Hallo,
ich habe bei meinem letzten Pc-Start einen Bluescreen bekommen mit dem Error KERNEL_DATA_INPAGE_ERROR und habe keine Ahnung, was dies für ein Fehler ist bzw. durch was dieser ausgelöst worden ist, deswegen bin ich hier um zu fragen, ob mir jemand sagen kann, warum dieser Fehler auftaucht und wie man diesen beheben kann. Dies ist übrigens das erste mal, dass dieser Fehler aufgetreten ist.

Hi,

Logs bitte immer in den Thread posten. Zur Not aufteilen und mehrere Posts nutzen.
Ich kann auf Arbeit keine Anhänge öffnen, danke.

So funktioniert es:
Posten in CODE-Tags
Die Logfiles anzuhängen oder sogar vorher in ein ZIP, RAR, 7Z-Archive zu packen erschwert mir massiv die Arbeit, es sei denn natürlich die Datei wäre ansonsten zu gross für das Forum. Um die Logfiles in eine CODE-Box zu stellen gehe so vor:

• Markiere das gesamte Logfile (geht meist mit STRG+A) und kopiere es in die Zwischenablage mit STRG+C.
• Klicke im Editor auf das #-Symbol. Es erscheinen zwei Klammerausdrücke [CODE] [/CODE].
• Setze den Curser zwischen die CODE-Tags und drücke STRG+V.
• Klicke auf Erweitert/Vorschau, um so prüfen, ob du es richtig gemacht hast. Wenn alles stimmt ... auf Antworten.

Hier das "defrogger_disable.log":

defogger_disable by jpshortstuff (23.02.10.1)
Log created at 01:07 on 31/05/2015 (*****)

Checking for autostart values...
HKCU\~\Run values retrieved.
HKLM\~\Run values retrieved.

Checking for services/drivers...


-=E.O.F=-
         

Hier das "FRST.txt"

Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version: 29-05-2015
Ran by Neber Marcel (administrator) on MARCEL on 31-05-2015 01:08:47
Running from C:\Users\Neber Marcel\Desktop
Loaded Profiles: Neber Marcel (Available Profiles: Neber Marcel)
Platform: Windows 8.1 (X64) OS Language: Deutsch (Deutschland)
Internet Explorer Version 11 (Default browser: FF)
Boot Mode: Normal
Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/

==================== Processes (Whitelisted) =================

(If an entry is included in the fixlist, the process will be closed. The file will not be moved.)

(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe
(NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe
(Microsoft Corporation) C:\Windows\System32\dasHost.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe
(LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler.exe
(Google Inc.) C:\Program Files (x86)\Google\Update\1.3.27.5\GoogleCrashHandler64.exe
(LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avshadow.exe
(NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe
(IvoSoft) C:\Program Files\Classic Shell\ClassicStartMenu.exe
(NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe
(Microsoft Corporation) C:\Windows\System32\wlanext.exe
(Realtek Semiconductor) C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe
(McAfee, Inc.) C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe
(ROCCAT GmbH Co., Ltd.) C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe
(Avira Operations GmbH & Co. KG) C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.exe
(ROCCAT GmbH) C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe
(Oracle Corporation) C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe
(BlueStack Systems, Inc.) C:\Program Files (x86)\BlueStacks\HD-Agent.exe
(Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
(Piriform Ltd) C:\Program Files\CCleaner\CCleaner64.exe
(Valve Corporation) C:\Program Files (x86)\Steam\Steam.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Common Files\Steam\SteamService.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe
(Rockstar Games) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
(Take-Two Interactive Software, Inc.) C:\Program Files\Rockstar Games\Social Club\subprocess.exe
(Take-Two Interactive Software, Inc.) C:\Program Files\Rockstar Games\Social Club\subprocess.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Rockstar Games) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTA5.exe
(Valve Corporation) C:\Program Files (x86)\Steam\GameOverlayUI.exe
(Take-Two Interactive Software, Inc.) C:\Program Files\Rockstar Games\Social Club\subprocess.exe
(Take-Two Interactive Software, Inc.) C:\Program Files\Rockstar Games\Social Club\subprocess.exe
(Resplendence Software Projects) C:\Program Files\WhoCrashed\WhoCrashedEx.exe
(Valve Corporation) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe


==================== Registry (Whitelisted) ==================

(If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.)

HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation)
HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart
HKLM\...\Run: [RTHDVCPL] => C:\Program Files\Realtek\Audio\HDA\RtkNGUI64.exe [7506136 2013-12-06] (Realtek Semiconductor)
HKLM\...\Run: [Classic Start Menu] => C:\Program Files\Classic Shell\ClassicStartMenu.exe [161984 2014-04-20] (IvoSoft)
HKLM-x32\...\Run: [avgnt] => C:\Program Files (x86)\Avira\AntiVir Desktop\avgnt.exe [728312 2015-05-19] (Avira Operations GmbH & Co. KG)
HKLM-x32\...\Run: [RoccatKoneXTD] => C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\KoneXTDMonitor.EXE [552960 2014-10-19] (ROCCAT GmbH)
HKLM-x32\...\Run: [RoccatIskuFX] => C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\IskuFXMonitor.exe [540672 2014-10-19] (ROCCAT GmbH)
HKLM-x32\...\Run: [SunJavaUpdateSched] => C:\Program Files (x86)\Common Files\Java\Java Update\jusched.exe [508800 2014-12-17] (Oracle Corporation)
HKLM-x32\...\Run: [LogMeIn Hamachi Ui] => C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe [3978600 2015-03-30] (LogMeIn Inc.)
HKLM-x32\...\Run: [BlueStacks Agent] => C:\Program Files (x86)\BlueStacks\HD-Agent.exe [832272 2014-05-21] (BlueStack Systems, Inc.)
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Run: [Steam] => C:\Program Files (x86)\Steam\steam.exe [2891968 2015-05-30] (Valve Corporation)
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [31087200 2015-01-23] (Skype Technologies S.A.)
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Run: [CCleaner Monitoring] => C:\Program Files\CCleaner\CCleaner64.exe [7394584 2014-12-12] (Piriform Ltd)
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Run: [Akamai NetSession Interface] => "C:\Users\Neber Marcel\AppData\Local\Akamai\netsession_win.exe"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Run: [RoccatPowerGrid] => C:\Program Files (x86)\ROCCAT\Power-Grid\ROCCATPowerGrid.exe [5147248 2013-12-18] ()
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\MountPoints2: {4000727a-f5a8-11e4-82a1-448a5b8646e5} - "F:\pushinst.exe" 
AppInit_DLLs-x32:  Ȏ噎䵒酃 退鎍 Ⰱ => " Ȏ噎䵒酃 退鎍 Ⰱ" File not found
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\McAfee Security Scan Plus.lnk [2015-01-17]
ShortcutTarget: McAfee Security Scan Plus.lnk -> C:\Program Files\McAfee Security Scan\3.8.150\SSScheduler.exe (McAfee, Inc.)
Startup: C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Startup\Roccat Talk.lnk [2015-01-16]
ShortcutTarget: Roccat Talk.lnk -> C:\Program Files (x86)\ROCCAT\Roccat Talk\Roccat Talk.exe (ROCCAT GmbH Co., Ltd.)
Startup: C:\Users\Neber Marcel\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\Dropbox.lnk [2015-01-28]
ShortcutTarget: Dropbox.lnk -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt1"] -> {FB314ED9-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt2"] -> {FB314EDA-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt3"] -> {FB314EDD-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt4"] -> {FB314EDE-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt5"] -> {FB314EDB-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt6"] -> {FB314EDF-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt7"] -> {FB314EDC-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: ["DropboxExt8"] -> {FB314EE0-A251-47B7-93E1-CDD82E34AF8B} => C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll [2015-02-11] (Dropbox, Inc.)
ShellIconOverlayIdentifiers: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
ShellIconOverlayIdentifiers-x32: [ShareOverlay] -> {594D4122-1F87-41E2-96C7-825FB4796516} => C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)

==================== Internet (Whitelisted) ====================

(If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.)

HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = about:blank
HKLM\Software\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = about:blank
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\Software\Microsoft\Internet Explorer\Main,Start Page Redirect Cache = hxxp://www.msn.com/de-de/?ocid=iehp
SearchScopes: HKU\.DEFAULT -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-19 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
SearchScopes: HKU\S-1-5-20 -> DefaultScope {0633EE93-D776-472f-A0FF-E1416B8B2E3A} URL = 
BHO: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
BHO: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files\Java\jre1.8.0_31\bin\ssv.dll [2015-02-22] (Oracle Corporation)
BHO: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-22] (Oracle Corporation)
BHO: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_64.dll [2014-04-20] (IvoSoft)
BHO-x32: MSS+ Identifier -> {0E8A89AD-95D7-40EB-8D9D-083EF7066A01} -> C:\Program Files\McAfee Security Scan\3.8.150\McAfeeMSS_IE.dll [2014-04-09] (McAfee, Inc.)
BHO-x32: ExplorerBHO Class -> {449D0D6E-2412-4E61-B68F-1CB625CD9E52} -> C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-17] (Oracle Corporation)
BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-17] (Oracle Corporation)
BHO-x32: ClassicIEBHO Class -> {EA801577-E6AD-4BD5-8F71-4BE0154331A4} -> C:\Program Files\Classic Shell\ClassicIEDLL_32.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer64.dll [2014-04-20] (IvoSoft)
Toolbar: HKLM-x32 - Classic Explorer Bar - {553891B7-A0D5-4526-BE18-D3CE461D6310} - C:\Program Files\Classic Shell\ClassicExplorer32.dll [2014-04-20] (IvoSoft)
Tcpip\Parameters: [DhcpNameServer] 192.168.2.1

FireFox:
========
FF ProfilePath: C:\Users\Neber Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\kbc7oup6.default
FF Homepage: www.google.de
FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_17_0_0_188.dll [2015-05-16] ()
FF Plugin: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-22] (Oracle Corporation)
FF Plugin: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-22] (Oracle Corporation)
FF Plugin: @videolan.org/vlc,version=2.1.4 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin: @videolan.org/vlc,version=2.1.5 -> C:\Program Files\VideoLAN\VLC\npvlc.dll [2014-09-23] (VideoLAN)
FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_17_0_0_188.dll [2015-05-16] ()
FF Plugin-x32: @canon.com/EPPEX -> C:\Program Files\Canon\Easy-PhotoPrint EX\NPEZFFPI.DLL [2014-07-28] (CANON INC.)
FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-17] (Oracle Corporation)
FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-17] (Oracle Corporation)
FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation)
FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-04-08] (NVIDIA Corporation)
FF Plugin-x32: @pandonetworks.com/PandoWebPlugin -> C:\Program Files (x86)\Pando Networks\Media Booster\npPandoWebPlugin.dll No File
FF Plugin-x32: @tools.google.com/Google Update;version=3 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Plugin-x32: @tools.google.com/Google Update;version=9 -> C:\Program Files (x86)\Google\Update\1.3.27.5\npGoogleUpdate3.dll [2015-05-19] (Google Inc.)
FF Extension: Avira Browser Safety - C:\Users\Neber Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\kbc7oup6.default\Extensions\abs@avira.com [2015-05-30]
FF Extension: GMX MailCheck - C:\Users\Neber Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\kbc7oup6.default\Extensions\toolbar@gmx.net [2015-04-18]
FF Extension: DVDVideoSoft YouTube MP3 and Video Download - C:\Users\Neber Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\kbc7oup6.default\Extensions\{B64D9B05-48E1-4CEB-BF58-E0643994E900}.xpi [2015-01-18]
FF Extension: Adblock Plus - C:\Users\Neber Marcel\AppData\Roaming\Mozilla\Firefox\Profiles\kbc7oup6.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2015-01-18]
FF HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Firefox\Extensions: [{e4f94d1e-2f53-401e-8885-681602c0ddd8}] - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi
FF Extension: McAfee Security Scan Plus - C:\ProgramData\McAfee Security Scan\Extensions\{e4f94d1e-2f53-401e-8885-681602c0ddd8}.xpi [2014-04-04]

Chrome: 
=======
CHR Profile: C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default
CHR Extension: (Google Slides) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aapocclcgogkmnckokdopfmhonfmgoek [2015-02-04]
CHR Extension: (Google Docs) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\aohghmighlieiainnegkcijnfilokake [2015-02-04]
CHR Extension: (Google Drive) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\apdfllckaahabafndbhieahigkjlhalf [2015-02-04]
CHR Extension: (YouTube) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\blpcfgokakmgnkcojhhkbfbldkacnbeo [2015-02-04]
CHR Extension: (Google Search) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\coobgpohoikkiipiblmjeljniedjpjpf [2015-02-04]
CHR Extension: (Google Sheets) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\felcaaldnbdncclmgdcncolpebgiejap [2015-02-04]
CHR Extension: (Avira Browser Safety) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\flliilndjeohchalpbbcdekjklbdgfkk [2015-02-04]
CHR Extension: (Bookmark Manager) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\gmlllbghnfkpflemihljekbapjopfjik [2015-04-23]
CHR Extension: (Chrome Hotword Shared Module) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\lccekmodgklaepjeofjdjpbminllajkg [2015-03-31]
CHR Extension: (Google Wallet) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\nmmhkkegccagdldgiimedpiccmgmieda [2015-02-04]
CHR Extension: (Gmail) - C:\Users\Neber Marcel\AppData\Local\Google\Chrome\User Data\Default\Extensions\pjkljhegncpnkpknbcohdijeoejaedia [2015-02-04]
CHR HKLM\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx
CHR HKLM-x32\...\Chrome\Extension: [flliilndjeohchalpbbcdekjklbdgfkk] - https://clients2.google.com/service/update2/crx

==================== Services (Whitelisted) =================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

S2 AntiVirMailService; C:\Program Files (x86)\Avira\AntiVir Desktop\avmailc7.exe [827640 2015-05-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirSchedulerService; C:\Program Files (x86)\Avira\AntiVir Desktop\sched.exe [434424 2015-05-19] (Avira Operations GmbH & Co. KG)
R2 AntiVirService; C:\Program Files (x86)\Avira\AntiVir Desktop\avguard.exe [434424 2015-05-19] (Avira Operations GmbH & Co. KG)
S2 AntiVirWebService; C:\Program Files (x86)\Avira\AntiVir Desktop\avwebg7.exe [1185584 2015-05-19] (Avira Operations GmbH & Co. KG)
S3 BEService; C:\Program Files (x86)\Common Files\BattlEye\BEService.exe [441216 2015-05-08] ()
S2 BstHdAndroidSvc; C:\Program Files (x86)\BlueStacks\HD-Service.exe [402192 2014-05-21] (BlueStack Systems, Inc.)
R2 BstHdLogRotatorSvc; C:\Program Files (x86)\BlueStacks\HD-LogRotatorService.exe [385808 2014-05-21] (BlueStack Systems, Inc.)
R2 BstHdUpdaterSvc; C:\Program Files (x86)\BlueStacks\HD-UpdaterService.exe [774928 2014-05-21] (BlueStack Systems, Inc.)
S3 BthHFSrv; C:\Windows\System32\BthHFSrv.dll [324608 2014-10-29] (Microsoft Corporation)
S3 EasyAntiCheat; C:\Windows\SysWOW64\EasyAntiCheat.exe [182304 2014-12-29] (EasyAntiCheat Ltd)
R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation)
R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.)
S3 McComponentHostService; C:\Program Files\McAfee Security Scan\3.8.150\McCHSvc.exe [289256 2014-04-09] (McAfee, Inc.)
R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation)
R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation)
S3 Origin Client Service; C:\Origin\OriginClientService.exe [1930608 2015-03-29] (Electronic Arts)
S3 WdNisSvc; C:\Program Files\Windows Defender\NisSrv.exe [366520 2015-02-04] (Microsoft Corporation)
S3 WinDefend; C:\Program Files\Windows Defender\MsMpEng.exe [23792 2015-02-04] (Microsoft Corporation)

==================== Drivers (Whitelisted) ====================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

