:23 - 2016-04-09 08:59 - 01732864 _____ (Microsoft Corporation) C:\Windows\system32\ntdll.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 01212928 _____ (Microsoft Corporation) C:\Windows\system32\rpcrt4.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00503808 _____ (Microsoft Corporation) C:\Windows\system32\srcore.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00344064 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00215552 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00210432 _____ (Microsoft Corporation) C:\Windows\system32\wdigest.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00190464 _____ (Microsoft Corporation) C:\Windows\system32\rpchttp.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00135680 _____ (Microsoft Corporation) C:\Windows\system32\sspicli.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00086528 _____ (Microsoft Corporation) C:\Windows\system32\TSpkg.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00063488 _____ (Microsoft Corporation) C:\Windows\system32\setbcdlocale.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00050176 _____ (Microsoft Corporation) C:\Windows\system32\srclient.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00028672 _____ (Microsoft Corporation) C:\Windows\system32\sspisrv.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00028160 _____ (Microsoft Corporation) C:\Windows\system32\secur32.dll

2016-05-11 16:23 - 2016-04-09 08:58 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 01464320 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 01314112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntdll.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 01163264 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00880640 _____ (Microsoft Corporation) C:\Windows\system32\advapi32.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00730624 _____ (Microsoft Corporation) C:\Windows\system32\kerberos.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00690688 _____ (Microsoft Corporation) C:\Windows\system32\adtschema.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00463872 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00419840 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\msv1_0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00312320 _____ (Microsoft Corporation) C:\Windows\system32\ncrypt.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00146432 _____ (Microsoft Corporation) C:\Windows\system32\msaudite.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00060416 _____ (Microsoft Corporation) C:\Windows\system32\msobjs.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00059904 _____ (Microsoft Corporation) C:\Windows\system32\appidapi.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\csrsrv.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00043520 _____ (Microsoft Corporation) C:\Windows\system32\cryptbase.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00034816 _____ (Microsoft Corporation) C:\Windows\system32\appidsvc.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00022016 _____ (Microsoft Corporation) C:\Windows\system32\credssp.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00006656 _____ (Microsoft Corporation) C:\Windows\system32\apisetschema.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:57 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00690688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\adtschema.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00666112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpcrt4.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00644096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\advapi32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00553472 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kerberos.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00342528 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00275456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00260608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msv1_0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00251392 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00223232 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ncrypt.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00171520 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wdigest.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00146432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msaudite.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00141312 _____ (Microsoft Corporation) C:\Windows\SysWOW64\rpchttp.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00096768 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sspicli.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00065536 _____ (Microsoft Corporation) C:\Windows\SysWOW64\TSpkg.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msobjs.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00050688 _____ (Microsoft Corporation) C:\Windows\SysWOW64\appidapi.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00043008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\srclient.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00022016 _____ (Microsoft Corporation) C:\Windows\SysWOW64\secur32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00017408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\credssp.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00006656 _____ (Microsoft Corporation) C:\Windows\SysWOW64\apisetschema.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 08:54 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:52 - 00148480 _____ (Microsoft Corporation) C:\Windows\system32\appidpolicyconverter.exe

2016-05-11 16:23 - 2016-04-09 07:52 - 00062464 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\appid.sys

2016-05-11 16:23 - 2016-04-09 07:52 - 00017920 _____ (Microsoft Corporation) C:\Windows\system32\appidcertstorecheck.exe

2016-05-11 16:23 - 2016-04-09 07:51 - 00064000 _____ (Microsoft Corporation) C:\Windows\system32\auditpol.exe

2016-05-11 16:23 - 2016-04-09 07:48 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe

2016-05-11 16:23 - 2016-04-09 07:47 - 00296960 _____ (Microsoft Corporation) C:\Windows\system32\rstrui.exe

2016-05-11 16:23 - 2016-04-09 07:44 - 00291328 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb10.sys

2016-05-11 16:23 - 2016-04-09 07:44 - 00159744 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb.sys

2016-05-11 16:23 - 2016-04-09 07:44 - 00129536 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\mrxsmb20.sys

2016-05-11 16:23 - 2016-04-09 07:43 - 00112640 _____ (Microsoft Corporation) C:\Windows\system32\smss.exe

2016-05-11 16:23 - 2016-04-09 07:43 - 00030720 _____ (Microsoft Corporation) C:\Windows\system32\lsass.exe

2016-05-11 16:23 - 2016-04-09 07:42 - 00050176 _____ (Microsoft Corporation) C:\Windows\SysWOW64\auditpol.exe

2016-05-11 16:23 - 2016-04-09 07:38 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe

2016-05-11 16:23 - 2016-04-09 07:38 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll

2016-05-11 16:23 - 2016-04-09 07:38 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe

2016-05-11 16:23 - 2016-04-09 07:38 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe

2016-05-11 16:23 - 2016-04-09 07:37 - 00036352 _____ (Microsoft Corporation) C:\Windows\SysWOW64\cryptbase.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 07:37 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll

2016-05-11 16:23 - 2016-04-09 06:20 - 01230848 _____ (Microsoft Corporation) C:\Windows\SysWOW64\WindowsCodecs.dll

2016-05-11 16:23 - 2016-04-09 05:52 - 01424896 _____ (Microsoft Corporation) C:\Windows\system32\WindowsCodecs.dll

2016-05-11 16:12 - 2016-05-16 10:20 - 00067852 _____ C:\Users\Liz\Downloads\Addition.txt

2016-05-11 16:11 - 2016-05-23 21:09 - 00000000 ____D C:\FRST

2016-05-11 16:11 - 2016-05-23 21:07 - 02383360 _____ (Farbar) C:\Users\Liz\Downloads\FRST64.exe

2016-05-11 16:11 - 2016-05-16 10:20 - 00052825 _____ C:\Users\Liz\Downloads\FRST.txt

2016-05-11 01:22 - 2016-05-11 01:22 - 00000000 ____D C:\Users\Liz\AppData\Roaming\MCorp

2016-05-11 01:12 - 2016-05-11 01:12 - 02838216 _____ (ESET) C:\Users\Liz\Downloads\eset_smart_security90_live_installer_.exe

2016-05-11 01:11 - 2016-05-11 01:11 - 00003254 _____ C:\Windows\System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9}

2016-05-11 01:03 - 2016-05-11 01:03 - 02623656 _____ (VS Revo Group Ltd.) C:\Users\Liz\Downloads\revosetup.exe

2016-05-11 01:03 - 2016-05-11 01:03 - 00001269 _____ C:\Users\Liz\Desktop\Revo Uninstaller.lnk

2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Revo Uninstaller

2016-05-11 01:03 - 2016-05-11 01:03 - 00000000 ____D C:\Program Files (x86)\VS Revo Group

2016-05-11 00:44 - 2016-05-15 18:26 - 00000000 ____D C:\AdwCleaner

2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 ____D C:\sh4ldr

2016-05-11 00:13 - 2016-05-11 00:13 - 00000000 _____ C:\autoexec.bat

2016-05-11 00:12 - 2016-05-11 15:53 - 00000000 ____D C:\Program Files\Enigma Software Group

2016-05-11 00:12 - 2016-05-11 00:12 - 00022704 _____ C:\Windows\system32\Drivers\EsgScanner.sys

2016-05-11 00:11 - 2016-05-11 00:12 - 03286400 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer (1).exe

2016-05-10 23:55 - 2016-05-10 23:55 - 03295920 _____ (Enigma Software Group USA, LLC.) C:\Users\Liz\Downloads\SpyHunter-Installer.exe

2016-05-10 23:17 - 2016-05-10 23:17 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Mozilla

2016-05-10 23:06 - 2016-05-10 23:06 - 00000000 ____D C:\Windows\pss

2016-05-10 22:58 - 2016-05-10 22:58 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Brotsoft

2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\Users\Public\Documents\dmp

2016-05-10 22:52 - 2016-05-10 22:52 - 00000000 ____D C:\extensions

2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung.lnk

2016-05-01 18:07 - 2016-05-01 18:07 - 00001582 _____ C:\Users\Liz\Desktop\FRITZ-NAS - Verknüpfung (2).lnk

2016-05-01 18:07 - 2016-05-01 18:07 - 00001071 _____ C:\Users\Liz\Desktop\FRITZ!Box Fon WLAN 7270 v3 (UI) - Verknüpfung.lnk

2016-04-24 20:49 - 2016-04-24 21:00 - 00000000 ____D C:\Users\Liz\AppData\RoamingLow

2016-04-24 19:29 - 2016-04-24 19:29 - 00000000 ____D C:\Users\Liz\AppData\Roaming\com.ohnoo.Tsioque

2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (3).pdf

2016-04-24 10:28 - 2016-04-24 10:28 - 00027545 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (2).pdf

2016-04-23 21:36 - 2016-04-23 21:36 - 00027704 _____ C:\Users\Liz\Downloads\MobilcomDebitel-Kuendigung (1).pdf
 

==================== Ein Monat: Geänderte Dateien und Ordner ========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
 

2016-05-23 20:59 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0

2016-05-23 20:59 - 2009-07-14 06:45 - 00021808 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0

2016-05-23 20:56 - 2015-06-21 19:52 - 00000000 _____ C:\Windows\Path.idx

2016-05-23 20:54 - 2011-04-12 09:43 - 03753950 _____ C:\Windows\system32\perfh007.dat

2016-05-23 20:54 - 2011-04-12 09:43 - 01098548 _____ C:\Windows\system32\perfc007.dat

2016-05-23 20:54 - 2009-07-14 07:13 - 00006434 _____ C:\Windows\system32\PerfStringBackup.INI

