|
Plagegeister aller Art und deren Bekämpfung: Festplatte füllt sich im Minuten TaktWindows 7 Wenn Du nicht sicher bist, ob Du dir Malware oder Trojaner eingefangen hast, erstelle hier ein Thema. Ein Experte wird sich mit weiteren Anweisungen melden und Dir helfen die Malware zu entfernen oder Unerwünschte Software zu deinstallieren bzw. zu löschen. Bitte schildere dein Problem so genau wie möglich. Sollte es ein Trojaner oder Viren Problem sein wird ein Experte Dir bei der Beseitigug der Infektion helfen. |
19.06.2015, 17:44 | #1 |
| Festplatte füllt sich im Minuten Takt Hallo liebes TB-Forum Ich versuche seit heute mittag für meinen freund herauszufinden wieso sich der speicher im minutentakt füllt Mir ist auch eine video datei aufgefallen die virus hieß 90kb groß war ,null sekunden lang, dafür aber eine C++ struktur enthielt da ich die Datei aber nicht mehr finde kann ich sie nicht genau analysieren ich hoffe ihr könnt uns helfen MFG Darkshadow Daurch ich mich recht gut auskenne hab ich den ComboFix ausgeführt weil die belegung umd die 500MB die minute war hier das log Code:
ATTFilter ComboFix 15-06-18.01 - ***** 19.06.2015 16:44:08.1.6 - x64 Microsoft Windows 7 Home Premium 6.1.7601.1.1252.49.1031.18.8174.5400 [GMT 2:00] ausgeführt von:: c:\users\Gamer\Desktop\ComboFix.exe AV: avast! Antivirus *Disabled/Updated* {17AD7D40-BA12-9C46-7131-94903A54AD8B} FW: avast! Antivirus *Disabled* {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} SP: avast! Antivirus *Disabled/Updated* {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} SP: Windows Defender *Enabled/Updated* {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} * Neuer Wiederherstellungspunkt wurde erstellt . . (((((((((((((((((((((((((((((((((((( Weitere Löschungen )))))))))))))))))))))))))))))))))))))))))))))))) . . c:\windows\SysWow64\Packet.dll c:\windows\SysWow64\pthreadVC.dll c:\windows\SysWow64\wpcap.dll . . ((((((((((((((((((((((((((((((((((((((( Treiber/Dienste ))))))))))))))))))))))))))))))))))))))))))))))))) . . -------\Legacy_NPF -------\Service_npf . . ((((((((((((((((((((((( Dateien erstellt von 2015-05-19 bis 2015-06-19 )))))))))))))))))))))))))))))) . . 2015-06-19 14:55 . 2015-06-19 14:55 -------- d-----w- c:\users\Default\AppData\Local\temp 2015-06-19 14:34 . 2015-06-19 14:34 -------- d-----w- c:\users\Gamer\AppData\Roaming\JAM Software 2015-06-19 14:24 . 2015-06-19 14:25 -------- d-----w- C:\KVRT_Data 2015-06-19 14:02 . 2015-06-19 14:22 -------- d-----w- c:\programdata\HitmanPro 2015-06-18 22:29 . 2015-06-18 22:29 -------- d-----w- c:\program files (x86)\Dungeon Defenders 2015-06-17 16:07 . 2015-06-17 16:09 -------- d-----w- c:\users\Gamer\AppData\Roaming\Download Manager 2015-06-17 12:07 . 2015-05-28 19:03 364472 ----a-w- c:\windows\system32\aswBoot.exe 2015-06-16 07:21 . 2015-05-03 03:16 12214312 ----a-w- c:\programdata\Microsoft\Windows Defender\Definition Updates\{68D0A99D-78C0-408F-B0E2-4087B30AA0F4}\mpengine.dll 2015-06-15 15:21 . 2015-06-15 15:21 -------- d-----w- c:\users\Gamer\AppData\Local\Activision 2015-06-15 15:20 . 2015-06-15 15:20 682280 ----a-w- c:\windows\SysWow64\pbsvc.exe 2015-06-13 06:07 . 2015-06-13 06:07 -------- d-----w- c:\users\Gamer\AppData\Roaming\DarkSoulsII 2015-06-12 07:09 . 2015-06-12 07:09 -------- d-----w- c:\users\Gamer\AppData\Roaming\Empty Clip Studios 2015-06-11 04:14 . 2015-06-11 04:14 -------- d-----w- c:\users\Gamer\AppData\Roaming\CobiMobi 2015-06-11 04:12 . 2015-06-11 04:12 -------- d-----w- c:\users\Gamer\AppData\Roaming\MMFApplications 2015-06-10 04:59 . 2015-05-23 03:15 47616 ----a-w- c:\windows\SysWow64\ieetwproxystub.dll 2015-06-09 16:20 . 2015-06-09 16:20 -------- d-----w- c:\users\Gamer\AppData\Roaming\DevPro, LLC 2015-06-09 05:20 . 2015-06-09 05:20 136408 ----a-w- c:\windows\system32\drivers\47515E80.sys 2015-06-01 11:17 . 2015-05-28 03:52 571024 ----a-w- c:\windows\SysWow64\nvStreaming.exe 2015-06-01 11:00 . 2015-06-17 07:32 -------- d-----w- c:\programdata\boost_interprocess 2015-06-01 11:00 . 2015-04-03 13:21 48784 ----a-w- c:\windows\SysWow64\nvaudcap32v.dll 2015-06-01 11:00 . 2015-04-03 13:21 38032 ----a-w- c:\windows\system32\drivers\nvvad64v.sys 2015-05-28 19:03 . 2015-05-28 19:03 28144 ----a-w- c:\windows\system32\drivers\aswKbd.sys 2015-05-28 19:03 . 2015-05-28 19:03 43112 ----a-w- c:\windows\avastSS.scr 2015-05-28 19:03 . 2015-05-28 19:03 449896 ----a-w- c:\windows\system32\drivers\aswNdisFlt.sys 2015-05-26 17:46 . 2015-05-26 17:46 -------- d-----w- c:\users\Gamer\AppData\Roaming\Trine2 2015-05-23 02:56 . 2015-05-23 02:56 -------- d-----w- c:\windows\system32\vbox 2015-05-23 02:56 . 2015-05-23 02:56 -------- d-----w- c:\windows\SysWow64\vbox 2015-05-21 21:53 . 2015-05-13 06:52 31552 ----a-w- c:\windows\system32\nvhdap64.dll 2015-05-21 21:53 . 2015-05-13 06:52 195912 ----a-w- c:\windows\system32\drivers\nvhda64v.sys 2015-05-21 21:53 . 2015-05-12 06:27 1898312 ----a-w- c:\windows\system32\nvdispco6435286.dll 2015-05-21 21:53 . 2015-05-12 06:27 1557648 ----a-w- c:\windows\system32\nvdispgenco6435286.dll . . . (((((((((((((((((((((((((((((((((((( Find3M Bericht )))))))))))))))))))))))))))))))))))))))))))))))))))))) . 2015-06-19 15:01 . 2014-07-29 15:11 136408 ----a-w- c:\windows\system32\drivers\MBAMSwissArmy.sys 2015-06-17 16:11 . 2014-10-24 19:30 156392 ----a-w- c:\windows\SysWow64\eEmpty.exe 2015-06-15 15:23 . 2014-07-29 18:35 111928 ----a-w- c:\windows\SysWow64\PnkBstrB.exe 2015-06-15 15:23 . 2014-07-29 18:35 111928 ----a-w- c:\windows\SysWow64\PnkBstrB.ex0 2015-06-13 05:12 . 2014-07-29 10:20 778416 ----a-w- c:\windows\SysWow64\FlashPlayerApp.exe 2015-06-13 05:12 . 2014-07-29 10:20 142512 ----a-w- c:\windows\SysWow64\FlashPlayerCPLApp.cpl 2015-06-11 04:14 . 2014-08-02 16:59 122904 ----a-w- c:\windows\system32\OpenAL32.dll 2015-06-11 04:14 . 2014-08-02 16:59 109080 ----a-w- c:\windows\SysWow64\OpenAL32.dll 2015-06-10 23:20 . 2014-07-30 03:56 140135120 ----a-w- c:\windows\system32\MRT.exe 2015-05-28 19:03 . 2014-07-29 15:43 137288 ----a-w- c:\windows\system32\drivers\aswStm.sys 2015-05-28 19:03 . 2014-07-29 15:43 272248 ----a-w- c:\windows\system32\drivers\aswVmm.sys 2015-05-28 19:03 . 2014-07-29 15:43 442264 ----a-w- c:\windows\system32\drivers\aswSP.sys 2015-05-28 19:03 . 2014-07-29 15:43 89944 ----a-w- c:\windows\system32\drivers\aswMonFlt.sys 2015-05-28 19:03 . 2014-07-29 15:43 65736 ----a-w- c:\windows\system32\drivers\aswRvrt.sys 2015-05-28 19:03 . 2014-07-29 15:43 29168 ----a-w- c:\windows\system32\drivers\aswHwid.sys 2015-05-28 19:03 . 2014-07-29 15:43 93528 ----a-w- c:\windows\system32\drivers\aswRdr2.sys 2015-05-28 19:03 . 2014-07-29 15:43 1047320 ----a-w- c:\windows\system32\drivers\aswSnx.sys 2015-05-28 07:04 . 2014-12-23 16:57 2986392 ----a-w- c:\windows\SysWow64\nvapi.dll 2015-05-28 07:04 . 2014-11-19 19:29 112968 ----a-w- c:\windows\system32\OpenCL.dll 2015-05-28 07:04 . 2014-11-19 19:29 105288 ----a-w- c:\windows\SysWow64\OpenCL.dll 2015-05-28 07:04 . 2014-11-19 19:28 3379680 ----a-w- c:\windows\system32\nvapi64.dll 2015-05-28 07:04 . 2014-11-19 19:28 12852152 ----a-w- c:\windows\SysWow64\nvd3dum.dll 2015-05-28 04:15 . 2014-11-19 19:30 937288 ----a-w- c:\windows\system32\nvvsvc.exe 2015-05-28 04:15 . 2014-11-19 19:30 62608 ----a-w- c:\windows\system32\nvshext.dll 2015-05-28 04:15 . 2014-11-19 19:30 385168 ----a-w- c:\windows\system32\nvmctray.dll 2015-05-28 04:15 . 2014-11-19 19:30 3491984 ----a-w- c:\windows\system32\nvsvc64.dll 2015-05-28 04:15 . 2014-11-19 19:30 2558608 ----a-w- c:\windows\system32\nvsvcr.dll 2015-05-28 04:15 . 2014-11-19 19:30 6872904 ----a-w- c:\windows\system32\nvcpl.dll 2015-05-27 10:48 . 2014-11-19 19:30 4408727 ----a-w- c:\windows\system32\nvcoproc.bin 2015-05-23 01:47 . 2014-07-29 18:53 1316000 ----a-w- c:\windows\SysWow64\nvspbridge.dll 2015-05-23 01:47 . 2014-07-25 05:33 1320304 ----a-w- c:\windows\SysWow64\nvspcap.dll 2015-05-23 01:47 . 2014-07-29 18:53 1756424 ----a-w- c:\windows\system32\nvspbridge64.dll 2015-05-23 01:47 . 2014-07-25 05:33 1571696 ----a-w- c:\windows\system32\nvspcap64.dll 2015-05-13 06:52 . 2015-01-26 14:25 1558848 ----a-w- c:\windows\system32\nvhdagenco6420103.dll 2015-05-09 03:13 . 2015-06-10 05:00 44032 ----a-w- c:\windows\apppatch\acwow64.dll 2015-05-05 01:29 . 2015-05-14 01:32 342016 ----a-w- c:\windows\system32\schannel.dll 2015-05-05 01:12 . 2015-05-14 01:32 248832 ----a-w- c:\windows\SysWow64\schannel.dll 2015-05-01 13:17 . 2015-05-14 01:33 124112 ----a-w- c:\windows\system32\PresentationCFFRasterizerNative_v0300.dll 2015-05-01 13:16 . 2015-05-14 01:33 102608 ----a-w- c:\windows\SysWow64\PresentationCFFRasterizerNative_v0300.dll 2015-04-20 03:17 . 2015-05-14 01:32 1647104 ----a-w- c:\windows\system32\DWrite.dll 2015-04-20 03:17 . 2015-05-14 01:32 1179136 ----a-w- c:\windows\system32\FntCache.dll 2015-04-20 02:56 . 2015-05-14 01:31 1250816 ----a-w- c:\windows\SysWow64\DWrite.dll 2015-04-18 03:10 . 2015-05-14 01:32 460800 ----a-w- c:\windows\system32\certcli.dll 2015-04-18 02:56 . 2015-05-14 01:32 342016 ----a-w- c:\windows\SysWow64\certcli.dll 2015-04-14 07:37 . 2014-07-29 15:11 63704 ----a-w- c:\windows\system32\drivers\mwac.sys 2015-04-14 07:37 . 2014-07-29 15:11 107736 ----a-w- c:\windows\system32\drivers\mbamchameleon.sys 2015-04-14 07:37 . 2014-07-29 15:11 25816 ----a-w- c:\windows\system32\drivers\mbam.sys 2015-04-13 03:28 . 2015-05-14 01:32 328704 ----a-w- c:\windows\system32\services.exe 2015-04-09 00:58 . 2015-05-03 05:49 1895568 ----a-w- c:\windows\system32\nvdispco6435012.dll 2015-04-09 00:58 . 2015-05-03 05:49 1557648 ----a-w- c:\windows\system32\nvdispgenco6435012.dll 2015-04-08 03:29 . 2015-05-14 01:31 275456 ----a-w- c:\windows\system32\InkEd.dll 2015-04-08 03:29 . 2015-05-14 01:31 24576 ----a-w- c:\windows\system32\jnwmon.dll 2015-04-08 03:14 . 2015-05-14 01:31 216064 ----a-w- c:\windows\SysWow64\InkEd.dll 2015-04-04 03:29 . 2015-05-14 01:32 95680 ----a-w- c:\windows\system32\drivers\ksecdd.sys 2015-04-04 03:29 . 2015-05-14 01:32 155576 ----a-w- c:\windows\system32\drivers\ksecpkg.sys 2015-04-04 03:22 . 2015-05-14 01:32 210944 ----a-w- c:\windows\system32\wdigest.dll 2015-04-04 03:22 . 2015-05-14 01:32 86528 ----a-w- c:\windows\system32\TSpkg.dll 2015-04-04 03:22 . 2015-05-14 01:32 29184 ----a-w- c:\windows\system32\sspisrv.dll 2015-04-04 03:22 . 2015-05-14 01:32 136192 ----a-w- c:\windows\system32\sspicli.dll 2015-04-04 03:22 . 