R2 avgntflt; C:\Windows\System32\DRIVERS\avgntflt.sys [152744 2015-05-19] (Avira Operations GmbH & Co. KG)
R1 avipbb; C:\Windows\system32\DRIVERS\avipbb.sys [132120 2015-05-19] (Avira Operations GmbH & Co. KG)
R1 avkmgr; C:\Windows\system32\DRIVERS\avkmgr.sys [28600 2014-11-24] (Avira Operations GmbH & Co. KG)
R2 avnetflt; C:\Windows\system32\DRIVERS\avnetflt.sys [43576 2015-03-10] (Avira Operations GmbH & Co. KG)
R2 BstHdDrv; C:\Program Files (x86)\BlueStacks\HD-Hypervisor-amd64.sys [123152 2014-05-21] (BlueStack Systems)
R3 Hamachi; C:\Windows\system32\DRIVERS\Hamdrv.sys [44296 2015-03-30] (LogMeIn Inc.)
R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation)
R3 NVVADARM; C:\Windows\system32\drivers\nvvadarm.sys [39056 2015-04-09] (NVIDIA Corporation)
R3 nvvad_WaveExtensible; C:\Windows\system32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation)
S3 WdNisDrv; C:\Windows\System32\Drivers\WdNisDrv.sys [114496 2015-02-04] (Microsoft Corporation)
S3 XSplit_Dummy; C:\Windows\system32\drivers\xspltspk.sys [26200 2014-07-02] (SplitmediaLabs Limited)
S3 MSICDSetup; \??\E:\CDriver64.sys [X]
S3 NTIOLib_1_0_C; \??\E:\NTIOLib_X64.sys [X]

==================== NetSvcs (Whitelisted) ===================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)


==================== One Month Created files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-31 01:08 - 2015-05-31 01:09 - 00022167 _____ () C:\Users\Neber Marcel\Desktop\FRST.txt
2015-05-31 01:08 - 2015-05-31 01:08 - 00000000 ____D () C:\FRST
2015-05-31 01:07 - 2015-05-31 01:07 - 02108928 _____ (Farbar) C:\Users\Neber Marcel\Desktop\FRST64.exe
2015-05-31 01:07 - 2015-05-31 01:07 - 00000486 _____ () C:\Users\Neber Marcel\Desktop\defogger_disable.log
2015-05-31 01:05 - 2015-05-31 01:06 - 00000486 _____ () C:\Users\Neber Marcel\Downloads\defogger_disable.log
2015-05-31 01:05 - 2015-05-31 01:05 - 00000000 _____ () C:\Users\Neber Marcel\defogger_reenable
2015-05-31 01:04 - 2015-05-31 01:04 - 00050477 _____ () C:\Users\Neber Marcel\Desktop\Defogger.exe
2015-05-31 00:31 - 2015-05-31 00:32 - 00001011 _____ () C:\Users\Neber Marcel\Desktop\WhoCrashed.lnk
2015-05-31 00:30 - 2015-05-31 00:32 - 00000000 ____D () C:\Program Files\WhoCrashed
2015-05-31 00:30 - 2015-05-31 00:30 - 02727584 _____ (Resplendence Software Projects Sp. ) C:\Users\Neber Marcel\Downloads\whocrashedSetup.exe
2015-05-31 00:30 - 2015-05-31 00:30 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\WhoCrashed
2015-05-30 23:36 - 2015-05-30 23:36 - 00001247 _____ () C:\Users\Neber Marcel\Desktop\CrystalDiskInfo Shizuku Edition.lnk
2015-05-30 23:36 - 2015-05-30 23:36 - 00001208 _____ () C:\Users\Neber Marcel\Desktop\CrystalDiskInfo.lnk
2015-05-30 23:36 - 2015-05-30 23:36 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\CrystalDiskInfo
2015-05-30 23:36 - 2015-05-30 23:36 - 00000000 ____D () C:\Program Files (x86)\CrystalDiskInfo
2015-05-30 23:35 - 2015-05-30 23:35 - 07075640 _____ (Crystal Dew World ) C:\Users\Neber Marcel\Downloads\CrystalDiskInfo5_6_2Shizuku-en.exe
2015-05-30 23:29 - 2015-05-30 23:29 - 01197344 _____ () C:\Users\Neber Marcel\Downloads\BlueScreenView - CHIP-Installer.exe
2015-05-30 23:29 - 2015-05-30 23:29 - 00067310 _____ () C:\Users\Neber Marcel\Downloads\bluescreenview_v1.55.zip
2015-05-30 23:25 - 2015-05-30 23:25 - 00330864 _____ () C:\Windows\Minidump\053015-19312-01.dmp
2015-05-30 23:25 - 2015-05-30 23:25 - 00000000 ____D () C:\Windows\Minidump
2015-05-30 23:24 - 2015-05-30 23:24 - 432656779 _____ () C:\Windows\MEMORY.DMP
2015-05-27 23:12 - 2015-05-27 23:12 - 00000000 ____D () C:\Windows\LastGood.Tmp
2015-05-27 23:11 - 2015-05-27 23:11 - 00000000 ____D () C:\ProgramData\boost_interprocess
2015-05-27 23:11 - 2015-04-03 15:21 - 00048784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll
2015-05-27 23:11 - 2015-04-03 15:21 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys
2015-05-20 21:40 - 2015-05-20 21:40 - 00000000 ____D () C:\Program Files (x86)\Microsoft ASP.NET
2015-05-19 23:20 - 2015-05-19 23:20 - 00000000 ____D () C:\Users\Neber Marcel\Tracing
2015-05-19 23:19 - 2015-05-19 23:19 - 00001396 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Photo Gallery.lnk
2015-05-19 23:19 - 2015-05-19 23:19 - 00001327 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Movie Maker.lnk
2015-05-19 23:19 - 2015-05-19 23:19 - 00000000 ___RD () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live
2015-05-19 23:19 - 2015-05-19 23:19 - 00000000 ____D () C:\Windows\de
2015-05-19 23:19 - 2015-05-19 23:19 - 00000000 ____D () C:\Program Files (x86)\Microsoft SQL Server Compact Edition
2015-05-19 23:18 - 2015-05-19 23:19 - 00000000 ____D () C:\Program Files (x86)\Windows Live
2015-05-19 23:18 - 2015-05-19 23:18 - 00002508 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Messenger.lnk
2015-05-19 23:18 - 2015-05-19 23:18 - 00001480 _____ () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Windows Live Mail.lnk
2015-05-19 23:18 - 2015-05-19 23:18 - 00000000 ____D () C:\Windows\PCHEALTH
2015-05-19 23:18 - 2015-05-19 23:18 - 00000000 ____D () C:\Program Files\Windows Live
2015-05-19 23:17 - 2015-05-22 17:53 - 00003106 _____ () C:\Windows\System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3700330351-2164061346-4113414242-1001
2015-05-19 23:17 - 2015-05-22 17:53 - 00000000 ___RD () C:\Users\Neber Marcel\OneDrive
2015-05-19 23:17 - 2015-05-19 23:17 - 00000000 ____D () C:\ProgramData\Microsoft OneDrive
2015-05-19 23:14 - 2015-05-19 23:19 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\Windows Live
2015-05-19 23:09 - 2015-05-19 23:09 - 01245384 _____ (Microsoft Corporation) C:\Users\Neber Marcel\Downloads\wlsetup-web.exe
2015-05-19 15:40 - 2015-05-19 15:40 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Avira
2015-05-18 14:15 - 2015-05-18 16:11 - 00017492 _____ () C:\Users\Neber Marcel\Desktop\Bewerbung.odt
2015-05-18 00:56 - 2015-05-21 14:43 - 00000000 ____D () C:\Program Files (x86)\Mozilla Firefox
2015-05-14 15:01 - 2015-04-30 22:35 - 00124112 _____ (Microsoft Corporation) C:\Windows\system32\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 15:01 - 2015-04-30 22:35 - 00102608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PresentationCFFRasterizerNative_v0300.dll
2015-05-14 02:48 - 2015-05-14 02:48 - 04546280 _____ (PasswdFinder ) C:\Users\Neber Marcel\Downloads\Passwd25FinderInstaller.exe
2015-05-14 02:48 - 2015-05-14 02:48 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\PasswdFinder
2015-05-14 02:48 - 2015-05-14 02:48 - 00000000 ____D () C:\Program Files (x86)\PasswdFinder
2015-05-14 02:09 - 2015-05-14 02:09 - 01787459 ____R () C:\Users\Neber Marcel\Desktop\HoxHud P8.12 Manual install.7z
2015-05-13 20:46 - 2015-04-10 02:34 - 02256896 _____ (Microsoft Corporation) C:\Windows\system32\dwmcore.dll
2015-05-13 20:46 - 2015-03-17 19:26 - 00467776 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\USBHUB3.SYS
2015-05-13 20:46 - 2015-03-09 04:02 - 00057856 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\bthhfenum.sys
2015-05-13 20:45 - 2015-05-01 01:05 - 00429568 _____ (Microsoft Corporation) C:\Windows\system32\schannel.dll
2015-05-13 20:45 - 2015-05-01 00:48 - 00358912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\schannel.dll
2015-05-13 20:45 - 2015-04-24 23:32 - 00036864 _____ (Microsoft Corporation) C:\Windows\system32\UtcResources.dll
2015-05-13 20:45 - 2015-04-21 19:14 - 24971776 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll
2015-05-13 20:45 - 2015-04-21 18:50 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll
2015-05-13 20:45 - 2015-04-21 18:50 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec
2015-05-13 20:45 - 2015-04-21 18:49 - 02885120 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll
2015-05-13 20:45 - 2015-04-21 18:37 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll
2015-05-13 20:45 - 2015-04-21 18:35 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll
2015-05-13 20:45 - 2015-04-21 18:31 - 06025728 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll
2015-05-13 20:45 - 2015-04-21 18:24 - 19691008 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll
2015-05-13 20:45 - 2015-04-21 18:13 - 00107520 _____ (Microsoft Corporation) C:\Windows\system32\inseng.dll
2015-05-13 20:45 - 2015-04-21 18:11 - 00504320 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll
2015-05-13 20:45 - 2015-04-21 18:09 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec
2015-05-13 20:45 - 2015-04-21 18:08 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll
2015-05-13 20:45 - 2015-04-21 18:07 - 00145408 _____ (Microsoft Corporation) C:\Windows\system32\iepeers.dll
2015-05-13 20:45 - 2015-04-21 18:05 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll
2015-05-13 20:45 - 2015-04-21 18:04 - 02278400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll
2015-05-13 20:45 - 2015-04-21 17:59 - 01032704 _____ (Microsoft Corporation) C:\Windows\system32\inetcomm.dll
2015-05-13 20:45 - 2015-04-21 17:58 - 00664576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll
2015-05-13 20:45 - 2015-04-21 17:52 - 00262144 _____ (Microsoft Corporation) C:\Windows\system32\webcheck.dll
2015-05-13 20:45 - 2015-04-21 17:49 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll
2015-05-13 20:45 - 2015-04-21 17:49 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe
2015-05-13 20:45 - 2015-04-21 17:49 - 00374272 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll
2015-05-13 20:45 - 2015-04-21 17:46 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl
2015-05-13 20:45 - 2015-04-21 17:40 - 14401536 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll
2015-05-13 20:45 - 2015-04-21 17:38 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll
2015-05-13 20:45 - 2015-04-21 17:37 - 00128000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iepeers.dll
2015-05-13 20:45 - 2015-04-21 17:36 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll
2015-05-13 20:45 - 2015-04-21 17:32 - 00880128 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcomm.dll
2015-05-13 20:45 - 2015-04-21 17:31 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll
2015-05-13 20:45 - 2015-04-21 17:28 - 00230400 _____ (Microsoft Corporation) C:\Windows\SysWOW64\webcheck.dll
2015-05-13 20:45 - 2015-04-21 17:27 - 02352128 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll
2015-05-13 20:45 - 2015-04-21 17:26 - 00688640 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll
2015-05-13 20:45 - 2015-04-21 17:26 - 00327168 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll
2015-05-13 20:45 - 2015-04-21 17:25 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl
2015-05-13 20:45 - 2015-04-21 17:17 - 12828672 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll
2015-05-13 20:45 - 2015-04-21 17:15 - 01547264 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll
2015-05-13 20:45 - 2015-04-21 17:03 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll
2015-05-13 20:45 - 2015-04-21 17:02 - 01882112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll
2015-05-13 20:45 - 2015-04-21 16:58 - 01310208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll
2015-05-13 20:45 - 2015-04-21 16:56 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll
2015-05-13 20:45 - 2015-04-14 00:48 - 04180480 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys
2015-05-13 20:45 - 2015-04-10 03:00 - 01996800 _____ (Microsoft Corporation) C:\Windows\system32\DWrite.dll
2015-05-13 20:45 - 2015-04-10 02:50 - 01387008 _____ (Microsoft Corporation) C:\Windows\system32\FntCache.dll
2015-05-13 20:45 - 2015-04-10 02:26 - 01560576 _____ (Microsoft Corporation) C:\Windows\SysWOW64\DWrite.dll
2015-05-13 20:45 - 2015-04-10 02:11 - 01943040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dwmcore.dll
2015-05-13 20:45 - 2015-04-09 00:55 - 00410128 _____ (Microsoft Corporation) C:\Windows\system32\services.exe
2015-05-13 20:45 - 2015-04-03 02:35 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\PhotoMetadataHandler.dll
2015-05-13 20:45 - 2015-04-03 02:14 - 00364544 _____ (Microsoft Corporation) C:\Windows\SysWOW64\PhotoMetadataHandler.dll
2015-05-13 20:45 - 2015-04-02 00:22 - 02985984 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbgeng.dll
2015-05-13 20:45 - 2015-04-02 00:20 - 04417536 _____ (Microsoft Corporation) C:\Windows\system32\dbgeng.dll
2015-05-13 20:45 - 2015-04-01 05:45 - 01491456 _____ (Microsoft Corporation) C:\Windows\system32\dbghelp.dll
2015-05-13 20:45 - 2015-04-01 04:31 - 01207296 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dbghelp.dll
2015-05-13 20:45 - 2015-03-30 07:47 - 00561928 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\cng.sys
2015-05-13 20:45 - 2015-03-27 05:27 - 00445440 _____ (Microsoft Corporation) C:\Windows\system32\certcli.dll
2015-05-13 20:45 - 2015-03-27 04:50 - 00324096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\certcli.dll
2015-05-13 20:45 - 2015-03-27 04:48 - 01441792 _____ (Microsoft Corporation) C:\Windows\system32\lsasrv.dll
2015-05-13 20:45 - 2015-03-20 03:56 - 00080384 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\ahcache.sys
2015-05-13 20:45 - 2015-03-13 06:03 - 00239424 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\sdbus.sys
2015-05-13 20:45 - 2015-03-13 06:03 - 00154432 ____C (Microsoft Corporation) C:\Windows\system32\Drivers\dumpsd.sys
2015-05-13 20:45 - 2015-03-13 04:02 - 00316416 _____ (Microsoft Corporation) C:\Windows\system32\Drivers\udfs.sys
2015-05-13 20:45 - 2015-03-13 03:11 - 02162176 _____ (Microsoft Corporation) C:\Windows\system32\SRH.dll
2015-05-13 20:45 - 2015-03-13 02:39 - 01812992 _____ (Microsoft Corporation) C:\Windows\SysWOW64\SRH.dll
2015-05-13 20:45 - 2015-03-13 02:29 - 00410017 _____ () C:\Windows\system32\ApnDatabase.xml
2015-05-13 20:45 - 2015-03-11 03:49 - 00024576 _____ (Microsoft Corporation) C:\Windows\system32\sdbinst.exe
2015-05-13 20:45 - 2015-03-11 03:09 - 00021504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\sdbinst.exe
2015-05-13 20:45 - 2015-03-06 05:08 - 02067968 _____ (Microsoft Corporation) C:\Windows\system32\wpdshext.dll
2015-05-13 20:45 - 2015-03-06 04:47 - 01696256 _____ (Microsoft Corporation) C:\Windows\system32\wevtsvc.dll
2015-05-13 20:45 - 2015-03-06 04:43 - 01969664 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wpdshext.dll
2015-05-13 20:45 - 2015-03-05 01:09 - 01429504 _____ (Microsoft Corporation) C:\Windows\system32\diagtrack.dll
2015-05-13 20:45 - 2015-03-04 03:32 - 00172544 _____ (Microsoft Corporation) C:\Windows\system32\Windows.UI.Input.Inking.dll
2015-05-13 20:45 - 2015-03-04 03:12 - 00141824 _____ (Microsoft Corporation) C:\Windows\SysWOW64\Windows.UI.Input.Inking.dll
2015-05-13 20:45 - 2015-02-18 01:19 - 00186368 _____ (Microsoft Corporation) C:\Windows\system32\dpapisrv.dll
2015-05-13 20:45 - 2015-01-30 02:53 - 02819584 _____ (Microsoft Corporation) C:\Windows\system32\SettingsHandlers.dll
2015-05-10 19:57 - 2015-05-10 19:57 - 00001842 _____ () C:\Users\Public\Desktop\Apps.lnk
2015-05-10 19:57 - 2015-05-10 19:57 - 00001825 _____ () C:\Users\Public\Desktop\Start BlueStacks.lnk
2015-05-10 19:56 - 2015-05-10 20:02 - 00000000 ____D () C:\ProgramData\BlueStacksSetup
2015-05-10 19:56 - 2015-05-10 19:57 - 00000000 ____D () C:\ProgramData\Microsoft\Windows\Start Menu\Programs\BlueStacks
2015-05-10 19:56 - 2015-05-10 19:57 - 00000000 ____D () C:\ProgramData\BlueStacks
2015-05-10 19:56 - 2015-05-10 19:57 - 00000000 ____D () C:\Program Files (x86)\BlueStacks
2015-05-10 19:56 - 2015-05-10 19:56 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\Bluestacks
2015-05-10 16:19 - 2015-05-29 02:55 - 00033423 _____ () C:\Users\Neber Marcel\Desktop\DopingGFS.odt
2015-05-08 19:34 - 2015-05-08 19:34 - 00000000 ____D () C:\Users\Neber Marcel\AVM_Driver
2015-05-01 02:16 - 2015-05-01 02:16 - 00002108 _____ () C:\Users\Neber Marcel\AppData\Local\recently-used.xbel

==================== One Month Modified files and folders ========

(If an entry is included in the fixlist, the file/folder will be moved.)