2016-05-23 20:51 - 2015-06-21 19:47 - 01048576 _____ C:\Windows\PE_Rom.dll

2016-05-23 20:50 - 2015-10-10 21:03 - 00000000 ____D C:\ProgramData\NVIDIA

2016-05-23 20:50 - 2015-06-21 19:11 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job

2016-05-23 20:50 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT

2016-05-23 00:50 - 2015-07-19 00:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job

2016-05-23 00:20 - 2015-06-21 19:11 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job

2016-05-22 21:55 - 2015-06-23 12:37 - 00002142 _____ C:\Windows\MB.idx

2016-05-22 19:10 - 2015-06-21 19:59 - 00002441 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Acrobat Reader DC.lnk

2016-05-16 23:45 - 2015-06-07 21:49 - 00000000 ____D C:\Steam

2016-05-15 18:20 - 2015-06-21 19:12 - 00002192 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Google Chrome.lnk

2016-05-15 18:20 - 2015-06-21 19:12 - 00002180 _____ C:\Users\Public\Desktop\Google Chrome.lnk

2016-05-15 18:05 - 2015-06-25 00:28 - 00000000 ____D C:\Windows\system32\appraiser

2016-05-12 22:59 - 2015-06-21 19:59 - 00003886 _____ C:\Windows\System32\Tasks\Adobe Acrobat Update Task

2016-05-12 22:50 - 2015-07-19 00:27 - 00797376 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe

2016-05-12 22:50 - 2015-07-19 00:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl

2016-05-12 22:50 - 2015-07-19 00:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater

2016-05-12 19:40 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\rescache

2016-05-12 19:15 - 2009-07-14 06:45 - 00295312 _____ C:\Windows\system32\FNTCACHE.DAT

2016-05-12 19:14 - 2011-04-12 09:55 - 00000000 ____D C:\Program Files\Windows Journal

2016-05-11 22:47 - 2015-06-23 21:37 - 00000000 ____D C:\Windows\system32\MRT

2016-05-11 22:44 - 2015-06-23 21:37 - 139319312 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe

2016-05-11 17:44 - 2015-06-21 20:52 - 00000000 ____D C:\Program Files\avast software

2016-05-11 17:44 - 2015-06-21 20:21 - 00000000 ____D C:\ProgramData\AVAST Software

2016-05-11 14:15 - 2015-06-21 19:11 - 00004106 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA

2016-05-11 14:15 - 2015-06-21 19:11 - 00003854 _____ C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore

2016-05-11 00:46 - 2015-06-21 19:09 - 00000996 _____ C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Internet Explorer.lnk

2016-05-11 00:13 - 2015-06-21 19:09 - 00000000 ____D C:\Users\Liz

2016-05-10 23:16 - 2016-03-07 19:27 - 00000000 ____D C:\Program Files (x86)\Raptr Inc

2016-05-10 23:16 - 2015-08-06 20:05 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AMD Gaming Evolved

2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\SysWOW64\GWX

2016-05-09 23:36 - 2015-06-26 18:31 - 00000000 ___SD C:\Windows\system32\GWX

2016-04-28 22:30 - 2015-10-10 15:03 - 00000000 ____D C:\Users\Liz\AppData\Local\ElevatedDiagnostics

2016-04-28 22:30 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\system32\NDF

2016-04-25 11:46 - 2016-04-22 22:34 - 00000000 ____D C:\Users\Liz\AppData\Roaming\Spotify

2016-04-25 11:41 - 2016-04-22 22:35 - 00000000 ____D C:\Users\Liz\AppData\Local\Spotify
 

==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
 

2016-04-05 20:57 - 2016-04-05 20:57 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.32.bc

2016-03-30 20:24 - 2016-03-30 20:24 - 0000093 _____ () C:\ProgramData\Microsoft.SqlServer.Compact.400.64.bc
 

Einige Dateien in TEMP:

====================

C:\Users\Liz\AppData\Local\Temp\127E.tmp.exe

C:\Users\Liz\AppData\Local\Temp\270.tmp.exe

C:\Users\Liz\AppData\Local\Temp\37F5.tmp.exe

C:\Users\Liz\AppData\Local\Temp\4AFA.tmp.exe

C:\Users\Liz\AppData\Local\Temp\4FF5.tmp.exe

C:\Users\Liz\AppData\Local\Temp\6A28.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7006.tmp.exe

C:\Users\Liz\AppData\Local\Temp\737B.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7468.tmp.exe

C:\Users\Liz\AppData\Local\Temp\7772.tmp.exe

C:\Users\Liz\AppData\Local\Temp\9156.tmp.exe

C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-with-dotnet45-win7-64bit.exe

C:\Users\Liz\AppData\Local\Temp\amd-catalyst-omega-14.12-without-dotnet45-win7-64bit.exe

C:\Users\Liz\AppData\Local\Temp\AMDCleanupUtility.exe

C:\Users\Liz\AppData\Local\Temp\AutoDetectUtilApp.exe

C:\Users\Liz\AppData\Local\Temp\AutoWifi.exe

C:\Users\Liz\AppData\Local\Temp\BBB3.tmp.exe

C:\Users\Liz\AppData\Local\Temp\ChromeStandaloneSetup_M31_1650_59.exe

C:\Users\Liz\AppData\Local\Temp\Cleanup.dll

C:\Users\Liz\AppData\Local\Temp\devcon64.exe

C:\Users\Liz\AppData\Local\Temp\E092.tmp.exe

C:\Users\Liz\AppData\Local\Temp\GoogleDriveSync_1_15_6464_0228.exe

C:\Users\Liz\AppData\Local\Temp\GTA_V_Launcher_1_0_393_2.exe

C:\Users\Liz\AppData\Local\Temp\GTA_V_Patch_1_0_393_2.exe

C:\Users\Liz\AppData\Local\Temp\Gw2.exe

C:\Users\Liz\AppData\Local\Temp\IrxJVuASnC.exe

C:\Users\Liz\AppData\Local\Temp\jre-8u73-windows-au.exe

C:\Users\Liz\AppData\Local\Temp\libeay32.dll

C:\Users\Liz\AppData\Local\Temp\msvcm80.dll

C:\Users\Liz\AppData\Local\Temp\msvcp80.dll

C:\Users\Liz\AppData\Local\Temp\msvcr120.dll

C:\Users\Liz\AppData\Local\Temp\msvcr80.dll

C:\Users\Liz\AppData\Local\Temp\nsl765D.tmp.exe

C:\Users\Liz\AppData\Local\Temp\playstv_patch.exe

C:\Users\Liz\AppData\Local\Temp\raptrpatch.exe

C:\Users\Liz\AppData\Local\Temp\raptr_stub.exe

C:\Users\Liz\AppData\Local\Temp\Social%20Club%20v1.1.6.1%20Setup.exe

C:\Users\Liz\AppData\Local\Temp\Social-Club-v1.1.7.8-Setup.exe

C:\Users\Liz\AppData\Local\Temp\sqlite3.dll

C:\Users\Liz\AppData\Local\Temp\tmp8075.exe

C:\Users\Liz\AppData\Local\Temp\tmpDC7A.exe

C:\Users\Liz\AppData\Local\Temp\Wmga1FZum8.exe

C:\Users\Liz\AppData\Local\Temp\xmlUpdater.exe

C:\Users\Liz\AppData\Local\Temp\ytb.exe
 
 

==================== Bamital & volsnap =================
 

(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
 

C:\Windows\system32\winlogon.exe => Datei ist digital signiert

C:\Windows\system32\wininit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert

C:\Windows\explorer.exe => Datei ist digital signiert

C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert

C:\Windows\system32\svchost.exe => Datei ist digital signiert

C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert

C:\Windows\system32\services.exe => Datei ist digital signiert

C:\Windows\system32\User32.dll => Datei ist digital signiert

C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert

C:\Windows\system32\userinit.exe => Datei ist digital signiert

C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert

C:\Windows\system32\rpcss.dll => Datei ist digital signiert

C:\Windows\system32\dnsapi.dll => Datei ist digital signiert

C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert

C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
 
 

LastRegBack: 2016-05-10 19:17
 

==================== Ende von FRST.txt ============================

Code:

Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version:23-05-2016

durchgeführt von Liz (2016-05-23 21:09:35)

Gestartet von C:\Users\Liz\Downloads\FRST-OlderVersion

Windows 7 Professional Service Pack 1 (X64) (2015-06-21 17:09:01)

Start-Modus: Normal

==========================================================
 
 

==================== Konten: =============================
 

Administrator (S-1-5-21-1654553621-3530598706-921729800-500 - Administrator - Disabled)

Gast (S-1-5-21-1654553621-3530598706-921729800-501 - Limited - Disabled)

HomeGroupUser$ (S-1-5-21-1654553621-3530598706-921729800-1002 - Limited - Enabled)

Liz (S-1-5-21-1654553621-3530598706-921729800-1000 - Administrator - Enabled) => C:\Users\Liz
 

==================== Sicherheits-Center ========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
 

AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
 

==================== Installierte Programme ======================
 

(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
 

Adobe Acrobat Reader DC - Deutsch (HKLM-x32\...\{AC76BA86-7AD7-1031-7B44-AC0F074E4100}) (Version: 15.016.20041 - Adobe Systems Incorporated)

Adobe Flash Player 21 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 21.0.0.242 - Adobe Systems Incorporated)

Age of Wonders III (HKLM-x32\...\Steam App 226840) (Version:  - Triumph Studios)

AI Suite 3 (HKLM-x32\...\{D46DA5F0-25AD-4B77-98DA-6DD6AF39FBD9}) (Version: 1.00.83 - ASUSTeK Computer Inc.)