2015-05-14 01:32 28160 ----a-w- c:\windows\system32\secur32.dll 2015-04-04 03:22 . 2015-05-14 01:32 314880 ----a-w- c:\windows\system32\msv1_0.dll 2015-04-04 03:22 . 2015-05-14 01:32 309760 ----a-w- c:\windows\system32\ncrypt.dll 2015-04-04 03:22 . 2015-05-14 01:32 728064 ----a-w- c:\windows\system32\kerberos.dll 2015-04-04 03:22 . 2015-05-14 01:32 1461760 ----a-w- c:\windows\system32\lsasrv.dll 2015-04-04 03:22 . 2015-05-14 01:32 22016 ----a-w- c:\windows\system32\credssp.dll 2015-04-04 03:20 . 2015-05-14 01:32 31232 ----a-w- c:\windows\system32\lsass.exe 2015-04-04 03:20 . 2015-05-14 01:32 64000 ----a-w- c:\windows\system32\auditpol.exe 2015-04-04 03:17 . 2015-05-14 01:32 60416 ----a-w- c:\windows\system32\msobjs.dll 2015-04-04 03:17 . 2015-05-14 01:32 146432 ----a-w- c:\windows\system32\msaudite.dll 2015-04-04 03:15 . 2015-05-14 01:32 686080 ----a-w- c:\windows\system32\adtschema.dll 2015-04-04 03:05 . 2015-05-14 01:32 172032 ----a-w- c:\windows\SysWow64\wdigest.dll 2015-04-04 03:05 . 2015-05-14 01:32 65536 ----a-w- c:\windows\SysWow64\TSpkg.dll 2015-04-04 03:05 . 2015-05-14 01:32 22016 ----a-w- c:\windows\SysWow64\secur32.dll 2015-04-04 03:05 . 2015-05-14 01:32 221184 ----a-w- c:\windows\SysWow64\ncrypt.dll 2015-04-04 03:05 . 2015-05-14 01:32 259584 ----a-w- c:\windows\SysWow64\msv1_0.dll 2015-04-04 03:05 . 2015-05-14 01:32 550912 ----a-w- c:\windows\SysWow64\kerberos.dll 2015-04-04 03:05 . 2015-05-14 01:32 17408 ----a-w- c:\windows\SysWow64\credssp.dll 2015-04-04 03:04 . 2015-05-14 01:32 50176 ----a-w- c:\windows\SysWow64\auditpol.exe 2015-04-04 03:04 . 2015-05-14 01:32 96768 ----a-w- c:\windows\SysWow64\sspicli.dll 2015-04-04 03:01 . 2015-05-14 01:32 60416 ----a-w- c:\windows\SysWow64\msobjs.dll 2015-04-04 03:01 . 2015-05-14 01:32 146432 ----a-w- c:\windows\SysWow64\msaudite.dll 2015-04-04 02:59 . 2015-05-14 01:32 686080 ----a-w- c:\windows\SysWow64\adtschema.dll 2015-04-03 13:21 . 2014-05-28 09:24 52880 ----a-w- c:\windows\system32\nvaudcap64v.dll 2015-03-30 13:25 . 2014-09-05 08:13 33856 ---ha-w- c:\windows\system32\hamachi.sys 2015-03-25 03:24 . 2015-04-15 05:55 98304 ----a-w- c:\windows\system32\wudriver.dll 2015-03-25 03:24 . 2015-04-15 05:55 37376 ----a-w- c:\windows\system32\wups2.dll 2015-03-25 03:24 . 2015-04-15 05:55 35328 ----a-w- c:\windows\system32\wups.dll 2015-03-25 03:24 . 2015-04-15 05:55 3298816 ----a-w- c:\windows\system32\wucltux.dll 2015-03-25 03:24 . 2015-04-15 05:55 2553856 ----a-w- c:\windows\system32\wuaueng.dll 2015-03-25 03:24 . 2015-04-15 05:55 191488 ----a-w- c:\windows\system32\wuwebv.dll 2015-03-25 03:24 . 2015-04-15 05:55 696320 ----a-w- c:\windows\system32\wuapi.dll 2015-03-25 03:24 . 2015-04-15 05:55 60416 ----a-w- c:\windows\system32\WinSetupUI.dll 2015-03-25 03:23 . 2015-04-15 05:55 12288 ----a-w- c:\windows\system32\wu.upgrade.ps.dll 2015-03-25 03:23 . 2015-04-15 05:55 36864 ----a-w- c:\windows\system32\wuapp.exe 2015-03-25 03:23 . 2015-04-15 05:55 135168 ----a-w- c:\windows\system32\wuauclt.exe 2015-03-25 03:00 . 2015-04-15 05:55 92672 ----a-w- c:\windows\SysWow64\wudriver.dll 2015-03-25 03:00 . 2015-04-15 05:55 566784 ----a-w- c:\windows\SysWow64\wuapi.dll 2015-03-25 03:00 . 2015-04-15 05:55 29696 ----a-w- c:\windows\SysWow64\wups.dll 2015-03-25 03:00 . 2015-04-15 05:55 173056 ----a-w- c:\windows\SysWow64\wuwebv.dll 2015-03-25 03:00 . 2015-04-15 05:55 33792 ----a-w- c:\windows\SysWow64\wuapp.exe . . (((((((((((((((((((((((((((( Autostartpunkte der Registrierung )))))))))))))))))))))))))))))))))))))))) . . *Hinweis* leere Einträge & legitime Standardeinträge werden nicht angezeigt. REGEDIT4 . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2014-08-11 10:43 223432 ----a-w- c:\users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2014-08-11 10:43 223432 ----a-w- c:\users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2014-08-11 10:43 223432 ----a-w- c:\users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\SkyDriveShell.dll . [HKEY_CURRENT_USER\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "EADM"="c:\program files (x86)\Origin\Origin.exe" [2015-05-18 3632472] "Skype"="c:\program files (x86)\Skype\Phone\Skype.exe" [2015-05-14 28920448] "Akamai NetSession Interface"="c:\users\Gamer\AppData\Local\Akamai\netsession_win.exe" [2014-10-29 4673432] . [HKEY_LOCAL_MACHINE\SOFTWARE\Wow6432Node\Microsoft\Windows\CurrentVersion\Run] "AvastUI.exe"="c:\program files\AVAST Software\Avast\AvastUI.exe" [2015-05-28 5515496] "LogMeIn Hamachi Ui"="c:\program files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" [2015-03-30 3978600] "Aeria Ignite"="c:\program files (x86)\Aeria Games\Ignite\aeriaignite.exe" [2013-06-06 1925656] . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\policies\system] "ConsentPromptBehaviorAdmin"= 5 (0x5) "ConsentPromptBehaviorUser"= 3 (0x3) "EnableUIADesktopToggle"= 0 (0x0) "SoftwareSASGeneration"= 1 (0x1) . [HKEY_LOCAL_MACHINE\software\wow6432node\microsoft\windows nt\currentversion\windows] "LoadAppInit_DLLs"=1 (0x1) . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37] @="" . [HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Control\SafeBoot\Minimal\hitmanpro37.sys] @="" . R2 clr_optimization_v4.0.30319_64;Microsoft .NET Framework NGEN v4.0.30319_X64;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe;c:\windows\Microsoft.NET\Framework64\v4.0.30319\mscorsvw.exe [x] R2 SkypeUpdate;Skype Updater;c:\program files (x86)\Skype\Updater\Updater.exe;c:\program files (x86)\Skype\Updater\Updater.exe [x] R3 BRDriver64_1_3_3_E02B25FC;BRDriver64_1_3_3_E02B25FC;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys;c:\programdata\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [x] R3 BRSptStub;BitRaider Mini-Support Service Stub Loader;c:\programdata\BitRaider\BRSptStub.exe;c:\programdata\BitRaider\BRSptStub.exe [x] R3 IEEtwCollectorService;Internet Explorer ETW Collector Service;c:\windows\system32\IEEtwCollector.exe;c:\windows\SYSNATIVE\IEEtwCollector.exe [x] R3 Origin Client Service;Origin Client Service;c:\program files (x86)\Origin\OriginClientService.exe;c:\program files (x86)\Origin\OriginClientService.exe [x] R3 RdpVideoMiniport;Remote Desktop Video Miniport Driver;c:\windows\system32\drivers\rdpvideominiport.sys;c:\windows\SYSNATIVE\drivers\rdpvideominiport.sys [x] R3 taphss6;Anchorfree HSS VPN Adapter;c:\windows\system32\DRIVERS\taphss6.sys;c:\windows\SYSNATIVE\DRIVERS\taphss6.sys [x] R3 terminpt;Microsoft Remote Desktop Input Driver;c:\windows\system32\drivers\terminpt.sys;c:\windows\SYSNATIVE\drivers\terminpt.sys [x] R3 TsUsbFlt;TsUsbFlt;c:\windows\system32\drivers\tsusbflt.sys;c:\windows\SYSNATIVE\drivers\tsusbflt.sys [x] R3 TsUsbGD;Remote Desktop Generic USB Device;c:\windows\system32\drivers\TsUsbGD.sys;c:\windows\SYSNATIVE\drivers\TsUsbGD.sys [x] R3 WatAdminSvc;Windows-Aktivierungstechnologieservice;c:\windows\system32\Wat\WatAdminSvc.exe;c:\windows\SYSNATIVE\Wat\WatAdminSvc.exe [x] S0 33479496;33479496;c:\windows\system32\DRIVERS\33479496.sys;c:\windows\SYSNATIVE\DRIVERS\33479496.sys [x] S0 aswNdisFlt;Avast! Firewall Driver;c:\windows\system32\DRIVERS\aswNdisFlt.sys;c:\windows\SYSNATIVE\DRIVERS\aswNdisFlt.sys [x] S0 aswRvrt;avast! Revert; [x] S0 aswVmm;avast! VM Monitor; [x] S1 aswKbd;aswKbd;c:\windows\system32\drivers\aswKbd.sys;c:\windows\SYSNATIVE\drivers\aswKbd.sys [x] S1 aswSnx;aswSnx;c:\windows\system32\drivers\aswSnx.sys;c:\windows\SYSNATIVE\drivers\aswSnx.sys [x] S1 aswSP;aswSP;c:\windows\system32\drivers\aswSP.sys;c:\windows\SYSNATIVE\drivers\aswSP.sys [x] S1 Eve;EVE Protocol Driver;c:\windows\system32\DRIVERS\eve.sys;c:\windows\SYSNATIVE\DRIVERS\eve.sys [x] S2 aswHwid;avast! HardwareID;c:\windows\system32\drivers\aswHwid.sys;c:\windows\SYSNATIVE\drivers\aswHwid.sys [x] S2 aswMonFlt;aswMonFlt;c:\windows\system32\drivers\aswMonFlt.sys;c:\windows\SYSNATIVE\drivers\aswMonFlt.sys [x] S2 aswStm;aswStm;c:\windows\system32\drivers\aswStm.sys;c:\windows\SYSNATIVE\drivers\aswStm.sys [x] S2 avast! Firewall;Avast Firewall;c:\program files\AVAST Software\Avast\afwServ.exe;c:\program files\AVAST Software\Avast\afwServ.exe [x] S2 c2cautoupdatesvc;Skype Click to Call Updater;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe;c:\program files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [x] S2 c2cpnrsvc;Skype Click to Call PNR Service;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe;c:\program files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [x] S2 GfExperienceService;NVIDIA GeForce Experience Service;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe;c:\program files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [x] S2 Hamachi2Svc;LogMeIn Hamachi Tunneling Engine;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe;c:\program files (x86)\LogMeIn Hamachi\hamachi-2.exe [x] S2 LMIGuardianSvc;LMIGuardianSvc;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe;c:\program files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [x] S2 MBAMScheduler;MBAMScheduler;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [x] S2 MBAMService;MBAMService;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe;c:\program files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [x] S2 NvNetworkService;NVIDIA Network Service;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe;c:\program files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [x] S2 NvStreamSvc;NVIDIA Streamer Service;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe;c:\program files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [x] S2 Stereo Service;NVIDIA Stereoscopic 3D Driver Service;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe;c:\program files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe [x] S2 VBoxAswDrv;VBoxAsw Support Driver;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys;c:\program files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [x] S2 VIAKaraokeService;VIA Karaoke digital mixer Service;c:\windows\system32\viakaraokesrv.exe;c:\windows\SYSNATIVE\viakaraokesrv.exe [x] S3 AvastVBoxSvc;AvastVBox COM Service;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe;c:\program files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [x] S3 MBAMProtector;MBAMProtector;c:\windows\system32\drivers\mbam.sys;c:\windows\SYSNATIVE\drivers\mbam.sys [x] S3 MBAMSwissArmy;MBAMSwissArmy;c:\windows\system32\drivers\MBAMSwissArmy.sys;c:\windows\SYSNATIVE\drivers\MBAMSwissArmy.sys [x] S3 MBAMWebAccessControl;MBAMWebAccessControl;c:\windows\system32\drivers\mwac.sys;c:\windows\SYSNATIVE\drivers\mwac.sys [x] S3 NvStreamKms;NvStreamKms;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys;c:\program files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [x] S3 nvvad_WaveExtensible;NVIDIA Virtual Audio Device (Wave Extensible) (WDM);c:\windows\system32\drivers\nvvad64v.sys;c:\windows\SYSNATIVE\drivers\nvvad64v.sys [x] S3 RTL8167;Realtek 8167 NT Driver;c:\windows\system32\DRIVERS\Rt64win7.sys;c:\windows\SYSNATIVE\DRIVERS\Rt64win7.sys [x] S3 USBPNPA;USB PnP Sound Device Interface;c:\windows\system32\drivers\CM10864.sys;c:\windows\SYSNATIVE\drivers\CM10864.sys [x] S3 VIAHdAudAddService;VIA High Definition Audio Driver Service;c:\windows\system32\drivers\viahduaa.sys;c:\windows\SYSNATIVE\drivers\viahduaa.sys [x] S3 VUSB3HUB;VIA USB 3 Root Hub Service;c:\windows\system32\drivers\ViaHub3.sys;c:\windows\SYSNATIVE\drivers\ViaHub3.sys [x] S3 xhcdrv;VIA USB eXtensible Host Controller Service;c:\windows\system32\drivers\xhcdrv.sys;c:\windows\SYSNATIVE\drivers\xhcdrv.sys [x] . . --- Andere Dienste/Treiber im Speicher --- . *NewlyCreated* - MBAMSWISSARMY *NewlyCreated* - NVSTREAMKMS *NewlyCreated* - WS2IFSL . Inhalt des "geplante Tasks" Ordners . 