| NkPhillip | 12.11.2016 18:00 |
Hey,
Nein ich habe zur Zeit keine weiteren Probleme mit dem PC.
Ich hätte aber noch ne Frage:
Man hat ja eine begrenzte Bearbeitungszeit seiner eigenen Beiträge. Bist du dennoch in der Lage gewisse Stellen aus meinen Beiträgen bei Bedarf (wenn ich dich also darum bitten würde) zu löschen oder an wen müsste ich mich da genau wenden, wenn ich dies wollen würde.
(geht nur um ein, zwei kleine Stellen. Nichts großes) FRST-Fix: Code:
Entferungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von x (12-11-2016 12:29:26) Run:2
Gestartet von C:\Users\x\Desktop\Motherboard\FRST
Geladene Profile: x (Verfügbare Profile: x)
Start-Modus: Normal
==============================================
fixlist Inhalt:
*****************
start
CloseProcesses:
DeleteKey: HKEY_USERS\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\istart.webssearches.com
Unlock: HKEY_USERS\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer
CMD: reg delete "HKEY_USERS\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\EUPP\DSP" /v DoNotAskAgain /f
Reboot:
end
*****************
Prozess erfolgreich geschlossen.
HKEY_USERS\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\istart.webssearches.com => Schlüssel erfolgreich entfernt
"HKEY_USERS\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer" => Schlüssel wurde entsperrt
========= reg delete "HKEY_USERS\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\EUPP\DSP" /v DoNotAskAgain /f =========
Der Vorgang wurde erfolgreich beendet.
========= Ende von CMD: =========
Das System musste neu gestartet werden.
==== Ende von Fixlog 12:29:27 ====
Eset: Code:
ESETSmartInstaller@High as downloader log:
all ok
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a089bc9800012a4baa5f11ac724a21ba
# end=init
# utc_time=2016-11-12 11:42:30
# local_time=2016-11-12 12:42:30 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
Update Init
Update Finalize
Updated modules version: 31385
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# EOSSerial=a089bc9800012a4baa5f11ac724a21ba
# end=updated
# utc_time=2016-11-12 11:46:15
# local_time=2016-11-12 12:46:15 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# osver=6.1.7601 NT Service Pack 1
# product=EOS
# version=8
# OnlineScannerApp.exe=1.0.0.1
# OnlineScanner.ocx=1.0.0.7777
# api_version=3.1.1
# EOSSerial=a089bc9800012a4baa5f11ac724a21ba
# engine=31385
# end=finished
# remove_checked=false
# archives_checked=true
# unwanted_checked=true
# unsafe_checked=false
# antistealth_checked=true
# utc_time=2016-11-12 03:33:01
# local_time=2016-11-12 04:33:01 (+0100, Mitteleuropäische Zeit)
# country="Germany"
# lang=1031
# osver=6.1.7601 NT Service Pack 1
# compatibility_mode_1=''
# compatibility_mode=5893 16776573 100 94 80797 230594631 0 0
# scanned=500997
# found=0
# cleaned=0
# scan_time=13606
HitmanPro: Code:
HitmanPro 3.7.15.281
www.hitmanpro.com
Computer name . . . . : x-PC
Windows . . . . . . . : 6.1.1.7601.X64/4
User name . . . . . . : x-PC\x
UAC . . . . . . . . . : Enabled
License . . . . . . . : Free
Scan date . . . . . . : 2016-11-12 17:15:45
Scan mode . . . . . . : Normal
Scan duration . . . . : 1m 6s
Disk access mode . . : Direct disk access (SRB)
Cloud . . . . . . . . : Internet
Reboot . . . . . . . : No
Threats . . . . . . . : 0
Traces . . . . . . . : 5
Objects scanned . . . : 1.898.389
Files scanned . . . . : 56.834
Remnants scanned . . : 537.732 files / 1.303.823 keys
Suspicious files ____________________________________________________________
C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFQAZ1IK\FRST64[1].exe
Size . . . . . . . : 2.411.520 bytes
Age . . . . . . . : 0.2 days (2016-11-12 12:28:58)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 1DB9547CD72BE4D4BA6391FF9983CD69C0721BFD04CA89FB8AB2D9A7C8D7DE61
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
-10.7s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WFZVDEM\82[1].htm
-10.7s C:\Users\x\AppData\Roaming\Microsoft\Windows\Cookies\3BC6YWSH.txt
-0.3s C:\Users\x\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2
-0.3s C:\Users\x\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2
-0.2s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9NRVSZAH\FRST64[1].exe
0.0s C:\Users\x\Desktop\Motherboard\Problem\FRST\FRST64.exe
0.0s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFQAZ1IK\FRST64[1].exe
1.8s C:\Users\x\Desktop\Motherboard\Problem\FRST\FRST-OlderVersion\
18.9s C:\ProgramData\G Data\AVK\Log\AVKLog\0000007377.log
20.8s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WFZVDEM\up64[1]
23.5s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{3D7BBEEB-3F80-4B95-9B19-66E1BFD78086}
27.9s C:\Users\x\Desktop\Motherboard\Problem\FRST\Fixlog.txt
29.5s C:\ProgramData\NVIDIA\MessageBus_6416_0x2BC4A0.log
29.5s C:\ProgramData\NVIDIA\MessageBus_6416_0x2BCB30.log
C:\Users\x\AppData\Local\PunkBuster\BF4\pb\PnkBstrK.sys
Size . . . . . . . : 138.648 bytes
Age . . . . . . . : 759.8 days (2014-10-14 22:00:35)
Entropy . . . . . : 7.7
SHA-256 . . . . . : DE86A451D282866613EE18CF668C2E962ABCB09FA51F7FF0C98405418A19EA81
RSA Key Size . . . : 2048
Authenticode . . . : Valid
Fuzzy . . . . . . : 22.0
The .reloc (relocation) section in this program contains code. This is an indication of malware infection.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Program contains PE structure anomalies. This is not typical for most programs.
The file is a device driver. Device drivers run as trusted (highly privileged) code.
Program is code signed with a valid Authenticode certificate.
C:\Users\x\Desktop\Motherboard\Problem\FRST\FRST-OlderVersion\FRST64.exe
Size . . . . . . . : 2.410.496 bytes
Age . . . . . . . : 3.0 days (2016-11-09 17:38:12)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 48D202227568D232E29D8C80EEA40BEA1B95DD610913F97F8FAAE1FEA10DE5ED
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
C:\Users\x\Desktop\Motherboard\Problem\FRST\FRST64.exe
Size . . . . . . . : 2.411.520 bytes
Age . . . . . . . : 0.2 days (2016-11-12 12:28:58)
Entropy . . . . . : 7.6
SHA-256 . . . . . : 1DB9547CD72BE4D4BA6391FF9983CD69C0721BFD04CA89FB8AB2D9A7C8D7DE61
Needs elevation . : Yes
Fuzzy . . . . . . : 24.0
Program has no publisher information but prompts the user for permission elevation.
Entropy (or randomness) indicates the program is encrypted, compressed or obfuscated. This is not typical for most programs.
Authors name is missing in version info. This is not common to most programs.
Version control is missing. This file is probably created by an individual. This is not typical for most programs.
Time indicates that the file appeared recently on this computer.
Forensic Cluster
-10.7s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WFZVDEM\82[1].htm
-10.7s C:\Users\x\AppData\Roaming\Microsoft\Windows\Cookies\3BC6YWSH.txt
-0.3s C:\Users\x\AppData\LocalLow\Microsoft\CryptnetUrlCache\Content\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2
-0.3s C:\Users\x\AppData\LocalLow\Microsoft\CryptnetUrlCache\MetaData\9EC3B71635F8BA3FC68DE181A104A0EF_F6C39EF89D8A3A72327D8412589658B2
-0.2s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\9NRVSZAH\FRST64[1].exe
0.0s C:\Users\x\Desktop\Motherboard\Problem\FRST\FRST64.exe
0.0s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\LFQAZ1IK\FRST64[1].exe
1.8s C:\Users\x\Desktop\Motherboard\Problem\FRST\FRST-OlderVersion\
18.9s C:\ProgramData\G Data\AVK\Log\AVKLog\0000007377.log
20.8s C:\Users\x\AppData\Local\Microsoft\Windows\Temporary Internet Files\Content.IE5\2WFZVDEM\up64[1]
23.5s C:\ProgramData\Microsoft\Windows Defender\Scans\History\Results\Resource\{3D7BBEEB-3F80-4B95-9B19-66E1BFD78086}
27.9s C:\Users\x\Desktop\Motherboard\Problem\FRST\Fixlog.txt
29.5s C:\ProgramData\NVIDIA\MessageBus_6416_0x2BC4A0.log
29.5s C:\ProgramData\NVIDIA\MessageBus_6416_0x2BCB30.log
Potential Unwanted Programs _________________________________________________
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\LowRegistry\DOMStorage\webssearches.com\ (Webssearches)
FRST-Log: Code:
Untersuchungsergebnis von Farbar Recovery Scan Tool (FRST) (x64) Version: 12-11-2016
durchgeführt von x (Administrator) auf x-PC (12-11-2016 17:18:13)
Gestartet von C:\Users\x\Desktop\Motherboard\Problem\FRST
Geladene Profile: x (Verfügbare Profile: x)
Platform: Windows 7 Home Premium Service Pack 1 (X64) Sprache: Deutsch (Deutschland)
Internet Explorer Version 11 (Standard-Browser: Chrome)
Start-Modus: Normal
Anleitung für Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/
==================== Prozesse (Nicht auf der Ausnahmeliste) =================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Prozess geschlossen. Die Datei wird nicht verschoben.)
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvscpapisvr.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe
(Logitech Inc.) C:\Program Files (x86)\Common Files\logishrd\LVMVFM\UMVPFSrv.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\NvXDSync.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe
(Micro-Star Int'l Co., Ltd.) C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKBackup\AVKBackupService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe
(Microsoft Corporation) C:\Windows\System32\rundll32.exe
(Gainward Co.) C:\Program Files (x86)\EXPERTool\TBPANEL.exe
(Mixesoft Project) C:\Users\x\AppData\Local\Mixesoft\AppNHost\appnhost.exe
(Microsoft Corporation) C:\Windows\System32\StikyNot.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RAVBg64.exe
(Creative Technology Ltd) C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe
(Creative Technology Ltd) C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(Macrovision Europe Ltd.) C:\Users\x\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\ShadowPlay\nvspcaps64.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NvContainer\nvcontainer.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\NVIDIA Share.exe
(Node.js) C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVIDIA Web Helper.exe
() C:\Windows\System32\PnkBstrA.exe
(LogMeIn Inc.) E:\Program Files (x86)\Hamachi\x64\hamachi-2.exe
(LogMeIn, Inc.) E:\Program Files (x86)\Hamachi\x64\LMIGuardianSvc.exe
(CyberGhost S.R.L) C:\Program Files\CyberGhost 6\CyberGhost.Service.exe
(LogMeIn Inc.) E:\Program Files (x86)\Hamachi\hamachi-2-ui.exe
(LogMeIn, Inc.) E:\Program Files (x86)\Hamachi\LMIGuardianSvc.exe
(Creative Labs) C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe
(G Data Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe
(G Data Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKBap64.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\AVKTray\AVKTray.exe
(G DATA Software AG) C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFirewallTray.exe
(G DATA Software AG) C:\Program Files (x86)\Common Files\G Data\AVKProxy\GDKBFltExe32.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\SysWOW64\dllhost.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\cef\cef.winxp\steamwebhelper.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Microsoft Corporation) C:\Windows\System32\vds.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
(Google Inc.) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
==================== Registry (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt. Die Datei wird nicht verschoben.)