Aj-Driver (HKLM-x32\...\{46180592-ADAC-4144-9159-771781907C0D}) (Version: 1.00.1001 - Ajort)

Alice: Madness Returns (HKLM-x32\...\Steam App 19680) (Version:  - Spicy Horse Games)

Anno 1404 (HKLM-x32\...\Steam App 33250) (Version:  - Blue Byte)

Anno 1404: Venice (HKLM-x32\...\Steam App 33350) (Version:  - Blue Byte)

ARK: Survival Evolved (HKLM-x32\...\Steam App 346110) (Version:  - Studio Wildcard)

ASUS Product Register Program (HKLM-x32\...\{C87D79F6-F813-4812-B7A9-CCCAAB8B1188}) (Version: 1.0.025 - ASUSTek Computer Inc.)

Battle.net (HKLM-x32\...\Battle.net) (Version:  - Blizzard Entertainment)

BioShock 2 (HKLM-x32\...\Steam App 8850) (Version:  - 2K Marin)

Blade & Soul (HKLM-x32\...\InstallShield_{C3F383C1-D050-4A40-843F-8171A6A02C3A}) (Version: 1.0.63.237 - NC Interactive, LLC)

Blade & Soul (x32 Version: 1.0.63.237 - NC Interactive, LLC) Hidden

Borderlands (HKLM-x32\...\Steam App 8980) (Version:  - Gearbox Software)

Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version:  - 2K Australia)

Crusader Kings II (HKLM-x32\...\Steam App 203770) (Version:  - Paradox Development Studio)

CyberGhost 5 (HKLM\...\CyberGhost 5_is1) (Version:  - CyberGhost S.R.L.)

Day of the Tentacle Remastered (HKLM\...\Steam App 388210) (Version:  - Double Fine Productions)

DayZ (HKLM-x32\...\Steam App 221100) (Version:  - Bohemia Interactive)

Deadly Premonition: The Director's Cut (HKLM-x32\...\Steam App 247660) (Version:  - Rising Star Games)

Dear Esther (HKLM-x32\...\Steam App 203810) (Version:  - thechineseroom & Robert Briscoe)

Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.16.61.1020 - Electronic Arts Inc.)

Don't Starve (HKLM-x32\...\Steam App 219740) (Version:  - Klei Entertainment)

Fallout: New Vegas (HKLM-x32\...\Steam App 22380) (Version:  - Obsidian Entertainment)

FINAL FANTASY XIII (HKLM-x32\...\Steam App 292120) (Version:  - SQUARE ENIX)

Google Chrome (HKLM-x32\...\Google Chrome) (Version: 50.0.2661.102 - Google Inc.)

Google Update Helper (x32 Version: 1.3.30.3 - Google Inc.) Hidden

Grand Ages Medieval (HKLM-x32\...\{A80447F5-5199-4623-87F2-8AEDB61D603E}) (Version: 1.0.0.0 - Gaming Minds Studios GmbH)

Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)

GUILD WARS (HKLM-x32\...\Guild Wars) (Version:  - )

Guild Wars 2 (HKLM-x32\...\Guild Wars 2) (Version:  - NCsoft Corporation, Ltd.)

H1Z1 (HKLM-x32\...\Steam App 295110) (Version:  - Daybreak Games)

Intel(R) Management Engine Components (HKLM\...\{1CEAC85D-2590-4760-800F-8DE5E91F3700}) (Version: 10.0.0.1204 - Intel Corporation)

Intel(R) Network Connections 19.1.51.0 (HKLM\...\PROSetDX) (Version: 19.1.51.0 - Intel)

Intel(R) Processor Graphics (HKLM-x32\...\{F0E3AD40-2BBD-4360-9C76-B9AC9A5886EA}) (Version: 10.18.14.4264 - Intel Corporation)

Intel(R) Rapid Storage Technology (HKLM\...\{409CB30E-E457-4008-9B1A-ED1B9EA21140}) (Version: 13.1.0.1058 - Intel Corporation)

Intel(R) USB 3.0 eXtensible Host Controller Driver (HKLM-x32\...\{240C3DDD-C5E9-4029-9DF7-95650D040CF2}) (Version: 3.0.5.69 - Intel Corporation)

Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.17 - Intel(R) Corporation) Hidden

Java 8 Update 60 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218060F0}) (Version: 8.0.600.27 - Oracle Corporation)

Jurassic Park: The Game (HKLM-x32\...\Steam App 201830) (Version:  - Telltale Games)

Kingdom Come: Deliverance (Alpha Access) (HKLM-x32\...\Steam App 286860) (Version:  - )

King's Quest (HKLM-x32\...\Steam App 345390) (Version:  - The Odd Gentlemen)

Layers of Fear (HKLM-x32\...\Steam App 391720) (Version:  - Bloober Team SA)

Legend of Grimrock 2 (HKLM-x32\...\Steam App 251730) (Version:  - Almost Human Games)

Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version:  - DONTNOD Entertainment)

Lost Horizon - Demo (HKLM-x32\...\Steam App 40360) (Version:  - Animation Arts)

Magicka 2 (HKLM-x32\...\Steam App 238370) (Version:  - Pieces Interactive)

Merchants of Kaidan (HKLM-x32\...\Steam App 294020) (Version:  - Forever Entertainment S. A.)

Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)

Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.41212.0 - Microsoft Corporation)

Microsoft SQL Server 2012 Express LocalDB  (HKLM\...\{6C026A91-640F-4A23-8B68-05D589CC6F18}) (Version: 11.1.3000.0 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)

Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)

Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)

Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.50727 (HKLM-x32\...\{22154f09-719a-4619-bb71-5b3356999fbf}) (Version: 11.0.50727.1 - Microsoft Corporation)

Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.23506 (HKLM-x32\...\{3ee5e5bb-b7cc-4556-8861-a00a82977d6c}) (Version: 14.0.23506.0 - Microsoft Corporation)

Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.23506 (HKLM-x32\...\{23daf363-3020-4059-b3ae-dc4ad39fed19}) (Version: 14.0.23506.0 - Microsoft Corporation)

Mordheim: City of the Damned (HKLM-x32\...\Steam App 276810) (Version:  - Rogue Factor)

MSI Kombustor 2.5.9 (HKLM-x32\...\{0B7C79A5-5CB2-4ABD-A9C1-92A6213CE8DD}_is1) (Version:  - MSI Co., LTD)

MURDERED: SOUL SUSPECT™ (HKLM-x32\...\Steam App 233290) (Version:  - Airtight Games)

NCSOFT Game Launcher (HKLM-x32\...\NCLauncher_NCWest) (Version:  - NCSOFT)

Nether (HKLM-x32\...\Steam App 247730) (Version:  - Phosphor Games)

Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.9.1 - Notepad++ Team)

NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation)

NVIDIA 3D Vision Treiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 358.50 - NVIDIA Corporation)

NVIDIA Grafiktreiber 358.50 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 358.50 - NVIDIA Corporation)

NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation)

NVIDIA PhysX (HKLM-x32\...\{B455E95A-B804-439F-B533-336B1635AE97}) (Version: 9.14.0702 - NVIDIA Corporation)

OpenOffice 4.1.2 (HKLM-x32\...\{F5CAB1AF-7B1A-4CEC-B829-A3F699473AE1}) (Version: 4.12.9782 - Apache Software Foundation)

Origin (HKLM-x32\...\Origin) (Version: 9.7.2.53208 - Electronic Arts, Inc.)

Peggle (HKLM-x32\...\{715AD72D-887A-459E-988B-D4F3E87FA24B}) (Version: 1.04.0.0 - PopCap Games)

Plague Inc: Evolved (HKLM-x32\...\Steam App 246620) (Version:  - Ndemic Creations)

Portal 2 (HKLM-x32\...\Steam App 620) (Version:  - Valve)

PVZ Garden Warfare (HKLM-x32\...\{A5AC7D7B-C1D5-4AF9-8829-993DA335BE1B}) (Version: 1.0.3.0 - Electronic Arts)

Raptr (HKLM-x32\...\Raptr) (Version: 5.1.2-r111396-release - Raptr, Inc)

Razer Core (HKLM-x32\...\Razer Core) (Version: 1.0.1.66 - Razer Inc)

Razer Synapse (HKLM-x32\...\{0D78BEE2-F8FF-4498-AF1A-3FF81CED8AC6}) (Version: 1.18.21.26027 - Razer Inc.)

Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7272 - Realtek Semiconductor Corp.)

Renowned Explorers: International Society (HKLM-x32\...\Steam App 296970) (Version:  - Abbey Games)

Resident Evil 5 / Biohazard 5 (HKLM-x32\...\Steam App 21690) (Version:  - Capcom)

Revo Uninstaller 1.95 (HKLM-x32\...\Revo Uninstaller) (Version: 1.95 - VS Revo Group)

Risen 2 - Dark Waters (HKLM-x32\...\Steam App 40390) (Version:  - Piranha Bytes)

RivaTuner Statistics Server 6.2.0 (HKLM-x32\...\RTSS) (Version: 6.2.0 - Unwinder)

ROCCAT Isku Keyboard Driver (HKLM-x32\...\{4ABAF918-A6BD-43D8-AE0B-5292034B14CB}) (Version:  - Roccat GmbH)

Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.7.8 - Rockstar Games)

Shadows: Price For Our Sins (HKLM-x32\...\Steam App 260270) (Version:  - 8th Floor Games)

SimCity 2000 Special Edition (HKLM-x32\...\{59D2C751-F7BE-4E9F-9C8C-1F16013802C7}) (Version: 2.0.0.1 - Electronic Arts)

Skype™ 7.21 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.21.100 - Skype Technologies S.A.)