2015-05-31 01:08 - 2015-02-28 16:29 - 00000000 ____D () C:\Users\Neber Marcel\Desktop\Steam
2015-05-31 01:07 - 2015-03-17 23:06 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Roaming\ClassicShell
2015-05-31 01:05 - 2015-01-15 21:08 - 00000000 ____D () C:\Users\Neber Marcel
2015-05-31 01:00 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\system32\sru
2015-05-31 00:36 - 2015-01-24 14:33 - 00000884 _____ () C:\Windows\Tasks\Adobe Flash Player Updater.job
2015-05-31 00:19 - 2015-02-04 20:56 - 00001132 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job
2015-05-30 23:47 - 2015-04-18 01:14 - 00000080 _____ () C:\Users\Neber Marcel\AppData\Local剜捯獫慴⁲慇敭屳呇⁁屖湥楴汴浥湥⹴湩潦
2015-05-30 23:47 - 2015-01-19 21:18 - 00000000 ____D () C:\Program Files (x86)\Steam
2015-05-30 23:46 - 2015-04-10 12:10 - 02048603 _____ () C:\Windows\WindowsUpdate.log
2015-05-30 23:31 - 2015-01-15 21:14 - 00003598 _____ () C:\Windows\System32\Tasks\Optimize Start Menu Cache Files-S-1-5-21-3700330351-2164061346-4113414242-1001
2015-05-30 23:28 - 2015-01-16 17:16 - 00003950 _____ () C:\Windows\System32\Tasks\User_Feed_Synchronization-{F393E71A-CE42-4E13-9795-0290668A87E6}
2015-05-30 23:26 - 2015-04-10 16:41 - 00014166 _____ () C:\Windows\setupact.log
2015-05-30 23:25 - 2015-02-04 20:56 - 00001128 _____ () C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job
2015-05-30 23:25 - 2015-01-17 00:41 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\LogMeIn Hamachi
2015-05-30 23:25 - 2015-01-15 21:15 - 00000000 ____D () C:\ProgramData\NVIDIA
2015-05-30 23:25 - 2013-08-22 16:45 - 00000006 ____H () C:\Windows\Tasks\SA.DAT
2015-05-30 15:13 - 2015-03-08 17:11 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\CrashDumps
2015-05-30 01:20 - 2015-01-21 14:29 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Roaming\TS3Client
2015-05-29 23:56 - 2015-01-17 01:22 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Roaming\vlc
2015-05-27 23:22 - 2015-04-18 01:26 - 00056144 _____ () C:\Windows\DirectX.log
2015-05-27 23:12 - 2015-01-15 21:15 - 00000000 ____D () C:\ProgramData\NVIDIA Corporation
2015-05-26 01:26 - 2015-02-04 20:57 - 00002201 _____ () C:\Users\Public\Desktop\Google Chrome.lnk
2015-05-25 07:10 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\rescache
2015-05-23 03:47 - 2015-01-15 22:48 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll
2015-05-23 03:47 - 2015-01-15 22:48 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll
2015-05-23 03:47 - 2015-01-15 21:16 - 01571696 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll
2015-05-23 03:47 - 2015-01-15 21:16 - 01320304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll
2015-05-21 14:43 - 2015-04-10 16:41 - 00005976 _____ () C:\Windows\PFRO.log
2015-05-21 14:43 - 2015-01-16 17:18 - 00000000 ____D () C:\Program Files (x86)\Mozilla Maintenance Service
2015-05-20 21:42 - 2013-08-22 17:20 - 00000000 ____D () C:\Windows\CbsTemp
2015-05-20 21:40 - 2015-04-08 12:26 - 00000000 ___SD () C:\Windows\SysWOW64\GWX
2015-05-20 21:40 - 2015-04-08 12:26 - 00000000 ___SD () C:\Windows\system32\GWX
2015-05-19 23:18 - 2013-08-22 17:36 - 00000000 ____D () C:\Program Files\Common Files\microsoft shared
2015-05-19 16:14 - 2015-02-04 20:56 - 00004104 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineUA
2015-05-19 16:14 - 2015-02-04 20:56 - 00003868 _____ () C:\Windows\System32\Tasks\GoogleUpdateTaskMachineCore
2015-05-19 15:39 - 2015-01-16 17:34 - 00152744 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avgntflt.sys
2015-05-19 15:39 - 2015-01-16 17:34 - 00132120 _____ (Avira Operations GmbH & Co. KG) C:\Windows\system32\Drivers\avipbb.sys
2015-05-18 14:13 - 2013-08-22 17:36 - 00000000 ____D () C:\Windows\AppReadiness
2015-05-16 11:41 - 2015-01-17 00:31 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\Adobe
2015-05-16 11:39 - 2015-01-24 14:33 - 00003772 _____ () C:\Windows\System32\Tasks\Adobe Flash Player Updater
2015-05-14 19:36 - 2013-08-22 16:44 - 00362848 _____ () C:\Windows\system32\FNTCACHE.DAT
2015-05-14 19:09 - 2013-08-22 17:36 - 00000000 ___RD () C:\Windows\ImmersiveControlPanel
2015-05-14 19:09 - 2013-08-22 15:36 - 00000000 ____D () C:\Windows\system32\AdvancedInstallers
2015-05-14 14:59 - 2015-01-16 18:46 - 00000000 ____D () C:\Windows\system32\MRT
2015-05-14 14:56 - 2015-01-16 18:45 - 140425016 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe
2015-05-14 14:50 - 2014-03-18 11:40 - 00000000 ____D () C:\Program Files\Windows Journal
2015-05-14 02:57 - 2015-01-24 21:51 - 00000000 ____D () C:\Users\Neber Marcel\Documents\Rockstar Games
2015-05-14 02:02 - 2015-04-06 20:22 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\Arma 3
2015-05-11 13:33 - 2015-04-18 01:14 - 00000000 ____D () C:\Program Files\Rockstar Games
2015-05-11 13:33 - 2015-04-18 01:14 - 00000000 ____D () C:\Program Files (x86)\Rockstar Games
2015-05-10 22:17 - 2013-08-22 15:25 - 00262144 ___SH () C:\Windows\system32\config\BBI
2015-05-10 19:57 - 2013-08-22 17:36 - 00000000 __RHD () C:\Users\Public\Libraries
2015-05-10 18:40 - 2015-04-06 20:22 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\Arma 3 Launcher
2015-05-09 22:04 - 2015-01-18 23:49 - 00000000 ____D () C:\Users\Neber Marcel\Desktop\Minecraft
2015-05-08 22:30 - 2015-04-30 14:05 - 00010346 _____ () C:\Users\Neber Marcel\Desktop\OpenDocument Text (neu).odt
2015-05-08 19:45 - 2014-03-18 12:03 - 01804156 _____ () C:\Windows\system32\PerfStringBackup.INI
2015-05-08 19:45 - 2014-03-18 11:25 - 00774346 _____ () C:\Windows\system32\perfh007.dat
2015-05-08 19:45 - 2014-03-18 11:25 - 00163568 _____ () C:\Windows\system32\perfc007.dat
2015-05-05 19:59 - 2015-01-16 23:58 - 00792568 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe
2015-05-05 19:59 - 2015-01-16 23:58 - 00178168 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl
2015-05-01 02:19 - 2015-04-16 12:37 - 00000000 ____D () C:\Users\Neber Marcel\Desktop\Musik
2015-05-01 02:17 - 2015-02-21 07:24 - 00000000 ____D () C:\Users\Neber Marcel\.gimp-2.8
2015-05-01 02:16 - 2015-02-21 07:25 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Local\gtk-2.0
2015-05-01 02:08 - 2015-01-16 18:13 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Roaming\Skype
2015-05-01 02:01 - 2015-02-01 01:11 - 00000000 ____D () C:\Users\Neber Marcel\AppData\Roaming\Audacity

==================== Files in the root of some directories =======

2015-04-10 01:38 - 2015-04-10 01:38 - 0195295 _____ () C:\Users\Neber Marcel\AppData\Local\4A594BA6_stp.CIS
2015-04-10 01:38 - 2015-04-10 01:38 - 0000290 _____ () C:\Users\Neber Marcel\AppData\Local\4A594BA6_stp.CIS.part
2015-04-10 01:38 - 2015-04-10 01:38 - 0691336 _____ (Opera Software) C:\Users\Neber Marcel\AppData\Local\5BFEE0EB_stp.EXE
2015-04-10 01:38 - 2015-04-10 01:38 - 0000203 _____ () C:\Users\Neber Marcel\AppData\Local\5BFEE0EB_stp.EXE.part
2015-04-10 01:38 - 2015-04-10 01:38 - 0385602 _____ () C:\Users\Neber Marcel\AppData\Local\5D515C96_stp.CIS
2015-04-10 01:38 - 2015-04-10 01:38 - 0000220 _____ () C:\Users\Neber Marcel\AppData\Local\5D515C96_stp.CIS.part
2015-04-10 01:38 - 2015-04-10 01:38 - 0178814 _____ () C:\Users\Neber Marcel\AppData\Local\754A5C3C_stp.CIS
2015-04-10 01:38 - 2015-04-10 01:38 - 0000254 _____ () C:\Users\Neber Marcel\AppData\Local\754A5C3C_stp.CIS.part
2015-05-01 02:16 - 2015-05-01 02:16 - 0002108 _____ () C:\Users\Neber Marcel\AppData\Local\recently-used.xbel
2015-01-15 22:13 - 2015-01-15 22:13 - 0000000 ____H () C:\ProgramData\DP45977C.lfl

Some files in TEMP:
====================
C:\Users\Neber Marcel\AppData\Local\Temp\avgnt.exe
C:\Users\Neber Marcel\AppData\Local\Temp\FreeYouTubeToMP3Converter.exe
C:\Users\Neber Marcel\AppData\Local\Temp\nvSCPAPI.dll
C:\Users\Neber Marcel\AppData\Local\Temp\nvSCPAPI64.dll
C:\Users\Neber Marcel\AppData\Local\Temp\nvStInst.exe


==================== Bamital & volsnap Check =================

(There is no automatic fix for files that do not pass verification.)

C:\Windows\System32\winlogon.exe => File is digitally signed
C:\Windows\System32\wininit.exe => File is digitally signed
C:\Windows\explorer.exe => File is digitally signed
C:\Windows\SysWOW64\explorer.exe => File is digitally signed
C:\Windows\System32\svchost.exe => File is digitally signed
C:\Windows\SysWOW64\svchost.exe => File is digitally signed
C:\Windows\System32\services.exe => File is digitally signed
C:\Windows\System32\User32.dll => File is digitally signed
C:\Windows\SysWOW64\User32.dll => File is digitally signed
C:\Windows\System32\userinit.exe => File is digitally signed
C:\Windows\SysWOW64\userinit.exe => File is digitally signed
C:\Windows\System32\rpcss.dll => File is digitally signed
C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed


LastRegBack: 2015-05-27 22:19

==================== End of log ============================
         

Hier das "Addition.txt":

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015
Ran by Neber Marcel at 2015-05-31 01:10:26
Running from C:\Users\Neber Marcel\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3700330351-2164061346-4113414242-500 - Administrator - Disabled)
ASPNET (S-1-5-21-3700330351-2164061346-4113414242-1002 - Limited - Enabled)
Gast (S-1-5-21-3700330351-2164061346-4113414242-501 - Limited - Disabled)
Neber Marcel (S-1-5-21-3700330351-2164061346-4113414242-1001 - Administrator - Enabled) => C:\Users\Neber Marcel

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)
AlienFX for IskuFX (HKLM-x32\...\InstallShield_{2C3FC2CC-0A8B-409E-B487-8CD54F4DC1D4}) (Version: 1.02 - Roccat GmbH)
AlienFX for IskuFX (Version: 1.02 - Roccat GmbH) Hidden
AlienFX for KoneXTD (HKLM-x32\...\InstallShield_{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.02 - Roccat GmbH)
AlienFX for KoneXTD (Version: 1.02 - Roccat GmbH) Hidden
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Black Ops 2 - GSC Studio (HKLM-x32\...\{909C0DF9-6BBE-42BD-8FB2-0ADEBA3459B6}_is1) (Version: 14.10.2.0 - iMCS Productions)
Block N Load Beta (HKLM-x32\...\Steam App 299360) (Version:  - Jagex)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.10.3096 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{0BED0B96-70B8-4893-884B-DC485DC8C1B7}) (Version: 0.8.10.3096 - BlueStack Systems, Inc.)
Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version:  - Sledgehammer Games)
Call of Duty: Advanced Warfare (HKLM-x32\...\Steam App 209650) (Version:  - Sledgehammer Games)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - Treyarch)
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Camtasia Studio 8 (HKLM-x32\...\{64CA5C05-4281-434C-A984-3A4FE6411805}) (Version: 8.5.0.1954 - TechSmith Corporation)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.5.0 - Canon Inc.)
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CrystalDiskInfo 5.6.2 Shizuku Edition (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 5.6.2 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.4.83.1010 - Electronic Arts Inc.)
Dropbox (HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FlyVPN (HKLM-x32\...\FlyVPN) (Version: 3.2.0.2 - FlyVPN)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Audio Editor version 1.0.7.1022 (HKLM-x32\...\Free Audio Editor_is1) (Version: 1.0.7.1022 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.52.113 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.52.113 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.59.415 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.415 - DVDVideoSoft Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Goodbye Deponia (HKLM-x32\...\Deponia 3) (Version: 1.0 - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.26 - Intel(R) Corporation) Hidden
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
Magical Jelly Bean PasswdFinder (HKLM-x32\...\PasswdFinder_is1) (Version: 1.0.0.25 - PasswdFinder)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\OneDriveSetup.exe) (Version: 17.3.5860.0512 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{63227E62-F417-497E-9060-22B3A9A52D7A}) (Version: 1.0.1.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 38.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version:  - OVERKILL Software)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version:  - Eugen Systems)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7111 - Realtek Semiconductor Corp.)
ROCCAT Isku FX Keyboard Driver (HKLM-x32\...\{DC69933C-E7B0-455D-8E54-FAC1EEF046FF}) (Version:  - Roccat GmbH)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
ROCCAT Power-Grid Version 0.459 (HKLM-x32\...\{953CF6E6-4EC8-4E55-A263-720CEBD591FE}_is1) (Version: 0.459 - ROCCAT GmbH)
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0013 - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version:  - Ubisoft Singapore)
Uplay (HKLM-x32\...\Uplay) (Version: 3.0 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
WhoCrashed 5.03 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points =========================