HKLM\...\Run: [RtHDVCpl] => C:\Program Files\Realtek\Audio\HDA\RAVCpl64.exe [11101800 2010-07-28] (Realtek Semiconductor)
HKLM\...\Run: [RunDLLEntry] => C:\Windows\system32\RunDLL32.exe C:\Windows\system32\AmbRunE.dll,RunDLLEntry
HKLM\...\Run: [ProxyCap] => E:\PROGRA~2\PROXYL~1\ProxyCap\pcapui.exe
HKLM\...\Run: [ShadowPlay] => "C:\Windows\system32\rundll32.exe" C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM-x32\...\Run: [Adobe Reader Speed Launcher] => C:\Program Files (x86)\Adobe\Reader 9.0\Reader\Reader_sl.exe [34672 2008-06-12] (Adobe Systems Incorporated)
HKLM-x32\...\Run: [CTSyncService] => C:\Program Files (x86)\InstallShield Installation Information\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}\AMBSPISyncService.exe [1233195 2009-07-08] (Creative Technology Ltd)
HKLM-x32\...\Run: [VolPanel] => C:\Program Files (x86)\Creative\SB X-Fi MB\Volume Panel\VolPanlu.exe [241789 2009-05-04] (Creative Technology Ltd)
HKLM-x32\...\Run: [UpdReg] => C:\Windows\UpdReg.EXE [90112 2000-05-11] (Creative Technology Ltd.)
HKLM-x32\...\Run: [G Data ASM] => C:\Program Files (x86)\G Data\InternetSecurity\DelayLoader\AutorunDelayLoader.exe [441160 2016-09-15] (G DATA Software AG)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [598552 2016-06-22] (Oracle Corporation)
HKLM\...\Winlogon: [Userinit] C:\Windows\system32\userinit.exe,c:\program files (x86)\g data\internetsecurity\avkkid\avkcks.exe,
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [GAINWARD] => C:\Program Files (x86)\EXPERTool\TBPanel.exe [2263664 2011-01-27] (Gainward Co.)
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [appnhost] => C:\Users\x\AppData\Local\Mixesoft\AppNHost\appnhost.exe [453176 2014-08-08] (Mixesoft Project)
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Run: [RESTART_STICKY_NOTES] => C:\Windows\System32\StikyNot.exe [427520 2009-07-14] (Microsoft Corporation)
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Policies\system: [DisableLockWorkstation] 0
HKU\S-1-5-18\...\RunOnce: [SPReview] => C:\Windows\System32\SPReview\SPReview.exe [301568 2014-10-01] (Microsoft Corporation)
==================== Internet (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Eintrag entfernt oder auf den Standardwert zurückgesetzt, wenn es sich um einen Registryeintrag handelt.)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{EB85FD32-39AC-4AE5-B5F7-28FECB86A3B2}: [DhcpNameServer] 192.168.2.1
Tcpip\..\Interfaces\{FA86910A-4DA5-49F3-A860-AC14953F2E34}: [DhcpNameServer] 192.168.2.1
Internet Explorer:
==================
HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = www.google.com
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL =
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = www.google.com
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL =
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
SearchScopes: HKU\S-1-5-21-3243579912-1492025509-2315471678-1000 -> {857448EC-C5BF-4a1f-B6F7-65DC45A7D9EE} URL = hxxps://www.google.com/search?q={searchTerms}
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_101\bin\ssv.dll [2016-07-23] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-23] (Oracle Corporation)
BHO-x32: Adobe PDF Link Helper -> {18DF081C-E8AD-4283-A596-FA578C2EBDC3} -> C:\Program Files (x86)\Common Files\Adobe\Acrobat\ActiveX\AcroIEHelperShim.dll [2008-06-11] (Adobe Systems Incorporated)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\ssv.dll [2016-07-23] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\jp2ssv.dll [2016-07-23] (Oracle Corporation)
DPF: HKLM-x32 {D27CDB6E-AE6D-11CF-96B8-444553540000} hxxp://fpdownload2.macromedia.com/get/shockwave/cabs/flash/swflash.cab
FireFox:
========
FF DefaultProfile: ajpw9s9q.default
FF ProfilePath: C:\Users\x\AppData\Roaming\Mozilla\Firefox\Profiles\ajpw9s9q.default [2016-11-10]
FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll [Keine Datei]
FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelogx64.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-23] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-23] (Oracle Corporation)
FF Plugin-x32: @Apple.com/iTunes,version=1.0 -> C:\Program Files (x86)\iTunes\Mozilla Plugins\npitunes.dll [2014-10-30] ()
FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll [Keine Datei]
FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB)
FF Plugin-x32: @esn/npbattlelog,version=2.7.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.7.1\npbattlelog.dll [2015-04-30] (EA Digital Illusions CE AB)
FF Plugin-x32: @java.com/DTPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\dtplugin\npDeployJava1.dll [2016-07-23] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.101.2 -> C:\Program Files (x86)\Java\jre1.8.0_101\bin\plugin2\npjp2.dll [2016-07-23] (Oracle Corporation)
FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> c:\Program Files (x86)\Microsoft Silverlight\4.0.60310.0\npctrl.dll [2011-03-09] ( Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2016-10-01] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2016-10-01] (NVIDIA Corporation)
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.31.5\npGoogleUpdate3.dll [2016-07-29] (Google Inc.)
Chrome:
=======
CHR DefaultProfile: Default
CHR HomePage: Default -> hxxp://www.google.de/
CHR StartupUrls: Default -> "chrome://newtab/"
CHR Profile: C:\Users\x\AppData\Local\Google\Chrome\User Data\Default [2016-11-12]
CHR Extension: (Google Präsentationen) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-05]
CHR Extension: (Google Docs) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-05]
CHR Extension: (Google Drive) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-10-22]
CHR Extension: (YouTube) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-09-25]
CHR Extension: (Adblock Plus) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\cfhdojbkjhnklbpkdaibdccddilifddb [2016-10-26]
CHR Extension: (Google-Suche) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-10-27]
CHR Extension: (Google Tabellen) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-05]
CHR Extension: (HTTPS Everywhere) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\gcbommkclmclpchllfjekcdonpmejbdp [2016-11-09]
CHR Extension: (Google Docs Offline) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\ghbmnnjooekpmoecnnnilnnbdlolhkhi [2016-03-15]
CHR Extension: (Chrome Web Store-Zahlungen) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2016-04-02]
CHR Extension: (Google Mail) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-03-28]
CHR Extension: (Chrome Media Router) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkedcjkdefgpdelpbcmbmeomcjbeemfm [2016-10-27]
CHR Extension: (Privacy Badger) - C:\Users\x\AppData\Local\Google\Chrome\User Data\Default\Extensions\pkehgijcmpdhfbdbbnkijodmdjhbjlgp [2016-09-08]
==================== Dienste (Nicht auf der Ausnahmeliste) ====================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
R2 AVKProxy; C:\Program Files (x86)\Common Files\G Data\AVKProxy\AVKProxy.exe [4950632 2016-10-06] (G DATA Software AG)
R2 AVKService; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKService.exe [984904 2016-09-15] (G DATA Software AG)
R2 AVKWCtl; C:\Program Files (x86)\G Data\InternetSecurity\AVK\AVKWCtlx64.exe [3044496 2016-09-27] (G Data Software AG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [1404936 2016-09-08] ()
R2 CG6Service; C:\Program Files\CyberGhost 6\CyberGhost.Service.exe [74288 2016-10-27] (CyberGhost S.R.L)
S3 Creative ALchemy AL6 Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\AL6Licensing.exe [79360 2014-10-01] (Creative Labs) [Datei ist nicht signiert]
S3 Creative Audio Engine Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\CTAELicensing.exe [79360 2014-10-01] (Creative Labs) [Datei ist nicht signiert]
R2 CTAudSvcService; C:\Program Files (x86)\Creative\Shared Files\CTAudSvc.exe [307200 2009-02-23] (Creative Technology Ltd) [Datei ist nicht signiert]
R2 GamingApp_Service; C:\Program Files (x86)\MSI\MSI Gaming APP\GamingApp_Service.exe [20512 2014-03-13] (Micro-Star Int'l Co., Ltd.)
R2 GDBackupSvc; C:\Program Files (x86)\G Data\InternetSecurity\AVKBackup\AVKBackupService.exe [4072264 2016-09-30] (G DATA Software AG)
R3 GDFwSvc; C:\Program Files (x86)\G Data\InternetSecurity\Firewall\GDFwSvcx64.exe [3286120 2016-09-15] (G Data Software AG)
R3 GDScan; C:\Program Files (x86)\Common Files\G Data\GDScan\GDScan.exe [822600 2016-09-27] (G DATA Software AG)
R2 Hamachi2Svc; E:\Program Files (x86)\Hamachi\x64\hamachi-2.exe [2621448 2016-09-13] (LogMeIn Inc.)
S4 MBAMScheduler; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamscheduler.exe [1514464 2016-03-10] (Malwarebytes)
S2 MBAMService; C:\Program Files (x86)\Malwarebytes Anti-Malware\mbamservice.exe [1136608 2016-03-10] (Malwarebytes)
R2 NvContainerLocalSystem; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [457272 2016-09-30] (NVIDIA Corporation)
S3 NvContainerNetworkService; C:\Program Files\NVIDIA Corporation\NvContainer\nvcontainer.exe [457272 2016-09-30] (NVIDIA Corporation)
R2 NVIDIA Wireless Controller Service; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\nvwirelesscontroller.exe [1165368 2016-09-30] (NVIDIA Corporation)
S4 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [2142728 2016-10-29] (Electronic Arts)
S2 Origin Web Helper Service; C:\Program Files (x86)\Origin\OriginWebHelperService.exe [2209296 2016-10-29] (Electronic Arts)
S4 OverwolfUpdater; C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [1310960 2016-10-30] (Overwolf LTD)
R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-12-28] ()
R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76888 2015-12-28] ()
R3 Sound Blaster X-Fi MB Licensing Service; C:\Program Files (x86)\Common Files\Creative Labs Shared\Service\XMBLicensing.exe [79360 2014-10-01] (Creative Labs) [Datei ist nicht signiert]
R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation)
S3 iPod Service; "C:\Program Files\iPod\bin\iPodService.exe" [X]
===================== Treiber (Nicht auf der Ausnahmeliste) ======================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
S3 ebdrv; C:\Windows\system32\DRIVERS\evbda.sys [3286016 2009-06-10] (Broadcom Corporation)
S3 FNETTBOH_305; C:\Windows\System32\drivers\FNETTBOH_305.SYS [31808 2014-10-04] (FNet Co., Ltd.)