Sonic Radar II (HKLM\...\{203BCA8D-BC00-4DD5-85DF-2F84DB803B57}) (Version: 2.1.001 - ASUSTeKcomputer.Inc)

South Park™: The Stick of Truth™ (HKLM-x32\...\Steam App 213670) (Version:  - Obsidian Entertainment)

Spotify (HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\Spotify) (Version: 1.0.27.75.gdc223232 - Spotify AB)

STAR WARS™ Battlefront™ (HKLM-x32\...\{E402D891-4E45-4ce9-B41F-DD35864EF170}) (Version: 1.0.4.52841 - Electronic Arts)

STAR WARS™ Battlefront™ Beta (HKLM-x32\...\{8A863B64-C9BE-4203-9ED7-92981CF690D3}) (Version: 1.0.4.9084 - Electronic Arts)

Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)

TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )

TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)

The Banner Saga (HKLM-x32\...\Steam App 237990) (Version:  - Stoic)

The Detail (HKLM-x32\...\Steam App 319970) (Version:  - Rival Games Ltd)

The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)

The Lab (HKLM\...\Steam App 450390) (Version:  - Valve)

The Lost Crown (HKLM-x32\...\Steam App 291710) (Version:  - Darkling Room)

The Walking Dead: Michonne (HKLM-x32\...\Steam App 429570) (Version:  - Telltale Games)

Tomb Raider (HKLM-x32\...\Steam App 203160) (Version:  - Crystal Dynamics)

Total War: SHOGUN 2 (HKLM-x32\...\Steam App 34330) (Version:  - The Creative Assembly)

VLC media player (HKLM-x32\...\VLC media player) (Version: 2.2.1 - VideoLAN)

WinRAR 5.21 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.21.0 - win.rar GmbH)

World of Warcraft (HKLM-x32\...\World of Warcraft) (Version:  - Blizzard Entertainment)

XCOM: Enemy Unknown (HKLM-x32\...\Steam App 200510) (Version:  - Firaxis Games)

Zombie Army Trilogy (HKLM-x32\...\Steam App 301640) (Version:  - Rebellion)
 

==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{820D63D5-8CFF-46DE-86AF-4997DEDD6DB5}\localserver32 -> C:\Windows\system32\igfxEM.exe (Intel Corporation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)

CustomCLSID: HKU\S-1-5-21-1654553621-3530598706-921729800-1000_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
 

==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

Task: {1CE5705D-4E51-47AE-9349-4009ED3EFC6C} - System32\Tasks\ASUS\USB 3.0 Boost Service => C:\Program Files (x86)\ASUS\AI Suite III\USB 3.0 Boost\U3BoostSvr.exe [2013-07-24] (ASUSTeK Computer Inc.)

Task: {227CA069-0FFD-42D3-AFF4-519A6F36B79B} - System32\Tasks\{F3E407B1-C03C-46F9-98BC-CC07966D1DF5} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\Setupx32.exe" -d "C:\Program Files (x86)\MSI\Live Update"

Task: {5633B10A-8CC2-4C4C-9FBA-8BF87989CE3C} - System32\Tasks\ASUS\ASUS DIPAwayMode => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe [2014-07-02] ()

Task: {69CA2751-F2C2-496F-AC75-809F6B75AB7F} - System32\Tasks\{C2F577AC-B78D-45F9-B546-F944C7352EA9} => pcalua.exe -a "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller\Revouninstaller.exe" -d "C:\Program Files (x86)\VS Revo Group\Revo Uninstaller"

Task: {8C6326C6-3B88-4122-8793-14E18850D660} - System32\Tasks\ASUS\Ez Update => C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe [2014-03-27] ()

Task: {AB2C19BA-8B48-412B-B768-AE8F0B5AE4A2} - System32\Tasks\Adobe Acrobat Update Task => C:\Program Files (x86)\Common Files\Adobe\ARM\1.0\AdobeARM.exe [2016-04-22] (Adobe Systems Incorporated)

Task: {AF91B4EA-1E35-4FAF-90B7-C4C79022D40E} - System32\Tasks\ASUS\GpuFanHelper => C:\Program Files (x86)\ASUS\AI Suite III\DIP4\GpuFanHelper.exe [2014-07-02] (TODO: <Company name>)

Task: {C2F5D806-A594-4E8E-A3A6-1167D7083785} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {CA2E3590-06B6-4B9B-9E36-9A3BEE3C1A18} - System32\Tasks\{0D8FD790-C011-4F90-93F5-6ED1BADD0E21} => pcalua.exe -a "C:\Program Files (x86)\MSI\Live Update\MSISetup\MSISetup.exe" -d "C:\Program Files (x86)\MSI\Live Update\MSISetup"

Task: {CBAB60EB-E5ED-4B03-80DB-9958213F8BB3} - System32\Tasks\{FB843C46-89EC-4536-A325-CEB922B4505C} => pcalua.exe -a "C:\Steam\steamapps\common\Left 4 Dead 2\bin\addoninstaller.exe" -d "C:\Steam\steamapps\common\Left 4 Dead 2" -c /register

Task: {CDD0FAFA-CE46-44F9-A4C6-1103FC158572} - System32\Tasks\ASUS\Push Notice Server Execute => C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe [2014-05-28] (ASUSTeK Computer Inc.)

Task: {D275A2D5-8035-4889-AB4F-741F906D759B} - System32\Tasks\AVAST Software\Avast settings backup => C:\Program Files\Common Files\AV\avast! Antivirus\backup.exe [2016-03-05] (AVAST Software)

Task: {E961AEE2-7294-4EB3-BFB4-AE431C982A0D} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-05-12] (Adobe Systems Incorporated)

Task: {FB567471-D278-4652-BADC-8CA44508C87C} - System32\Tasks\ASUS\ASUS AISuiteIII => C:\Program Files (x86)\ASUS\AI Suite III\AISuite3.exe [2014-06-25] (ASUSTeK Computer Inc.)

Task: {FB5C775E-E2A7-4CEA-9480-63E754E10EED} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-31] (Google Inc.)

Task: {FF4DDFCB-E2B9-49A3-B7F7-4653B91F1194} - System32\Tasks\ASUS\ASUS Product Register Service => C:\Program Files (x86)\ASUS\APRP\aprp.exe [2013-08-27] (ASUSTek Computer Inc.)
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
 

Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
 

==================== Verknüpfungen =============================
 

(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
 

==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
 

2015-06-21 19:12 - 2014-01-28 05:16 - 00936728 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\atkexComSvc.exe

2015-10-10 21:02 - 2015-10-03 04:49 - 00116344 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll

2015-06-21 19:14 - 2014-04-24 08:29 - 01360016 ____R () C:\Program Files (x86)\ASUS\AsSysCtrlService\1.00.22\AsSysCtrlService.exe

2015-02-05 01:24 - 2015-02-05 01:25 - 00187072 _____ () C:\Program Files (x86)\Razer\Razer Services\GSS\GameScannerService.exe

2015-06-21 19:37 - 2014-07-02 17:41 - 01270584 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DipAwayMode.exe

2015-06-21 19:37 - 2014-03-27 19:33 - 01430328 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzUpdt.exe

2015-06-21 19:17 - 2014-05-22 10:24 - 00096568 _____ () C:\Windows\system32\audioLibVc.dll

2015-06-21 19:38 - 2014-08-01 14:58 - 01065272 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNoticeMonitor.exe

2015-06-21 19:38 - 2014-07-25 16:32 - 00036152 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotify_PCCtrl.exe

2015-06-21 19:12 - 2016-05-23 20:50 - 00043152 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\PEbiosinterface32.dll

2015-06-21 19:12 - 2014-01-28 05:16 - 00104448 _____ () C:\Program Files (x86)\ASUS\AXSP\1.02.00\ATKEX.dll

2015-06-21 19:37 - 2014-07-09 11:05 - 00711680 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4DIGIPowerControlAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00851456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4EpuAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00801792 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4FanAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00807936 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\DIPDLL\DIP4TurboVEVOAction.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\DIPAwayMode\IccHelper.dll

2015-06-21 19:37 - 2014-03-27 19:32 - 05778096 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EzULIB.dll

2015-06-21 19:37 - 2014-02-24 17:49 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\ImageHelper.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Log4cxxWrapper.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00147456 _____ () C:\Program Files (x86)\ASUS\AI Suite III\AssistFunc.dll

2015-06-21 19:37 - 2014-07-17 11:42 - 04095488 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\dip4.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00091648 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\Log4cxxWrapper.dll

2015-06-21 19:37 - 2014-02-25 16:53 - 01138176 _____ () C:\Program Files (x86)\ASUS\AI Suite III\EZ Update\EasyUpdt.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00827392 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Version\Version.dll

2015-06-21 19:37 - 2014-07-02 11:41 - 00053248 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Exeio.dll

2015-06-21 19:37 - 2014-07-02 11:41 - 00278528 _____ () C:\Program Files (x86)\ASUS\VGA COM\1.00.20\Vender.dll

2015-06-21 19:30 - 2014-04-25 00:03 - 00662016 _____ () C:\Program Files (x86)\ASUS\AAHM\1.00.22\aaHMLib.dll

2015-06-21 19:37 - 2014-07-02 17:41 - 00010240 _____ () C:\Program Files (x86)\ASUS\AI Suite III\DIP4\IccHelper.dll

2015-06-21 19:38 - 2012-01-19 09:39 - 00028672 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\PEInfo.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00208896 _____ () C:\Program Files (x86)\ASUS\AI Suite III\ImageHelper.dll

2015-06-21 19:37 - 2014-04-25 06:03 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\pngio.dll