2015-06-19 c:\windows\Tasks\Adobe Flash Player Updater.job - c:\windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2014-07-29 05:12] . . --------- X64 Entries ----------- . . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCError] @="{0960F090-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F090-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCErrorShared] @="{0960F091-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F091-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCOK] @="{0960F092-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F092-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCOKShared] @="{0960F093-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F093-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCSync] @="{0960F094-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F094-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCSyncShared] @="{0960F095-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F095-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCWarning] @="{0960F096-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F096-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ OCWarningShared] @="{0960F097-F328-48A3-B746-276B1E3C3722}" [HKEY_CLASSES_ROOT\CLSID\{0960F097-F328-48A3-B746-276B1E3C3722}] 2014-11-06 14:46 273408 ----a-w- c:\program files (x86)\ownCloud\shellext\OCOverlays_x64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive1] @="{F241C880-6982-4CE5-8CF7-7085BA96DA5A}" [HKEY_CLASSES_ROOT\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}] 2014-08-11 10:43 262344 ----a-w- c:\users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive2] @="{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}" [HKEY_CLASSES_ROOT\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}] 2014-08-11 10:43 262344 ----a-w- c:\users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\ SkyDrive3] @="{BBACC218-34EA-4666-9D7A-C78F2274A524}" [HKEY_CLASSES_ROOT\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}] 2014-08-11 10:43 262344 ----a-w- c:\users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll . [HKEY_LOCAL_MACHINE\software\microsoft\windows\currentversion\explorer\shelliconoverlayidentifiers\00avast] @="{472083B0-C522-11CF-8763-00608CC02F24}" [HKEY_CLASSES_ROOT\CLSID\{472083B0-C522-11CF-8763-00608CC02F24}] 2015-05-28 19:03 722400 ----a-w- c:\program files\AVAST Software\Avast\ashShA64.dll . [HKEY_LOCAL_MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Run] "NvBackend"="c:\program files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe" [2015-05-23 2754704] "ShadowPlay"="c:\windows\system32\nvspcap64.dll" [2015-05-23 1571696] "Cm108Sound"="c:\windows\Syswow64\cm108.dll" [2012-08-22 12935168] . ------- Zusätzlicher Suchlauf ------- . mDefault_Search_URL = hxxp://www.google.com mSearch Page = hxxp://www.google.com uInternet Settings,ProxyOverride = <local> IE: {{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - Trusted Zone: aeriagames.com FF - ProfilePath - c:\users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default\ FF - ExtSQL: !HIDDEN! 2014-08-11 20:46; {B64D9B05-48E1-4CEB-BF58-E0643994E900}; c:\program files (x86)\Common Files\DVDVideoSoft\plugins\ff . - - - - Entfernte verwaiste Registrierungseinträge - - - - . c:\users\Gamer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_33479496.lnk - c:\users\Gamer\AppData\Local\Temp\_uninst_33479496.bat c:\users\Gamer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Startup\_uninst_48964575.lnk - c:\users\Gamer\AppData\Local\Temp\_uninst_48964575.bat BHO-{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} - (no file) AddRemove-Battlelog Web Plugins - c:\program files (x86)\Battlelog Web Plugins\uninstall.exe AddRemove-PunkBusterSvc - c:\windows\system32\pbsvc.exe AddRemove-S4 League - c:\users\Gamer\Desktop\Sonstiges\S4League\Uninst.exe . . . --------------------- Gesperrte Registrierungsschluessel --------------------- . [HKEY_USERS\S-1-5-21-81771348-503357986-749784082-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.eml\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.Email.1" . [HKEY_USERS\S-1-5-21-81771348-503357986-749784082-1000\Software\Microsoft\Windows\CurrentVersion\Explorer\FileExts\.vcf\UserChoice] @Denied: (2) (LocalSystem) "Progid"="WindowsLiveMail.VCard.1" . [HKEY_USERS\S-1-5-21-81771348-503357986-749784082-1000\Software\SecuROM\License information*] "datasecu"=hex:0d,9e,9c,14,e7,6d,dc,17,cb,89,8b,df,b4,ac,b0,db,6b,18,ba,e7,32, e7,76,e0,cd,21,17,9c,c0,54,7f,a7,fa,0a,7a,38,ea,2e,e4,b7,3f,d7,63,eb,52,be,\ "rkeysecu"=hex:96,c5,f5,1e,a9,69,b3,22,1f,bc,dc,87,90,c8,dc,59 . [HKEY_LOCAL_MACHINE\system\ControlSet001\Control\PCW\Security] @Denied: (Full) (Everyone) . ------------------------ Weitere laufende Prozesse ------------------------ . c:\program files\AVAST Software\Avast\AvastSvc.exe c:\windows\SysWOW64\PnkBstrA.exe c:\program files (x86)\TeamViewer\TeamViewer_Service.exe c:\program files (x86)\ Malwarebytes Anti-Malware \mbam.exe . ************************************************************************** . Zeit der Fertigstellung: 2015-06-19 17:07:27 - PC wurde neu gestartet ComboFix-quarantined-files.txt 2015-06-19 15:07 . Vor Suchlauf: 10 Verzeichnis(se), 49.893.564.416 Bytes frei Nach Suchlauf: 14 Verzeichnis(se), 51.280.248.832 Bytes frei . - - End Of File - - 5D4178BF0993B8C778BEDF18B8526B9A A36C5E4F47E84449FF07ED3517B43A31 |
19.06.2015, 18:04 | #2 |
/// the machine /// TB-Ausbilder | Festplatte füllt sich im Minuten Takt hi,
__________________Bitte lade dir die passende Version von Farbar's Recovery Scan Tool auf deinen Desktop: FRST 32-Bit | FRST 64-Bit (Wenn du nicht sicher bist: Lade beide Versionen oder unter Start > Computer (Rechtsklick) > Eigenschaften nachschauen)
__________________ |
19.06.2015, 18:12 | #3 |
| Festplatte füllt sich im Minuten Takt Hier die FRST
__________________Code:
ATTFilter Scan result of Farbar Recovery Scan Tool (FRST) (x64) Version:13-06-2015 Ran by Gamer (administrator) on GAMER-PC on 19-06-2015 19:07:06 Running from C:\Users\Gamer\Desktop Loaded Profiles: Gamer (Available Profiles: Gamer) Platform: Windows 7 Home Premium Service Pack 1 (X64) OS Language: Deutsch (Deutschland) Internet Explorer Version 11 (Default browser: FF) Boot Mode: Normal Tutorial for Farbar Recovery Scan Tool: hxxp://www.geekstogo.com/forum/topic/335081-frst-tutorial-how-to-use-farbar-recovery-scan-tool/ ==================== Processes (Whitelisted) ================= (If an entry is included in the fixlist, the process will be closed. The file will not be moved.) (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\3D Vision\nvSCPAPISvr.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvxdsync.exe (NVIDIA Corporation) C:\Windows\System32\nvvsvc.exe (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\afwServ.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe (Microsoft Corporation) C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe (LogMeIn, Inc.) C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe () C:\Windows\SysWOW64\PnkBstrA.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe (VIA Technologies, Inc.) C:\Windows\System32\ViakaraokeSrv.exe (NVIDIA Corporation) C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe (Microsoft Corporation) C:\Windows\SysWOW64\rundll32.exe (Skype Technologies S.A.) C:\Program Files (x86)\Skype\Phone\Skype.exe (Akamai Technologies, Inc.) C:\Users\Gamer\AppData\Local\Akamai\netsession_win.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVC.EXE (Avast Software s.r.o.) C:\Program Files\AVAST Software\Avast\AvastUI.exe (LogMeIn Inc.) C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2.exe (Akamai Technologies, Inc.) C:\Users\Gamer\AppData\Local\Akamai\netsession_win.exe (Microsoft Corp.) C:\Program Files\Common Files\Microsoft Shared\Windows Live\WLIDSVCM.EXE (Avast Software) C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe (AVAST Software) C:\Program Files\AVAST Software\Avast\ng\ngservice.exe (NVIDIA Corporation) C:\Program Files\NVIDIA Corporation\Display\nvtray.exe (Microsoft Corporation) C:\Windows\System32\dllhost.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_w32.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\tv_x64.exe (TeamViewer GmbH) C:\Program Files (x86)\TeamViewer\TeamViewer_Desktop.exe (Sysinternals - www.sysinternals.com) C:\Users\Gamer\Desktop\procexp.exe (Sysinternals - www.sysinternals.com) C:\Users\Gamer\AppData\Local\Temp\procexp64.exe (Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe (Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe (Safer-Networking Ltd.) D:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe (Mozilla Corporation) C:\Program Files (x86)\Mozilla Firefox\firefox.exe ==================== Registry (Whitelisted) ================== (If an entry is included in the fixlist, the registry item will be restored to default or removed. The file will not be moved.) HKLM\...\Run: [NvBackend] => C:\Program Files (x86)\NVIDIA Corporation\Update Core\NvBackend.exe [2754704 2015-05-23] (NVIDIA Corporation) HKLM\...