R1 FNETURPX; C:\Windows\System32\drivers\FNETURPX.SYS [15936 2014-10-01] (FNet Co., Ltd.)
R0 GDBehave; C:\Windows\System32\drivers\GDBehave.sys [180808 2016-10-13] (G Data Software AG)
R3 GDKBB; C:\Windows\system32\drivers\GDKBB64.sys [37400 2016-10-13] (G Data Software AG)
R3 GDKBFlt; C:\Windows\system32\drivers\GDKBFlt64.sys [30280 2016-10-13] (G DATA Software AG)
R1 GDMnIcpt; C:\Windows\system32\drivers\MiniIcpt.sys [304200 2016-10-13] (G Data Software AG)
R3 GDPkIcpt; C:\Windows\system32\drivers\PktIcpt.sys [88136 2016-10-13] (G Data Software AG)
R1 gdwfpcd; C:\Windows\System32\drivers\gdwfpcd64.sys [74824 2016-10-13] (G DATA Software AG)
R1 GRD; C:\Windows\system32\drivers\GRD.sys [116296 2016-10-19] (G Data Software)
R1 HookCentre; C:\Windows\system32\drivers\HookCentre.sys [153160 2016-10-13] (G Data Software AG)
R3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [27008 2016-03-10] (Malwarebytes)
S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [64896 2016-03-10] (Malwarebytes Corporation)
S3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [29240 2016-09-30] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [47672 2016-09-30] (NVIDIA Corporation)
S3 TBPanel; kein ImagePath
S3 USBTINSP; C:\Windows\System32\DRIVERS\tinspusb.sys [142848 2010-03-29] (Texas Instruments)
U5 VWiFiFlt; C:\Windows\System32\Drivers\VWiFiFlt.sys [59904 2009-07-14] (Microsoft Corporation)
S3 ALSysIO; \??\C:\Users\x~1\AppData\Local\Temp\ALSysIO64.sys [X]
==================== NetSvcs (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Ein Monat: Erstellte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-12 17:13 - 2016-11-12 17:17 - 00000000 ____D C:\ProgramData\HitmanPro
2016-11-10 18:31 - 2016-11-10 18:31 - 00000631 _____ C:\Users\Public\Desktop\Overwatch Test.lnk
2016-11-10 18:31 - 2016-11-10 18:31 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Overwatch Test
2016-11-08 23:08 - 2016-11-08 23:08 - 00000040 _____ C:\Users\x\Desktop\Neues Textdokument.txt
2016-11-08 21:34 - 2016-11-08 21:53 - 00192216 _____ (Malwarebytes) C:\Windows\system32\Drivers\MBAMSwissArmy.sys
2016-11-08 21:34 - 2016-11-08 21:34 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Malwarebytes Anti-Malware
2016-11-08 21:33 - 2016-11-08 21:34 - 00000000 ____D C:\Program Files (x86)\Malwarebytes Anti-Malware
2016-11-08 21:33 - 2016-11-08 21:33 - 00000000 ____D C:\ProgramData\Malwarebytes
2016-11-08 21:33 - 2016-03-10 14:09 - 00064896 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\mwac.sys
2016-11-08 21:33 - 2016-03-10 14:08 - 00140672 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbamchameleon.sys
2016-11-08 21:33 - 2016-03-10 14:08 - 00027008 _____ (Malwarebytes) C:\Windows\system32\Drivers\mbam.sys
2016-11-08 21:13 - 2016-11-08 21:17 - 00000000 ____D C:\AdwCleaner
2016-11-07 18:02 - 2016-11-12 17:18 - 00000000 ____D C:\FRST
2016-11-03 14:36 - 2016-11-03 14:36 - 37407339 _____ C:\Users\x\Downloads\High Level Enemies-27866-1-6.rar
2016-11-02 14:27 - 2016-11-03 14:53 - 00000000 ____D C:\Users\x\AppData\Local\LOOT
2016-11-01 22:09 - 2016-11-01 22:09 - 00000000 ____D C:\Users\x\AppData\Local\Nexus
2016-11-01 19:51 - 2016-11-01 19:51 - 00001267 _____ C:\Users\x\Desktop\Skyrim (SKSE).lnk
2016-11-01 19:42 - 2016-11-01 19:42 - 00001000 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\LOOT.lnk
2016-10-27 22:13 - 2016-10-27 22:13 - 00003388 _____ C:\Users\x\AppData\Local\recently-used.xbel
2016-10-24 15:15 - 2016-10-24 15:17 - 00000070 _____ C:\Users\x\Desktop\Mathe.txt
2016-10-23 09:49 - 2016-10-23 11:49 - 00000000 ____D C:\Users\x\Desktop\Makadam (Bonus Tracks Version)
2016-10-23 09:47 - 2016-10-23 09:49 - 178471732 _____ C:\Users\x\Downloads\Makadam (Bonus Tracks Version) - Olexesh.zip
2016-10-20 11:47 - 2016-10-20 11:47 - 00003258 _____ C:\Windows\System32\Tasks\{1E44F311-2B6B-4587-87F5-8FDC14EE6412}
2016-10-19 20:43 - 2016-11-05 23:14 - 00000000 ____D C:\Users\x\AppData\Roaming\.minecraft
2016-10-19 20:42 - 2016-10-19 20:42 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Minecraft
2016-10-19 16:50 - 2016-10-19 16:50 - 00000000 ____D C:\Users\x\.QtWebEngineProcess
2016-10-19 16:50 - 2016-10-19 16:50 - 00000000 ____D C:\Users\x\.Origin
2016-10-18 20:14 - 2016-10-18 20:14 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Skype
2016-10-18 18:56 - 2016-10-23 22:03 - 00000384 _____ C:\Users\x\Desktop\bild.txt
2016-10-16 14:57 - 2016-10-16 14:57 - 00000000 ____D C:\Users\x\Desktop\Pilze
2016-10-16 14:03 - 2016-10-29 09:23 - 00000000 ____D C:\Users\x\Desktop\Kunst_Temp
2016-10-15 15:29 - 2016-10-15 15:29 - 00000000 ____D C:\Users\x\.thumbnails
2016-10-13 13:00 - 2016-10-13 13:00 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\G DATA INTERNET SECURITY
==================== Ein Monat: Geänderte Dateien und Ordner ========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Datei/der Ordner verschoben.)
2016-11-12 17:13 - 2014-10-01 13:29 - 00000000 ____D C:\Users\x\Desktop\Motherboard
2016-11-12 17:01 - 2014-10-01 20:44 - 00001110 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2016-11-12 16:28 - 2014-10-01 14:27 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job
2016-11-12 16:13 - 2014-10-04 12:54 - 00000000 ____D C:\Program Files (x86)\Steam
2016-11-12 12:39 - 2009-07-14 05:45 - 00023856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0
2016-11-12 12:39 - 2009-07-14 05:45 - 00023856 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0
2016-11-12 12:36 - 2009-07-14 18:58 - 00699092 _____ C:\Windows\system32\perfh007.dat
2016-11-12 12:36 - 2009-07-14 18:58 - 00149232 _____ C:\Windows\system32\perfc007.dat
2016-11-12 12:36 - 2009-07-14 06:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI
2016-11-12 12:36 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\inf
2016-11-12 12:31 - 2016-01-15 23:12 - 00000000 ____D C:\Users\x\AppData\Local\LogMeIn Hamachi
2016-11-12 12:30 - 2014-10-01 20:44 - 00001106 _____ C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2016-11-12 12:30 - 2014-10-01 13:11 - 00000000 ____D C:\ProgramData\NVIDIA
2016-11-12 12:30 - 2009-07-14 06:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT
2016-11-11 19:59 - 2016-03-03 14:41 - 00000000 ____D C:\Users\x\AppData\Local\Battle.net
2016-11-11 19:59 - 2016-03-03 14:39 - 00000000 ____D C:\Program Files (x86)\Battle.net
2016-11-11 19:38 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\NDF
2016-11-11 15:08 - 2014-10-05 21:27 - 00000000 ____D C:\Users\x\AppData\Roaming\TS3Client
2016-11-10 19:10 - 2015-09-25 16:38 - 00000000 ____D C:\Users\x\AppData\Roaming\Spotify
2016-11-10 19:10 - 2015-09-25 16:38 - 00000000 ____D C:\Users\x\AppData\Local\Spotify
2016-11-10 16:32 - 2014-10-01 22:05 - 00000000 ____D C:\Users\x\AppData\Local\CrashDumps
2016-11-08 19:28 - 2014-10-01 14:27 - 00796352 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2016-11-08 19:28 - 2014-10-01 14:27 - 00142528 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2016-11-08 19:28 - 2014-10-01 14:27 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater
2016-11-08 19:28 - 2014-10-01 14:27 - 00000000 ____D C:\Windows\SysWOW64\Macromed
2016-11-08 19:28 - 2014-10-01 14:27 - 00000000 ____D C:\Windows\system32\Macromed
2016-11-06 19:13 - 2014-10-04 13:13 - 00000000 ____D C:\Program Files (x86)\Overwolf
2016-11-06 15:41 - 2014-10-01 15:39 - 00028208 _____ (G DATA Software) C:\Windows\system32\Drivers\GdPhyMem.sys
2016-11-06 14:19 - 2016-09-09 21:08 - 00000234 _____ C:\Users\x\Downloads\x.txt
2016-11-02 13:56 - 2015-09-04 17:01 - 00000000 ____D C:\Users\x\Downloads\Programme
2016-11-01 20:44 - 2016-03-20 16:43 - 00000000 ____D C:\Users\x\AppData\Local\Skyrim
2016-11-01 20:02 - 2014-10-01 20:45 - 00002175 _____ C:\Users\Public\Desktop\Google Chrome.lnk
2016-10-30 22:38 - 2015-07-08 10:26 - 00000000 ____D C:\Users\x\Desktop\Sonstige Games