2015-06-21 19:38 - 2010-09-23 11:51 - 00114688 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\AsIdxParser.dll

2015-06-21 19:38 - 2010-02-25 14:01 - 00139264 _____ () C:\Program Files (x86)\ASUS\AI Suite III\USB BIOS Flashback\Aszip.dll

2016-01-24 17:26 - 2010-11-04 12:48 - 00061440 _____ () D:\Program Files (x86)\hiddriver.dll

2015-06-21 19:38 - 2013-11-20 10:10 - 00662016 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\aaHMLib.dll

2015-06-21 19:38 - 2013-07-02 10:40 - 00253952 _____ () C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\pngio.dll

2014-03-20 11:43 - 2014-03-20 11:43 - 01241560 _____ () C:\Program Files (x86)\Intel\Intel(R) Management Engine Components\LMS\ACE.dll

2016-05-15 18:20 - 2016-05-11 13:48 - 01738904 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libglesv2.dll

2016-05-15 18:20 - 2016-05-11 13:48 - 00086168 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\libegl.dll

2016-05-15 18:20 - 2016-05-11 13:48 - 17565848 _____ () C:\Program Files (x86)\Google\Chrome\Application\50.0.2661.102\PepperFlash\pepflashplayer.dll
 

==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
 
 

==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
 

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\PAexec => ""="Service"

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\PAexec => ""="Service"
 

==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
 
 

==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
 

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\clonewarsadventures.com -> clonewarsadventures.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\freerealms.com -> freerealms.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\soe.com -> soe.com

IE trusted site: HKU\S-1-5-21-1654553621-3530598706-921729800-1000\...\sony.com -> sony.com
 

==================== Hosts Inhalt: ==========================
 

(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
 

2009-07-14 04:34 - 2016-05-10 22:53 - 00001006 ____N C:\Windows\system32\Drivers\etc\hosts
 

127.0.0.1       down.baidu2016.com

127.0.0.1       123.sogou.com

127.0.0.1       www.czzsyzgm.com

127.0.0.1       www.czzsyzxl.com

127.0.0.1       union.baidu2019.com
 

==================== Andere Bereiche ============================
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

HKU\S-1-5-21-1654553621-3530598706-921729800-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Liz\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg

DNS Servers: 8.8.8.8 - 8.8.4.4

HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 0) (ConsentPromptBehaviorUser: 3) (EnableLUA: 0)

Windows Firewall ist aktiviert.
 

==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
 

(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
 

MSCONFIG\startupfolder: C:^ProgramData^Microsoft^Windows^Start Menu^Programs^Startup^NarutoOnline.lnk => C:\Windows\pss\NarutoOnline.lnk.CommonStartup

MSCONFIG\startupreg: Aj-DriverV2 => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\AjCl.exe"

MSCONFIG\startupreg: CyberGhost => "C:\Program Files\CyberGhost 5\CyberGhost.exe" /autostart /min

MSCONFIG\startupreg: IAStorIcon => "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIconLaunch.exe" "C:\Program Files\Intel\Intel(R) Rapid Storage Technology\IAStorIcon.exe" 60

MSCONFIG\startupreg: PlaysTV => "C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv_launcher.exe" --startup

MSCONFIG\startupreg: Raptr => "C:\Program Files (x86)\Raptr Inc\Raptr\raptrstub.exe" --startup

MSCONFIG\startupreg: Razer Synapse => "C:\Program Files (x86)\Razer\Synapse\RzSynapse.exe"

MSCONFIG\startupreg: Skype => "C:\Program Files (x86)\Skype\Phone\Skype.exe" /minimized /regrun

MSCONFIG\startupreg: Spotify => "C:\Users\Liz\AppData\Roaming\Spotify\Spotify.exe" -autostart -minimized

MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\Liz\AppData\Roaming\Spotify\SpotifyWebHelper.exe"

MSCONFIG\startupreg: SunJavaUpdateSched => "C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe"

MSCONFIG\startupreg: USB3MON => "C:\Program Files (x86)\Intel\Intel(R) USB 3.0 eXtensible Host Controller Driver\Application\iusb3mon.exe"
 

==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
 

(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
 

FirewallRules: [SPPSVC-In-TCP] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [SPPSVC-In-TCP-NoScope] => (Allow) %SystemRoot%\system32\sppsvc.exe

FirewallRules: [{D0D533DA-E534-4CFF-B98D-B36B06085542}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{7B082FCD-6EF9-433B-A14B-ABCD111DFDA0}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{CE4C3809-D71B-45F5-9D2B-A601DB617801}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{8A6780DB-A24A-443A-AB22-D718D526EDDC}] => (Allow) C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe

FirewallRules: [{716BFE09-2751-4869-88C3-377946FE6406}] => (Allow) C:\Steam\Steam.exe

FirewallRules: [{63253ABC-4B77-427C-BBCD-C34F444BFC31}] => (Allow) C:\Steam\Steam.exe

FirewallRules: [{0EFFD12B-6C33-4E21-A5FF-18248268AA1E}] => (Allow) C:\Steam\bin\steamwebhelper.exe

FirewallRules: [{EF7258DF-5045-446A-BF6A-EEDB0CF5C5C7}] => (Allow) C:\Steam\bin\steamwebhelper.exe

FirewallRules: [TCP Query User{DC94BA27-A326-4564-9D5C-8F4556CC4136}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [UDP Query User{BC270F78-4F7B-4A29-8203-F1A07EF24940}C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe] => (Allow) C:\steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{112F4EB9-8FD8-49FA-8342-F77602D7DF64}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe

FirewallRules: [{46F36197-4208-4EE7-8ED8-3018E94ED72C}] => (Allow) D:\SteamLibrary\steamapps\common\H1Z1\LaunchPad.exe

FirewallRules: [{3CE5CEE0-77AF-4ADD-880F-5CDB833FB7D0}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe

FirewallRules: [{4167AAD9-BF76-42D9-A404-20DF49616B3C}] => (Allow) D:\SteamLibrary\steamapps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe

FirewallRules: [TCP Query User{F5B673CF-5DED-4823-88AB-1E93C1EC773A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe

FirewallRules: [UDP Query User{D260473B-8FA1-428B-9712-EFDB9AB2103A}C:\program files (x86)\asus\ai suite iii\aisuite3.exe] => (Allow) C:\program files (x86)\asus\ai suite iii\aisuite3.exe

FirewallRules: [TCP Query User{3A3E393A-4D96-474D-B326-5DD14A4B8B34}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe

FirewallRules: [UDP Query User{7ABE9331-02B1-484F-BBBA-D6DCF1C24ABA}D:\games\gta_v\gta5.exe] => (Block) D:\games\gta_v\gta5.exe

FirewallRules: [{3A02A55B-E70D-4139-B0DC-5A62AF685E04}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe

FirewallRules: [{FC1FA25A-E1E1-41D0-9AE9-54DE9E3FA76B}] => (Allow) C:\Steam\steamapps\common\Tales from the Borderlands\Borderlands.exe

FirewallRules: [{FFD8E5E8-58CA-42DC-8B30-C2E7B92CFF66}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{872EE66E-AA4E-4DDC-BCF5-C0C3CB5FF509}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{DD6ED44D-3F04-4075-8A22-57C092435851}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{47D59FB6-2DD6-4460-9A94-A2A9E5F4254C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{7D832AEF-AA7D-42F6-B232-5AFFF23570A2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{936E869D-5427-460C-A4DE-FE5717DD7E0B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{70C22033-BB7E-49B0-9BE8-F414F003205B}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{C77FEB62-968B-4393-95F7-9AD35437A16C}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Launcher.exe

FirewallRules: [{12FFF2A3-F229-4325-B5D8-A31AA45FF425}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{0E2292A5-9F16-41ED-9884-D40E49D78FA0}] => (Allow) C:\Steam\steamapps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe

FirewallRules: [{2DB0F342-C2F7-4FE2-B3E7-AB49649EEE5A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{F5863B5C-77BC-46A1-8343-648B9ACA4246}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\System\Postal2.exe

FirewallRules: [{58819C25-DE51-4AD9-BF25-7FC8D11394DD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{56D8EF6B-25D6-450C-8034-04C33CA8BF0C}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe

FirewallRules: [{969FAAF2-1467-4F70-B3F4-40C3F2BAA957}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{227B8366-7BE0-42A9-A5E5-A29A3B14E468}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{D756CAF4-AC36-46B9-B26D-994355D68DB6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe

FirewallRules: [{13354DCF-542C-41EA-90BF-ECD5A26EDDD6}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\The Detail\The Detail.exe

FirewallRules: [{15C944EB-0B67-4983-9CA6-C7333971AC2D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe

FirewallRules: [{D702F2E5-A74D-4EAA-8B8B-84315CF8A475}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe

FirewallRules: [{EF9DF606-600E-45E7-B9BA-CA72B9ECBA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe

FirewallRules: [{627CE05E-328A-4595-A559-9B4D969FF50F}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe

FirewallRules: [{D9F849EB-B98B-4270-9E4E-0C105A128005}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe

FirewallRules: [{AF8B9D01-4381-4EA7-8424-6D98332CA833}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe

FirewallRules: [{BC2B9866-9621-424D-B7DF-9D77A9DF6C55}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe

FirewallRules: [{062E7D3C-1DD2-4DEC-AA61-5B0FD0AADF59}] => (Allow) C:\Steam\steamapps\common\Game of Thrones\Thrones.exe

FirewallRules: [{BEF417A8-B391-46A6-BF27-AB985734D1BC}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe

FirewallRules: [TCP Query User{64A46AE9-0BAD-4D37-BC9F-80A89B741DC3}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [UDP Query User{A5EB3862-B05D-49FF-B980-D90AB0DE050D}D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{51DB3670-22B0-4157-A06C-CFCCB525D17F}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{3B63A56F-F0A4-4927-88D9-95A22CA88DD5}] => (Block) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [TCP Query User{FFC8C3AE-C4BC-45AF-AE4D-D6BF9D6D6535}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe

FirewallRules: [UDP Query User{6458F897-C553-46D7-BA8D-D9B83E3AED81}D:\steamlibrary\steamapps\common\h1z1\h1z1.exe] => (Block) D:\steamlibrary\steamapps\common\h1z1\h1z1.exe

FirewallRules: [{0DC0524D-67A4-4664-AF48-12F6AE76F74A}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{AD370CDA-3467-4006-8D6C-1BC50330DFFF}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\DayZ\DayZ_BE.exe

FirewallRules: [{1EC201B4-FABA-4CAD-9BF7-D50A79C400E4}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe

FirewallRules: [{AE20F5E0-F875-4F82-A553-4226BC95F617}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Damned\Damned.exe

FirewallRules: [TCP Query User{FF8AC426-F8B3-4F58-B315-89232E8CE001}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [UDP Query User{829A50C6-9F72-440B-9C4E-D4BC06985EAB}E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe] => (Allow) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{434966BB-6A14-48FD-A4B6-328E10D7A345}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{7C495F63-6777-43DB-9481-E1AA1AE647D9}] => (Block) E:\program files (x86)\steam\steamapps\common\outlast\binaries\win64\olgame.exe

FirewallRules: [{09857451-9C85-4CD9-A0AB-14C7590A04E1}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{0BB5C967-5AA9-40A4-9685-AAAF71E607B8}] => (Allow) D:\SteamLibrary\steamapps\common\Portal 2\portal2.exe

FirewallRules: [{78FC3D24-8387-4188-8B3C-CE0664904376}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe

FirewallRules: [{49B118EA-8E11-4B0E-8215-230B01C5CE13}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\ContagionBeta\contagion.exe

FirewallRules: [{27F00A7B-5DBA-45AF-941C-90B508FB2DAD}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe

FirewallRules: [{B1B97779-A19B-4BB1-99AD-44B95B477749}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Betrayer\Binaries\Win32\Betrayer.exe

FirewallRules: [{C5497FAA-8168-4061-B1E1-B987D3AAA6AA}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{25E8BA67-509D-4388-AC9A-B086043C53B0}] => (Allow) D:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{088F565A-86A1-41F3-8667-74436E520109}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{014A3513-F17A-4A3E-A1CA-DD870368F0C2}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{3DE5BAE5-AE19-4C14-9CEB-B1766B11437D}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{CDB0FE67-F5E3-4AAE-880F-55738E490A53}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{2E17653A-B7AB-460E-B2CD-598C26877283}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe

FirewallRules: [{E6106352-BE9A-4923-AB87-D9E5622F6BB5}] => (Allow) D:\SteamLibrary\steamapps\common\mordheim\mordheim.exe

FirewallRules: [{DAB75AD6-19CA-426B-93E5-FDFD10482FAF}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe

FirewallRules: [{7284DC57-2475-40D6-A4B0-905851D8F9B3}] => (Allow) D:\SteamLibrary\steamapps\common\Risen 2\system\Risen2.exe

FirewallRules: [{FC316C36-A6F4-4BD3-AA3F-A362C4A35A36}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe

FirewallRules: [{46A96A42-6C5C-4C61-9434-DF8E73320D3E}] => (Allow) D:\SteamLibrary\steamapps\common\Shadows Price For Our Sins\Shadows.exe

FirewallRules: [{202DAE5F-2B75-42A1-9C70-1DD4F1C4E6EA}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{61F88636-48D0-489C-B318-80856ABD4513}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Viscera\Binaries\UDKLift.exe

FirewallRules: [{E5F77743-8DA3-40EE-B413-9F1CAE8475AC}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe

FirewallRules: [{27158C42-3B38-44BA-A238-E28B6D4DAFCF}] => (Allow) D:\SteamLibrary\steamapps\common\Zombie Army Trilogy\Launcher\ZATLauncher.exe

FirewallRules: [{5CD5647B-6740-4B31-93CE-0C4A7EF4AC0E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{5F8DA77F-94C1-469D-A417-98A1E78BD137}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Total War Rome II\launcher\launcher.exe

FirewallRules: [{A8E0D916-0171-46D6-956A-E12D44FBEC88}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{35FA0840-3492-498E-B431-BC572D39E821}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Don't Starve Together Beta\bin\dontstarve_steam.exe

FirewallRules: [{32054994-6E80-4F28-8FA1-BF8D3B974DD1}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{0845E5D0-FBCB-48CE-A979-CCA4A210B2AC}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe

FirewallRules: [{BB735E58-5130-4186-9D90-B58561EA1B98}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe

FirewallRules: [{943B24AE-6227-496A-886E-3C4BF2064E4E}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\skyrim\SkyrimLauncher.exe

FirewallRules: [{E98772CC-43A2-43A3-9AE8-DD98B52572F5}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe

FirewallRules: [{99AD5144-B305-49D6-B5A5-80A32E221AE8}] => (Allow) D:\SteamLibrary\steamapps\common\Murdered Soul Suspect\Binaries\Win64\Murdered.exe

FirewallRules: [{76E5C617-18E2-493C-8D37-83B944229067}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe

FirewallRules: [{FB771EFD-D000-4E1E-BB38-4CA90A0CFC5B}] => (Allow) D:\SteamLibrary\steamapps\common\Crusader Kings II\CK2game.exe

FirewallRules: [{5DAB3ED1-0252-495B-9C56-1ED6E035198D}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe

FirewallRules: [{A6AE2D3B-CB89-488B-972F-F85FF5537F79}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin64\Game.exe

FirewallRules: [{75A2C7E5-19FF-47D9-A0DF-8120615D287A}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{A1C44C9E-E20A-4825-96B6-052B4864A3C1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\SP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{31FC1A73-AE87-47D3-9D43-A0ECFC2B06A1}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{318F1635-826B-466A-BB56-85B11F35311F}] => (Allow) D:\SteamLibrary\steamapps\common\BioShock 2\MP\Builds\Binaries\Bioshock2Launcher.exe

FirewallRules: [{44538836-F358-4810-98E1-5A0CF740AABB}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{CF455795-CA5D-450C-82A5-BE87F347CD93}] => (Allow) D:\SteamLibrary\steamapps\common\Fallout New Vegas\FalloutNVLauncher.exe

FirewallRules: [{9DE8B198-9FD6-4D5B-BC74-248D23601427}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{E5EF64D1-87FA-4D0A-A6E3-8B195146EEAE}] => (Allow) D:\SteamLibrary\steamapps\common\Tomb Raider\TombRaider.exe

FirewallRules: [{62980061-5F5B-495A-9665-DC2968802264}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe

FirewallRules: [{22421502-A1F5-4C4D-B7C3-8E120A502F0A}] => (Allow) D:\SteamLibrary\steamapps\common\MerchantsOfKaidan\Kaidan.exe

FirewallRules: [{8A027618-FE9B-4F8A-ACE8-BA8912205362}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe

FirewallRules: [{A15C2F34-B811-408B-88BA-59D8DB9D2233}] => (Allow) D:\SteamLibrary\steamapps\common\AoW3\AoW3Launcher.exe

FirewallRules: [{2CCD6FCE-C8F7-4268-BE5D-CF765CC15E07}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe

FirewallRules: [{A5401947-B780-4B22-A180-0AC079FA9840}] => (Allow) D:\SteamLibrary\steamapps\common\alice madness returns\Binaries\Win32\AliceMadnessReturns.exe

FirewallRules: [{412E9CE9-4DFD-4C75-BE97-4ED3C7CA5F6A}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe

FirewallRules: [{77E5627B-67F5-476A-962F-3375990D5577}] => (Allow) D:\SteamLibrary\steamapps\common\XCom-Enemy-Unknown\Binaries\Win32\XComGame.exe

FirewallRules: [{8981D155-3718-446A-9BE9-D2DB78AC81B8}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe

FirewallRules: [{3C15950E-C546-401D-B636-F1F782D7AF7F}] => (Allow) D:\SteamLibrary\steamapps\common\Dear Esther\dearesther.exe

FirewallRules: [{9BC4E78B-9D2A-463A-8228-6F6C1A0D4E9D}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{834CA4AD-9085-458F-A77A-1E9F33C764DF}] => (Allow) D:\SteamLibrary\steamapps\common\PlagueInc\PlagueIncEvolved.exe

FirewallRules: [{F8343B38-AE33-4BB6-A8EE-A080CE11C97C}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe

FirewallRules: [{CF1650F2-AA96-4C66-A91E-29D14A2211D6}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Launcher\Launcher.exe

FirewallRules: [{1DD42EA1-54A6-480D-AD05-908F6828DE9C}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe

FirewallRules: [{07298826-0F22-450A-9A5A-6E6026B89AB3}] => (Allow) D:\SteamLibrary\steamapps\common\The Lost Crown\TheLostCrown.exe

FirewallRules: [{6FF52AF5-5489-493C-A4D1-49826A2DD8F3}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe

FirewallRules: [{D5092F15-9D81-4A75-AB15-10606000AA40}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Ticket to Ride\Ticket to Ride.exe

FirewallRules: [{240D4B54-0FCB-431F-B004-22736495650B}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe

FirewallRules: [{F222BB73-CF25-41F1-B747-8D368020B457}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\Unepic\unepic.exe