14-05-2015 14:48:10 Windows Update
19-05-2015 23:15:02 Windows Live Essentials
26-05-2015 23:34:12 Geplanter Prüfpunkt

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DCF4509-0AAA-4397-85F0-2FE0440D6535} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {46EB4BB7-12DA-4438-AB61-4CA88C18E157} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3700330351-2164061346-4113414242-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {636538C0-FCF4-4301-8365-4E1984DF1335} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {6411F38E-ECCE-4551-914C-D9AEFE14E494} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {6D829CCD-97D9-4F2A-9C54-0DB809531AD1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {7DD294C5-0F92-4846-AF90-01036361A3B7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {A12DA420-6872-4583-87D4-DC4084ECC8DC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16] (Adobe Systems Incorporated)
Task: {AA430542-CF99-4F6E-B36F-31DA4E2104B0} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {FF9F623C-09DD-4AB9-B5C8-6F0F6E0A6101} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-05-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-01-15 21:15 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-12-13 00:24 - 2014-12-13 00:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-04-12 05:19 - 2015-04-12 05:19 - 54800856 _____ () C:\Program Files\Rockstar Games\Social Club\libcef.dll
2015-04-17 07:19 - 2015-04-17 14:38 - 03640320 _____ () C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GFSDK_ShadowLib.win64.dll
2015-04-17 07:27 - 2015-04-17 14:38 - 00094720 _____ () C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GFSDK_TXAA_AlphaResolve.win64.dll
2015-04-02 10:14 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-01-16 18:31 - 2012-06-17 12:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2015-01-16 18:31 - 2012-07-08 17:31 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\hiddriver.dll
2015-01-19 21:24 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 16:42 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-01-19 21:24 - 2015-05-30 02:47 - 02407104 _____ () C:\Program Files (x86)\Steam\video.dll
2015-01-20 16:42 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-20 16:42 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-01-19 21:24 - 2015-05-30 02:47 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-01-19 21:24 - 2015-05-11 21:01 - 36302728 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-04-23 20:24 - 2015-05-11 21:01 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll
2015-05-31 00:30 - 2014-12-19 16:08 - 00118528 _____ () C:\Program Files\WhoCrashed\WhoCrashed32.dll
2015-05-31 00:30 - 2014-12-19 16:08 - 00247552 _____ () C:\Program Files\WhoCrashed\rspSymSrv32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Neber Marcel\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{54151257-68CA-46E1-9EE8-B154F272D86B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4DE92E29-3C93-4E92-BACF-28967D104B00}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8B7E926F-B05F-4979-A2C8-526FD1B8E987}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{AAB45D96-1113-46D0-A78B-6125B560CDED}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{18384BFA-17E5-4952-88D2-4C235DDA5D8E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8262BDFB-D799-47EA-80A4-628D43BA3BF1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{783BA57C-F956-456C-A69D-FE81A8167C04}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9F74C06D-3B13-4757-976F-CC893E29E991}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{56843633-80CF-47A6-946A-3329D5B745E7}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{4E624A15-EA95-43F4-8637-017D457AF82C}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{6CCDC1C9-619D-42B3-9F57-5601999EAEE8}] => (Allow) C:\Steam2\Steam\Steam.exe
FirewallRules: [{2A842B8D-9820-461F-8CD0-282211757402}] => (Allow) C:\Steam2\Steam\Steam.exe
FirewallRules: [{49028B40-249E-41DD-A323-6DF8EAF88D1B}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{B36FE0FD-C5F3-47E7-A291-79058E73D110}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9507B03C-827B-45CF-9941-9E0D2CD22034}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{18C23E51-3215-4E6A-87C7-E350215861F9}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{D2589CE9-A12C-4123-A02E-E4A6688B93B8}] => (Allow) C:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{820F24CE-6E75-4221-8BE8-DCD0F3EEF5F1}] => (Allow) C:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{288FC911-F149-4E9E-A150-F4B248412968}C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe
FirewallRules: [UDP Query User{C88F895A-B3B9-4ED2-8399-EEB973FDFCE7}C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe
FirewallRules: [TCP Query User{AA9CC625-95EB-4568-941F-620B15257F89}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{512011B1-F3EE-4C21-A61B-86FAC22A5634}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{0ADB7421-BC0E-480E-9BC2-AAAF9FDCA26C}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AC0ECE00-C204-49FE-87B3-CBA1F8FCEF22}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CB8A98C0-4AD7-4D7F-AA11-5BB3DF3A8087}] => (Allow) C:\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe
FirewallRules: [{AD1EA89B-451A-4F9D-BE6E-F37413113C84}] => (Allow) C:\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe
FirewallRules: [{9721EE8D-3D9F-428F-BE59-5550A337EA3D}] => (Allow) C:\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{4A83B9E6-1D39-4248-AF05-F0A3F6D3A4D3}] => (Allow) C:\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{6EBB2136-E05E-48D2-8D33-51B5624DB029}] => (Allow) C:\Steam\SteamApps\common\BlockNLoad\GameWin64.exe
FirewallRules: [{9324231F-C0A5-41DA-884C-EB5FDAEF1FBC}] => (Allow) C:\Steam\SteamApps\common\BlockNLoad\GameWin64.exe
FirewallRules: [{697E1832-4AEA-4F1E-B3C0-1C6BE6129BF4}] => (Allow) C:\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{6B9937C0-914B-4647-B26B-2D47FFCC218F}] => (Allow) C:\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [TCP Query User{384CCA42-C413-42D4-A91A-7D874A5CFD37}C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{DE3E1500-7243-4D13-AD10-112A358579C5}C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{E39FD9B4-6172-43FD-9732-786A4876C9A5}C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [UDP Query User{8247640A-02C8-4B05-A64A-3ED87CEA8046}C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [{CC7E9368-73F2-45B0-B31D-D73F5F3988DB}] => (Block) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [{6ED561D9-0BAF-4FD6-9D67-9A838BCBF2F1}] => (Block) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [{CF3CBF7F-C67D-4B77-8805-0F9854497C7A}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{84EB9910-2A87-4D78-8320-AB976A40ECBE}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{CCB6F34B-C470-44F4-A012-E3C44B5B05AF}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{D6A1A487-0669-477A-8D83-67BAB748927A}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{02F362BC-C9BB-47BF-B348-FE2CB5ACFFF8}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{6CC64B77-7414-4520-A501-B2EE442986CD}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{E1476694-898A-4180-9369-59A141587981}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\gu.exe
FirewallRules: [{2EF3FA78-C195-48D8-AFB3-F6B0FC9D37E9}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\gu.exe
FirewallRules: [TCP Query User{84B9C564-2216-4D42-BE6B-9C1B3175951B}C:\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [UDP Query User{05D7AD4D-BC38-4D47-99C7-0726A5C87D1E}C:\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [{65C165F2-B955-4499-B6A0-2892F425E57C}] => (Block) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [{477BA782-464C-43F3-B95A-FE312D87C9CD}] => (Block) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [TCP Query User{EC96F102-F9D3-4E3E-B901-E3614465003A}C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{B8484C7D-2638-4CF1-8818-AEF1C6226FF2}C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{AD1B48E3-714B-4D83-89AA-8E06A02FD140}] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{228D557C-CF02-426A-A16C-98BF5240D2A7}] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{EB6855B2-5451-4873-9BEB-41F1387B924B}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{893D052A-179E-44A8-9C40-2D49235FCCB6}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{064A41CC-C3C5-479E-95BE-FC7B101A472A}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{72FACE7E-E822-41C3-82FB-E879EEDFCA10}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{F93BEBE0-4224-444B-A80E-0D5F31C75C1F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{71BBEC4A-53A6-47DC-86E2-87A1E991E7CA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{1945D832-35DC-4235-964B-6A992078DF98}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{F9CF970A-480A-4B75-B480-C83B2E50E384}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{FAD01C95-2D49-445F-BE1B-83DF0F035F9A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{B520E5D5-AD64-43E6-B312-D313730630CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [TCP Query User{5C23FB0C-4814-4697-9CD3-E410A0F2D949}C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe
FirewallRules: [UDP Query User{60D3DBB2-8B86-4504-9C43-380BC892CD4B}C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe
FirewallRules: [{5FA0C355-5A98-4773-8B1D-7A2975182986}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{AC84DE51-5FDC-489E-89D4-6FC9503C7268}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [TCP Query User{AC3C44FD-5D2F-46C3-BAE0-98206869B5FB}C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [UDP Query User{19143CC1-7F97-4BA6-B463-F713E6A8D159}C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [{9E2DA5C8-5AA7-439F-A627-6B7AD97495E0}] => (Block) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [{1F83FAD3-C8AA-4DC1-9619-4FF55E310737}] => (Block) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [{2E16C52F-7A71-4B08-AFDA-9F957F4D6621}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{B54D73A4-52BB-4896-9B99-E5E5783BD657}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{771ACD49-35D3-4377-9B24-09CDA33CF3C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{D728E1A1-E960-4E9A-9A06-BF9F6C4F8C2E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [TCP Query User{21185F63-7866-4F67-B9A4-385D88970B8D}C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe
FirewallRules: [UDP Query User{2F299B95-6247-46A3-81E8-08BD333B0D4A}C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{3B4BF3E1-FF21-458C-A486-E0DF9DE01F55}C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe
FirewallRules: [UDP Query User{8E6D4A23-EEBD-4847-91B0-5489284DB453}C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe
FirewallRules: [TCP Query User{67C968B2-A865-4CDD-A80C-C17E732D649A}C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [UDP Query User{3315A777-9E04-4435-95C5-10DD3CB3F39D}C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [TCP Query User{00457931-28CA-42BE-915D-331D542BB2A1}C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [UDP Query User{323433DB-7651-404E-82C9-C354AF198424}C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [TCP Query User{8169D985-F6E5-4E56-B7F6-5E7749312B56}C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [UDP Query User{E2FB8631-A23E-4435-B888-B4CBC253809F}C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [{16F47784-CD81-45EB-9A47-9F956CC8B783}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [{A788264E-1E46-4592-873B-D91212E63B67}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [{281D4F44-F468-4BF2-BF01-E7FE5AB24B8F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{4F67115B-6DBA-48D9-A669-20498A240DC2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{61007FB0-E66D-47D6-B0B8-60730707FFFA}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E6EE75A0-0498-43DD-B916-32B46B3779F7}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{4B8D3406-DBD7-4BD2-9756-59342446EB89}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{D3D1F862-0524-4B18-84F2-B980E164635E}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C974AD42-4953-442B-AB03-CE38E0192DC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2CE3E335-04E1-4BD4-ADA0-093D1913CEF4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{51A25F15-5995-422C-A02E-727E10BF38AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe
FirewallRules: [{5024DB7F-AD05-46E2-A796-C0155CFE1D52}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe
FirewallRules: [{8C96BC7E-3351-4DB1-8C47-1E8A912B7E78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{01248165-5047-45E2-BE55-87A5F744E339}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{0C4BA4CD-6A14-45B8-BAA1-8B3AB46A016B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{7FABA1E7-A9C4-49A8-A9CE-83257713804E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{494EEBF6-E8BE-4A8F-9EB8-B54B7167AB92}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{8BCC00D4-B279-40A9-8FCF-E7E2156207CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{E8881034-CBB2-488B-811D-BADD4E4FA331}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{341962F3-31E6-4ECF-8458-A1F666684CC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{E3237EB5-7C6F-4580-A01E-2D6A7DF99CA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7E68C8EF-2078-4BD3-B113-31CC5EC4B464}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{49541271-9E10-4C57-9115-420CFEC9FBCC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{777D45CA-E8C1-4DF5-8266-8DB65462C34F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{4E1FD775-FE9C-444E-990D-71C2E9435058}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{4A646869-C8B4-4DE8-8AF3-9914AB2A2740}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{E4B3FC02-D065-4327-9C7A-E79A7D80B6FE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{51BF4075-6864-4A23-9817-AD9BD39675C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [TCP Query User{FA0D2614-B043-4A92-9393-7C39995F518E}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{88043A6E-160C-400A-BB76-C21B877B4DA4}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{2F31B274-C3AB-45F6-844E-BAD501F64E1A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{87488453-1043-4754-B6D0-D6BE636EF61D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1E87F5BD-2AF8-4699-B089-8102381C8358}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{509B9218-394F-4397-B770-63E6CA6B438A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{0975EF8F-A3FD-4F8D-8D4D-FE42F1ED8F0F}C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [UDP Query User{2DC0FDDE-B83F-40F9-ADC7-9B854A249D37}C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{5064EF95-C756-4795-B9B7-5253B9B9AE72}] => (Block) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{D6CD47EF-270F-4C76-94C4-9CC67E1828ED}] => (Block) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{52EE2EED-D1C2-45B7-B53A-AFD7F5AD0954}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{A4C85772-D0A2-4EE8-985D-5F575E3E36DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{CBB3E110-0048-405E-BACB-6122887D00AB}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{74FC6505-E190-441B-B132-DE968A8C69BD}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [TCP Query User{5DD6DE62-A7F6-45D5-A687-AE3EE343402A}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{ED1FCB27-A434-4C1A-9A3D-624302730821}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{2486A803-C8FE-46AA-ABFA-28DCBC1FDA59}] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{2A8601E7-5645-4433-BD5D-C81A9AE61DE4}] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{DDB50FFA-9770-49D0-839F-861A7B0DBE48}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{861E89CD-7CAF-4643-985A-BBBD16E4B0C1}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{C35B4903-D0F3-45EA-A863-2BF0CD7BF55F}] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{212D65CD-F6E5-472B-B7FD-8D6AC558BBC0}] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{19A94F0D-8D94-47AE-B39D-38F024F3E512}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{02DE4688-DB15-480D-8E8C-25610EAF05BA}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{A3E598A6-7A7D-44FF-9819-B25263E7C1B9}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{DDE83B99-6086-4B90-9CFA-0EB4CDB1DFAF}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [TCP Query User{4D0D210F-86E2-4E9C-A6EF-AE60EA0C51AE}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [UDP Query User{30316CBF-60CE-44C0-B5D2-717090ADD7F4}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{C1AE5752-0E53-4A9B-867D-B515801BF905}] => (Block) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{7D2F119F-6700-4979-9DF1-2A4318AD87BB}] => (Block) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{709C876C-E7EA-4E3F-969B-42A93C172C39}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{7B48D753-F9A5-4736-95C6-9307983C78BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{F7548752-DF88-4BD1-8CAF-1A643AADC85A}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{775577B5-47E6-4254-B925-A157EA3997F4}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{1FCF1BEA-7236-42EC-8376-D86E0121A2A0}] => (Block) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{BDBCF34A-61A5-402E-B887-80929490B3A8}] => (Block) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{5A1BBDC4-C669-490D-A12E-4EF5D068E63D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{940BE725-5AAD-47EB-8E2C-34657486F4D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{085EFE85-5522-46A1-B751-2F753FE143C1}] => (Allow) LPort=8317
FirewallRules: [{54B7987C-B0D5-49EC-8FBC-D48CEDB14CBD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\America's Army\AAPG\Binaries\AALauncher32.exe
FirewallRules: [{663B6512-EB4F-4000-A86A-DB9CA553289F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\America's Army\AAPG\Binaries\AALauncher32.exe
FirewallRules: [{59C4AFE0-3D2B-4233-8DCD-9E21B912CE34}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{2DC18AD9-3516-4745-827C-96176DD9FBF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E0D34893-9BC5-4769-AC41-6A135E29466B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{0A85C9D5-61DF-48A6-BB6B-70E46CA6F443}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{AA4CE609-DB0D-4907-A631-DC3154D5ED22}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{A25EDF63-2225-4D5C-B0FD-F52CE519AE4E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{BA733AE5-7A87-4ACF-A7F1-4ABB5BA1C389}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{4A6955AD-92C3-44D2-8B14-21CD78D8E4CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{3516EB64-4347-4032-BF78-5AA7B1FB19B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{24699078-5C53-4A3B-BDE7-9C47F6EB55C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{58524293-024C-4C3E-A21C-141FE11119B4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{49853E9D-6DE1-442C-9020-6414FF8DE0ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{41E7CF28-C0D0-4DA1-ABFB-2304F9BF32BE}C:\users\neber marcel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{45BB59EC-204A-4282-BB6C-FB2CEB46D16B}C:\users\neber marcel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{23EF2F1C-8039-40D2-BCA7-D44B25C9BF02}] => (Block) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{5CF312E3-05E9-4424-BFEA-B3B5B1B19A3F}] => (Block) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{5B197323-D2E8-4F01-B967-FD02C77C7C2E}C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [UDP Query User{9570957D-D958-4468-AF10-5A328904D116}C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [{0BAD96EE-AFE7-404A-BE05-2ABB7E3BE3E4}] => (Block) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [{879A5F15-F9AF-4460-813F-2BD1B94DC37E}] => (Block) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [{F9A80CC7-D762-42D2-9906-BC93F7C89CF7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{1E67EFA7-E0E7-46CA-9721-0E0615AD72B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{97990AE0-7D2C-4202-853E-75C95E624CF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8210DCF4-8AD2-47DC-B7A0-5A4C931D4DC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [TCP Query User{CD4887CA-BC92-4BFB-ACEF-F3B8B3237BFD}C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe] => (Allow) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [UDP Query User{2C534BD1-6E2C-4436-88CC-ACEAE0B89139}C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe] => (Allow) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [{5C9C7FBE-9106-4C25-BC5A-86B849031646}] => (Block) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [{9C9E9989-8A67-4F28-B551-B287C9B4F693}] => (Block) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [{8971D7F6-20B8-42FB-92D7-CC5BA5C4594A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{D9D186FA-D761-4C93-9DC5-E941FB16C538}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [TCP Query User{E2A2301C-951B-4A6E-B5DF-65FC512E1880}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{81DF6945-AC73-444D-A409-E3F1E4D2E99C}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{476F7A7F-2FF0-4995-BA89-E71CF07606DE}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{BA8F3BCD-9379-48E3-BA17-373D6B706374}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{C3299CA6-DC92-4962-9F5E-04B9DE24891C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{C2264CB3-DDC3-4284-8F72-79B18908E597}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{64212471-6E3F-4ECE-A5A8-6D1920F23DC2}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{7D16CD15-792D-4CD3-9434-B6BE9F0778C0}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{70A8B040-E387-4414-9CAD-CAF32F959949}] => (Block) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{8837521B-34FF-41EE-8410-B3E93494454D}] => (Block) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{49F4D9FF-5816-4742-8CB7-1D7FA2F963DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{833D8807-3201-4A07-8D97-2A8FD2B9878D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{7FE0CC21-6A58-4DB9-B488-BF94DEA04425}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{A9E6076A-C824-4D24-B0E2-E5E55E3FA255}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{24B8C968-CF3E-4E3A-A622-93BBBCC19679}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{C94F2AE1-7A48-4553-979A-509CB88AF47D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{1856819E-CFE3-421E-8366-85DA2A7F8193}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [{C8567BE5-4C44-44F5-941A-5027963E56A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [{D50225C3-8774-45E6-A9C6-C12681C9EE0C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\R.U.S.E\Ruse.exe
FirewallRules: [{977CF983-0340-4D4F-9EF2-268159020566}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\R.U.S.E\Ruse.exe
FirewallRules: [TCP Query User{41A1FEF6-D261-4C45-9317-D5C8AE9E6E0D}C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [UDP Query User{21615AAD-10F3-4E02-984A-9A98F0E1ADF1}C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [{38DBCEC1-5673-44D0-9345-A49B8C6F03F4}] => (Block) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [{945AA4C3-CC10-482D-8687-27E635F0059A}] => (Block) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [TCP Query User{ACBC272B-4397-4F91-98B4-33E5D84996EE}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{10B4C114-1121-466F-AB1F-01201FA8CCB4}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{B6BC67D5-A48C-405E-B769-B53B2FA91347}] => (Block) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{078C6DDD-EE24-4F45-93B9-D6C6F55A6621}] => (Block) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{50BB5133-8C94-4363-9563-7CCF36AB0B2B}] => (Allow) C:\Users\Neber Marcel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{AE8812D5-39C0-4F7A-8913-70FD1A6502A8}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{107F5BCE-71FF-4936-A77A-15A2ECC15D29}] => (Allow) LPort=2869
FirewallRules: [{67B4A243-DA5B-4BCE-A093-97A90614013B}] => (Allow) LPort=1900
FirewallRules: [{18104F72-C854-48AB-89D9-9CFE148CCDB2}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{6CE96839-1323-47F8-A0F7-BE3F6EE23E9D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F838D9D3-20F7-43B4-A8E3-3F511A70182D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{3169DF9C-93B2-4062-9F9F-4C78EC5F929C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{82A10542-DF87-41BE-845A-B535161EF7AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{35019A85-4BA7-461A-8ED1-16C1BF4E9251}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 454) (User: )
Description: svchost (1484) SRUJet: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -501 auf.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost (1484) SRUJet: Während des Soft Recovery-Vorgangs wurde eine Beschädigung von Protokolldatei C:\Windows\system32\SRU\SRU.log festgestellt. Der Datensatz mit der fehlerhaften Prüfsumme befindet sich an Position END. Daten, die nicht mit dem Füllmuster der Protokolldatei übereinstimmen, traten zuerst in Sektor 12 (0x0000000C) auf. Diese Protokolldatei wurde beschädigt und ist unbrauchbar.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost (1484) SRUJet: Bei Überprüfung des aus Datei "C:\Windows\system32\SRU\SRU.log" bei Offset 49152 (0x000000000000c000) für 4096 (0x00001000) Bytes gelesenen Protokollbereichs ist durch eine Inkonsistenz der Bereichsprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war 961251716514706350 (0xd570d57de97f3ae), und die tatsächliche Prüfsumme war 961251716514706350 (0xd570d57de97f3ae). Fehler -501 (0xfffffe0b) beim Lesevorgang. Wenn dieser Zustand andauert, stellen Sie die Protokolldatei aus einer vorherigen Sicherung wieder her.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost (1484) SRUJet: Während des Soft Recovery-Vorgangs wurde eine Beschädigung von Protokolldatei C:\Windows\system32\SRU\SRU.log festgestellt. Der Datensatz mit der fehlerhaften Prüfsumme befindet sich an Position END. Daten, die nicht mit dem Füllmuster der Protokolldatei übereinstimmen, traten zuerst in Sektor 12 (0x0000000C) auf. Diese Protokolldatei wurde beschädigt und ist unbrauchbar.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost (1484) SRUJet: Bei Überprüfung des aus Datei "C:\Windows\system32\SRU\SRU.log" bei Offset 49152 (0x000000000000c000) für 4096 (0x00001000) Bytes gelesenen Protokollbereichs ist durch eine Inkonsistenz der Bereichsprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war 961251716514706350 (0xd570d57de97f3ae), und die tatsächliche Prüfsumme war 961251716514706350 (0xd570d57de97f3ae). Fehler -501 (0xfffffe0b) beim Lesevorgang. Wenn dieser Zustand andauert, stellen Sie die Protokolldatei aus einer vorherigen Sicherung wieder her.