2016-10-30 21:52 - 2014-10-04 12:57 - 00000000 ____D C:\ProgramData\Origin
2016-10-30 13:11 - 2014-10-01 20:44 - 00000000 ____D C:\Users\x\AppData\Local\Google
2016-10-30 12:19 - 2014-10-04 12:59 - 00000000 ____D C:\Users\x\AppData\Roaming\Origin
2016-10-30 11:08 - 2014-10-13 20:23 - 00226168 _____ C:\Windows\SysWOW64\PnkBstrB.exe
2016-10-30 11:08 - 2014-10-13 20:23 - 00214392 _____ C:\Windows\SysWOW64\PnkBstrB.ex0
2016-10-29 19:13 - 2014-10-04 12:57 - 00000000 ____D C:\Program Files (x86)\Origin
2016-10-29 19:09 - 2014-10-04 12:59 - 00000000 ____D C:\Users\x\AppData\Local\Origin
2016-10-27 22:13 - 2016-04-22 15:17 - 00000000 ____D C:\Users\x\AppData\Local\gtk-2.0
2016-10-27 22:13 - 2016-04-22 13:12 - 00000000 ____D C:\Users\x\.gimp-2.8
2016-10-27 15:15 - 2016-08-24 16:35 - 00000000 ____D C:\Program Files\CyberGhost 6
2016-10-26 17:29 - 2014-10-01 14:04 - 00485032 ____N (Microsoft Corporation) C:\Windows\system32\MpSigStub.exe
2016-10-20 00:27 - 2014-10-01 21:52 - 00000000 ____D C:\Users\x\AppData\Roaming\Skype
2016-10-19 20:41 - 2014-10-01 15:39 - 00116296 _____ (G Data Software) C:\Windows\system32\Drivers\GRD.sys
2016-10-19 19:52 - 2014-10-01 21:52 - 00000000 ___RD C:\Program Files (x86)\Skype
2016-10-19 19:52 - 2014-10-01 21:52 - 00000000 ____D C:\ProgramData\Skype
2016-10-19 16:50 - 2014-10-01 13:02 - 00000000 ____D C:\Users\x
2016-10-18 20:14 - 2014-10-01 21:52 - 00002699 _____ C:\Users\Public\Desktop\Skype.lnk
2016-10-18 20:14 - 2014-10-01 21:52 - 00000000 ____D C:\Users\x\AppData\Local\Skype
2016-10-17 19:04 - 2015-03-03 22:26 - 00000000 ____D C:\Users\x\AppData\Local\UnrealEngine
2016-10-13 13:28 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\rescache
2016-10-13 13:00 - 2016-03-19 14:15 - 00001978 _____ C:\Users\Public\Desktop\G DATA INTERNET SECURITY.lnk
2016-10-13 13:00 - 2015-04-10 10:10 - 00037400 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDKBB64.sys
2016-10-13 13:00 - 2014-10-01 14:08 - 00030280 _____ (G DATA Software AG) C:\Windows\system32\Drivers\GDKBFlt64.sys
2016-10-13 13:00 - 2014-10-01 13:35 - 00088136 _____ (G Data Software AG) C:\Windows\system32\Drivers\PktIcpt.sys
2016-10-13 13:00 - 2014-10-01 13:35 - 00074824 _____ (G DATA Software AG) C:\Windows\system32\Drivers\gdwfpcd64.sys
2016-10-13 13:00 - 2014-10-01 13:34 - 00304200 _____ (G Data Software AG) C:\Windows\system32\Drivers\MiniIcpt.sys
2016-10-13 13:00 - 2014-10-01 13:34 - 00180808 _____ (G Data Software AG) C:\Windows\system32\Drivers\GDBehave.sys
2016-10-13 13:00 - 2014-10-01 13:34 - 00153160 _____ (G Data Software AG) C:\Windows\system32\Drivers\HookCentre.sys
2016-10-13 12:59 - 2014-10-01 13:32 - 00000000 ____D C:\ProgramData\G Data
2016-10-13 12:47 - 2009-07-14 05:45 - 00385552 _____ C:\Windows\system32\FNTCACHE.DAT
2016-10-13 12:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\SysWOW64\Dism
2016-10-13 12:46 - 2009-07-14 04:20 - 00000000 ____D C:\Windows\system32\Dism
==================== Dateien im Wurzelverzeichnis einiger Verzeichnisse =======
2015-01-11 14:36 - 2015-01-18 15:35 - 28488056 _____ (Sony Mobile Communications ) C:\Users\x\AppData\Local\pcc.exe
2016-10-27 22:13 - 2016-10-27 22:13 - 0003388 _____ () C:\Users\x\AppData\Local\recently-used.xbel
2016-04-09 21:07 - 2016-08-14 21:10 - 0007611 _____ () C:\Users\x\AppData\Local\Resmon.ResmonCfg
Einige Dateien in TEMP:
====================
C:\Users\x\AppData\Local\Temp\jre-8u111-windows-au.exe
==================== Bamital & volsnap ======================
(Es ist kein automatischer Fix für Dateien vorhanden, die an der Verifikation gescheitert sind.)
C:\Windows\system32\winlogon.exe => Datei ist digital signiert
C:\Windows\system32\wininit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\wininit.exe => Datei ist digital signiert
C:\Windows\explorer.exe => Datei ist digital signiert
C:\Windows\SysWOW64\explorer.exe => Datei ist digital signiert
C:\Windows\system32\svchost.exe => Datei ist digital signiert
C:\Windows\SysWOW64\svchost.exe => Datei ist digital signiert
C:\Windows\system32\services.exe => Datei ist digital signiert
C:\Windows\system32\User32.dll => Datei ist digital signiert
C:\Windows\SysWOW64\User32.dll => Datei ist digital signiert
C:\Windows\system32\userinit.exe => Datei ist digital signiert
C:\Windows\SysWOW64\userinit.exe => Datei ist digital signiert
C:\Windows\system32\rpcss.dll => Datei ist digital signiert
C:\Windows\system32\dnsapi.dll => Datei ist digital signiert
C:\Windows\SysWOW64\dnsapi.dll => Datei ist digital signiert
C:\Windows\system32\Drivers\volsnap.sys => Datei ist digital signiert
LastRegBack: 2016-11-05 15:04
==================== Ende von FRST.txt ============================
Addition: Code:
Zusätzliches Untersuchungsergebnis von Farbar Recovery Scan Tool (x64) Version: 12-11-2016
durchgeführt von x (12-11-2016 17:18:34)
Gestartet von C:\Users\x\Desktop\Motherboard\Problem\FRST
Windows 7 Home Premium Service Pack 1 (X64) (2014-10-01 12:02:17)
Start-Modus: Normal
==========================================================
==================== Konten: =============================
Administrator (S-1-5-21-3243579912-1492025509-2315471678-500 - Administrator - Disabled)
Gast (S-1-5-21-3243579912-1492025509-2315471678-501 - Limited - Disabled)
x (S-1-5-21-3243579912-1492025509-2315471678-1000 - Administrator - Enabled) => C:\Users\x
==================== Sicherheits-Center ========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er entfernt.)
AV: G DATA INTERNET SECURITY (Enabled - Up to date) {545C8713-0744-B079-87F8-349A6D5C8CF0}
AS: G DATA INTERNET SECURITY (Enabled - Up to date) {EF3D66F7-217E-BFF7-BD48-0FE816DBC64D}
AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
FW: G*DATA Personal Firewall (Enabled) {6C670636-4D2B-B121-ACA7-9DAF938FCB8B}
==================== Installierte Programme ======================
(Nur Adware-Programme mit dem Zusatz "Hidden" können in die Fixlist aufgenommen werden, um sie sichtbar zu machen. Die Adware-Programme sollten manuell deinstalliert werden.)
7-Zip 9.20 (x64 edition) (HKLM\...\{23170F69-40C1-2702-0920-000001000000}) (Version: 9.20.00.0 - Igor Pavlov)
Acrobat.com (HKLM-x32\...\com.adobe.mauby.4875E02D9FB21EE389F73B8D1702B320485DF8CE.1) (Version: 1.1.377 - Adobe Systems Incorporated)
Acrobat.com (x32 Version: 0.0.0 - Adobe Systems Incorporated) Hidden
Adobe AIR (HKLM-x32\...\Adobe AIR) (Version: 1.0.4990 - Adobe Systems Inc.)
Adobe Flash Player 23 ActiveX (HKLM-x32\...\Adobe Flash Player ActiveX) (Version: 23.0.0.207 - Adobe Systems Incorporated)
Adobe Reader 9 (HKLM-x32\...\{AC76BA86-7AD7-1033-7B44-A90000000001}) (Version: 9.0.0 - Adobe Systems Incorporated)
Ansel (Version: 373.06 - NVIDIA Corporation) Hidden
Apple Application Support (32-Bit) (HKLM-x32\...\{447CDCE5-F555-429B-BFA6-642C3C6D684F}) (Version: 3.1.2 - Apple Inc.)
Apple Application Support (64-Bit) (HKLM\...\{0DF7096B-715A-4233-8633-C7A16ED6D616}) (Version: 3.1.2 - Apple Inc.)
Apple Software Update (HKLM-x32\...\{789A5B64-9DD9-4BA5-915A-F0FC0A1B7BFE}) (Version: 2.1.3.127 - Apple Inc.)
AppNHost 1.0.5.1 (HKLM-x32\...\{A8CB86C7-CD4C-4C4F-AF6A-33D1CAC63562}) (Version: 1.0.5.1 - Mixesoft Project)
ARK: Survival Evolved (HKLM\...\Steam App 346110) (Version: - Studio Wildcard)
ASRock App Charger v1.0.4 (HKLM\...\ASRock App Charger_is1) (Version: - ASRock Inc.)
ASRock eXtreme Tuner v0.1.54 (HKLM-x32\...\ASRock eXtreme Tuner_is1) (Version: - )
ASRock InstantBoot v1.26 (HKLM-x32\...\ASRock InstantBoot_is1) (Version: - )
Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment)
Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.7.2.45672 - Electronic Arts)
Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.7.1 - EA Digital Illusions CE AB)
Besiege (HKLM-x32\...\Steam App 346010) (Version: - Spiderling Studios)
Bonjour (HKLM\...\{6E3610B2-430D-4EB0-81E3-2B57E8B9DE8D}) (Version: 3.0.0.10 - Apple Inc.)