FirewallRules: [{5C0CE3AB-C689-4202-B1C0-587D64DF2883}] => (Allow) D:\steamlibrary\steamapps\common\borderlandspresequel\binaries\win32\borderlandspresequel.exe

FirewallRules: [{EEFC172E-7045-4AAA-9CD3-B8474390B248}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{27E4AD63-98B6-49D7-9F4F-30E96700A80C}] => (Allow) C:\Steam\steamapps\common\left 4 dead 2\left4dead2.exe

FirewallRules: [{675F1295-9ABA-4AD3-BD10-CF54EF3006A2}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe

FirewallRules: [{A89D27B6-DD9D-4474-AAF3-6E94B0BCA3A9}] => (Allow) D:\SteamLibrary\steamapps\common\JurassicPark\JurassicPark100.exe

FirewallRules: [{A5B79F7B-B1BA-49FF-9D52-9AF6D1D79242}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{4BFC07DA-E59D-48E2-9A09-BB12800727C7}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront Beta\starwarsbattlefront.exe

FirewallRules: [{DE27C5BC-0825-4B21-AB4C-40CFFB8490A0}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{03E299FA-DD0B-49B2-ABEC-FE8721849655}] => (Allow) E:\Program Files (x86)\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe

FirewallRules: [{96E3EF00-D194-4449-A40E-D368D9003C89}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{12EE714E-833D-455C-B6CF-09748EEE3CD8}] => (Allow) D:\Program Files (x86)\Origin Games\SimCity 2000 SE\Game\Game\DOSBox\DOSBox.exe

FirewallRules: [{4A9C02CD-69DC-48E8-A42C-9E4A1A17FE99}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe

FirewallRules: [{E79C4C6D-827C-49FF-8ADA-78E8479BC79D}] => (Allow) D:\Program Files (x86)\Origin Games\Peggle Deluxe\Peggle.exe

FirewallRules: [{EFD02DE3-EE48-4D6D-9FF6-88F2715AC226}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{D7688BCB-BC38-42DE-B1A9-99D6B33A12A1}] => (Allow) D:\Program Files (x86)\Origin Games\Plants vs Zombies Garden Warfare\PVZ.Main_Win64_Retail.exe

FirewallRules: [{9CCA2959-A539-4DD2-8D48-0C42ED8EB627}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{C3280A9B-4EC4-4501-ADA0-70DD9644C22E}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe

FirewallRules: [{AB08F33F-D745-44C7-B1B4-B009D50F0BE8}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe

FirewallRules: [{58139E46-138F-4F96-ACA1-7D0914FBB80E}] => (Allow) E:\SteamLibrary\steamapps\common\Borderlands\Binaries\Borderlands.exe

FirewallRules: [{63450445-8A2C-48EF-BFE3-1FF2BE5EAD37}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{746F0301-A6F2-4A7F-BBBB-ACB0BF7104DD}] => (Allow) E:\SteamLibrary\steamapps\common\Total War SHOGUN 2\Shogun2.exe

FirewallRules: [{330FDF04-9237-4E4C-85F4-BAE9107B186E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe

FirewallRules: [{6819C55B-2527-40E7-958D-E123190C701E}] => (Allow) E:\SteamLibrary\steamapps\common\Lost Horizon - Demo\fsasgame.exe

FirewallRules: [{3263CF1D-10B1-4B7C-B04D-B339478AFB43}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{06E65D6F-BB14-47F2-BBC6-C07683167C04}] => (Allow) E:\SteamLibrary\steamapps\common\Skyrim\SkyrimLauncher.exe

FirewallRules: [{17D27C45-E96E-4C49-837C-81792007A126}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{5CDD8F66-3E91-43DF-B1ED-47D2884E3592}] => (Allow) E:\SteamLibrary\steamapps\common\DayZ\DayZ_BE.exe

FirewallRules: [{A567B55C-E958-4AE6-ADF8-2922FFA85C8C}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe

FirewallRules: [{F46D2CAA-EA3E-4290-85B1-46790CF049DE}] => (Allow) E:\SteamLibrary\steamapps\common\Deadly Premonition The Director's Cut\DPLauncher.exe

FirewallRules: [{9CF9DEAA-D273-4184-88A9-958C7043CADF}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe

FirewallRules: [{45AE9EA9-F828-46B3-A14B-8A53A55C182B}] => (Allow) E:\SteamLibrary\steamapps\common\FINAL FANTASY XIII\FFXiiiLauncher.exe

FirewallRules: [{2DEE0519-5666-4895-9B63-44515FD8D9A6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe

FirewallRules: [{7C3A7B1E-5045-402E-BF6C-DC7F4B5D30F6}] => (Allow) E:\SteamLibrary\steamapps\common\The Detail\The Detail.exe

FirewallRules: [{8198FD95-5629-470B-837E-1695EE4BAEE3}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe

FirewallRules: [{FF7CC7C4-8FCA-4643-A2CE-58C9976BA0A6}] => (Allow) E:\SteamLibrary\steamapps\common\Resident Evil 5\Launcher.exe

FirewallRules: [{E6967845-2DC9-4CBD-89E9-4880FE48EC0E}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe

FirewallRules: [{1CE25EDB-5AA8-4609-AA6C-E2EC6E9A6FB4}] => (Allow) E:\SteamLibrary\steamapps\common\Legend of Grimrock 2\grimrock2.exe

FirewallRules: [{60E09E6B-CF9E-4972-B62B-15525F181894}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe

FirewallRules: [{58E420D7-4EE9-482B-907E-D53DCFACA0C0}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Anno4.exe

FirewallRules: [{A4C296E2-131B-457E-A9FC-DD0AACC04EC7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe

FirewallRules: [{6C72DAC0-F7E7-472E-92A7-D8EDA6C011D7}] => (Allow) D:\SteamLibrary\steamapps\common\Nether\Game\Binaries\Win64\Nether.exe

FirewallRules: [{816880C7-C545-49BA-BF34-9C6EDFE3B559}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe

FirewallRules: [{87D14756-408E-4F3A-87A5-7757A6AFDC71}] => (Allow) E:\SteamLibrary\steamapps\common\Anno 1404\Addon.exe

FirewallRules: [{DFC28088-CFFA-49CD-B7D4-61742D15A3C5}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe

FirewallRules: [{5C587DE7-B7BE-4007-AE58-2226FACCEC0F}] => (Allow) E:\SteamLibrary\steamapps\common\Layers of Fear\Layers Of Fear.exe

FirewallRules: [{8F5FDED0-05C4-4B8F-82A5-5D309AF22771}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{EF12EB5E-E442-4220-A21E-B50F45BD5CC9}] => (Allow) C:\Program Files (x86)\Raptr\raptr.exe

FirewallRules: [{54654BF7-3929-4B5C-8D9E-A721095736D4}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{37C2C869-4AE4-4C10-958C-E96C2339FDEE}] => (Allow) C:\Program Files (x86)\Raptr\raptr_im.exe

FirewallRules: [{438A9EF5-E1EC-4FE1-8733-FF6B2F60969B}] => (Allow) D:\Program Files (x86)\KALYPSO\GRAND AGES MEDIEVAL\GrandAgesMedieval.exe

FirewallRules: [{95B11CE4-EDE2-4205-A538-5BD20F7DEE4D}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe

FirewallRules: [{8412E8EC-F7B9-41BB-8CC1-C1367CFBB7E8}] => (Allow) D:\SteamLibrary\steamapps\common\Magicka 2\engine\Magicka2.exe

FirewallRules: [{64B74A07-D854-4000-BE0B-A1AD480DE421}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe

FirewallRules: [{D6BC693A-F6AA-4929-AF11-45FCC212CECF}] => (Allow) E:\SteamLibrary\steamapps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe

FirewallRules: [{09186219-FFB9-4079-A2F1-99276BD937C6}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe

FirewallRules: [{79A8589B-B383-4A3C-9FB6-5E7FABC958CC}] => (Allow) E:\SteamLibrary\steamapps\common\The Walking Dead Michonne\WalkingDeadMichonne.exe

FirewallRules: [{0798DD72-3708-4BAD-835D-1A50CE2FC649}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{F4CF59AD-AC69-4A81-BE26-12D904631817}] => (Allow) D:\SteamLibrary\steamapps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe

FirewallRules: [{FB8EAB63-F7FF-48E2-B390-8DE43A023734}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe

FirewallRules: [{00D8A63D-8F14-4693-9CA9-0C1234839181}] => (Allow) D:\SteamLibrary\steamapps\common\Kingdom Come Deliverance\Bin\Win64\KingdomCome.exe

FirewallRules: [{B79AD18B-3A68-4EEF-82CD-2DEA2DD02F1D}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe

FirewallRules: [{DA8D1985-F053-48A6-A47A-745AD3680C98}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe

FirewallRules: [{83816F82-B5D7-4B65-B44D-FA086AE6503E}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe

FirewallRules: [{88C8BF0F-06C1-4C50-BE54-F9D0DECC86C9}] => (Allow) D:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4_x64.exe

FirewallRules: [{45D860EC-B45B-4752-B99C-DF2107C4A765}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe

FirewallRules: [{EA47C8DA-557B-43AC-90D7-9339D4A38CB9}] => (Allow) D:\Program Files (x86)\Origin Games\STAR WARS Battlefront\starwarsbattlefront.exe

FirewallRules: [{0266EDCA-C5D9-4EF5-8B67-97F77F1CE0FA}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe

FirewallRules: [{C430923E-5157-4D29-A9BD-D009000D8FA7}] => (Allow) E:\SteamLibrary\steamapps\common\Day of the Tentacle Remastered\Dott.exe