Error: (05/30/2015 11:25:28 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 10, PgnoRoot: 45) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (930 => 558, svchost0).

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 10, PgnoRoot: 45) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (930 => 558, svchost0).

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 19, PgnoRoot: 117) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (3076 => 964, svchost0).

Error: (05/30/2015 06:35:57 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 19, PgnoRoot: 117) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (3076 => 964, svchost0).


System errors:
=============
Error: (05/30/2015 11:25:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (05/30/2015 11:25:10 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000007a (0xfffff6e80010e9b0, 0xffffffffc000003f, 0x00000000dd26ebe0, 0xffffd00021d36000)C:\Windows\MEMORY.DMP053015-19312-01

Error: (05/30/2015 11:25:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎05.‎2015 um 18:35:42 unerwartet heruntergefahren.

Error: (05/30/2015 11:24:45 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 32212254734717042323210592


Microsoft Office:
=========================
Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 454) (User: )
Description: svchost1484SRUJet: -501

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.logEND12 (0x0000000C)

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.log49152 (0x000000000000c000)4096 (0x00001000)-501 (0xfffffe0b)961251716514706350 (0xd570d57de97f3ae)961251716514706350 (0xd570d57de97f3ae)

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.logEND12 (0x0000000C)

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.log49152 (0x000000000000c000)4096 (0x00001000)-501 (0xfffffe0b)961251716514706350 (0xd570d57de97f3ae)961251716514706350 (0xd570d57de97f3ae)

Error: (05/30/2015 11:25:28 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -3271045C:\Windows\system32\SRU\SRUDB.dat9305580

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -3271045C:\Windows\system32\SRU\SRUDB.dat9305580

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -32719117C:\Windows\system32\SRU\SRUDB.dat30769643088

Error: (05/30/2015 06:35:57 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -32719117C:\Windows\system32\SRU\SRUDB.dat30769643088


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Percentage of memory in use: 24%
Total physical RAM: 8120 MB
Available physical RAM: 6126.57 MB
Total Pagefile: 16312 MB
Available Pagefile: 13522.88 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB

==================== Drives ================================

Drive c: (Volume) (Fixed) (Total:1863.01 GB) (Free:1270.92 GB) NTFS
Drive d: () (Fixed) (Total:118.9 GB) (Free:57.49 GB) NTFS
Drive f: (INTENSO) (Removable) (Total:3.71 GB) (Free:3.66 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 2E2862B6)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 8D39F029)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.7 GB) - (Type=0B)

==================== End of log ============================
         

Hier "Gmer.txt":

GMER 2.1.19357 - hxxp://www.gmer.net
Rootkit scan 2015-05-31 01:40:02
Windows 6.2.9200  x64 \Device\Harddisk1\DR1 -> \Device\00000035 ST2000DM001-1CH164 rev.CC29 1863,02GB
Running: Gmer-19357.exe; Driver: C:\Users\NEBERM~1\AppData\Local\Temp\kxldypog.sys


---- Threads - GMER 2.1 ----

Thread  C:\Windows\system32\csrss.exe [632:2676]                                                                                                        fffff960008352d0

---- Registry - GMER 2.1 ----

Reg     HKLM\SYSTEM\CurrentControlSet\Control\GraphicsDrivers\Configuration\PHLC0D1ZQ01338003598_26_07DD_91^F136E963E73ECDF85F6B07FCB1181459@Timestamp  0x2D 0x53 0xB1 0x16 ...
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Network\{4D36E972-E325-11CE-BFC1-08002BE10318}\{9F68DC65-53F8-4F43-BC4B-589573EA62E3}\Connection@Name     isatap.Speedport_W_723V_1_37_000
Reg     HKLM\SYSTEM\CurrentControlSet\Control\Session Manager\Kernel\RNG@RNGAuxiliarySeed                                                               880021793
Reg     HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{9F68DC65-53F8-4F43-BC4B-589573EA62E3}@ReusableType                           0
Reg     HKLM\SYSTEM\CurrentControlSet\Services\iphlpsvc\Parameters\Isatap\{9F68DC65-53F8-4F43-BC4B-589573EA62E3}@DefunctTimestamp                       0x72 0xFB 0x4C 0x55 ...
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch@Epoch                                                                                 7055
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Epoch2@Epoch                                                                                2774
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\PublicProfile@EnableFirewall                                      1
Reg     HKLM\SYSTEM\CurrentControlSet\Services\SharedAccess\Parameters\FirewallPolicy\StandardProfile@EnableFirewall                                    1
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Applets\Wordpad\Recent File List@File9                                                           C:\Users\Neber Marcel\AppData\Local\Temp\Rar$DIa0.451\readme.txt
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015050420150511                            
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015050420150511@CachePrefix                :2015050420150511: 
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015050420150511@CachePath                  %USERPROFILE%\AppData\Local\Microsoft\Windows\History\History.IE5\MSHist012015050420150511
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015050420150511@CacheOptions               11
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015050420150511@CacheRepair                0
Reg     HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings\5.0\Cache\Extensible Cache\MSHist012015050420150511@CacheLimit                 1

---- Files - GMER 2.1 ----

File    C:\Program Files (x86)\Steam\Backups\PAYDAY 2.\Disk_1                                                                                           0 bytes

---- EOF - GMER 2.1 ----
         

Und hier noch die Logs meines Antivirenprogramms:

Additional scan result of Farbar Recovery Scan Tool (x64) Version: 29-05-2015
Ran by Neber Marcel at 2015-05-31 01:10:26
Running from C:\Users\Neber Marcel\Desktop
Boot Mode: Normal
==========================================================


==================== Accounts: =============================

Administrator (S-1-5-21-3700330351-2164061346-4113414242-500 - Administrator - Disabled)
ASPNET (S-1-5-21-3700330351-2164061346-4113414242-1002 - Limited - Enabled)
Gast (S-1-5-21-3700330351-2164061346-4113414242-501 - Limited - Disabled)
Neber Marcel (S-1-5-21-3700330351-2164061346-4113414242-1001 - Administrator - Enabled) => C:\Users\Neber Marcel

==================== Security Center ========================

(If an entry is included in the fixlist, it will be removed.)

AV: Avira Antivirus (Enabled - Up to date) {4D041356-F94D-285F-8768-AAE50FA36859}
AV: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}
AS: Avira Antivirus (Enabled - Up to date) {F665F2B2-DF77-27D1-BDD8-9197742422E4}
AS: Windows Defender (Disabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46}

==================== Installed Programs ======================

(Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.)