\Run: [ShadowPlay] => C:\Windows\system32\rundll32.exe C:\Windows\system32\nvspcap64.dll,ShadowPlayOnSystemStart HKLM\...\Run: [Cm108Sound] => C:\Windows\syswow64\RunDll32.exe C:\Windows\Syswow64\cm108.dll,CMICtrlWnd HKLM-x32\...\Run: [AvastUI.exe] => C:\Program Files\AVAST Software\Avast\AvastUI.exe [5515496 2015-05-28] (Avast Software s.r.o.) HKLM-x32\...\Run: [SDTray] => D:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe [4101576 2014-06-24] (Safer-Networking Ltd.) Winlogon\Notify\SDWinLogon-x32: SDWinLogon.dll [X] HKU\S-1-5-21-81771348-503357986-749784082-1000\...\Run: [EADM] => C:\Program Files (x86)\Origin\Origin.exe [3632472 2015-05-18] (Electronic Arts) HKU\S-1-5-21-81771348-503357986-749784082-1000\...\Run: [Skype] => C:\Program Files (x86)\Skype\Phone\Skype.exe [28920448 2015-05-14] (Skype Technologies S.A.) ShellIconOverlayIdentifiers: [ OCError] -> {0960F090-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCErrorShared] -> {0960F091-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOK] -> {0960F092-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCOKShared] -> {0960F093-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCSync] -> {0960F094-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCSyncShared] -> {0960F095-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCWarning] -> {0960F096-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [ OCWarningShared] -> {0960F097-F328-48A3-B746-276B1E3C3722} => C:\Program Files (x86)\ownCloud\shellext\OCOverlays_x64.dll [2014-11-06] (ownCloud Inc.) ShellIconOverlayIdentifiers: [00avast] -> {472083B0-C522-11CF-8763-00608CC02F24} => C:\Program Files\AVAST Software\Avast\ashShA64.dll [2015-05-28] (Avast Software s.r.o.) BootExecute: autocheck autochk * sdnclean64.exe ==================== Internet (Whitelisted) ==================== (If an item is included in the fixlist, if it is a registry item it will be removed or restored to default.) HKLM\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKU\S-1-5-21-81771348-503357986-749784082-1000\SOFTWARE\Policies\Microsoft\Internet Explorer: Policy restriction <======= ATTENTION HKLM\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Start Page = about:blank HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Search Page = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Page_URL = HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Default_Search_URL = hxxp://www.google.com HKLM\Software\Wow6432Node\Microsoft\Internet Explorer\Main,Local Page = HKU\.DEFAULT\Software\Microsoft\Internet Explorer\Main,Start Page = about:blank BHO: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE64.dll [2015-05-28] (Avast Software s.r.o.) BHO: Windows Live ID Sign-in Helper -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) BHO: No Name -> {EE932B49-D5C0-4D19-A3DA-CE0849258DE6} -> No File BHO-x32: Java(tm) Plug-In SSV Helper -> {761497BB-D6F0-462C-B6EB-D4DAF1D92D43} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\ssv.dll [2015-02-03] (Oracle Corporation) BHO-x32: avast! Online Security -> {8E5E2654-AD2D-48bf-AC2D-D17F00898D06} -> C:\Program Files\AVAST Software\Avast\aswWebRepIE.dll [2015-05-28] (Avast Software s.r.o.) BHO-x32: Microsoft-Konto-Anmelde-Hilfsprogramm -> {9030D464-4C02-4ABF-8ECC-5164760863C6} -> C:\Program Files (x86)\Common Files\Microsoft Shared\Windows Live\WindowsLiveLogin.dll [2012-07-17] (Microsoft Corp.) BHO-x32: Skype Click to Call for Internet Explorer -> {AE805869-2E5C-4ED4-8F7B-F1F7851A4497} -> C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) BHO-x32: Java(tm) Plug-In 2 SSV Helper -> {DBC80044-A445-435b-BC74-9C25C1C588A9} -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\jp2ssv.dll [2015-02-03] (Oracle Corporation) Handler: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer x64\skypeieplugin.dll [2015-05-01] (Microsoft Corporation) Handler-x32: skypec2c - {91774881-D725-4E58-B298-07617B9B86A8} - C:\Program Files (x86)\Skype\Toolbars\Internet Explorer\SkypeIEPlugin.dll [2015-05-01] (Microsoft Corporation) FireFox: ======== FF ProfilePath: C:\Users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default FF Plugin: @adobe.com/FlashPlayer -> C:\Windows\system32\Macromed\Flash\NPSWF64_18_0_0_160.dll [2015-06-13] () FF Plugin: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelogx64.dll No File FF Plugin: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelogx64.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin: @microsoft.com/GENUINE -> disabled No File FF Plugin: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-16] ( Microsoft Corporation) FF Plugin-x32: @adobe.com/FlashPlayer -> C:\Windows\SysWOW64\Macromed\Flash\NPSWF32_18_0_0_160.dll [2015-06-13] () FF Plugin-x32: @esn/npbattlelog,version=2.5.1 -> C:\Program Files (x86)\Battlelog Web Plugins\2.5.1\npbattlelog.dll No File FF Plugin-x32: @esn/npbattlelog,version=2.6.2 -> C:\Program Files (x86)\Battlelog Web Plugins\2.6.2\npbattlelog.dll [2015-01-13] (EA Digital Illusions CE AB) FF Plugin-x32: @java.com/DTPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\dtplugin\npDeployJava1.dll [2015-02-03] (Oracle Corporation) FF Plugin-x32: @java.com/JavaPlugin,version=11.31.2 -> C:\Program Files (x86)\Java\jre1.8.0_31\bin\plugin2\npjp2.dll [2015-02-03] (Oracle Corporation) FF Plugin-x32: @microsoft.com/GENUINE -> disabled No File FF Plugin-x32: @Microsoft.com/NpCtrl,version=1.0 -> C:\Program Files (x86)\Microsoft Silverlight\5.1.40416.0\npctrl.dll [2015-04-15] ( Microsoft Corporation) FF Plugin-x32: @microsoft.com/WLPG,version=16.4.3528.0331 -> C:\Program Files (x86)\Windows Live\Photo Gallery\NPWLPG.dll [2014-03-31] (Microsoft Corporation) FF Plugin-x32: @nvidia.com/3DVision -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dv.dll [2015-05-28] (NVIDIA Corporation) FF Plugin-x32: @nvidia.com/3DVisionStreaming -> C:\Program Files (x86)\NVIDIA Corporation\3D Vision\npnv3dvstreaming.dll [2015-05-28] (NVIDIA Corporation) FF SearchPlugin: C:\Users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default\searchplugins\google-images.xml [2014-09-10] FF SearchPlugin: C:\Users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default\searchplugins\google-maps.xml [2014-09-10] FF Extension: OLB - C:\Users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default\Extensions\{C752FF21-A8EF-468E-B507-5BBAFB84359D} [2014-12-30] FF Extension: Adblock Plus - C:\Users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default\Extensions\{d10d0bf8-f5b5-c8b4-a8b2-2b9879e08c5d}.xpi [2014-07-29] FF Extension: Skype Click to Call - C:\Program Files (x86)\Mozilla Firefox\browser\extensions\{82AF8DCA-6DE9-405D-BD5E-43525BDAD38A}.xpi [2015-06-03] FF HKLM-x32\...\Firefox\Extensions: [wrc@avast.com] - C:\Program Files\AVAST Software\Avast\WebRep\FF FF Extension: Avast Online Security - C:\Program Files\AVAST Software\Avast\WebRep\FF [2014-07-29] Chrome: ======= CHR HKLM-x32\...\Chrome\Extension: [gomekmidlodglbbmalcneegieacbdmki] - C:\Program Files\AVAST Software\Avast\WebRep\Chrome\aswWebRepChrome.crx [2015-03-19] ==================== Services (Whitelisted) ================= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R2 avast! Antivirus; C:\Program Files\AVAST Software\Avast\AvastSvc.exe [343336 2015-05-28] (Avast Software s.r.o.) R2 avast! Firewall; C:\Program Files\AVAST Software\Avast\afwServ.exe [107448 2015-05-28] (Avast Software s.r.o.) R3 AvastVBoxSvc; C:\Program Files\AVAST Software\Avast\ng\vbox\AvastVBoxSVC.exe [4034896 2015-05-28] (Avast Software) S3 BRSptStub; C:\ProgramData\BitRaider\BRSptStub.exe [363208 2015-02-15] (BitRaider, LLC) R2 c2cautoupdatesvc; C:\Program Files (x86)\Skype\Toolbars\AutoUpdate\SkypeC2CAutoUpdateSvc.exe [1394816 2015-05-01] (Microsoft Corporation) R2 c2cpnrsvc; C:\Program Files (x86)\Skype\Toolbars\PNRSvc\SkypeC2CPNRSvc.exe [1772672 2015-05-01] (Microsoft Corporation) R2 GfExperienceService; C:\Program Files\NVIDIA Corporation\GeForce Experience Service\GfExperienceService.exe [1152656 2015-05-23] (NVIDIA Corporation) R2 LMIGuardianSvc; C:\Program Files (x86)\LogMeIn Hamachi\LMIGuardianSvc.exe [417552 2015-03-30] (LogMeIn, Inc.) S2 MBAMScheduler; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamscheduler.exe [1871160 2015-04-14] (Malwarebytes Corporation) S2 MBAMService; C:\Program Files (x86)\ Malwarebytes Anti-Malware \mbamservice.exe [1080120 2015-04-14] (Malwarebytes Corporation) R2 NvNetworkService; C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe [1893008 2015-05-23] (NVIDIA Corporation) R2 NvStreamSvc; C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamsvc.exe [23006864 2015-05-23] (NVIDIA Corporation) S3 Origin Client Service; C:\Program Files (x86)\Origin\OriginClientService.exe [1931632 2015-05-18] (Electronic Arts) R2 PnkBstrA; C:\Windows\system32\PnkBstrA.exe [76152 2015-02-07] () R2 PnkBstrA; C:\Windows\SysWOW64\PnkBstrA.exe [76152 2015-03-19] () R2 SDScannerService; D:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe [1738168 2014-06-24] (Safer-Networking Ltd.) R2 SDUpdateService; D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe [2088408 2014-06-27] (Safer-Networking Ltd.) R2 SDWSCService; D:\Program Files (x86)\Spybot - Search & Destroy 2\SDWSCSvc.exe [171928 2014-04-25] (Safer-Networking Ltd.) R2 TeamViewer; C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe [5426448 2014-12-15] (TeamViewer GmbH) R2 VIAKaraokeService; C:\Windows\system32\viakaraokesrv.exe [27792 2012-08-15] (VIA Technologies, Inc.) R2 WinDefend; C:\Program Files\Windows Defender\mpsvc.dll [1011712 2013-05-27] (Microsoft Corporation) ==================== Drivers (Whitelisted) ==================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) R0 33479496; C:\Windows\System32\DRIVERS\33479496.sys [458336 2014-11-20] (Kaspersky Lab ZAO) R2 aswHwid; C:\Windows\system32\drivers\aswHwid.sys [29168 2015-05-28] () R1 aswKbd; C:\Windows\system32\drivers\aswKbd.sys [28144 2015-05-28] (Avast Software s.r.o.) R2 aswMonFlt; C:\Windows\system32\drivers\aswMonFlt.sys [89944 2015-05-28] (Avast Software s.r.o.) R0 aswNdisFlt; C:\Windows\System32\DRIVERS\aswNdisFlt.sys [449896 2015-05-28] (Avast Software s.r.o.) R1 aswRdr; C:\Windows\system32\drivers\aswRdr2.sys [93528 2015-05-28] (Avast Software s.r.o.) R0 aswRvrt; C:\Windows\System32\Drivers\aswRvrt.sys [65736 2015-05-28] () R1 aswSnx; C:\Windows\system32\drivers\aswSnx.sys [1047320 2015-05-28] (Avast Software s.r.o.) R1 aswSP; C:\Windows\system32\drivers\aswSP.sys [442264 2015-05-28] (Avast Software s.r.o.) R2 aswStm; C:\Windows\system32\drivers\aswStm.sys [137288 2015-05-28] (Avast Software s.r.o.) R0 aswVmm; C:\Windows\System32\Drivers\aswVmm.sys [272248 2015-05-28] () S3 BRDriver64_1_3_3_E02B25FC; C:\ProgramData\BitRaider\support\1.3.3\E02B25FC\BRDriver64.sys [78088 2015-02-15] (BitRaider) S3 E100B; C:\Windows\System32\DRIVERS\efe5b32e.sys [192256 2009-06-10] (Intel Corporation) R1 Eve; C:\Windows\System32\DRIVERS\eve.sys [41304 2014-04-10] () S3 MBAMProtector; C:\Windows\system32\drivers\mbam.sys [25816 2015-04-14] (Malwarebytes Corporation) S3 MBAMWebAccessControl; C:\Windows\system32\drivers\mwac.sys [63704 2015-04-14] (Malwarebytes Corporation) R3 NvStreamKms; C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamKms.sys [19600 2015-05-23] (NVIDIA Corporation) R3 nvvad_WaveExtensible; C:\Windows\System32\drivers\nvvad64v.sys [38032 2015-04-03] (NVIDIA Corporation) S3 taphss6; C:\Windows\System32\DRIVERS\taphss6.sys [42184 2014-05-17] (Anchorfree Inc.) R3 trufos; C:\Windows\System32\drivers\trufos.sys [350160 2014-10-24] (BitDefender S.R.L.) R2 VBoxAswDrv; C:\Program Files\AVAST Software\Avast\ng\vbox\VBoxAswDrv.sys [273824 2015-05-28] (Avast Software) R3 VUSB3HUB; C:\Windows\system32\drivers\ViaHub3.sys [231112 2013-01-03] (VIA Technologies, Inc.) R3 xhcdrv; C:\Windows\system32\drivers\xhcdrv.sys [301256 2013-01-03] (VIA Technologies, Inc.) ==================== NetSvcs (Whitelisted) =================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) ==================== One Month Created files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-19 19:07 - 2015-06-19 19:07 - 00018093 _____ C:\Users\Gamer\Desktop\FRST.txt 2015-06-19 19:06 - 2015-06-19 19:07 - 00000000 ____D C:\FRST 2015-06-19 19:06 - 2015-06-19 19:06 - 02109952 _____ (Farbar) C:\Users\Gamer\Desktop\FRST64.exe 2015-06-19 18:56 - 2015-06-19 18:56 - 00000000 ____D C:\Program Files (x86)\Spybot - Search & Destroy 2 2015-06-19 18:52 - 2015-06-19 19:01 - 00000000 ____D C:\ProgramData\Spybot - Search & Destroy 2015-06-19 18:52 - 2015-06-19 18:52 - 00001064 _____ C:\Users\Public\Desktop\Spybot-S&D Start Center.lnk 2015-06-19 18:52 - 2015-06-19 18:52 - 00001064 _____ C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot-S&D Start Center.lnk 2015-06-19 18:52 - 2015-06-19 18:52 - 00000000 ____D C:\Windows\System32\Tasks\Safer-Networking 2015-06-19 18:52 - 2015-06-19 18:52 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Spybot - Search & Destroy 2 2015-06-19 18:52 - 2013-09-20 10:49 - 00021040 _____ (Safer Networking Limited) C:\Windows\system32\sdnclean64.exe 2015-06-19 18:50 - 2015-06-19 18:50 - 46525608 _____ (Safer-Networking Ltd. ) C:\Users\Gamer\Downloads\spybot-2.4.exe 2015-06-19 18:10 - 2015-06-19 18:10 - 00000000 ____D C:\Windows\rundll16.exe 2015-06-19 18:10 - 2015-06-19 18:10 - 00000000 ____D C:\Windows\logo1_.exe 2015-06-19 17:41 - 2015-06-19 17:41 - 00000000 ____D C:\Users\Gamer\Doctor Web 2015-06-19 17:23 - 2015-06-19 17:23 - 00029291 _____ C:\Users\Gamer\Desktop\Combofix.txt 2015-06-19 17:07 - 2015-06-19 17:07 - 00029291 _____ C:\ComboFix.txt 2015-06-19 16:42 - 2015-06-19 17:07 - 00000000 ____D C:\Qoobox 2015-06-19 16:42 - 2015-06-19 17:05 - 00000000 ____D C:\Windows\erdnt 2015-06-19 16:42 - 2011-06-26 08:45 - 00256000 _____ C:\Windows\PEV.exe 2015-06-19 16:42 - 2010-11-07 19:20 - 00208896 _____ C:\Windows\MBR.exe 2015-06-19 16:42 - 2009-04-20 06:56 - 00060416 _____ (NirSoft) C:\Windows\NIRCMD.exe 2015-06-19 16:42 - 2000-08-31 02:00 - 00518144 _____ (SteelWerX) C:\Windows\SWREG.exe 2015-06-19 16:42 - 2000-08-31 02:00 - 00406528 _____ (SteelWerX) C:\Windows\SWSC.exe 2015-06-19 16:42 - 2000-08-31 02:00 - 00098816 _____ C:\Windows\sed.exe 2015-06-19 16:42 - 2000-08-31 02:00 - 00080412 _____ C:\Windows\grep.exe 2015-06-19 16:42 - 2000-08-31 02:00 - 00068096 _____ C:\Windows\zip.exe 2015-06-19 16:34 - 2015-06-19 18:45 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\JAM Software 2015-06-19 16:24 - 2015-06-19 16:25 - 00000000 ____D C:\KVRT_Data 2015-06-19 16:02 - 2015-06-19 16:22 - 00000000 ____D C:\ProgramData\HitmanPro 2015-06-19 16:01 - 2015-06-19 16:01 - 13380715 _____ C:\Users\Gamer\Downloads\HitmanPro_3.7.9.242.zip 2015-06-19 15:46 - 2015-06-19 15:49 - 158158304 _____ C:\Users\Gamer\Desktop\mwav.exe 2015-06-19 15:18 - 2015-03-09 15:48 - 02508440 _____ (Sysinternals - www.sysinternals.com) C:\Users\Gamer\Desktop\procexp.exe 2015-06-19 15:17 - 2015-06-19 15:17 - 01125626 _____ C:\Users\Gamer\Downloads\ProcessExplorer_16.5.zip 2015-06-19 00:29 - 2015-06-19 00:29 - 00000000 ____D C:\Program Files (x86)\Dungeon Defenders 2015-06-18 22:47 - 2015-06-18 22:47 - 00000221 _____ C:\Users\Gamer\Desktop\Dungeon Defenders.url 2015-06-17 18:07 - 2015-06-17 18:09 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Download Manager 2015-06-17 14:07 - 2015-05-28 21:03 - 00364472 _____ (Avast Software s.r.o.) C:\Windows\system32\aswBoot.exe 2015-06-15 17:21 - 2015-06-15 17:21 - 00000000 ____D C:\Users\Gamer\AppData\Local\Activision 2015-06-15 17:20 - 2015-06-15 17:20 - 00682280 _____ C:\Windows\SysWOW64\pbsvc.exe 2015-06-15 17:17 - 2015-06-15 17:17 - 00000221 _____ C:\Users\Gamer\Desktop\Lost Planet 2.url 2015-06-14 20:52 - 2015-06-14 20:52 - 00000000 ____D C:\Users\Gamer\Documents\SavedGames 2015-06-13 08:07 - 2015-06-13 08:07 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\DarkSoulsII 2015-06-12 09:09 - 2015-06-12 09:09 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Empty Clip Studios 2015-06-11 06:14 - 2015-06-11 06:14 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\CobiMobi 2015-06-11 06:12 - 2015-06-11 06:12 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\MMFApplications 2015-06-10 07:00 - 2015-05-25 19:08 - 03206144 _____ (Microsoft Corporation) C:\Windows\system32\win32k.sys 2015-06-10 07:00 - 2015-05-09 05:27 - 00362496 _____ (Microsoft Corporation) C:\Windows\system32\wow64win.dll 2015-06-10 07:00 - 2015-05-09 05:27 - 00243712 _____ (Microsoft Corporation) C:\Windows\system32\wow64.dll 2015-06-10 07:00 - 2015-05-09 05:27 - 00215040 _____ (Microsoft Corporation) C:\Windows\system32\winsrv.dll 2015-06-10 07:00 - 2015-05-09 05:27 - 00013312 _____ (Microsoft Corporation) C:\Windows\system32\wow64cpu.dll 2015-06-10 07:00 - 2015-05-09 05:26 - 01162752 _____ (Microsoft Corporation) C:\Windows\system32\kernel32.dll 2015-06-10 07:00 - 2015-05-09 05:26 - 00424960 _____ (Microsoft Corporation) C:\Windows\system32\KernelBase.dll 2015-06-10 07:00 - 2015-05-09 05:26 - 00016384 _____ (Microsoft Corporation) C:\Windows\system32\ntvdm64.dll 2015-06-10 07:00 - 2015-05-09 05:25 - 00338432 _____ (Microsoft Corporation) C:\Windows\system32\conhost.exe 2015-06-10 07:00 - 2015-05-09 05:20 - 00006144 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-security-base-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00005120 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-file-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00004608 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-synch-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00004096 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-localization-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-misc-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-memory-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003584 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-heap-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-xstate-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-util-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-string-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-profile-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-io-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-handle-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-fibers-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-delayload-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-debug-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-datetime-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:20 - 00003072 ____H (Microsoft Corporation) C:\Windows\system32\api-ms-win-core-console-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:13 - 00025600 _____ (Microsoft Corporation) C:\Windows\SysWOW64\setup16.exe 2015-06-10 07:00 - 2015-05-09 05:13 - 00014336 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ntvdm64.dll 2015-06-10 07:00 - 2015-05-09 05:12 - 01114112 _____ (Microsoft Corporation) C:\Windows\SysWOW64\kernel32.dll 2015-06-10 07:00 - 2015-05-09 05:12 - 00274944 _____ (Microsoft Corporation) C:\Windows\SysWOW64\KernelBase.dll 2015-06-10 07:00 - 2015-05-09 05:12 - 00005120 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wow32.