FirewallRules: [{3505485B-F7AE-480C-BDFB-043DBF68A620}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{8B0C7E66-D5D6-48E1-A73A-C4940AD7CA7C}] => (Allow) D:\SteamLibrary\steamapps\common\tbs\win32\The Banner Saga.exe

FirewallRules: [{AC885FCC-9EA1-4212-A206-7049AC8DA686}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{771AE705-4891-4130-8908-3A9E60908014}] => (Allow) D:\SteamLibrary\steamapps\common\dont_starve\bin\dontstarve_steam.exe

FirewallRules: [{D7544463-56A5-424E-8DB9-261492657F1A}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{AA8A03F2-397F-44B5-8680-47A38B0CB3E9}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr.exe

FirewallRules: [{F6F2D53B-8256-4DF8-BA4B-690AFED30A58}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{74E711FF-7D76-4347-8DC0-41911114C0BC}] => (Allow) C:\Program Files (x86)\Raptr Inc\Raptr\raptr_im.exe

FirewallRules: [{B7FC6943-8865-442C-A4D0-F0306FC250C1}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{1905CF96-C39F-4337-A372-E72DA83B98D9}] => (Allow) C:\Program Files (x86)\Raptr Inc\PlaysTV\playstv.exe

FirewallRules: [{FD023914-D3EF-4C9C-8CB4-D72277641343}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe

FirewallRules: [{ABA95E06-7387-4E2D-AA8E-03EEBAD85E03}] => (Allow) D:\SteamLibrary\steamapps\common\Renowned Explorers\win64\abbeycore_win32_steam.exe

FirewallRules: [{0FADC9B1-8E04-4A57-8A74-A581371CA25B}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe

FirewallRules: [{56BE55EC-ABB6-4E22-A9DE-010734FC75CF}] => (Allow) D:\SteamLibrary\steamapps\common\King's Quest\Binaries\Win\KingsQuest.exe

FirewallRules: [{129C13B1-62EC-44FD-84FB-C440BD906FDE}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe

FirewallRules: [{A994F333-464C-4833-AB09-A80EE0508249}] => (Allow) E:\SteamLibrary\steamapps\common\The Lab\TheLab\win64\TheLab.exe

FirewallRules: [{38838EB8-7122-43A6-A0CC-576BD4CA0C27}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe

FirewallRules: [{5446A5C8-1C5E-4DFD-9C39-11283D04E384}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe

FirewallRules: [{8E952004-EE05-4CB2-B77A-89ECD5CD6012}] => (Allow) C:\Program Files (x86)\ASUS\AI Suite III\Push Notice\PushNotifyServer.exe
 

==================== Wiederherstellungspunkte =========================
 

09-05-2016 19:49:22 Windows Update

09-05-2016 23:36:04 Windows Update

11-05-2016 15:49:57 Revo Uninstaller's restore point - SpyHunter 4

11-05-2016 15:56:30 Revo Uninstaller's restore point - RivaTuner Statistics Server 6.2.0

11-05-2016 16:01:52 Revo Uninstaller's restore point - Revo Uninstaller 1.95

11-05-2016 18:16:33 Malwarebytes Anti-Rootkit Restore Point

11-05-2016 18:24:04 Malwarebytes Anti-Rootkit Restore Point

11-05-2016 22:43:49 Windows Update

15-05-2016 18:05:16 Windows Update

15-05-2016 18:27:47 JRT Pre-Junkware Removal

22-05-2016 19:01:38 Windows Update
 

==================== Fehlerhafte Geräte im Gerätemanager =============
 
 

==================== Fehlereinträge in der Ereignisanzeige: =========================
 

Applikationsfehler:

==================

Error: (05/23/2016 08:54:38 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/23/2016 08:54:38 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/23/2016 08:54:38 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/23/2016 08:50:50 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/22/2016 07:01:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/22/2016 07:01:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/22/2016 07:01:56 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 

Error: (05/22/2016 06:57:30 PM) (Source: WinMgmt) (EventID: 10) (User: )

Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003
 

Error: (05/17/2016 10:05:36 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3011) (User: NT-AUTORITÄT)

Description: Fehler beim Herunterladen der Zeichenfolgen der Leistungsindikatoren für Dienst "WmiApRpl" (WmiApRpl). Der Fehlercode ist das erste DWORD im Datenbereich.
 

Error: (05/17/2016 10:05:36 PM) (Source: Microsoft-Windows-LoadPerf) (EventID: 3012) (User: NT-AUTORITÄT)

Description: Die Zeichenfolgen der Leistungsindikatoren in der Leistungsindikatorenregistrierung werden beschädigt wenn der Prozess "Performance" auf dem Erweiterungsleistungsindikator-Anbieter ausgeführt wird. Der Wert "BaseIndex" aus der Leistungsregistrierung ist das erste DWORD im Datenbereich, der Wert "LastCounter" ist das zweite DWORD im Datenbereich und der Werte "LastHelp" ist das dritte DWORD im Datenbereich.
 
 

Systemfehler:

=============

Error: (05/23/2016 08:51:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/23/2016 08:51:20 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CyberGhost 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/23/2016 08:51:20 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost 5 Client Service erreicht.
 

Error: (05/22/2016 06:58:00 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/22/2016 06:58:00 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "CyberGhost 5 Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/22/2016 06:58:00 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst CyberGhost 5 Client Service erreicht.
 

Error: (05/17/2016 10:01:20 PM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 

Error: (05/16/2016 09:10:02 PM) (Source: Service Control Manager) (EventID: 7000) (User: )

Description: Der Dienst "Steam Client Service" wurde aufgrund folgenden Fehlers nicht gestartet: 

%%1053
 

Error: (05/16/2016 09:10:02 PM) (Source: Service Control Manager) (EventID: 7009) (User: )

Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Steam Client Service erreicht.
 

Error: (05/16/2016 10:15:36 AM) (Source: Service Control Manager) (EventID: 7026) (User: )

Description: Das Laden folgender Boot- oder Systemstarttreiber ist fehlgeschlagen: 

RzFilter
 
 

==================== Speicherinformationen =========================== 
 

Prozessor: Intel(R) Core(TM) i7-4790K CPU @ 4.00GHz

Prozentuale Nutzung des RAM: 13%

Installierter physikalischer RAM: 16326.84 MB

Verfügbarer physikalischer RAM: 14175.73 MB

Summe virtueller Speicher: 32651.87 MB

Verfügbarer virtueller Speicher: 30290.02 MB
 

==================== Laufwerke ================================
 

Drive c: (Chaos) (Fixed) (Total:465.66 GB) (Free:274.98 GB) NTFS

Drive d: (Demeter) (Fixed) (Total:931.51 GB) (Free:32.78 GB) NTFS

Drive e: (Erebos) (Fixed) (Total:911.51 GB) (Free:644.95 GB) NTFS

Drive f: (RECOVER) (Fixed) (Total:20 GB) (Free:19.91 GB) NTFS

Drive g: (GRANDAGESMEDIEVAL_18711_EFIGS) (CDROM) (Total:4.27 GB) (Free:0 GB) UDF
 

==================== MBR & Partitionstabelle ==================
 

========================================================

Disk: 0 (MBR Code: Windows 7 or 8) (Size: 465.8 GB) (Disk ID: A7957AA7)

Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=465.7 GB) - (Type=07 NTFS)
 

========================================================

Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: A7957AA3)

Partition 1: (Not Active) - (Size=931.5 GB) - (Type=07 NTFS)
 

========================================================

Disk: 2 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: F98D6E74)

Partition 1: (Active) - (Size=911.5 GB) - (Type=07 NTFS)

Partition 2: (Not Active) - (Size=20 GB) - (Type=OF Extended)
 

==================== Ende von Addition.txt ============================

FRST-Fix

Virenscanner jetzt bitte komplett deaktivieren, damit sichergestellt ist, dass der Fix sauber durchläuft!

Drücke bitte die Windowstaste + R Taste und schreibe notepad in das Ausführen Fenster.

Kopiere nun folgenden Text aus der Code-Box in das leere Textdokument

Code:

HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

C:\Users\Liz\AppData\Roaming\Ajort

emptytemp:

Speichere diese bitte als Fixlist.txt auf deinem Desktop (oder dem Verzeichnis in dem sich FRST befindet).

Starte nun FRST erneut und klicke den Entfernen Button.
Das Tool erstellt eine Fixlog.txt.
Poste mir deren Inhalt.

Code:

Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version:24-05-2016 01

durchgeführt von Liz (2016-05-24 20:55:44) Run:1

Gestartet von C:\Users\Liz\Downloads

Geladene Profile: Liz (Verfügbare Profile: Liz)

Start-Modus: Normal

==============================================
 

fixlist Inhalt:

*****************

HKU\S-1-5-18\...\Run: [Aj-DriverV2] => "C:\Users\Liz\AppData\Roaming\Ajort\Driver\ajcl.exe"

ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} =>  Keine Datei

C:\Users\Liz\AppData\Roaming\Ajort

emptytemp:

*****************
 

HKU\S-1-5-18\Software\Microsoft\Windows\CurrentVersion\Run\\Aj-DriverV2 => Wert erfolgreich entfernt

"HKLM\Software\Microsoft\Windows\CurrentVersion\Explorer\ShellIconOverlayIdentifiers\00avast" => Schlüssel erfolgreich entfernt

HKCR\CLSID\{472083B0-C522-11CF-8763-00608CC02F24} => Schlüssel nicht gefunden. 

"C:\Users\Liz\AppData\Roaming\Ajort" => nicht gefunden.

EmptyTemp: => 4.3 GB temporäre Dateien entfernt.
 
 

Das System musste neu gestartet werden.
 

==== Ende von Fixlog 20:55:48 ====