Adobe Flash Player 17 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 17.0.0.188 - Adobe Systems Incorporated)
AdVenture Capitalist (HKLM-x32\...\Steam App 346900) (Version:  - Hyper Hippo Games)
AlienFX for IskuFX (HKLM-x32\...\InstallShield_{2C3FC2CC-0A8B-409E-B487-8CD54F4DC1D4}) (Version: 1.02 - Roccat GmbH)
AlienFX for IskuFX (Version: 1.02 - Roccat GmbH) Hidden
AlienFX for KoneXTD (HKLM-x32\...\InstallShield_{48725548-E470-4816-99DD-6667EABAB982}) (Version: 1.02 - Roccat GmbH)
AlienFX for KoneXTD (Version: 1.02 - Roccat GmbH) Hidden
Arma 3 (HKLM-x32\...\Steam App 107410) (Version:  - Bohemia Interactive)
Audacity 2.0.6 (HKLM-x32\...\Audacity_is1) (Version: 2.0.6 - Audacity Team)
Avira (HKLM-x32\...\{d9ed6dcf-6bfc-4fbb-802e-81dd5b767d6e}) (Version: 1.1.32.25147 - Avira Operations & Co. KG)
Avira Antivirus (HKLM-x32\...\Avira Antivirus) (Version: 15.0.10.434 - Avira Operations GmbH & Co. KG)
Black Ops 2 - GSC Studio (HKLM-x32\...\{909C0DF9-6BBE-42BD-8FB2-0ADEBA3459B6}_is1) (Version: 14.10.2.0 - iMCS Productions)
Block N Load Beta (HKLM-x32\...\Steam App 299360) (Version:  - Jagex)
BlueStacks App Player (HKLM-x32\...\BlueStacks App Player) (Version: 0.8.10.3096 - BlueStack Systems, Inc.)
BlueStacks Notification Center (HKLM-x32\...\{0BED0B96-70B8-4893-884B-DC485DC8C1B7}) (Version: 0.8.10.3096 - BlueStack Systems, Inc.)
Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version:  - Sledgehammer Games)
Call of Duty: Advanced Warfare (HKLM-x32\...\Steam App 209650) (Version:  - Sledgehammer Games)
Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version:  - Treyarch)
Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version:  - )
Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version:  - Infinity Ward)
Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version:  - Infinity Ward)
Camtasia Studio 8 (HKLM-x32\...\{64CA5C05-4281-434C-A984-3A4FE6411805}) (Version: 8.5.0.1954 - TechSmith Corporation)
Canon Easy-PhotoPrint EX (HKLM-x32\...\Easy-PhotoPrint EX) (Version: 4.5.0 - Canon Inc.)
Canon MG5100 series MP Drivers (HKLM\...\{1199FAD5-9546-44f3-81CF-FFDB8040B7BF}_Canon_MG5100_series) (Version:  - )
CCleaner (HKLM\...\CCleaner) (Version: 5.01 - Piriform)
Classic Shell (HKLM\...\{840C85B7-D3D6-4143-9AF9-DAE80FD54CFC}) (Version: 4.1.0 - IvoSoft)
CrystalDiskInfo 5.6.2 Shizuku Edition (HKLM-x32\...\CrystalDiskInfo_is1) (Version: 5.6.2 - Crystal Dew World)
D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden
Die Sims™ 4 (HKLM-x32\...\{48EBEBBF-B9F8-4520-A3CF-89A730721917}) (Version: 1.4.83.1010 - Electronic Arts Inc.)
Dropbox (HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\Dropbox) (Version: 3.2.9 - Dropbox, Inc.)
FastStone Capture 5.3 (HKLM-x32\...\FastStone Capture) (Version: 5.3 - FastStone Soft)
FlyVPN (HKLM-x32\...\FlyVPN) (Version: 3.2.0.2 - FlyVPN)
Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Free Audio Editor version 1.0.7.1022 (HKLM-x32\...\Free Audio Editor_is1) (Version: 1.0.7.1022 - DVDVideoSoft Ltd.)
Free YouTube Download version 3.2.52.113 (HKLM-x32\...\Free YouTube Download_is1) (Version: 3.2.52.113 - DVDVideoSoft Ltd.)
Free YouTube to MP3 Converter version 3.12.59.415 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.415 - DVDVideoSoft Ltd.)
GIMP 2.8.14 (HKLM\...\GIMP-2_is1) (Version: 2.8.14 - The GIMP Team)
Goodbye Deponia (HKLM-x32\...\Deponia 3) (Version: 1.0 - Daedalic Entertainment)
Google Chrome (HKLM-x32\...\Google Chrome) (Version: 43.0.2357.81 - Google Inc.)
Google Update Helper (x32 Version: 1.3.27.5 - Google Inc.) Hidden
Grand Theft Auto V (HKLM-x32\...\{E01FA564-2094-4833-8F2F-1FFEC6AFCC46}) (Version: "1.00.0000" - Rockstar Games)
Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version:  - Rockstar North)
Intel® Chipsatz-Gerätesoftware (x32 Version: 10.0.26 - Intel(R) Corporation) Hidden
Java 8 Update 25 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218025F0}) (Version: 8.0.250 - Oracle Corporation)
Java 8 Update 31 (64-bit) (HKLM\...\{26A24AE4-039D-4CA4-87B4-2F86418031F0}) (Version: 8.0.310 - Oracle Corporation)
Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation)
Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.)
LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden
Magical Jelly Bean PasswdFinder (HKLM-x32\...\PasswdFinder_is1) (Version: 1.0.0.25 - PasswdFinder)
McAfee Security Scan Plus (HKLM\...\McAfee Security Scan) (Version: 3.8.150.1 - McAfee, Inc.)
Microsoft .NET Framework 1.1 (HKLM-x32\...\{CB2F7EDD-9D1F-43C1-90FC-4F52EAE172A1}) (Version: 1.1.4322 - Microsoft)
Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation)
Microsoft OneDrive (HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\OneDriveSetup.exe) (Version: 17.3.5860.0512 - Microsoft Corporation)
Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{6ce5bae9-d3ca-4b99-891a-1dc6c118a5fc}) (Version: 8.0.59192 - Microsoft Corporation)
Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation)
Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation)
Microsoft Visual C++ 2010  x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2010  x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.30501 (HKLM-x32\...\{050d4fc8-5d48-4b8f-8972-47c82c46020f}) (Version: 12.0.30501.0 - Microsoft Corporation)
Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.30501 (HKLM-x32\...\{f65db027-aff3-4070-886a-0d87064aabb1}) (Version: 12.0.30501.0 - Microsoft Corporation)
Minecraft (HKLM-x32\...\{63227E62-F417-497E-9060-22B3A9A52D7A}) (Version: 1.0.1.0 - Mojang)
Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden
Mozilla Firefox 38.0.1 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.1 (x86 de)) (Version: 38.0.1 - Mozilla)
Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 35.0 - Mozilla)
MSI Afterburner 2.3.1 (HKLM-x32\...\Afterburner) (Version: 2.3.1 - MSI Co., LTD)
Neverwinter (HKLM-x32\...\Steam App 109600) (Version:  - Cryptic Studios)
Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.7.4 - Notepad++ Team)
NVIDIA 3D Vision Controller-Treiber 349.95 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 349.95 - NVIDIA Corporation)
NVIDIA 3D Vision Treiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 350.12 - NVIDIA Corporation)
NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation)
NVIDIA Grafiktreiber 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 350.12 - NVIDIA Corporation)
NVIDIA HD-Audiotreiber 1.3.33.0 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.33.0 - NVIDIA Corporation)
NVIDIA Miracast Virtueller Ton 350.12 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Miracast.VirtualAudio) (Version: 350.12 - NVIDIA Corporation)
NVIDIA PhysX-Systemsoftware 9.15.0324 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0324 - NVIDIA Corporation)
Open Broadcaster Software (HKLM-x32\...\Open Broadcaster Software) (Version:  - )
OpenOffice 4.1.0 (HKLM-x32\...\{E19483E2-6C18-494D-A307-D4498BCFD2C7}) (Version: 4.10.9764 - Apache Software Foundation)
Origin (HKLM-x32\...\Origin) (Version: 9.4.11.2806 - Electronic Arts, Inc.)
PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version:  - OVERKILL - a Starbreeze Studio.)
PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version:  - OVERKILL Software)
R.U.S.E (HKLM-x32\...\Steam App 21970) (Version:  - Eugen Systems)
Realtek High Definition Audio Driver (HKLM-x32\...\{F132AF7F-7BCA-4EDE-8A7C-958108FE7DBC}) (Version: 6.0.1.7111 - Realtek Semiconductor Corp.)
ROCCAT Isku FX Keyboard Driver (HKLM-x32\...\{DC69933C-E7B0-455D-8E54-FAC1EEF046FF}) (Version:  - Roccat GmbH)
ROCCAT Kone XTD Mouse Driver (HKLM-x32\...\{7133137D-DF48-4522-AD88-13C82B7D0A63}) (Version:  - Roccat GmbH)
ROCCAT Power-Grid Version 0.459 (HKLM-x32\...\{953CF6E6-4EC8-4E55-A263-720CEBD591FE}_is1) (Version: 0.459 - ROCCAT GmbH)
Roccat Talk (HKLM-x32\...\{605D671E-1D1E-4840-84D9-BFACE17F160D}) (Version: 1.00.0013 - Roccat GmbH)
Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.8 - Rockstar Games)
Saints Row IV (HKLM-x32\...\Steam App 206420) (Version:  - Deep Silver Volition)
SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden
SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden
Skype™ 7.1 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.1.105 - Skype Technologies S.A.)
Steam (HKLM-x32\...\Steam) (Version: 2.10.91.91 - Valve Corporation)
Team Fortress 2 (HKLM-x32\...\Steam App 440) (Version:  - Valve)
TeamSpeak 3 Client (HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\TeamSpeak 3 Client) (Version: 3.0.16 - TeamSpeak Systems GmbH)
The Elder Scrolls V: Skyrim (HKLM-x32\...\Steam App 72850) (Version:  - Bethesda Game Studios)
The Forest (HKLM-x32\...\Steam App 242760) (Version:  - Endnight Games Ltd)
Tom Clancy's Ghost Recon Phantoms - EU (HKLM-x32\...\Steam App 272350) (Version:  - Ubisoft Singapore)
Uplay (HKLM-x32\...\Uplay) (Version: 3.0 - Ubisoft)
VLC media player (HKLM\...\VLC media player) (Version: 2.1.5 - VideoLAN)
Warframe (HKLM-x32\...\Steam App 230410) (Version:  - Digital Extremes)
WhoCrashed 5.03 (HKLM\...\WhoCrashed_is1) (Version:  - Resplendence Software Projects Sp.)
Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation)
WinRAR 5.20 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.20.0 - win.rar GmbH)

==================== Custom CLSID (Whitelisted): ==========================

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{005A3A96-BAC4-4B0A-94EA-C0CE100EA736}\localserver32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{087B3AE3-E237-4467-B8DB-5A38AB959AC9}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{3B092F0C-7696-40E3-A80F-68D74DA84210}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{63542C48-9552-494A-84F7-73AA6A7C99C1}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{7BC0E710-5703-45BE-A29D-5D46D8B39262}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\ooofilt_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{AE424E85-F6DF-4910-A6A9-438797986431}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\propertyhdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{C52AF81D-F7A0-4AAB-8E87-F80A60CCD396}\InprocServer32 -> C:\Program Files (x86)\OpenOffice 4\program\shlxthdl\shlxthdl_x64.dll (Apache Software Foundation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{ECD97DE5-3C8F-4ACB-AEEE-CCAB78F7711C}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Local\Microsoft\OneDrive\17.3.5860.0512\amd64\FileSyncApi64.dll (Microsoft Corporation)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314ED9-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDA-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDB-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDC-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDD-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDE-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EDF-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)
CustomCLSID: HKU\S-1-5-21-3700330351-2164061346-4113414242-1001_Classes\CLSID\{FB314EE0-A251-47B7-93E1-CDD82E34AF8B}\InprocServer32 -> C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\DropboxExt64.25.dll (Dropbox, Inc.)

==================== Restore Points =========================

14-05-2015 14:48:10 Windows Update
19-05-2015 23:15:02 Windows Live Essentials
26-05-2015 23:34:12 Geplanter Prüfpunkt

==================== Hosts content: ===============================

(If needed Hosts: directive could be included in the fixlist to reset Hosts.)

2013-08-22 15:25 - 2013-08-22 15:25 - 00000824 ____A C:\Windows\system32\Drivers\etc\hosts

==================== Scheduled Tasks (Whitelisted) =============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

Task: {0DCF4509-0AAA-4397-85F0-2FE0440D6535} - System32\Tasks\GoogleUpdateTaskMachineUA => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {46EB4BB7-12DA-4438-AB61-4CA88C18E157} - System32\Tasks\Microsoft OneDrive Auto Update Task-S-1-5-21-3700330351-2164061346-4113414242-1001 => %localappdata%\Microsoft\OneDrive\OneDrive.exe
Task: {636538C0-FCF4-4301-8365-4E1984DF1335} - System32\Tasks\Microsoft\Windows\Setup\gwx\launchtrayprocess => C:\Windows\system32\GWX\GWX.exe [2015-05-06] (Microsoft Corporation)
Task: {6411F38E-ECCE-4551-914C-D9AEFE14E494} - System32\Tasks\Microsoft\Windows\Setup\GWXTriggers\refreshgwxconfig-B => schtasks
Task: {6D829CCD-97D9-4F2A-9C54-0DB809531AD1} - System32\Tasks\GoogleUpdateTaskMachineCore => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe [2015-02-04] (Google Inc.)
Task: {7DD294C5-0F92-4846-AF90-01036361A3B7} - System32\Tasks\CCleanerSkipUAC => C:\Program Files\CCleaner\CCleaner.exe [2014-12-12] (Piriform Ltd)
Task: {A12DA420-6872-4583-87D4-DC4084ECC8DC} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-05-16] (Adobe Systems Incorporated)
Task: {AA430542-CF99-4F6E-B36F-31DA4E2104B0} - System32\Tasks\Microsoft\Windows\Setup\gwx\refreshgwxconfig => C:\Windows\system32\GWX\GWXConfigManager.exe [2015-05-06] (Microsoft Corporation)
Task: {FF9F623C-09DD-4AB9-B5C8-6F0F6E0A6101} - System32\Tasks\Microsoft\Windows\RemovalTools\MRT_HB => C:\Windows\system32\MRT.exe [2015-05-14] (Microsoft Corporation)
Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineCore.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe
Task: C:\Windows\Tasks\GoogleUpdateTaskMachineUA.job => C:\Program Files (x86)\Google\Update\GoogleUpdate.exe

==================== Loaded Modules (Whitelisted) ==============

2015-01-15 21:15 - 2015-04-08 23:30 - 00116552 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll
2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll
2014-12-13 00:24 - 2014-12-13 00:24 - 00047104 _____ () C:\Program Files\CCleaner\lang\lang-1031.dll
2015-04-12 05:19 - 2015-04-12 05:19 - 54800856 _____ () C:\Program Files\Rockstar Games\Social Club\libcef.dll
2015-04-17 07:19 - 2015-04-17 14:38 - 03640320 _____ () C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GFSDK_ShadowLib.win64.dll
2015-04-17 07:27 - 2015-04-17 14:38 - 00094720 _____ () C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GFSDK_TXAA_AlphaResolve.win64.dll
2015-04-02 10:14 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll
2015-01-16 18:31 - 2012-06-17 12:20 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Kone XTD Mouse\hiddriver.dll
2015-01-16 18:31 - 2012-07-08 17:31 - 00061440 _____ () C:\Program Files (x86)\ROCCAT\Isku FX Keyboard\hiddriver.dll
2015-01-19 21:24 - 2015-04-16 19:40 - 00776192 _____ () C:\Program Files (x86)\Steam\SDL2.dll
2015-01-20 16:42 - 2015-04-23 04:16 - 04962816 _____ () C:\Program Files (x86)\Steam\v8.dll
2015-01-19 21:24 - 2015-05-30 02:47 - 02407104 _____ () C:\Program Files (x86)\Steam\video.dll
2015-01-20 16:42 - 2015-04-23 04:16 - 01556992 _____ () C:\Program Files (x86)\Steam\icui18n.dll
2015-01-20 16:42 - 2015-04-23 04:16 - 01187840 _____ () C:\Program Files (x86)\Steam\icuuc.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 02396672 _____ () C:\Program Files (x86)\Steam\libavcodec-56.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00479744 _____ () C:\Program Files (x86)\Steam\libavformat-56.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00332800 _____ () C:\Program Files (x86)\Steam\libavresample-2.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00442880 _____ () C:\Program Files (x86)\Steam\libavutil-54.dll
2015-01-19 21:24 - 2014-12-01 23:31 - 00485888 _____ () C:\Program Files (x86)\Steam\libswscale-3.dll
2015-01-19 21:24 - 2015-05-30 02:47 - 00703168 _____ () C:\Program Files (x86)\Steam\bin\chromehtml.DLL
2015-01-19 21:24 - 2015-05-11 21:01 - 36302728 _____ () C:\Program Files (x86)\Steam\bin\libcef.dll
2015-04-23 20:24 - 2015-05-11 21:01 - 08958344 _____ () C:\Program Files (x86)\Steam\bin\pdf.dll
2015-05-31 00:30 - 2014-12-19 16:08 - 00118528 _____ () C:\Program Files\WhoCrashed\WhoCrashed32.dll
2015-05-31 00:30 - 2014-12-19 16:08 - 00247552 _____ () C:\Program Files\WhoCrashed\rspSymSrv32.dll

==================== Alternate Data Streams (Whitelisted) =========

(If an entry is included in the fixlist, only the ADS will be removed.)


==================== Safe Mode (Whitelisted) ===================

(If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.)

HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service"

==================== EXE Association (Whitelisted) ===============

(If an entry is included in the fixlist, the registry item will be restored to default or removed.)


==================== Internet Explorer trusted/restricted ===============

(If an entry is included in the fixlist, it will be removed from the registry.)


==================== Other Areas ============================

(Currently there is no automatic fix for this section.)

HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\Control Panel\Desktop\\Wallpaper -> C:\Users\Neber Marcel\AppData\Roaming\Microsoft\Windows Photo Viewer\Hintergrundbild der Windows-Fotoanzeige.jpg
DNS Servers: 192.168.2.1

==================== MSCONFIG/TASK MANAGER disabled items ==

(Currently there is no automatic fix for this section.)

HKLM\...\StartupApproved\Run32: => "LogMeIn Hamachi Ui"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\StartupApproved\StartupFolder: => "Dropbox.lnk"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\StartupApproved\Run: => "Skype"
HKU\S-1-5-21-3700330351-2164061346-4113414242-1001\...\StartupApproved\Run: => "Akamai NetSession Interface"

==================== FirewallRules (Whitelisted) ===============

(If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.)