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00005120 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-file-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processthreads-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-sysinfo-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-synch-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-misc-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localregistry-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00004096 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-localization-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-processenvironment-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-namedpipe-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-memory-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-libraryloader-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-interlocked-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-heap-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-string-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-rtlsupport-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-profile-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-io-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-handle-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-fibers-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-errorhandling-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-delayload-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-debug-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-datetime-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 05:08 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-console-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 04:01 - 00007680 _____ (Microsoft Corporation) C:\Windows\SysWOW64\instnm.exe 2015-06-10 07:00 - 2015-05-09 04:01 - 00002048 _____ (Microsoft Corporation) C:\Windows\SysWOW64\user.exe 2015-06-10 07:00 - 2015-05-09 03:59 - 00006144 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-security-base-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 03:59 - 00004608 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-threadpool-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 03:59 - 00003584 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-xstate-l1-1-0.dll 2015-06-10 07:00 - 2015-05-09 03:59 - 00003072 ____H (Microsoft Corporation) C:\Windows\SysWOW64\api-ms-win-core-util-l1-1-0.dll 2015-06-10 07:00 - 2015-04-29 20:22 - 14635008 _____ (Microsoft Corporation) C:\Windows\system32\wmp.dll 2015-06-10 07:00 - 2015-04-29 20:21 - 00009728 _____ (Microsoft Corporation) C:\Windows\system32\spwmp.dll 2015-06-10 07:00 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\msdxm.ocx 2015-06-10 07:00 - 2015-04-29 20:21 - 00005120 _____ (Microsoft Corporation) C:\Windows\system32\dxmasf.dll 2015-06-10 07:00 - 2015-04-29 20:19 - 12625920 _____ (Microsoft Corporation) C:\Windows\system32\wmploc.DLL 2015-06-10 07:00 - 2015-04-29 20:07 - 11411456 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmp.dll 2015-06-10 07:00 - 2015-04-29 20:07 - 00008192 _____ (Microsoft Corporation) C:\Windows\SysWOW64\spwmp.dll 2015-06-10 07:00 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msdxm.ocx 2015-06-10 07:00 - 2015-04-29 20:07 - 00004096 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxmasf.dll 2015-06-10 07:00 - 2015-04-29 20:05 - 12625408 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wmploc.DLL 2015-06-10 07:00 - 2015-04-24 20:17 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\comctl32.dll 2015-06-10 07:00 - 2015-04-24 19:56 - 00530432 _____ (Microsoft Corporation) C:\Windows\SysWOW64\comctl32.dll 2015-06-10 06:59 - 2015-06-01 21:16 - 00389840 _____ (Microsoft Corporation) C:\Windows\system32\iedkcs32.dll 2015-06-10 06:59 - 2015-06-01 20:07 - 00342736 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iedkcs32.dll 2015-06-10 06:59 - 2015-05-27 16:35 - 24917504 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.dll 2015-06-10 06:59 - 2015-05-27 16:08 - 19607040 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.dll 2015-06-10 06:59 - 2015-05-23 05:28 - 02724864 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtml.tlb 2015-06-10 06:59 - 2015-05-23 05:15 - 00503808 _____ (Microsoft Corporation) C:\Windows\SysWOW64\vbscript.dll 2015-06-10 06:59 - 2015-05-23 05:15 - 00062464 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iesetup.dll 2015-06-10 06:59 - 2015-05-23 05:15 - 00047616 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieetwproxystub.dll 2015-06-10 06:59 - 2015-05-23 05:14 - 00341504 _____ (Microsoft Corporation) C:\Windows\SysWOW64\html.iec 2015-06-10 06:59 - 2015-05-23 05:13 - 00064000 _____ (Microsoft Corporation) C:\Windows\SysWOW64\MshtmlDac.dll 2015-06-10 06:59 - 2015-05-23 05:10 - 02278912 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iertutil.dll 2015-06-10 06:59 - 2015-05-23 05:09 - 00047104 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jsproxy.dll 2015-06-10 06:59 - 2015-05-23 05:08 - 00030720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\iernonce.dll 2015-06-10 06:59 - 2015-05-23 05:06 - 00478208 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieui.dll 2015-06-10 06:59 - 2015-05-23 05:05 - 00664064 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript.dll 2015-06-10 06:59 - 2015-05-23 05:05 - 00115712 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieUnatt.exe 2015-06-10 06:59 - 2015-05-23 05:04 - 00620032 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9diag.dll 2015-06-10 06:59 - 2015-05-23 04:57 - 00418304 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtmsft.dll 2015-06-10 06:59 - 2015-05-23 04:52 - 00060416 _____ (Microsoft Corporation) C:\Windows\SysWOW64\JavaScriptCollectionAgent.dll 2015-06-10 06:59 - 2015-05-23 04:49 - 00168960 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msrating.dll 2015-06-10 06:59 - 2015-05-23 04:48 - 00076288 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmled.dll 2015-06-10 06:59 - 2015-05-23 04:47 - 04305920 _____ (Microsoft Corporation) C:\Windows\SysWOW64\jscript9.dll 2015-06-10 06:59 - 2015-05-23 04:47 - 00285696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\dxtrans.dll 2015-06-10 06:59 - 2015-05-23 04:38 - 00689152 _____ (Microsoft Corporation) C:\Windows\SysWOW64\msfeeds.dll 2015-06-10 06:59 - 2015-05-23 04:37 - 02052608 _____ (Microsoft Corporation) C:\Windows\SysWOW64\inetcpl.cpl 2015-06-10 06:59 - 2015-05-23 04:37 - 01155072 _____ (Microsoft Corporation) C:\Windows\SysWOW64\mshtmlmedia.dll 2015-06-10 06:59 - 2015-05-23 04:28 - 12829696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieframe.dll 2015-06-10 06:59 - 2015-05-23 04:20 - 01950720 _____ (Microsoft Corporation) C:\Windows\SysWOW64\wininet.dll 2015-06-10 06:59 - 2015-05-23 04:16 - 01309696 _____ (Microsoft Corporation) C:\Windows\SysWOW64\urlmon.dll 2015-06-10 06:59 - 2015-05-23 04:14 - 00710144 _____ (Microsoft Corporation) C:\Windows\SysWOW64\ieapfltr.dll 2015-06-10 06:59 - 2015-05-22 21:16 - 02724864 _____ (Microsoft Corporation) C:\Windows\system32\mshtml.tlb 2015-06-10 06:59 - 2015-05-22 21:16 - 00004096 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollectorres.dll 2015-06-10 06:59 - 2015-05-22 21:01 - 00066560 _____ (Microsoft Corporation) C:\Windows\system32\iesetup.dll 2015-06-10 06:59 - 2015-05-22 21:00 - 02885632 _____ (Microsoft Corporation) C:\Windows\system32\iertutil.dll 2015-06-10 06:59 - 2015-05-22 21:00 - 00584192 _____ (Microsoft Corporation) C:\Windows\system32\vbscript.dll 2015-06-10 06:59 - 2015-05-22 21:00 - 00417792 _____ (Microsoft Corporation) C:\Windows\system32\html.iec 2015-06-10 06:59 - 2015-05-22 21:00 - 00048640 _____ (Microsoft Corporation) C:\Windows\system32\ieetwproxystub.dll 2015-06-10 06:59 - 2015-05-22 20:59 - 00088064 _____ (Microsoft Corporation) C:\Windows\system32\MshtmlDac.dll 2015-06-10 06:59 - 2015-05-22 20:53 - 00054784 _____ (Microsoft Corporation) C:\Windows\system32\jsproxy.dll 2015-06-10 06:59 - 2015-05-22 20:52 - 06026240 _____ (Microsoft Corporation) C:\Windows\system32\jscript9.dll 2015-06-10 06:59 - 2015-05-22 20:52 - 00034304 _____ (Microsoft Corporation) C:\Windows\system32\iernonce.dll 2015-06-10 06:59 - 2015-05-22 20:48 - 00633856 _____ (Microsoft Corporation) C:\Windows\system32\ieui.dll 2015-06-10 06:59 - 2015-05-22 20:47 - 00816640 _____ (Microsoft Corporation) C:\Windows\system32\jscript.dll 2015-06-10 06:59 - 2015-05-22 20:47 - 00814080 _____ (Microsoft Corporation) C:\Windows\system32\jscript9diag.dll 2015-06-10 06:59 - 2015-05-22 20:47 - 00144384 _____ (Microsoft Corporation) C:\Windows\system32\ieUnatt.exe 2015-06-10 06:59 - 2015-05-22 20:47 - 00114688 _____ (Microsoft Corporation) C:\Windows\system32\ieetwcollector.exe 2015-06-10 06:59 - 2015-05-22 20:40 - 00968704 _____ (Microsoft Corporation) C:\Windows\system32\MsSpellCheckingFacility.exe 2015-06-10 06:59 - 2015-05-22 20:36 - 00490496 _____ (Microsoft Corporation) C:\Windows\system32\dxtmsft.dll 2015-06-10 06:59 - 2015-05-22 20:29 - 00077824 _____ (Microsoft Corporation) C:\Windows\system32\JavaScriptCollectionAgent.dll 2015-06-10 06:59 - 2015-05-22 20:25 - 00199680 _____ (Microsoft Corporation) C:\Windows\system32\msrating.dll 2015-06-10 06:59 - 2015-05-22 20:24 - 00092160 _____ (Microsoft Corporation) C:\Windows\system32\mshtmled.dll 2015-06-10 06:59 - 2015-05-22 20:21 - 00316928 _____ (Microsoft Corporation) C:\Windows\system32\dxtrans.dll 2015-06-10 06:59 - 2015-05-22 20:07 - 00720384 _____ (Microsoft Corporation) C:\Windows\system32\ie4uinit.exe 2015-06-10 06:59 - 2015-05-22 20:06 - 00801280 _____ (Microsoft Corporation) C:\Windows\system32\msfeeds.dll 2015-06-10 06:59 - 2015-05-22 20:05 - 02125824 _____ (Microsoft Corporation) C:\Windows\system32\inetcpl.cpl 2015-06-10 06:59 - 2015-05-22 20:05 - 01359360 _____ (Microsoft Corporation) C:\Windows\system32\mshtmlmedia.dll 2015-06-10 06:59 - 2015-05-22 19:57 - 14404096 _____ (Microsoft Corporation) C:\Windows\system32\ieframe.dll 2015-06-10 06:59 - 2015-05-22 19:50 - 02426880 _____ (Microsoft Corporation) C:\Windows\system32\wininet.dll 2015-06-10 06:59 - 2015-05-22 19:38 - 01545728 _____ (Microsoft Corporation) C:\Windows\system32\urlmon.dll 2015-06-10 06:59 - 2015-05-22 19:26 - 00800768 _____ (Microsoft Corporation) C:\Windows\system32\ieapfltr.dll 2015-06-09 18:22 - 2015-06-09 18:22 - 00000475 _____ C:\Users\Gamer\Desktop\YGOPro DevPro Launcher.lnk 2015-06-09 18:22 - 2015-06-09 18:22 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\YGOPro DevPro 2015-06-09 18:20 - 2015-06-09 18:20 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\DevPro, LLC 2015-06-09 07:20 - 2015-06-09 07:20 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\47515E80.sys 2015-06-08 09:25 - 2015-06-08 09:25 - 00319760 _____ C:\Windows\Minidump\060815-23290-01.dmp 2015-06-03 07:47 - 2015-06-04 11:22 - 00000000 ____D C:\Program Files (x86)\Mozilla Firefox 2015-06-01 13:17 - 2015-05-28 05:52 - 00571024 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvStreaming.exe 2015-06-01 13:15 - 2015-05-28 09:04 - 42719888 _____ C:\Windows\system32\nvcompiler.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 37741712 _____ C:\Windows\SysWOW64\nvcompiler.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 30480528 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglv64.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 22946960 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglv32.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 17486856 _____ (NVIDIA Corporation) C:\Windows\system32\nvwgf2umx.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 16185352 _____ (NVIDIA Corporation) C:\Windows\system32\nvopencl.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 15864064 _____ (NVIDIA Corporation) C:\Windows\system32\nvd3dumx.