Borderlands 2 (HKLM\...\Steam App 49520) (Version: - Gearbox Software)
Borderlands: The Pre-Sequel (HKLM-x32\...\Steam App 261640) (Version: - 2K Australia)
Brawlhalla (HKLM\...\Steam App 291550) (Version: - Blue Mammoth Games)
Cheat Engine 6.4 (HKLM-x32\...\Cheat Engine 6.4_is1) (Version: - Cheat Engine)
Chivalry: Medieval Warfare (HKLM\...\Steam App 219640) (Version: - Torn Banner Studios)
Choice of Robots (HKLM\...\Steam App 339350) (Version: - Choice of Games)
Core Temp 1.0 RC8 (HKLM\...\{086D343F-8E78-4AFC-81AC-D6D414AFD8AC}_is1) (Version: 1.0 - Alcpu)
Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve)
Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve)
CPUID CPU-Z 1.71 (HKLM\...\CPUID CPU-Z_is1) (Version: - )
CPUID HWMonitor 1.28 (HKLM\...\CPUID HWMonitor_is1) (Version: - )
CyberGhost 6 (HKLM\...\CyberGhost 6_is1) (Version: - CyberGhost S.R.L.)
Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment)
Don't Starve (HKLM-x32\...\Steam App 219740) (Version: - Klei Entertainment)
Don't Starve Together Beta (HKLM-x32\...\Steam App 322330) (Version: - Klei Entertainment)
Dying Light (HKLM-x32\...\Steam App 239140) (Version: - Techland)
Epic Games Launcher (HKLM\...\{8727C279-A122-40B8-8ACA-271E1809DAA5}) (Version: 1.1.23.0 - Epic Games, Inc.)
Epic Games Launcher Prerequisites (x64) (Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Etron USB3.0 Host Controller (HKLM-x32\...\InstallShield_{DFBB738C-71D8-4DC5-B8D2-D65C37680E27}) (Version: 0.96 - Etron Technology)
Etron USB3.0 Host Controller (x32 Version: 0.96 - Etron Technology) Hidden
EXPERTool 7.16 (HKLM-x32\...\MySSID_is1) (Version: - Gainward Co., Ltd)
Fallout 4 (HKLM-x32\...\Steam App 377160) (Version: - Bethesda Game Studios)
Far Cry 4 (HKLM-x32\...\Uplay Install 420) (Version: - Ubisoft)
G DATA INTERNET SECURITY (HKLM-x32\...\G DATA INTERNET SECURITY) (Version: 25.3.0.1 - G DATA Software AG)
Garry's Mod (HKLM-x32\...\Steam App 4000) (Version: - Facepunch Studios)
GIMP 2.8.16 (HKLM\...\GIMP-2_is1) (Version: 2.8.16 - The GIMP Team)
Gods Will Be Watching (HKLM-x32\...\Steam App 274290) (Version: - Deconstructeam)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 54.0.2840.87 - Google Inc.)
Google Update Helper (x32 Version: 1.3.25.11 - Google Inc.) Hidden
Google Update Helper (x32 Version: 1.3.31.5 - Google Inc.) Hidden
Greenfoot (HKLM-x32\...\{8C838B70-3A71-41E8-91A6-4ADCF2E483D0}) (Version: 2.4.2 - Greenfoot Team)
HITMAN™ (HKLM\...\Steam App 236870) (Version: - Io-Interactive)
Hotline Miami (HKLM\...\Steam App 219150) (Version: - Dennaton Games)
Insurgency (HKLM\...\Steam App 222880) (Version: - New World Interactive)
Intel(R) Management Engine Components (HKLM-x32\...\{65153EA5-8B6E-43B6-857B-C6E4FC25798A}) (Version: 7.0.0.1144 - Intel Corporation)
iTunes (HKLM\...\{D227565A-0033-40AD-89BA-653A205CDC11}) (Version: 12.1.1.4 - Apple Inc.)
Java 8 Update 101 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F64180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java 8 Update 101 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F32180101F0}) (Version: 8.0.1010.13 - Oracle Corporation)
Java SE Development Kit 8 Update 72 (64-bit) (HKLM\...\{64A3A4F4-B792-11D6-A78A-00B0D0180720}) (Version: 8.0.720.15 - Oracle Corporation)
Just Cause 2 (HKLM\...\Steam App 8190) (Version: - Avalanche Studios)
Just Cause 2: Multiplayer Mod (HKLM\...\Steam App 259080) (Version: - Avalanche Studios)
Launcher Prerequisites (x64) (x32 Version: 1.0.0.0 - Epic Games, Inc.) Hidden
Life Is Strange™ (HKLM-x32\...\Steam App 319630) (Version: - DONTNOD Entertainment)
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.519 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.519 - LogMeIn, Inc.) Hidden
LOOT Version 0.9.2 (HKLM-x32\...\{BF634210-A0D4-443F-A657-0DCE38040374}_is1) (Version: 0.9.2 - LOOT Team)
LuPO 2.0.2.18 (HKLM-x32\...\LuPO_is1) (Version: - Ministerium für Schule, Wissenschaft und Forschung NRW)
Machinarium (HKLM\...\Steam App 40700) (Version: - Amanita Design)
Malwarebytes Anti-Malware Version 2.2.1.1043 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.2.1.1043 - Malwarebytes)
Microsoft .NET Framework 4.6.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft .NET Framework 4.6.1 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.6.01055 - Microsoft Corporation)
Microsoft Office Enterprise 2007 (HKLM-x32\...\ENTERPRISE) (Version: 12.0.4518.1014 - Microsoft Corporation)
Microsoft Silverlight (HKLM-x32\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 4.0.60310.0 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.21022 (HKLM-x32\...\{FF66E9F6-83E7-3A3E-AF14-8DE9A809A6A4}) (Version: 9.0.21022 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.60610 (HKLM-x32\...\{95716cce-fc71-413f-8ad5-56c2892d4b3a}) (Version: 11.0.60610.1 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x64) - 14.0.24210 (HKLM-x32\...\{f144e08f-9cbe-4f09-9a8c-f2b858b7ee7f}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft Visual C++ 2015 Redistributable (x86) - 14.0.24210 (HKLM-x32\...\{23658c02-145e-483d-ba6b-1eb82c580529}) (Version: 14.0.24210.0 - Microsoft Corporation)
Microsoft XNA Framework Redistributable 4.0 (HKLM-x32\...\{2BFC7AA0-544C-4E3A-8796-67F3BE655BE9}) (Version: 4.0.20823.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{1C16BCA3-EBC1-49F6-8623-8FBFB9CCC872}) (Version: 1.0.3.0 - Mojang)
Mozilla Firefox 47.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 47.0.1 (x86 de)) (Version: 47.0.1 - Mozilla)
MSI Afterburner 4.0.0 (HKLM-x32\...\Afterburner) (Version: 4.0.0 - MSI Co., LTD)
MSI Gaming APP (HKLM-x32\...\{E0229316-E73B-484B-B9E0-45098AB38D8C}}_is1) (Version: 3.0.0.05 - MSI)
Need for Speed™ Most Wanted (HKLM-x32\...\{FB0127F3-985B-44CE-AE29-378CAF60B361}) (Version: 1.5.0.0 - Electronic Arts)
NetBeans IDE 8.1 (HKLM\...\nbi-nb-base-8.1.0.0.201511021428) (Version: 8.1 - NetBeans.org)
Nexus Mod Manager (HKLM\...\6af12c54-643b-4752-87d0-8335503010de_is1) (Version: 0.63.5 - Black Tree Gaming)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.9 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 369.04 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 369.04 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 373.06 - NVIDIA Corporation)
NVIDIA GeForce Experience 3.0.7.34 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 3.0.7.34 - NVIDIA Corporation)
NVIDIA Grafiktreiber 373.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 373.06 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.34.15 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.15 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.16.0318 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.16.0318 - NVIDIA Corporation)
NvNodejs (Version: 3.0.7.34 - NVIDIA Corporation) Hidden
NvTelemetry (Version: 1.0.0.0 - NVIDIA Corporation) Hidden
OpenAL (HKLM-x32\...\OpenAL) (Version: - )
Origin (HKLM-x32\...\Origin) (Version: 10.2.1.38915 - Electronic Arts, Inc.)
Overwatch (HKLM-x32\...\Overwatch) (Version: - Blizzard Entertainment)
Overwatch Test (HKLM-x32\...\Overwatch Test) (Version: - Blizzard Entertainment)
Overwolf (HKLM-x32\...\Overwolf) (Version: 0.99.11.0 - Overwolf Ltd.)
Oxenfree (HKLM\...\Steam App 388880) (Version: - Night School Studio)
POSTAL 2 (HKLM\...\Steam App 223470) (Version: - Running With Scissors)
PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.993 - Even Balance, Inc.)
Realtek Ethernet Controller Driver For Windows 7 (HKLM-x32\...\{8833FFB6-5B0C-4764-81AA-06DFEED9A476}) (Version: 7.23.623.2010 - Realtek)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.6167 - Realtek Semiconductor Corp.)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.9.6 - Rockstar Games)
SHIELD Streaming (Version: 7.1.0320 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 3.0.7.34 - NVIDIA Corporation) Hidden
Skype™ 7.28 (HKLM-x32\...\{FC965A47-4839-40CA-B618-18F486F042C6}) (Version: 7.28.101 - Skype Technologies S.A.)
Sony PC Companion 2.10.281 (HKLM-x32\...\{F09EF8F2-0976-42C1-8D9D-8DF78337C6E3}) (Version: 2.10.281 - Sony)
Sound Blaster X-Fi MB (HKLM-x32\...\{F3D9AC82-30F4-4BB9-B9AB-8697637568C1}) (Version: 1.0 - Creative Technology Limited)
Space Engineers (HKLM-x32\...\Steam App 244850) (Version: - Keen Software House)
Splinter Cell Blacklist (HKLM-x32\...\Uplay Install 91) (Version: - Ubisoft)
Spotify (HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\...\Spotify) (Version: 1.0.41.375.g040056ca - Spotify AB)
Starbound (HKLM\...\Steam App 211820) (Version: - )
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Supreme Commander: Forged Alliance (HKLM-x32\...\Steam App 9420) (Version: - Gas Powered Games)
Surgeon Simulator (HKLM-x32\...\Steam App 233720) (Version: - Bossa Studios)
System Shock 2 (HKLM-x32\...\Steam App 238210) (Version: - Irrational Games)
Tales from the Borderlands (HKLM-x32\...\Steam App 330830) (Version: - Telltale Games)
TAP-Windows 9.9.2 (HKLM\...\TAP-Windows) (Version: 9.9.2 - )
Team Fortress 2 (HKLM\...\Steam App 440) (Version: - Valve)
TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Deadly Tower of Monsters (HKLM\...\Steam App 353700) (Version: - ACE Team)
The Elder Scrolls V: Skyrim (HKLM\...\Steam App 72850) (Version: - Bethesda Game Studios)
The Walking Dead (HKLM-x32\...\Steam App 207610) (Version: - )
The Walking Dead: Season Two (HKLM\...\Steam App 261030) (Version: - Telltale Games)
The Witness (HKLM\...\Steam App 210970) (Version: - Thekla, Inc.)