FirewallRules: [vm-monitoring-nb-session] => (Allow) LPort=139
FirewallRules: [{54151257-68CA-46E1-9EE8-B154F272D86B}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{4DE92E29-3C93-4E92-BACF-28967D104B00}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe
FirewallRules: [{8B7E926F-B05F-4979-A2C8-526FD1B8E987}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{AAB45D96-1113-46D0-A78B-6125B560CDED}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe
FirewallRules: [{18384BFA-17E5-4952-88D2-4C235DDA5D8E}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{8262BDFB-D799-47EA-80A4-628D43BA3BF1}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe
FirewallRules: [{783BA57C-F956-456C-A69D-FE81A8167C04}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{9F74C06D-3B13-4757-976F-CC893E29E991}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe
FirewallRules: [{56843633-80CF-47A6-946A-3329D5B745E7}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{4E624A15-EA95-43F4-8637-017D457AF82C}] => (Allow) C:\Steam\Steam.exe
FirewallRules: [{6CCDC1C9-619D-42B3-9F57-5601999EAEE8}] => (Allow) C:\Steam2\Steam\Steam.exe
FirewallRules: [{2A842B8D-9820-461F-8CD0-282211757402}] => (Allow) C:\Steam2\Steam\Steam.exe
FirewallRules: [{49028B40-249E-41DD-A323-6DF8EAF88D1B}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{B36FE0FD-C5F3-47E7-A291-79058E73D110}] => (Allow) C:\Steam\bin\steamwebhelper.exe
FirewallRules: [{9507B03C-827B-45CF-9941-9E0D2CD22034}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{18C23E51-3215-4E6A-87C7-E350215861F9}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{D2589CE9-A12C-4123-A02E-E4A6688B93B8}] => (Allow) C:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [{820F24CE-6E75-4221-8BE8-DCD0F3EEF5F1}] => (Allow) C:\Steam\SteamApps\common\Team Fortress 2\hl2.exe
FirewallRules: [TCP Query User{288FC911-F149-4E9E-A150-F4B248412968}C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe
FirewallRules: [UDP Query User{C88F895A-B3B9-4ED2-8399-EEB973FDFCE7}C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6mp.exe
FirewallRules: [TCP Query User{AA9CC625-95EB-4568-941F-620B15257F89}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{512011B1-F3EE-4C21-A61B-86FAC22A5634}C:\program files (x86)\skype\phone\skype.exe] => (Allow) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{0ADB7421-BC0E-480E-9BC2-AAAF9FDCA26C}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{AC0ECE00-C204-49FE-87B3-CBA1F8FCEF22}] => (Allow) C:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{CB8A98C0-4AD7-4D7F-AA11-5BB3DF3A8087}] => (Allow) C:\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe
FirewallRules: [{AD1EA89B-451A-4F9D-BE6E-F37413113C84}] => (Allow) C:\Steam\SteamApps\common\ManiaPlanet_SMStorm\ManiaPlanetLauncher.exe
FirewallRules: [{9721EE8D-3D9F-428F-BE59-5550A337EA3D}] => (Allow) C:\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{4A83B9E6-1D39-4248-AF05-F0A3F6D3A4D3}] => (Allow) C:\Steam\SteamApps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{6EBB2136-E05E-48D2-8D33-51B5624DB029}] => (Allow) C:\Steam\SteamApps\common\BlockNLoad\GameWin64.exe
FirewallRules: [{9324231F-C0A5-41DA-884C-EB5FDAEF1FBC}] => (Allow) C:\Steam\SteamApps\common\BlockNLoad\GameWin64.exe
FirewallRules: [{697E1832-4AEA-4F1E-B3C0-1C6BE6129BF4}] => (Allow) C:\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [{6B9937C0-914B-4647-B26B-2D47FFCC218F}] => (Allow) C:\Steam\SteamApps\common\Robocraft\Robocraft.exe
FirewallRules: [TCP Query User{384CCA42-C413-42D4-A91A-7D874A5CFD37}C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{DE3E1500-7243-4D13-AD10-112A358579C5}C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\users\neber marcel\downloads\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [TCP Query User{E39FD9B4-6172-43FD-9732-786A4876C9A5}C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [UDP Query User{8247640A-02C8-4B05-A64A-3ED87CEA8046}C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe] => (Allow) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [{CC7E9368-73F2-45B0-B31D-D73F5F3988DB}] => (Block) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [{6ED561D9-0BAF-4FD6-9D67-9A838BCBF2F1}] => (Block) C:\steam\steamapps\common\call of duty black ops ii\t6zm.exe
FirewallRules: [{CF3CBF7F-C67D-4B77-8805-0F9854497C7A}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{84EB9910-2A87-4D78-8320-AB976A40ECBE}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\Blacklist_Launcher.exe
FirewallRules: [{CCB6F34B-C470-44F4-A012-E3C44B5B05AF}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{D6A1A487-0669-477A-8D83-67BAB748927A}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_game.exe
FirewallRules: [{02F362BC-C9BB-47BF-B348-FE2CB5ACFFF8}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{6CC64B77-7414-4520-A501-B2EE442986CD}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\Blacklist_DX11_game.exe
FirewallRules: [{E1476694-898A-4180-9369-59A141587981}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\gu.exe
FirewallRules: [{2EF3FA78-C195-48D8-AFB3-F6B0FC9D37E9}] => (Allow) C:\Steam\SteamApps\common\Tom Clancy's Splinter Cell Blacklist\src\SYSTEM\gu.exe
FirewallRules: [TCP Query User{84B9C564-2216-4D42-BE6B-9C1B3175951B}C:\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [UDP Query User{05D7AD4D-BC38-4D47-99C7-0726A5C87D1E}C:\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [{65C165F2-B955-4499-B6A0-2892F425E57C}] => (Block) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [{477BA782-464C-43F3-B95A-FE312D87C9CD}] => (Block) C:\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [TCP Query User{EC96F102-F9D3-4E3E-B901-E3614465003A}C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [UDP Query User{B8484C7D-2638-4CF1-8818-AEF1C6226FF2}C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{AD1B48E3-714B-4D83-89AA-8E06A02FD140}] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{228D557C-CF02-426A-A16C-98BF5240D2A7}] => (Allow) C:\e programme\minecraft\runtime\jre-x64\1.8.0_25\bin\javaw.exe
FirewallRules: [{EB6855B2-5451-4873-9BEB-41F1387B924B}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{893D052A-179E-44A8-9C40-2D49235FCCB6}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{064A41CC-C3C5-479E-95BE-FC7B101A472A}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{72FACE7E-E822-41C3-82FB-E879EEDFCA10}] => (Allow) C:\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{F93BEBE0-4224-444B-A80E-0D5F31C75C1F}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{71BBEC4A-53A6-47DC-86E2-87A1E991E7CA}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe
FirewallRules: [{1945D832-35DC-4235-964B-6A992078DF98}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{F9CF970A-480A-4B75-B480-C83B2E50E384}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6mp.exe
FirewallRules: [{FAD01C95-2D49-445F-BE1B-83DF0F035F9A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [{B520E5D5-AD64-43E6-B312-D313730630CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6zm.exe
FirewallRules: [TCP Query User{5C23FB0C-4814-4697-9CD3-E410A0F2D949}C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe
FirewallRules: [UDP Query User{60D3DBB2-8B86-4504-9C43-380BC892CD4B}C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\team fortress 2\hl2.exe
FirewallRules: [{5FA0C355-5A98-4773-8B1D-7A2975182986}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [{AC84DE51-5FDC-489E-89D4-6FC9503C7268}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Black Ops II\t6sp.exe
FirewallRules: [TCP Query User{AC3C44FD-5D2F-46C3-BAE0-98206869B5FB}C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [UDP Query User{19143CC1-7F97-4BA6-B463-F713E6A8D159}C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [{9E2DA5C8-5AA7-439F-A627-6B7AD97495E0}] => (Block) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [{1F83FAD3-C8AA-4DC1-9619-4FF55E310737}] => (Block) C:\program files (x86)\steam\steamapps\common\blocknload\gamewin64.exe
FirewallRules: [{2E16C52F-7A71-4B08-AFDA-9F957F4D6621}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{B54D73A4-52BB-4896-9B99-E5E5783BD657}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Saints Row IV\SaintsRowIV.exe
FirewallRules: [{771ACD49-35D3-4377-9B24-09CDA33CF3C3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [{D728E1A1-E960-4E9A-9A06-BF9F6C4F8C2E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Fistful of Frags\sdk\hl2.exe
FirewallRules: [TCP Query User{21185F63-7866-4F67-B9A4-385D88970B8D}C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe
FirewallRules: [UDP Query User{2F299B95-6247-46A3-81E8-08BD333B0D4A}C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\counter-strike source\hl2.exe
FirewallRules: [TCP Query User{3B4BF3E1-FF21-458C-A486-E0DF9DE01F55}C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe
FirewallRules: [UDP Query User{8E6D4A23-EEBD-4847-91B0-5489284DB453}C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\max payne 3\max payne 3\maxpayne3.exe
FirewallRules: [TCP Query User{67C968B2-A865-4CDD-A80C-C17E732D649A}C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [UDP Query User{3315A777-9E04-4435-95C5-10DD3CB3F39D}C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\garrysmod\hl2.exe
FirewallRules: [TCP Query User{00457931-28CA-42BE-915D-331D542BB2A1}C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [UDP Query User{323433DB-7651-404E-82C9-C354AF198424}C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [TCP Query User{8169D985-F6E5-4E56-B7F6-5E7749312B56}C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [UDP Query User{E2FB8631-A23E-4435-B888-B4CBC253809F}C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [{16F47784-CD81-45EB-9A47-9F956CC8B783}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [{A788264E-1E46-4592-873B-D91212E63B67}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's splinter cell blacklist\src\system\blacklist_dx11_game.exe
FirewallRules: [{281D4F44-F468-4BF2-BF01-E7FE5AB24B8F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{4F67115B-6DBA-48D9-A669-20498A240DC2}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Team Fortress 2\hl2.exe
FirewallRules: [{61007FB0-E66D-47D6-B0B8-60730707FFFA}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{E6EE75A0-0498-43DD-B916-32B46B3779F7}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{4B8D3406-DBD7-4BD2-9756-59342446EB89}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{D3D1F862-0524-4B18-84F2-B980E164635E}] => (Allow) C:\Users\Neber Marcel\AppData\Roaming\Dropbox\bin\Dropbox.exe
FirewallRules: [{C974AD42-4953-442B-AB03-CE38E0192DC7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{2CE3E335-04E1-4BD4-ADA0-093D1913CEF4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Global Offensive\csgo.exe
FirewallRules: [{51A25F15-5995-422C-A02E-727E10BF38AB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe
FirewallRules: [{5024DB7F-AD05-46E2-A796-C0155CFE1D52}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\ManiaPlanet_SMStorm\ManiaPlanet.exe
FirewallRules: [{8C96BC7E-3351-4DB1-8C47-1E8A912B7E78}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{01248165-5047-45E2-BE55-87A5F744E339}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4mp.exe
FirewallRules: [{0C4BA4CD-6A14-45B8-BAA1-8B3AB46A016B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{7FABA1E7-A9C4-49A8-A9CE-83257713804E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 2\iw4sp.exe
FirewallRules: [{494EEBF6-E8BE-4A8F-9EB8-B54B7167AB92}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{8BCC00D4-B279-40A9-8FCF-E7E2156207CF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5sp.exe
FirewallRules: [{E8881034-CBB2-488B-811D-BADD4E4FA331}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{341962F3-31E6-4ECF-8458-A1F666684CC9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Modern Warfare 3\iw5mp.exe
FirewallRules: [{E3237EB5-7C6F-4580-A01E-2D6A7DF99CA7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{7E68C8EF-2078-4BD3-B113-31CC5EC4B464}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Max Payne 3\Max Payne 3\MaxPayne3.exe
FirewallRules: [{49541271-9E10-4C57-9115-420CFEC9FBCC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{777D45CA-E8C1-4DF5-8266-8DB65462C34F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Half-Life 2\hl2.exe
FirewallRules: [{4E1FD775-FE9C-444E-990D-71C2E9435058}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{4A646869-C8B4-4DE8-8AF3-9914AB2A2740}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Counter-Strike Source\hl2.exe
FirewallRules: [{E4B3FC02-D065-4327-9C7A-E79A7D80B6FE}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [{51BF4075-6864-4A23-9817-AD9BD39675C7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\The Forest\TheForest.exe
FirewallRules: [TCP Query User{FA0D2614-B043-4A92-9393-7C39995F518E}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [UDP Query User{88043A6E-160C-400A-BB76-C21B877B4DA4}C:\program files (x86)\skype\phone\skype.exe] => (Block) C:\program files (x86)\skype\phone\skype.exe
FirewallRules: [{2F31B274-C3AB-45F6-844E-BAD501F64E1A}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{87488453-1043-4754-B6D0-D6BE636EF61D}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe
FirewallRules: [{1E87F5BD-2AF8-4699-B089-8102381C8358}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [{509B9218-394F-4397-B770-63E6CA6B438A}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe
FirewallRules: [TCP Query User{0975EF8F-A3FD-4F8D-8D4D-FE42F1ED8F0F}C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [UDP Query User{2DC0FDDE-B83F-40F9-ADC7-9B854A249D37}C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{5064EF95-C756-4795-B9B7-5253B9B9AE72}] => (Block) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{D6CD47EF-270F-4C76-94C4-9CC67E1828ED}] => (Block) C:\program files (x86)\steam\steamapps\common\america's army\aapg\binaries\win32\aagame.exe
FirewallRules: [{52EE2EED-D1C2-45B7-B53A-AFD7F5AD0954}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{A4C85772-D0A2-4EE8-985D-5F575E3E36DC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Skyrim\SkyrimLauncher.exe
FirewallRules: [{CBB3E110-0048-405E-BACB-6122887D00AB}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [{74FC6505-E190-441B-B132-DE968A8C69BD}] => (Allow) C:\Program Files (x86)\Origin Games\The Sims 4\Game\Bin\TS4.exe
FirewallRules: [TCP Query User{5DD6DE62-A7F6-45D5-A687-AE3EE343402A}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{ED1FCB27-A434-4C1A-9A3D-624302730821}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{2486A803-C8FE-46AA-ABFA-28DCBC1FDA59}] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{2A8601E7-5645-4433-BD5D-C81A9AE61DE4}] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [TCP Query User{DDB50FFA-9770-49D0-839F-861A7B0DBE48}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [UDP Query User{861E89CD-7CAF-4643-985A-BBBD16E4B0C1}C:\program files\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{C35B4903-D0F3-45EA-A863-2BF0CD7BF55F}] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{212D65CD-F6E5-472B-B7FD-8D6AC558BBC0}] => (Allow) C:\program files\java\jre1.8.0_31\bin\javaw.exe
FirewallRules: [{19A94F0D-8D94-47AE-B39D-38F024F3E512}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{02DE4688-DB15-480D-8E8C-25610EAF05BA}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{A3E598A6-7A7D-44FF-9819-B25263E7C1B9}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [{DDE83B99-6086-4B90-9CFA-0EB4CDB1DFAF}] => (Allow) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe
FirewallRules: [TCP Query User{4D0D210F-86E2-4E9C-A6EF-AE60EA0C51AE}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [UDP Query User{30316CBF-60CE-44C0-B5D2-717090ADD7F4}C:\program files (x86)\hlsw\hlsw.exe] => (Allow) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{C1AE5752-0E53-4A9B-867D-B515801BF905}] => (Block) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{7D2F119F-6700-4979-9DF1-2A4318AD87BB}] => (Block) C:\program files (x86)\hlsw\hlsw.exe
FirewallRules: [{709C876C-E7EA-4E3F-969B-42A93C172C39}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [{7B48D753-F9A5-4736-95C6-9307983C78BB}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Cryptic Studios\Neverwinter.exe
FirewallRules: [TCP Query User{F7548752-DF88-4BD1-8CAF-1A643AADC85A}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [UDP Query User{775577B5-47E6-4254-B925-A157EA3997F4}C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{1FCF1BEA-7236-42EC-8376-D86E0121A2A0}] => (Block) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{BDBCF34A-61A5-402E-B887-80929490B3A8}] => (Block) C:\program files (x86)\steam\steamapps\common\cryptic studios\neverwinter\live\gameclient.exe
FirewallRules: [{5A1BBDC4-C669-490D-A12E-4EF5D068E63D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{940BE725-5AAD-47EB-8E2C-34657486F4D8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\GarrysMod\hl2.exe
FirewallRules: [{085EFE85-5522-46A1-B751-2F753FE143C1}] => (Allow) LPort=8317
FirewallRules: [{54B7987C-B0D5-49EC-8FBC-D48CEDB14CBD}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\America's Army\AAPG\Binaries\AALauncher32.exe
FirewallRules: [{663B6512-EB4F-4000-A86A-DB9CA553289F}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\America's Army\AAPG\Binaries\AALauncher32.exe
FirewallRules: [{59C4AFE0-3D2B-4233-8DCD-9E21B912CE34}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{2DC18AD9-3516-4745-827C-96176DD9FBF8}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{E0D34893-9BC5-4769-AC41-6A135E29466B}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{0A85C9D5-61DF-48A6-BB6B-70E46CA6F443}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{AA4CE609-DB0D-4907-A631-DC3154D5ED22}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{A25EDF63-2225-4D5C-B0FD-F52CE519AE4E}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [{BA733AE5-7A87-4ACF-A7F1-4ABB5BA1C389}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{4A6955AD-92C3-44D2-8B14-21CD78D8E4CC}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{3516EB64-4347-4032-BF78-5AA7B1FB19B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.exe
FirewallRules: [{24699078-5C53-4A3B-BDE7-9C47F6EB55C4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Warframe.x64.exe
FirewallRules: [{58524293-024C-4C3E-A21C-141FE11119B4}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\Launcher.exe
FirewallRules: [{49853E9D-6DE1-442C-9020-6414FF8DE0ED}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe
FirewallRules: [TCP Query User{41E7CF28-C0D0-4DA1-ABFB-2304F9BF32BE}C:\users\neber marcel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [UDP Query User{45BB59EC-204A-4282-BB6C-FB2CEB46D16B}C:\users\neber marcel\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{23EF2F1C-8039-40D2-BCA7-D44B25C9BF02}] => (Block) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [{5CF312E3-05E9-4424-BFEA-B3B5B1B19A3F}] => (Block) C:\users\neber marcel\appdata\local\akamai\netsession_win.exe
FirewallRules: [TCP Query User{5B197323-D2E8-4F01-B967-FD02C77C7C2E}C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [UDP Query User{9570957D-D958-4468-AF10-5A328904D116}C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [{0BAD96EE-AFE7-404A-BE05-2ABB7E3BE3E4}] => (Block) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [{879A5F15-F9AF-4460-813F-2BD1B94DC37E}] => (Block) C:\program files (x86)\steam\steamapps\common\dungeons and dragons online\dndclient.exe
FirewallRules: [{F9A80CC7-D762-42D2-9906-BC93F7C89CF7}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{1E67EFA7-E0E7-46CA-9721-0E0615AD72B3}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY The Heist\payday_win32_release.exe
FirewallRules: [{97990AE0-7D2C-4202-853E-75C95E624CF5}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [{8210DCF4-8AD2-47DC-B7A0-5A4C931D4DC6}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\PAYDAY 2\payday2_win32_release.exe
FirewallRules: [TCP Query User{CD4887CA-BC92-4BFB-ACEF-F3B8B3237BFD}C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe] => (Allow) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [UDP Query User{2C534BD1-6E2C-4436-88CC-ACEAE0B89139}C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe] => (Allow) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [{5C9C7FBE-9106-4C25-BC5A-86B849031646}] => (Block) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [{9C9E9989-8A67-4F28-B551-B287C9B4F693}] => (Block) C:\program files (x86)\roccat\power-grid\roccatpowergrid.exe
FirewallRules: [{8971D7F6-20B8-42FB-92D7-CC5BA5C4594A}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [{D9D186FA-D761-4C93-9DC5-E941FB16C538}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Tom Clancy's Ghost Recon Phantoms - EU\Launcher.exe
FirewallRules: [TCP Query User{E2A2301C-951B-4A6E-B5DF-65FC512E1880}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [UDP Query User{81DF6945-AC73-444D-A409-E3F1E4D2E99C}C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{476F7A7F-2FF0-4995-BA89-E71CF07606DE}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{BA8F3BCD-9379-48E3-BA17-373D6B706374}] => (Block) C:\program files (x86)\steam\steamapps\common\tom clancy's ghost recon phantoms - eu\game\pdc-live\ghostreconphantoms.exe
FirewallRules: [{C3299CA6-DC92-4962-9F5E-04B9DE24891C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [{C2264CB3-DDC3-4284-8F72-79B18908E597}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Arma 3\arma3launcher.exe
FirewallRules: [TCP Query User{64212471-6E3F-4ECE-A5A8-6D1920F23DC2}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [UDP Query User{7D16CD15-792D-4CD3-9434-B6BE9F0778C0}C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{70A8B040-E387-4414-9CAD-CAF32F959949}] => (Block) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{8837521B-34FF-41EE-8410-B3E93494454D}] => (Block) C:\program files (x86)\steam\steamapps\common\arma 3\arma3.exe
FirewallRules: [{49F4D9FF-5816-4742-8CB7-1D7FA2F963DA}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{833D8807-3201-4A07-8D97-2A8FD2B9878D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe
FirewallRules: [{7FE0CC21-6A58-4DB9-B488-BF94DEA04425}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{A9E6076A-C824-4D24-B0E2-E5E55E3FA255}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe
FirewallRules: [{24B8C968-CF3E-4E3A-A622-93BBBCC19679}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{C94F2AE1-7A48-4553-979A-509CB88AF47D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\Grand Theft Auto V\GTAVLauncher.exe
FirewallRules: [{1856819E-CFE3-421E-8366-85DA2A7F8193}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [{C8567BE5-4C44-44F5-941A-5027963E56A9}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\nmrih\sdk\hl2.exe
FirewallRules: [{D50225C3-8774-45E6-A9C6-C12681C9EE0C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\R.U.S.E\Ruse.exe
FirewallRules: [{977CF983-0340-4D4F-9EF2-268159020566}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\R.U.S.E\Ruse.exe
FirewallRules: [TCP Query User{41A1FEF6-D261-4C45-9317-D5C8AE9E6E0D}C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [UDP Query User{21615AAD-10F3-4E02-984A-9A98F0E1ADF1}C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [{38DBCEC1-5673-44D0-9345-A49B8C6F03F4}] => (Block) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [{945AA4C3-CC10-482D-8687-27E635F0059A}] => (Block) C:\program files (x86)\steam\steamapps\common\killingfloor\system\killingfloor.exe
FirewallRules: [TCP Query User{ACBC272B-4397-4F91-98B4-33E5D84996EE}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [UDP Query User{10B4C114-1121-466F-AB1F-01201FA8CCB4}C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{B6BC67D5-A48C-405E-B769-B53B2FA91347}] => (Block) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{078C6DDD-EE24-4F45-93B9-D6C6F55A6621}] => (Block) C:\program files (x86)\steam\steamapps\common\grand theft auto v\gta5.exe
FirewallRules: [{50BB5133-8C94-4363-9563-7CCF36AB0B2B}] => (Allow) C:\Users\Neber Marcel\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe
FirewallRules: [{AE8812D5-39C0-4F7A-8913-70FD1A6502A8}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe
FirewallRules: [{107F5BCE-71FF-4936-A77A-15A2ECC15D29}] => (Allow) LPort=2869
FirewallRules: [{67B4A243-DA5B-4BCE-A093-97A90614013B}] => (Allow) LPort=1900
FirewallRules: [{18104F72-C854-48AB-89D9-9CFE148CCDB2}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe
FirewallRules: [{6CE96839-1323-47F8-A0F7-BE3F6EE23E9D}] => (Allow) C:\Program Files (x86)\Google\Chrome\Application\chrome.exe
FirewallRules: [{F838D9D3-20F7-43B4-A8E3-3F511A70182D}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{3169DF9C-93B2-4062-9F9F-4C78EC5F929C}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\AdVenture Capitalist\adventure-capitalist.exe
FirewallRules: [{82A10542-DF87-41BE-845A-B535161EF7AF}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe
FirewallRules: [{35019A85-4BA7-461A-8ED1-16C1BF4E9251}] => (Allow) C:\Program Files (x86)\Steam\steamapps\common\BlockNLoad\Win64\BlockNLoad.exe

==================== Faulty Device Manager Devices =============

Name: 
Description: 
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.

Name: PCI-Kommunikationscontroller (einfach)
Description: PCI-Kommunikationscontroller (einfach)
Class Guid: 
Manufacturer: 
Service: 
Problem: : The drivers for this device are not installed. (Code 28)
Resolution: To install the drivers for this device, click "Update Driver", which starts the Hardware Update wizard.


==================== Event log errors: =========================

Application errors:
==================
Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 454) (User: )
Description: svchost (1484) SRUJet: Bei Datenbankwiederherstellung trat ein unerwarteter Fehler -501 auf.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost (1484) SRUJet: Während des Soft Recovery-Vorgangs wurde eine Beschädigung von Protokolldatei C:\Windows\system32\SRU\SRU.log festgestellt. Der Datensatz mit der fehlerhaften Prüfsumme befindet sich an Position END. Daten, die nicht mit dem Füllmuster der Protokolldatei übereinstimmen, traten zuerst in Sektor 12 (0x0000000C) auf. Diese Protokolldatei wurde beschädigt und ist unbrauchbar.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost (1484) SRUJet: Bei Überprüfung des aus Datei "C:\Windows\system32\SRU\SRU.log" bei Offset 49152 (0x000000000000c000) für 4096 (0x00001000) Bytes gelesenen Protokollbereichs ist durch eine Inkonsistenz der Bereichsprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war 961251716514706350 (0xd570d57de97f3ae), und die tatsächliche Prüfsumme war 961251716514706350 (0xd570d57de97f3ae). Fehler -501 (0xfffffe0b) beim Lesevorgang. Wenn dieser Zustand andauert, stellen Sie die Protokolldatei aus einer vorherigen Sicherung wieder her.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost (1484) SRUJet: Während des Soft Recovery-Vorgangs wurde eine Beschädigung von Protokolldatei C:\Windows\system32\SRU\SRU.log festgestellt. Der Datensatz mit der fehlerhaften Prüfsumme befindet sich an Position END. Daten, die nicht mit dem Füllmuster der Protokolldatei übereinstimmen, traten zuerst in Sektor 12 (0x0000000C) auf. Diese Protokolldatei wurde beschädigt und ist unbrauchbar.

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost (1484) SRUJet: Bei Überprüfung des aus Datei "C:\Windows\system32\SRU\SRU.log" bei Offset 49152 (0x000000000000c000) für 4096 (0x00001000) Bytes gelesenen Protokollbereichs ist durch eine Inkonsistenz der Bereichsprüfsumme ein Fehler aufgetreten. Die erwartete Prüfsumme war 961251716514706350 (0xd570d57de97f3ae), und die tatsächliche Prüfsumme war 961251716514706350 (0xd570d57de97f3ae). Fehler -501 (0xfffffe0b) beim Lesevorgang. Wenn dieser Zustand andauert, stellen Sie die Protokolldatei aus einer vorherigen Sicherung wieder her.

Error: (05/30/2015 11:25:28 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 10, PgnoRoot: 45) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (930 => 558, svchost0).

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 10, PgnoRoot: 45) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (930 => 558, svchost0).

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 19, PgnoRoot: 117) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (3076 => 964, svchost0).

Error: (05/30/2015 06:35:57 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost (1616) SRUJet: Ungültige Seitenverknüpfung (Fehler -327) in B-Struktur (Objekt-Id: 19, PgnoRoot: 117) von Datenbank C:\Windows\system32\SRU\SRUDB.dat (3076 => 964, svchost0).


System errors:
=============
Error: (05/30/2015 11:25:28 PM) (Source: Service Control Manager) (EventID: 7023) (User: )
Description: Der Dienst "BlueStacks Android Service" wurde mit folgendem Fehler beendet: 
%%1064

Error: (05/30/2015 11:25:10 PM) (Source: BugCheck) (EventID: 1001) (User: )
Description: 0x0000007a (0xfffff6e80010e9b0, 0xffffffffc000003f, 0x00000000dd26ebe0, 0xffffd00021d36000)C:\Windows\MEMORY.DMP053015-19312-01

Error: (05/30/2015 11:25:09 PM) (Source: EventLog) (EventID: 6008) (User: )
Description: Das System wurde zuvor am ‎30.‎05.‎2015 um 18:35:42 unerwartet heruntergefahren.

Error: (05/30/2015 11:24:45 PM) (Source: Microsoft-Windows-Kernel-Boot) (EventID: 29) (User: NT-AUTORITÄT)
Description: 32212254734717042323210592


Microsoft Office:
=========================
Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 454) (User: )
Description: svchost1484SRUJet: -501

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.logEND12 (0x0000000C)

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.log49152 (0x000000000000c000)4096 (0x00001000)-501 (0xfffffe0b)961251716514706350 (0xd570d57de97f3ae)961251716514706350 (0xd570d57de97f3ae)

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 465) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.logEND12 (0x0000000C)

Error: (05/31/2015 00:00:00 AM) (Source: ESENT) (EventID: 477) (User: )
Description: svchost1484SRUJet: C:\Windows\system32\SRU\SRU.log49152 (0x000000000000c000)4096 (0x00001000)-501 (0xfffffe0b)961251716514706350 (0xd570d57de97f3ae)961251716514706350 (0xd570d57de97f3ae)

Error: (05/30/2015 11:25:28 PM) (Source: BstHdAndroidSvc) (EventID: 0) (User: )
Description: Der Dienst kann nicht gestartet werden. System.ApplicationException: Cannot start service.  Service did not stop gracefully the last time it was run.
   bei BlueStacks.hyperDroid.Service.Service.OnStart(String[] args)
   bei System.ServiceProcess.ServiceBase.ServiceQueuedMainCallback(Object state)

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -3271045C:\Windows\system32\SRU\SRUDB.dat9305580

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -3271045C:\Windows\system32\SRU\SRUDB.dat9305580

Error: (05/30/2015 06:36:00 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -32719117C:\Windows\system32\SRU\SRUDB.dat30769643088

Error: (05/30/2015 06:35:57 PM) (Source: ESENT) (EventID: 447) (User: )
Description: svchost1616SRUJet: -32719117C:\Windows\system32\SRU\SRUDB.dat30769643088


==================== Memory info =========================== 

Processor: Intel(R) Core(TM) i7-4770 CPU @ 3.40GHz
Percentage of memory in use: 24%
Total physical RAM: 8120 MB
Available physical RAM: 6126.57 MB
Total Pagefile: 16312 MB
Available Pagefile: 13522.88 MB
Total Virtual: 131072 MB
Available Virtual: 131071.77 MB

==================== Drives ================================

Drive c: (Volume) (Fixed) (Total:1863.01 GB) (Free:1270.92 GB) NTFS
Drive d: () (Fixed) (Total:118.9 GB) (Free:57.49 GB) NTFS
Drive f: (INTENSO) (Removable) (Total:3.71 GB) (Free:3.66 GB) FAT32

==================== MBR & Partition Table ==================

========================================================
Disk: 0 (MBR Code: Windows 7 or 8) (Size: 119.2 GB) (Disk ID: 2E2862B6)
Partition 1: (Active) - (Size=350 MB) - (Type=07 NTFS)
Partition 2: (Not Active) - (Size=118.9 GB) - (Type=07 NTFS)

========================================================
Disk: 1 (MBR Code: Windows 7 or 8) (Size: 1863 GB) (Disk ID: 8D39F029)
Partition 1: (Not Active) - (Size=1863 GB) - (Type=07 NTFS)

========================================================
Disk: 2 (MBR Code: Windows XP) (Size: 3.7 GB) (Disk ID: C3072E18)
Partition 1: (Active) - (Size=3.7 GB) - (Type=0B)

==================== End of log ============================
         

Lade Dir bitte Bluescreenview und installiere es:
BlueScreenView - Download - Filepony

Öffnen und den aktuellsten Dump analysieren lassen (macht das Tool automatisch).
Output hier posten.