This War of Mine (HKLM-x32\...\Steam App 282070) (Version: - 11 bit studios)
TI-Nspire™ Student Software (HKLM-x32\...\{F46F949B-755F-4BEF-A4B9-7B3B73D0104A}) (Version: 3.9.0.463 - Texas Instruments Inc.)
Uplay (HKLM-x32\...\Uplay) (Version: 4.8 - Ubisoft)
Vulkan Run Time Libraries 1.0.26.0 (HKLM\...\VulkanRT1.0.26.0) (Version: 1.0.26.0 - LunarG, Inc.)
Vulkan Run Time Libraries 1.0.3.0 (HKLM\...\VulkanRT1.0.3.0) (Version: 1.0.3.0 - LunarG, Inc.)
Worms Clan Wars (HKLM\...\Steam App 233840) (Version: - Team17 Digital Ltd)
Wrye Bash (HKLM-x32\...\Wrye Bash) (Version: 0.3.0.6 - Wrye & Wrye Bash Development Team)
XFastUsb (HKLM-x32\...\XFastUsb) (Version: - )
==================== Benutzerdefinierte CLSID (Nicht auf der Ausnahmeliste): ==========================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
==================== Geplante Aufgaben (Nicht auf der Ausnahmeliste) =============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
Task: {032624DA-81A0-4AFA-9D28-A971BCB0289F} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2016-11-08] (Adobe Systems Incorporated)
Task: {223210AB-D960-48A6-8519-1F9767403646} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {2AF23F34-2BDA-4C51-B397-E3CC51FC111C} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-08-27] (Google Inc.)
Task: {40BDF797-0948-44D7-BE5E-14C9D2ECAB3A} - System32\Tasks\NvProfileUpdaterOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-09-30] (NVIDIA Corporation)
Task: {5B359467-C84A-46BE-8657-C7383E0616F4} - System32\Tasks\NvTmRep_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-09-30] (NVIDIA Corporation)
Task: {6421551A-447A-40F4-BED2-C4DF4E0979AC} - System32\Tasks\{1E44F311-2B6B-4587-87F5-8FDC14EE6412} => pcalua.exe -a C:\Users\x~1\AppData\Local\Temp\jre-8u111-windows-au.exe -d C:\Windows\SysWOW64 -c /installmethod=jau FAMILYUPGRADE=1 <==== ACHTUNG
Task: {809BDDBA-7388-4799-A40F-792D871976F0} - System32\Tasks\NvNodeLauncher_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\NvNode\nvnodejslauncher.exe [2016-09-30] (NVIDIA Corporation)
Task: {859E4209-AC91-417D-A7F9-B82EEC107A58} - System32\Tasks\NvProfileUpdaterDaily_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files\NVIDIA Corporation\Update Core\NvProfileUpdater64.exe [2016-09-30] (NVIDIA Corporation)
Task: {872C0B04-9603-4DBE-A6C0-A307C53F8AA7} - System32\Tasks\Apple\AppleSoftwareUpdate => C:\Program Files (x86)\Apple Software Update\SoftwareUpdate.exe [2011-06-01] (Apple Inc.)
Task: {958F4C64-790E-40B2-9446-3E2C6AD447D5} - System32\Tasks\{F784AE50-04B7-4242-8552-CF9D6A9C9E31} => Chrome.exe hxxp://ui.skype.com/ui/0/7.10.80.101/de/abandoninstall?page=tsProgressBar
Task: {C64944CD-F131-4323-9971-7470D05FD8EF} - System32\Tasks\NvTmRepOnLogon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmRep.exe [2016-09-30] (NVIDIA Corporation)
Task: {EC6D357F-D281-4FBC-8027-B36807A96034} - System32\Tasks\{1E117853-DDE7-42CC-A239-5368E6CBAD68} => pcalua.exe -a G:\gpg4usb\gpg4usb\start_windows.exe -d G:\gpg4usb\gpg4usb
Task: {EDCAACD1-C46E-4676-AFB4-C02EF9A36400} - System32\Tasks\NvTmMon_{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8} => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvTmMon.exe [2016-09-30] (NVIDIA Corporation)
Task: {F82783D4-5169-45CE-8222-22B174AAC672} - System32\Tasks\Overwolf Updater Task => C:\Program Files (x86)\Overwolf\OverwolfUpdater.exe [2016-10-30] (Overwolf LTD)
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird die Aufgabe verschoben. Die Datei, die durch die Aufgabe gestartet wird, wird nicht verschoben.)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
==================== Verknüpfungen =============================
(Die Einträge können gelistet werden, um sie zurückzusetzen oder zu entfernen.)
==================== Geladene Module (Nicht auf der Ausnahmeliste) ==============
2014-10-04 12:36 - 2016-10-01 20:44 - 00134712 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-12 10:49 - 2014-05-12 10:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2016-10-06 18:14 - 2016-09-30 05:22 - 01148984 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\libprotobuf.dll
2016-10-06 18:14 - 2016-09-30 05:22 - 04490808 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\Poco.dll
2016-10-06 18:14 - 2016-09-30 05:22 - 00419896 _____ () C:\Program Files\NVIDIA Corporation\NvContainer\plugins\LocalSystem\_nvspserviceplugin64.dll
2014-10-14 22:10 - 2015-12-28 23:21 - 00076152 _____ () C:\Windows\system32\PnkBstrA.exe
2016-09-15 04:24 - 2016-09-15 04:24 - 00423752 _____ () C:\Program Files (x86)\Common Files\G Data\AVKProxy\PktIcpt2x64.dll
2014-10-01 13:05 - 1998-10-31 09:55 - 00005120 _____ () C:\Program Files (x86)\EXPERTool\TBManage.dll
2016-11-12 12:30 - 2016-11-12 12:30 - 00697884 _____ () C:\Users\x\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0004\~df394b.tmp
2016-11-12 12:30 - 2016-11-12 12:30 - 00592896 _____ () C:\Users\x\AppData\Local\Temp\Sound_Blaster_X-Fi_MB_Cleanup.0001.dir.0004\~de6248.tmp
2014-10-01 13:18 - 2009-02-06 17:52 - 00073728 _____ () C:\Windows\SysWOW64\CmdRtr.DLL
2014-10-01 13:18 - 2009-04-20 10:55 - 00148480 _____ () C:\Windows\SysWOW64\APOMngr.DLL
2016-10-06 18:14 - 2016-09-30 05:22 - 60819000 _____ () C:\Program Files (x86)\NVIDIA Corporation\NVIDIA GeForce Experience\libcef.dll
2015-03-31 14:11 - 2016-09-30 05:22 - 00020536 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2016-10-06 18:14 - 2016-09-29 18:20 - 00500792 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvSpCapsAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00255936 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\DriverInstall.node
2016-10-06 18:14 - 2016-09-29 18:20 - 02801208 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\Downloader.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00244672 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGameShareAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00430648 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvGalleryAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00336832 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NVAccountAPINode.node
2016-10-06 18:14 - 2016-09-29 18:20 - 00373696 _____ () \\?\C:\Program Files (x86)\NVIDIA Corporation\NvNode\NvCameraAPINode.node
2016-11-01 20:02 - 2016-10-31 06:29 - 01819240 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\libglesv2.dll
2016-11-01 20:02 - 2016-10-31 06:29 - 00093288 _____ () C:\Program Files (x86)\Google\Chrome\Application\54.0.2840.87\libegl.dll
2014-10-04 13:41 - 2016-09-08 04:14 - 00784672 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-21 18:53 - 2016-09-01 02:02 - 04969248 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-01-21 18:53 - 2016-09-01 02:02 - 01563936 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-21 18:53 - 2016-09-01 02:02 - 01195296 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2014-10-04 13:41 - 2016-10-13 02:58 - 02321696 _____ () C:\Program Files (x86)\Steam\video.dll
2014-10-04 13:41 - 2016-01-27 08:49 - 02549760 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2014-10-04 13:41 - 2016-01-27 08:49 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2014-10-04 13:41 - 2016-01-27 08:49 - 00491008 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2014-10-04 13:41 - 2016-01-27 08:49 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2014-10-04 13:41 - 2016-01-27 08:49 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2014-10-04 13:41 - 2016-10-13 02:58 - 00836896 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2016-03-09 18:34 - 2016-07-04 23:17 - 00266560 _____ () C:\Program Files (x86)\Steam\openvr_api.dll
2016-10-14 15:25 - 2016-08-04 21:56 - 49825056 _____ () C:\Program Files (x86)\Steam\bin\cef\cef.winxp\libcef.dll
2015-01-21 18:53 - 2015-09-25 00:52 - 00119208 _____ () C:\Program Files (x86)\Steam\winh264.dll
==================== Alternate Data Streams (Nicht auf der Ausnahmeliste) =========
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird nur der ADS entfernt.)
==================== Abgesicherter Modus (Nicht auf der Ausnahmeliste) ===================
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Der Wert "AlternateShell" wird wiederhergestellt.)
HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"
==================== Verknüpfungen (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird der Registryeintrag auf den Standardwert zurückgesetzt oder entfernt.)
==================== Internet Explorer Vertrauenswürdig/Eingeschränkt ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt.)
==================== Hosts Inhalt: ===============================
(Wenn benötigt kann der Hosts: Schalter in die Fixlist aufgenommen werden um die Hosts Datei zurückzusetzen.)
2009-07-14 03:34 - 2009-06-10 22:00 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts
==================== Andere Bereiche ============================
(Aktuell gibt es keinen automatisierten Fix für diesen Bereich.)
HKU\S-1-5-21-3243579912-1492025509-2315471678-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\x\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg
DNS Servers: 192.168.2.1
HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Policies\System => (ConsentPromptBehaviorAdmin: 5) (ConsentPromptBehaviorUser: 3) (EnableLUA: 1)
Windows Firewall ist deaktiviert.
==================== MSCONFIG/TASK MANAGER Deaktivierte Einträge ==
MSCONFIG\Services: Bonjour Service => 2
MSCONFIG\Services: c2cautoupdatesvc => 2
MSCONFIG\Services: c2cpnrsvc => 2
MSCONFIG\Services: CGVPNCliService => 2
MSCONFIG\Services: Hamachi2Svc => 2
MSCONFIG\Services: Origin Client Service => 3
MSCONFIG\Services: OverwolfUpdater => 3
MSCONFIG\Services: PnkBstrA => 2
MSCONFIG\Services: SkypeUpdate => 2
MSCONFIG\Services: Sony PC Companion => 3
MSCONFIG\startupreg: LogMeIn Hamachi Ui => "E:\Program Files (x86)\Hamachi\hamachi-2-ui.exe" --auto-start
MSCONFIG\startupreg: Overwolf => C:\Program Files (x86)\Overwolf\Overwolf.exe -silent
MSCONFIG\startupreg: Spotify Web Helper => "C:\Users\x\AppData\Roaming\Spotify\SpotifyWebHelper.exe"
MSCONFIG\startupreg: XFastUsb => C:\Program Files (x86)\XFastUsb\XFastUsb.exe
==================== Firewall Regeln (Nicht auf der Ausnahmeliste) ===============
(Wenn ein Eintrag in die Fixlist aufgenommen wird, wird er aus der Registry entfernt. Die Datei wird nicht verschoben solange sie nicht separat aufgelistet wird.)
FirewallRules: [{09B2864B-6C9C-4F7A-A6CB-52679843F6D9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{6FD739A1-E679-4B59-9893-6ACE3D12E4E9}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{B3EE5096-8E4F-4450-BB09-D0B9A18D525A}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{7C150491-3BEC-4A53-BF01-2B7C05FBB1F4}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
FirewallRules: [{E5BF0306-2B9C-4299-A986-3D53EC521F89}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{74CAD704-50CD-4696-ADA7-417BBAACCAC4}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\BorderlandsPreSequel\Binaries\Win32\Launcher.exe
FirewallRules: [{7635235B-0313-4781-B1FD-6278EB9B5CD4}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{2084AAB7-8304-448E-8C3B-2F700772BDCA}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\This War of Mine.exe
FirewallRules: [{5651D5A4-B25A-4BB1-B934-23778B64EBC9}] => (Allow) F:\Uplay\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{77FD6447-4CA1-4F35-961D-C3588B528D40}] => (Allow) F:\Uplay\Far Cry 4\bin\FarCry4.exe
FirewallRules: [{486CA770-9417-49AD-B17D-A6CCB34545D5}] => (Allow) F:\Uplay\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{EB541D07-530C-4319-98AB-E41E76919721}] => (Allow) F:\Uplay\Far Cry 4\bin\IGE_WPF64.exe
FirewallRules: [{F39702D3-E56D-401B-96E2-212E0976B38A}] => (Allow) F:\Uplay\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{78C5C751-A7F0-42B9-8817-871286FE7D23}] => (Allow) F:\Uplay\Watch_Dogs\bin\watch_dogs.exe
FirewallRules: [{340C1DF6-1221-48FC-A1A3-E52D147E2B92}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{944BB9DB-CE94-4CD5-B2E9-C99265FA1D18}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Tales from the Borderlands\Borderlands.exe
FirewallRules: [{A6DF8E0D-74B7-4B0D-857B-966C8B4CE63E}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{992742A8-73D9-4E64-9748-06698B439EB1}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DyingLightGame.exe
FirewallRules: [{50D365F6-80D1-4912-A0F7-ACE67CEA8826}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Supreme Commander Forged Alliance\bin\SupremeCommander.exe
FirewallRules: [{9EDB7175-40F8-4560-9DC7-FB1AC5D4492E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Supreme Commander Forged Alliance\bin\SupremeCommander.exe
FirewallRules: [{5AB3B78B-042E-4468-8142-661B592D1A75}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{42BAB5A0-88D5-42F1-8056-8A69C0076774}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead\WalkingDead101.exe
FirewallRules: [{EC4043F2-CD53-434E-9E02-A0339534B8F6}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{B3696BD9-3180-49D3-A0FB-24F1D99EBFB0}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{C4D4E5BE-8F95-46E8-802D-5FA4ABB3C8F0}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{E68D203C-6093-492E-AF08-9B463AD27134}] => (Allow) C:\Program Files\Bonjour\mDNSResponder.exe
FirewallRules: [{EDA2F22B-8EB3-4CF0-A09E-BDFF9E98A222}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{B71B3C06-87A1-4DDF-BD33-30902118EB9E}] => (Allow) C:\Program Files (x86)\Bonjour\mDNSResponder.exe
FirewallRules: [{C6D70968-C446-4ED9-B24E-F034007F6C6C}] => (Allow) C:\Program Files\iTunes\iTunes.exe
FirewallRules: [{151AD146-C7C8-4156-9741-FA894C3D2588}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{F92D2A94-0285-4BB8-8FE8-87FECFDE524F}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{C8900DCA-878C-46F5-B417-127329E3094A}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{7E5530E2-665A-4507-BDC8-578006EE8F8D}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\ShadowOfMordor\x64\ShadowOfMordor.exe
FirewallRules: [{2D92BD9E-6E01-4B96-A352-6B41D24E8C62}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{F1AC1D1C-6EE6-4E31-906A-6FF90F57E740}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Besiege\Besiege.exe
FirewallRules: [{54B732CC-6269-458C-A74E-E5B3CCEB06A6}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\SS2\Shock2.exe
FirewallRules: [{649482B4-CC6F-4B6E-9F45-06BC8D31FE76}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\SS2\Shock2.exe
FirewallRules: [{1F414817-DC09-49B1-8D41-D2AE945B73C4}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{09F2D8AB-5251-4F19-B2F9-D83919CAD8C0}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4_x86.exe
FirewallRules: [{693B3B3F-3DC2-4735-B498-87CC794AE423}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{295F2194-B7B9-4248-88DC-54DDBEAF7E79}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\bf4.exe
FirewallRules: [{BC917EED-2102-4F06-91B8-5704812206BA}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe
FirewallRules: [{6ACED198-2CDD-4B80-A01F-B779ED4072AA}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{A511F41E-D864-4FF6-B42E-862684008BBB}] => (Allow) C:\Program Files\NVIDIA Corporation\NvContainer\NvContainer.exe
FirewallRules: [{C163EAC5-59EF-42DA-8248-4A0F202C6B6E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamUserAgent.exe
FirewallRules: [{FD6AE801-B5F4-4BE1-91C6-CFADE6A13EDF}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{F10BE4E2-E9E4-45AE-94DC-AC4DF146F591}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{A3F3337A-3BE2-49C6-84A5-E3A634127B00}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{4DF2EC9F-856F-4143-8491-5C69B65A3468}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\SpaceEngineers\Bin64\SpaceEngineers.exe
FirewallRules: [{D05E36EB-0A4B-4026-8019-DFF7188F303C}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{EF220CA0-35D7-48DE-BF49-5F4C99048B8A}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Fallout 4\Fallout4Launcher.exe
FirewallRules: [{D8CE0939-8D3F-4961-8C6A-DED1665C8B18}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Surgeon Simulator 2013\ss2013.exe
FirewallRules: [{F854B19C-2CC9-447B-8310-58AF4C26AED7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Surgeon Simulator 2013\ss2013.exe
FirewallRules: [{77EE8502-16F9-4DE4-AA20-F8486ABDBA13}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\Storyteller.exe
FirewallRules: [{726B9191-85D5-46F1-BB35-02868AFD1A6D}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\This War of Mine\Storyteller.exe
FirewallRules: [{F52D0AAE-6FF1-4A2C-9192-8CC359B076E9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{42582C82-7AF1-4B68-ACB7-E4AE4E9DF607}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{610B2CB1-F76D-4B67-81BF-66A49EA69E9A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{C5B0C2F7-257D-4371-A5A8-B46430CA8ED3}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{8D538342-C9CB-403D-B439-D483FC1718B1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{36D11A57-5C23-4C42-8B1A-42DFEF2F6C13}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Gods Will Be Watching\gwbw.exe
FirewallRules: [{A993F300-E4F0-45E6-8246-1E67C53DAC67}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{1882F418-8E66-45D2-B884-7E2FFCA0BD4E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\EvolveGame\Bin64_SteamRetail\Evolve.exe
FirewallRules: [{2FA672B8-9BC4-427F-BA99-DBF62323069F}] => (Allow) F:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{14992D4C-2D62-4F4C-B4C5-40D7367F914B}] => (Allow) F:\Program Files (x86)\Origin Games\Need for Speed(TM) Most Wanted\NFS13.exe
FirewallRules: [{18B72DA7-0B4B-4195-A3AC-04F1B11F0CCA}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{A3B17882-5B0F-42A7-9B5E-729E92AA10BD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\GarrysMod\hl2.exe
FirewallRules: [{BBED2BAA-23EF-43CB-87FF-9F64E0A23BDD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{5B33362B-721A-4CA0-8450-5662EBDB6392}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{4875E98C-467C-4E23-B787-2627CB505BAB}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{40600791-6F68-4809-A9F3-F8CE7F46A4BD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Life Is Strange\Binaries\Win32\LifeIsStrange.exe
FirewallRules: [{3A5B83AC-E604-4587-B1A4-E50F13FC1535}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Hitman™\Launcher.exe
FirewallRules: [{FDCF4D5C-EC7F-4471-B3BD-A3EC25BB29DC}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Hitman™\Launcher.exe
FirewallRules: [{E5E090AA-1E99-4039-A537-4EA17FD92A63}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{9A28AB9C-7167-41C8-B9A6-E7DE572E45F7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2\JustCause2.exe
FirewallRules: [{0D6401E9-637D-4C5C-B4F1-2DB44305B5F9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{44F18670-5B16-4511-81F2-DDC255E8C324}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Just Cause 2 - Multiplayer Mod\JcmpLauncher.exe
FirewallRules: [{A72E0435-9C69-487B-B978-475701A5004B}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{D5313490-3F72-47FB-8FA1-60308A506348}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{FF26CCC7-138C-4E00-A7F6-868FC8A35A22}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{A5150E6A-A265-4ECD-AE6D-3CF685A8AE67}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{6002AC51-BE8F-48E8-9289-A56525AA8EDC}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{3E222C22-6D9D-45BA-B058-2628FFB376C4}] => (Allow) F:\Uplay\Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{DA3EA698-48F2-4A25-9CEB-EE5FBF1417D1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Witness\witness_d3d11.exe
FirewallRules: [{C9E967D9-3508-4744-8454-132E8CC9A964}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Witness\witness_d3d11.exe
FirewallRules: [{5F4F4404-9811-4730-BFCE-F3BD5686C108}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{8FC8CD6E-1751-4E4D-BE73-33757B9D2719}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\hotline_miami\HotlineMiami.exe
FirewallRules: [{0BAF52B2-48C6-4647-9DE1-6D178DF5BDA9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{39B40EC6-F2E4-44A0-AC14-0696C2D11871}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\insurgency2\insurgency.exe
FirewallRules: [{29AB40F1-1B5C-42F6-B654-2D6F0796BB7F}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{2E443E57-8D02-43BD-85A5-2FA0312D7C0E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\System\Postal2.exe
FirewallRules: [{86467E36-B9EC-4723-9761-662029D1A379}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{BD4633F6-2CC3-422E-8741-173E84029959}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\POSTAL2Complete\ShareThePain\System\Postal2MP.exe
FirewallRules: [{FA3B558F-4647-46B0-9FDB-B1D3F38DEF48}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{455B9144-3C42-41B2-B5A9-799D39CCCC22}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{AE164965-43B6-4603-A066-77B11C0384C1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{7014322E-D9FC-453F-98DA-750766775778}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe
FirewallRules: [{333EA40E-AC79-4ED5-991A-E95577E28009}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{8079FE10-4B5D-4CF9-9676-4465F885B783}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe
FirewallRules: [{526072E8-52AA-4B43-A42C-CC424FC38F10}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{5EC87861-5AC3-4269-8FB4-248654CAEB45}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe
FirewallRules: [{C93A5E11-9F67-44A9-9E0C-9638701EA0DE}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{55BA6613-85AD-487D-A71D-4A0A965F6887}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Launcher.exe
FirewallRules: [{99D14C8F-DDA3-422A-95E7-98615FF692DF}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{0A98A3B2-E594-499B-A47B-DB9A80A7DBD9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Borderlands 2\Binaries\Win32\Borderlands2.exe
FirewallRules: [{2F71EE7A-FE84-4AAE-B5C0-B4A84A18C409}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{A5590E44-EAB3-4206-9063-5165E85C61EF}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{72337524-FE69-4860-B498-3AA7D7DEECE7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{21D4A9A0-8B2C-4395-8892-D96DB6DF2A03}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\The Walking Dead Season Two\TheWalkingDead2.exe
FirewallRules: [{FACE1CB9-2E6A-4AE8-A20E-CAD9EA3EC0DD}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Worms Clan Wars\WormsClanWars.exe
FirewallRules: [{DAB0E1D5-9D4F-4CD7-888B-B41F5D5ACC1A}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Worms Clan Wars\WormsClanWars.exe
FirewallRules: [{48FDCE95-2C83-4315-9D32-4B5219A59B86}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{8F28D336-F0D2-4511-B782-F993C7C6D75F}] => (Allow) F:\Steam Bibilothek F\SteamApps\common\Dying Light\DevTools\DyingLightPlayer.exe
FirewallRules: [{352091F8-6858-4BC5-8A94-088F7D52FCBF}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{86B5AF8A-E255-41EF-B825-8DDBFA728D70}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame_BE.exe
FirewallRules: [{2316DF55-E649-41D1-A57B-DDA55535812C}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{B7D37001-E870-418D-B2F1-4B42F58236D5}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ARK\ShooterGame\Binaries\Win64\ShooterGame.exe
FirewallRules: [{635158AC-E13D-4729-BC3A-A9FCB1600091}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{DE581F6B-2953-4DE6-9CF0-C38267CC84D1}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Brawlhalla\Brawlhalla.exe
FirewallRules: [{2A2A8F44-5808-4232-B00B-0B153850EF92}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{BD648180-F612-47E1-874C-1937102B366D}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound.exe
FirewallRules: [{9AD04973-E237-46EB-BF81-E39596F53658}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{CF8281C8-E51B-46F8-9085-D071F6D98C6A}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\starbound_server.exe
FirewallRules: [{7F3F65A8-67CF-4614-99F2-4BAF5453CF73}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{538109EA-DBE3-40BE-A1AC-2FE75A27E654}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win64\mod_uploader.exe
FirewallRules: [{08235365-0D15-40C5-A7E2-6B4CE87F6F0D}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{76B51D6E-0280-4FB4-A438-888BB4D402A9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Starbound\win32\starbound.exe
FirewallRules: [{4E55BF00-DAA0-4240-BF06-6A348FFB464B}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ChoiceOfRobots\ChoiceOfRobots.exe
FirewallRules: [{77446B49-9038-402A-9B79-57CC2EE7AE28}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\ChoiceOfRobots\ChoiceOfRobots.exe
FirewallRules: [{49203D81-EF5D-4425-A325-B0DD9DD0F5D8}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Machinarium\machinarium.exe
FirewallRules: [{5E85B6E5-A76A-4B66-9734-8C1DBDA5527F}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Machinarium\machinarium.exe
FirewallRules: [{4DBEC301-C78C-4F1F-8EE7-EF49A8581F51}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{00FA71B9-BAD4-49EB-9CA3-9A80A9A0D1A9}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\the_deadly_tower_of_monsters\Binaries\Win32\TS.exe
FirewallRules: [{9D6CCB56-AF87-4756-9C5E-41CDEF9E0467}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Oxenfree\Oxenfree.exe
FirewallRules: [{79C2AD1E-1C30-41A0-BDD0-221E5C36C1F7}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Oxenfree\Oxenfree.exe
FirewallRules: [{C2E42BC7-411C-46F0-9166-6EA8E98E5AEA}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{8FF8FFEF-07E0-491E-BDC5-D2C4B6047A5A}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4WebHelper.exe
FirewallRules: [{55E33863-D001-4AD6-A169-C212F99866F6}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{3FF2B389-B352-4C56-9A32-F01054FDCA42}] => (Allow) F:\Program Files (x86)\Origin Games\Battlefield 4\BF4X86WebHelper.exe
FirewallRules: [{0D456DF6-D71C-4891-A48E-7BB4E9ED01BF}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{C831243C-1477-4E2E-B4FE-36136285101E}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\dont_starve\bin\dontstarve_steam.exe
FirewallRules: [{87521C83-5109-4EF6-AC17-F283C4DCAAAB}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{6B7D735F-5CA3-48C6-9086-1B8B840FBED0}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
FirewallRules: [{150AF6AA-A5C9-465A-95ED-C89821C480AC}] => (Allow) E:\Program Files (x86)\Steam Bibliothek E\SteamApps\common\Don't Starve Together\bin\dontstarve_steam.exe
==================== Wiederherstellungspunkte =========================
22-10-2016 16:51:58 Windows Update
28-10-2016 13:24:19 Windows Update
01-11-2016 14:44:09 Windows Update
01-11-2016 19:00:02 Windows-Sicherung
05-11-2016 23:38:18 Windows Defender Checkpoint
08-11-2016 22:02:38 JRT Pre-Junkware Removal
==================== Fehlerhafte Geräte im Gerätemanager =============
Name:
Description:
Class Guid:
Manufacturer:
Service:
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.
==================== Fehlereinträge in der Ereignisanzeige: =========================
Applikationsfehler:
==================
Error: (11/12/2016 04:55:55 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Program Files (x86)\ESET\ESET Online Scanner\ESETSmartInstaller.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (11/12/2016 01:35:04 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).
Error: (11/12/2016 12:42:18 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\x\Downloads\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (11/12/2016 12:42:18 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\x\Downloads\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (11/12/2016 12:42:17 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\x\Downloads\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (11/12/2016 12:42:17 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\x\Downloads\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (11/12/2016 12:42:09 PM) (Source: SideBySide) (EventID: 80) (User: )
Description: Fehler beim Generieren des Aktivierungskontexts für "C:\Users\x\Downloads\esetsmartinstaller_deu.exe". Fehler in
Manifest- oder Richtliniendatei "" in Zeile .
Eine für die Anwendung erforderliche Komponentenversion steht in Konflikt mit
einer anderen, bereits aktiven Komponentenversion.
In Konflikt stehende Komponenten:.
Komponente 1: C:\Windows\WinSxS\manifests\amd64_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_fa3b1e3d17594757.manifest.
Komponente 2: C:\Windows\WinSxS\manifests\x86_microsoft.windows.common-controls_6595b64144ccf1df_6.0.7601.18837_none_41e855142bd5705d.manifest.
Error: (11/11/2016 06:53:35 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).
Error: (11/11/2016 02:30:53 PM) (Source: Customer Experience Improvement Program) (EventID: 1008) (User: )
Description: Ein Problem hat das Senden von Daten aus dem Programm zur Verbesserung der Benutzerfreundlichkeit an Microsoft verhindert (Fehler 80004005).
Error: (11/10/2016 04:32:30 PM) (Source: Application Error) (EventID: 1000) (User: )
Description: Name der fehlerhaften Anwendung: Agent.exe, Version: 2.8.0.5269, Zeitstempel: 0x5818cea9
Name des fehlerhaften Moduls: ntdll.dll, Version: 6.1.7601.23543, Zeitstempel: 0x57d2f8a2
Ausnahmecode: 0xc0000005
Fehleroffset: 0x000331f6
ID des fehlerhaften Prozesses: 0x1850
Startzeit der fehlerhaften Anwendung: 0x01d23b6779d29468
Pfad der fehlerhaften Anwendung: C:\ProgramData\Battle.net\Agent\Agent.5269\Agent.exe
Pfad des fehlerhaften Moduls: C:\Windows\SysWOW64\ntdll.dll
Berichtskennung: e3cd24be-a75a-11e6-8849-0025229f34c2
Systemfehler:
=============
Error: (11/12/2016 12:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/12/2016 12:46:07 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\x~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (11/12/2016 12:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/12/2016 12:46:07 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\x~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (11/12/2016 12:46:07 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/12/2016 12:46:07 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\x~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (11/12/2016 12:43:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/12/2016 12:43:51 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\x~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
Error: (11/12/2016 12:43:51 PM) (Source: Service Control Manager) (EventID: 7000) (User: )
Description: Der Dienst "eapihdrv" wurde aufgrund folgenden Fehlers nicht gestartet:
Der Treiber konnte nicht geladen werden.
Error: (11/12/2016 12:43:51 PM) (Source: Application Popup) (EventID: 1060) (User: )
Description: Aufgrund der Inkompatibilität mit diesem System wurde \??\C:\Users\x~1\AppData\Local\Temp\ehdrv.sys nicht geladen. Wenden Sie sich an den Softwarehersteller, um eine kompatible Version des Treibers zu erhalten.
==================== Speicherinformationen ===========================
Prozessor: Intel(R) Core(TM) i5-2500K CPU @ 3.30GHz
Prozentuale Nutzung des RAM: 46%
Installierter physikalischer RAM: 8155.77 MB
Verfügbarer physikalischer RAM: 4393.64 MB
Summe virtueller Speicher: 16309.71 MB
Verfügbarer virtueller Speicher: 11767.26 MB
==================== Laufwerke ================================
Drive c: () (Fixed) (Total:476.84 GB) (Free:326.59 GB) NTFS
Drive e: (Volume) (Fixed) (Total:465.75 GB) (Free:95.43 GB) NTFS
Drive f: (Volume) (Fixed) (Total:465.75 GB) (Free:251.22 GB) NTFS
==================== MBR & Partitionstabelle ==================
========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 476.9 GB) (Disk ID: 6A1214FE)
Partition 1: (Active) - (Size=100 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=476.8 GB) - (Type=07 NTFS)
========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 74BC26AE)
Partition 1: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=465.8 GB) - (Type=07 NTFS)
==================== Ende von Addition.txt ============================
|
So funktioniert es:
FRST 32-Bit | FRST 64-Bit
Malwarebytes Anti-Malware 
und 
und speichere die Logdatei auf Deinem Desktop.