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 14987528 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvwgf2um.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 14495448 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuda.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 13304280 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvopencl.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 11830512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuda.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 10995528 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvlddmkm.sys 2015-06-01 13:15 - 2015-05-28 09:04 - 02932368 _____ (NVIDIA Corporation) C:\Windows\system32\nvcuvid.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 02599056 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvcuvid.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435306.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 01557832 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435306.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 01099808 _____ (NVIDIA Corporation) C:\Windows\system32\nvumdshimx.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 01059984 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFR64.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 01050440 _____ (NVIDIA Corporation) C:\Windows\system32\NvFBC64.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00982856 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFR.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00974480 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvFBC.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00939080 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvumdshim.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00503408 _____ (NVIDIA Corporation) C:\Windows\system32\nvEncodeAPI64.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00408208 _____ (NVIDIA Corporation) C:\Windows\system32\NvIFROpenGL.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00407112 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvEncodeAPI.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00364176 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\NvIFROpenGL.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00175880 _____ (NVIDIA Corporation) C:\Windows\system32\nvinitx.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00154256 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvinit.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00150648 _____ (NVIDIA Corporation) C:\Windows\system32\nvoglshim64.dll 2015-06-01 13:15 - 2015-05-28 09:04 - 00128512 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvoglshim32.dll 2015-06-01 13:00 - 2015-06-17 09:32 - 00000000 ____D C:\ProgramData\boost_interprocess 2015-06-01 13:00 - 2015-04-03 15:21 - 00048784 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvaudcap32v.dll 2015-06-01 13:00 - 2015-04-03 15:21 - 00038032 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvvad64v.sys 2015-05-28 21:05 - 2015-06-17 14:08 - 00001892 _____ C:\Users\Public\Desktop\Avast Internet Security.lnk 2015-05-28 21:03 - 2015-05-28 21:03 - 00449896 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswNdisFlt.sys 2015-05-28 21:03 - 2015-05-28 21:03 - 00043112 _____ (Avast Software s.r.o.) C:\Windows\avastSS.scr 2015-05-28 21:03 - 2015-05-28 21:03 - 00028144 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswKbd.sys 2015-05-26 19:46 - 2015-05-26 19:46 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Trine2 2015-05-23 04:56 - 2015-05-23 04:56 - 00000000 ____D C:\Windows\SysWOW64\vbox 2015-05-23 04:56 - 2015-05-23 04:56 - 00000000 ____D C:\Windows\system32\vbox 2015-05-21 23:53 - 2015-05-13 08:52 - 00195912 _____ (NVIDIA Corporation) C:\Windows\system32\Drivers\nvhda64v.sys 2015-05-21 23:53 - 2015-05-13 08:52 - 00031552 _____ (NVIDIA Corporation) C:\Windows\system32\nvhdap64.dll 2015-05-21 23:53 - 2015-05-12 08:27 - 01898312 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispco6435286.dll 2015-05-21 23:53 - 2015-05-12 08:27 - 01557648 _____ (NVIDIA Corporation) C:\Windows\system32\nvdispgenco6435286.dll ==================== One Month Modified files and folders ======== (If an entry is included in the fixlist, the file/folder will be moved.) 2015-06-19 19:05 - 2014-07-29 12:20 - 00000884 _____ C:\Windows\Tasks\Adobe Flash Player Updater.job 2015-06-19 18:47 - 2014-07-29 09:42 - 00000000 ____D C:\Users\Gamer\AppData\Local\VirtualStore 2015-06-19 18:26 - 2014-08-09 10:27 - 00000000 ____D C:\Users\Gamer\AppData\Local\LogMeIn Hamachi 2015-06-19 18:26 - 2014-07-29 10:13 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Skype 2015-06-19 18:10 - 2014-10-24 21:30 - 00011933 _____ C:\Windows\general.log 2015-06-19 18:10 - 2014-10-24 21:30 - 00000056 _____ C:\Windows\Lic.xxx 2015-06-19 18:07 - 2009-07-14 06:45 - 00020288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-1.C7483456-A289-439d-8115-601632D005A0 2015-06-19 18:07 - 2009-07-14 06:45 - 00020288 ____H C:\Windows\system32\7B296FB0-376B-497e-B012-9C450E1B7327-5P-0.C7483456-A289-439d-8115-601632D005A0 2015-06-19 18:05 - 2014-10-24 21:31 - 00007710 _____ C:\Windows\ESCAN.LOG 2015-06-19 18:05 - 2009-07-14 04:34 - 00000820 _____ C:\Windows\win.ini 2015-06-19 17:42 - 2014-07-29 09:42 - 00000000 ____D C:\Users\Gamer 2015-06-19 17:28 - 2014-07-29 09:38 - 01361294 _____ C:\Windows\WindowsUpdate.log 2015-06-19 17:26 - 2014-07-29 17:11 - 00136408 _____ (Malwarebytes Corporation) C:\Windows\system32\Drivers\MBAMSwissArmy.sys 2015-06-19 17:25 - 2014-04-03 08:36 - 00142739 _____ C:\Windows\setupact.log 2015-06-19 17:25 - 2009-07-14 07:08 - 00000006 ____H C:\Windows\Tasks\SA.DAT 2015-06-19 17:24 - 2014-11-19 21:30 - 00000000 ____D C:\ProgramData\NVIDIA 2015-06-19 17:07 - 2009-07-14 05:20 - 00000000 __RHD C:\Users\Default 2015-06-19 17:01 - 2009-07-14 04:34 - 00000215 _____ C:\Windows\system.ini 2015-06-19 17:00 - 2010-11-21 05:47 - 01077082 _____ C:\Windows\PFRO.log 2015-06-19 16:23 - 2014-07-29 10:36 - 00000000 ____D C:\Users\Gamer\Desktop\Sonstiges 2015-06-19 15:53 - 2014-07-29 10:22 - 00000000 ____D C:\Program Files (x86)\Steam 2015-06-19 00:29 - 2014-07-29 20:33 - 00854498 _____ C:\Windows\DirectX.log 2015-06-18 22:50 - 2014-10-12 13:56 - 00000000 ____D C:\Users\Gamer\Desktop\Gamer spiele und so 2015-06-18 22:47 - 2014-07-30 10:32 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Microsoft\Windows\Start Menu\Programs\Steam 2015-06-18 18:31 - 2014-09-28 16:13 - 00000000 ____D C:\Users\Gamer\AppData\Local\Battle.net 2015-06-17 18:17 - 2014-10-24 21:34 - 00001364 _____ C:\Windows\UPDLL.LOG 2015-06-17 18:11 - 2014-10-24 21:30 - 00156392 _____ (MicroWorld Technologies Inc.) C:\Windows\SysWOW64\eEmpty.exe 2015-06-17 15:34 - 2014-07-29 17:47 - 00004182 _____ C:\Windows\System32\Tasks\avast! Emergency Update 2015-06-17 15:01 - 2014-09-28 16:13 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Battle.net 2015-06-17 15:00 - 2015-05-08 14:45 - 00000000 ____D C:\Users\Gamer\AppData\Local\Akamai 2015-06-17 15:00 - 2015-03-19 11:02 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\AVAST Software 2015-06-17 15:00 - 2014-07-29 17:11 - 00000000 ____D C:\Program Files (x86)\ Malwarebytes Anti-Malware 2015-06-17 15:00 - 2014-07-29 10:59 - 00000000 ____D C:\Program Files (x86)\TeamViewer 2015-06-17 15:00 - 2014-07-29 10:41 - 00000000 ____D C:\ProgramData\Origin 2015-06-17 15:00 - 2014-07-29 10:41 - 00000000 ____D C:\Program Files (x86)\Origin 2015-06-17 15:00 - 2014-07-25 07:32 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\NVIDIA Corporation 2015-06-17 15:00 - 2014-07-25 07:30 - 00000000 ____D C:\Program Files (x86)\NVIDIA Corporation 2015-06-17 15:00 - 2014-07-25 07:29 - 00000000 ____D C:\Program Files\NVIDIA Corporation 2015-06-17 14:59 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\registration 2015-06-17 14:56 - 2014-07-25 07:30 - 00000000 ____D C:\ProgramData\NVIDIA Corporation 2015-06-17 14:03 - 2014-07-29 09:42 - 00000000 ____D C:\Users\Gamer\AppData\Local\NVIDIA 2015-06-17 08:14 - 2014-07-29 10:43 - 00000000 ____D C:\Users\Gamer\AppData\Roaming\Origin 2015-06-16 21:06 - 2014-08-22 15:34 - 00000000 ____D C:\Users\Gamer\Desktop\Call of duty 2015-06-15 21:44 - 2014-12-27 19:36 - 00000000 ____D C:\Users\Gamer\Documents\CAPCOM 2015-06-15 17:23 - 2014-07-30 06:10 - 00000000 ____D C:\Users\Gamer\AppData\Local\PunkBuster 2015-06-15 17:23 - 2014-07-29 20:35 - 00111928 _____ C:\Windows\SysWOW64\PnkBstrB.exe 2015-06-15 17:23 - 2014-07-29 20:35 - 00111928 _____ C:\Windows\SysWOW64\PnkBstrB.ex0 2015-06-15 15:55 - 2015-03-06 17:36 - 00000631 _____ C:\Users\Gamer\Documents\Uninstall STAR WARS The Old Republic.log 2015-06-13 07:12 - 2014-10-16 07:07 - 00000000 ____D C:\Users\Gamer\AppData\Local\Adobe 2015-06-13 07:12 - 2014-07-29 12:20 - 00778416 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerApp.exe 2015-06-13 07:12 - 2014-07-29 12:20 - 00142512 _____ (Adobe Systems Incorporated) C:\Windows\SysWOW64\FlashPlayerCPLApp.cpl 2015-06-13 07:12 - 2014-07-29 12:20 - 00003822 _____ C:\Windows\System32\Tasks\Adobe Flash Player Updater 2015-06-12 06:27 - 2009-07-14 07:09 - 00000000 ____D C:\Windows\System32\Tasks\WPD 2015-06-11 22:32 - 2011-04-12 09:43 - 00699092 _____ C:\Windows\system32\perfh007.dat 2015-06-11 22:32 - 2011-04-12 09:43 - 00149232 _____ C:\Windows\system32\perfc007.dat 2015-06-11 22:32 - 2009-07-14 07:13 - 01619284 _____ C:\Windows\system32\PerfStringBackup.INI 2015-06-11 06:14 - 2014-08-02 18:59 - 00122904 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\system32\OpenAL32.dll 2015-06-11 06:14 - 2014-08-02 18:59 - 00109080 _____ (Portions (C) Creative Labs Inc. and NVIDIA Corp.) C:\Windows\SysWOW64\OpenAL32.dll 2015-06-11 02:59 - 2009-07-14 06:45 - 00268536 _____ C:\Windows\system32\FNTCACHE.DAT 2015-06-11 02:58 - 2009-07-14 05:20 - 00000000 ____D C:\Windows\PolicyDefinitions 2015-06-11 01:23 - 2014-07-30 05:56 - 00000000 ____D C:\Windows\system32\MRT 2015-06-11 01:20 - 2014-07-30 05:56 - 140135120 _____ (Microsoft Corporation) C:\Windows\system32\MRT.exe 2015-06-08 09:25 - 2014-08-03 01:32 - 00000000 ____D C:\Windows\Minidump 2015-06-04 20:07 - 2014-07-30 11:54 - 00000000 ____D C:\Users\Gamer\Documents\My Games 2015-06-04 11:22 - 2014-07-29 10:32 - 00000000 ____D C:\Program Files (x86)\Mozilla Maintenance Service 2015-06-02 13:36 - 2015-05-18 16:07 - 00000000 ____D C:\ProgramData\Microsoft\Windows\Start Menu\Programs\Gameforge Live 2015-05-29 07:39 - 2014-07-29 10:13 - 00000000 ____D C:\ProgramData\Skype 2015-05-28 21:03 - 2014-07-29 17:43 - 01047320 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSnx.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00442264 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswSP.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00272248 _____ C:\Windows\system32\Drivers\aswVmm.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00137288 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswStm.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00093528 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswRdr2.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00089944 _____ (Avast Software s.r.o.) C:\Windows\system32\Drivers\aswMonFlt.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00065736 _____ C:\Windows\system32\Drivers\aswRvrt.sys 2015-05-28 21:03 - 2014-07-29 17:43 - 00029168 _____ C:\Windows\system32\Drivers\aswHwid.sys 2015-05-28 17:34 - 2014-07-29 10:13 - 00000000 ___RD C:\Program Files (x86)\Skype 2015-05-28 09:04 - 2015-03-19 11:00 - 00030966 _____ C:\Windows\system32\nvinfo.pb 2015-05-28 09:04 - 2014-12-23 18:57 - 02986392 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvapi.dll 2015-05-28 09:04 - 2014-11-19 21:29 - 00112968 _____ (Khronos Group) C:\Windows\system32\OpenCL.dll 2015-05-28 09:04 - 2014-11-19 21:29 - 00105288 _____ (Khronos Group) C:\Windows\SysWOW64\OpenCL.dll 2015-05-28 09:04 - 2014-11-19 21:28 - 12852152 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvd3dum.dll 2015-05-28 09:04 - 2014-11-19 21:28 - 03379680 _____ (NVIDIA Corporation) C:\Windows\system32\nvapi64.dll 2015-05-28 06:15 - 2014-11-19 21:30 - 06872904 _____ (NVIDIA Corporation) C:\Windows\system32\nvcpl.dll 2015-05-28 06:15 - 2014-11-19 21:30 - 03491984 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvc64.dll 2015-05-28 06:15 - 2014-11-19 21:30 - 02558608 _____ (NVIDIA Corporation) C:\Windows\system32\nvsvcr.dll 2015-05-28 06:15 - 2014-11-19 21:30 - 00937288 _____ (NVIDIA Corporation) C:\Windows\system32\nvvsvc.exe 2015-05-28 06:15 - 2014-11-19 21:30 - 00385168 _____ (NVIDIA Corporation) C:\Windows\system32\nvmctray.dll 2015-05-28 06:15 - 2014-11-19 21:30 - 00062608 _____ (NVIDIA Corporation) C:\Windows\system32\nvshext.dll 2015-05-27 12:48 - 2014-11-19 21:30 - 04408727 _____ C:\Windows\system32\nvcoproc.bin 2015-05-23 03:47 - 2014-07-29 20:53 - 01756424 _____ (NVIDIA Corporation) C:\Windows\system32\nvspbridge64.dll 2015-05-23 03:47 - 2014-07-29 20:53 - 01316000 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspbridge.dll 2015-05-23 03:47 - 2014-07-25 07:33 - 01571696 _____ (NVIDIA Corporation) C:\Windows\system32\nvspcap64.dll 2015-05-23 03:47 - 2014-07-25 07:33 - 01320304 _____ (NVIDIA Corporation) C:\Windows\SysWOW64\nvspcap.dll ==================== Files in the root of some directories ======= 2014-11-01 09:07 - 2014-11-01 09:07 - 0007605 _____ () C:\Users\Gamer\AppData\Local\Resmon.ResmonCfg Some files in TEMP: ==================== C:\Users\Gamer\AppData\Local\Temp\avcuf32.dll C:\Users\Gamer\AppData\Local\Temp\avcuf64.dll C:\Users\Gamer\AppData\Local\Temp\avxdisk.dll C:\Users\Gamer\AppData\Local\Temp\bdc.exe C:\Users\Gamer\AppData\Local\Temp\bdcore.dll C:\Users\Gamer\AppData\Local\Temp\bdfltlib2k.dll C:\Users\Gamer\AppData\Local\Temp\bdnimbus32.dll C:\Users\Gamer\AppData\Local\Temp\bdnimbus64.dll C:\Users\Gamer\AppData\Local\Temp\bdupdateservice.dll C:\Users\Gamer\AppData\Local\Temp\DEVCON.EXE C:\Users\Gamer\AppData\Local\Temp\encdec.dll C:\Users\Gamer\AppData\Local\Temp\esupdate.exe C:\Users\Gamer\AppData\Local\Temp\FSSync.dll C:\Users\Gamer\AppData\Local\Temp\Getvlist.exe C:\Users\Gamer\AppData\Local\Temp\ikave.dll C:\Users\Gamer\AppData\Local\Temp\ipc.dll C:\Users\Gamer\AppData\Local\Temp\kave.dll C:\Users\Gamer\AppData\Local\Temp\kavvlg.dll C:\Users\Gamer\AppData\Local\Temp\msvclnt.dll C:\Users\Gamer\AppData\Local\Temp\msvcp80.dll C:\Users\Gamer\AppData\Local\Temp\msvcr80.dll C:\Users\Gamer\AppData\Local\Temp\msvl64.dll C:\Users\Gamer\AppData\Local\Temp\msvlclnt.dll C:\Users\Gamer\AppData\Local\Temp\mwavdwnl.exe C:\Users\Gamer\AppData\Local\Temp\MWAVL.exe C:\Users\Gamer\AppData\Local\Temp\mwavscan.exe C:\Users\Gamer\AppData\Local\Temp\mwunzip.dll C:\Users\Gamer\AppData\Local\Temp\prLoader.dll C:\Users\Gamer\AppData\Local\Temp\procexp64.exe C:\Users\Gamer\AppData\Local\Temp\red32.dll C:\Users\Gamer\AppData\Local\Temp\Reload.exe C:\Users\Gamer\AppData\Local\Temp\scan.dll C:\Users\Gamer\AppData\Local\Temp\ScanningProcess.exe C:\Users\Gamer\AppData\Local\Temp\setpriv.exe C:\Users\Gamer\AppData\Local\Temp\test2.exe C:\Users\Gamer\AppData\Local\Temp\trufos.dll C:\Users\Gamer\AppData\Local\Temp\unregx.exe C:\Users\Gamer\AppData\Local\Temp\viewtcp.exe Some zero byte size files/folders: ========================== C:\Windows\logo1_.exe C:\Windows\logo_1.exe C:\Windows\RUNDL132.EXE C:\Windows\rundll16.exe C:\Windows\VDLL.DLL C:\Windows\SysWOW64\runouce.exe ==================== Bamital & volsnap Check ================= (There is no automatic fix for files that do not pass verification.) C:\Windows\System32\winlogon.exe => File is digitally signed C:\Windows\System32\wininit.exe => File is digitally signed C:\Windows\SysWOW64\wininit.exe => File is digitally signed C:\Windows\explorer.exe => File is digitally signed C:\Windows\SysWOW64\explorer.exe => File is digitally signed C:\Windows\System32\svchost.exe => File is digitally signed C:\Windows\SysWOW64\svchost.exe => File is digitally signed C:\Windows\System32\services.exe => File is digitally signed C:\Windows\System32\User32.dll => File is digitally signed C:\Windows\SysWOW64\User32.dll => File is digitally signed C:\Windows\System32\userinit.exe => File is digitally signed C:\Windows\SysWOW64\userinit.exe => File is digitally signed C:\Windows\System32\rpcss.dll => File is digitally signed C:\Windows\System32\Drivers\volsnap.sys => File is digitally signed LastRegBack: 2014-04-03 06:08 ==================== End of log ============================ |
19.06.2015, 18:13 | #4 |
| Festplatte füllt sich im Minuten Takt Und Hier die Addition [CODE]Additional FRST Logfile: Code:
ATTFilter scan result of Farbar Recovery Scan Tool (x64) Version:13-06-2015 Ran by Gamer at 2015-06-19 19:07:48 Running from C:\Users\Gamer\Desktop Boot Mode: Normal ========================================================== ==================== Accounts: ============================= Administrator (S-1-5-21-81771348-503357986-749784082-500 - Administrator - Disabled) Gamer (S-1-5-21-81771348-503357986-749784082-1000 - Administrator - Enabled) => C:\Users\Gamer Gast (S-1-5-21-81771348-503357986-749784082-501 - Limited - Disabled) HomeGroupUser$ (S-1-5-21-81771348-503357986-749784082-1002 - Limited - Enabled) ==================== Security Center ======================== (If an entry is included in the fixlist, it will be removed.) AV: avast! Antivirus (Enabled - Up to date) {17AD7D40-BA12-9C46-7131-94903A54AD8B} AS: Windows Defender (Enabled - Up to date) {D68DDC3A-831F-4fae-9E44-DA132C1ACF46} AS: Spybot - Search and Destroy (Enabled - Up to date) {9BC38DF1-3CCA-732D-A930-C1CA5F20A4B0} AS: avast! Antivirus (Enabled - Up to date) {ACCC9CA4-9C28-93C8-4B81-AFE241D3E736} FW: avast! Antivirus (Enabled) {2F96FC65-F07D-9D1E-5A6E-3DA5C487EAF0} ==================== Installed Programs ====================== (Only the adware programs with "hidden" flag could be added to the fixlist to unhide them. The adware programs should be uninstalled manually.) Adobe Flash Player 18 NPAPI (HKLM-x32\...\Adobe Flash Player NPAPI) (Version: 18.0.0.160 - Adobe Systems Incorporated) Aeria Ignite (HKLM-x32\...\Aeria Ignite 1.13.3296) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (HKLM-x32\...\Aeria Ignite) (Version: 1.13.3296 - Aeria Games & Entertainment) Aeria Ignite (x32 Version: 1.13.3296 - Aeria Games & Entertainment) Hidden Akamai NetSession Interface (HKU\S-1-5-21-81771348-503357986-749784082-1000\...\Akamai) (Version: - Akamai Technologies, Inc) Audiosurf (HKLM-x32\...\Steam App 12900) (Version: - Dylan Fitterer) Avast Internet Security (HKLM-x32\...\Avast) (Version: 10.2.2218 - AVAST Software) Battle.net (HKLM-x32\...\Battle.net) (Version: - Blizzard Entertainment) Battlefield 3™ (HKLM-x32\...\{76285C16-411A-488A-BCE3-C83CB933D8CF}) (Version: 1.6.0.0 - Electronic Arts) Battlefield 4™ (HKLM-x32\...\{ABADE36E-EC37-413B-8179-B432AD3FACE7}) (Version: 1.4.2.25648 - Electronic Arts) Battlefield: Bad Company 2 (HKLM-x32\...\Steam App 24960) (Version: - DICE) Battlefield™ Hardline (HKLM-x32\...\{CB4AC3DA-8CC1-4516-86DA-4078B57DB229}) (Version: 1.0.0.2 - Electronic Arts) Battlelog Web Plugins (HKLM-x32\...\Battlelog Web Plugins) (Version: 2.6.2 - EA Digital Illusions CE AB) BitRaider Streaming Client (HKLM-x32\...\BitRaider Streaming Client) (Version: 1.3.3.4098 - BitRaider, LLC) Burnout Paradise: The Ultimate Box (HKLM-x32\...\Steam App 24740) (Version: - Criterion Games) Call of Duty: Advanced Warfare - Multiplayer (HKLM-x32\...\Steam App 209660) (Version: - Sledgehammer Games) Call of Duty: Advanced Warfare (HKLM-x32\...\Steam App 209650) (Version: - Sledgehammer Games) Call of Duty: Black Ops II - Multiplayer (HKLM-x32\...\Steam App 202990) (Version: - Treyarch) Call of Duty: Black Ops II - Zombies (HKLM-x32\...\Steam App 212910) (Version: - ) Call of Duty: Black Ops II (HKLM-x32\...\Steam App 202970) (Version: - Treyarch) Call of Duty: Ghosts - Multiplayer (HKLM-x32\...\Steam App 209170) (Version: - Infinity Ward) Call of Duty: Ghosts (HKLM-x32\...\Steam App 209160) (Version: - Infinity Ward) Call of Duty: Modern Warfare 2 - Multiplayer (HKLM-x32\...\Steam App 10190) (Version: - Infinity Ward) Call of Duty: Modern Warfare 2 (HKLM-x32\...\Steam App 10180) (Version: - Infinity Ward) Call of Duty: Modern Warfare 3 - Multiplayer (HKLM-x32\...\Steam App 42690) (Version: - Infinity Ward) Call of Duty: Modern Warfare 3 (HKLM-x32\...\Steam App 42680) (Version: - Infinity Ward) Chivalry: Medieval Warfare (HKLM-x32\...\Steam App 219640) (Version: - Torn Banner Studios) Counter-Strike: Global Offensive (HKLM-x32\...\Steam App 730) (Version: - Valve) Counter-Strike: Source (HKLM-x32\...\Steam App 240) (Version: - Valve) CSL 7.1 Gaming Headset (HKLM\...\C-Media CM108 Like Sound Driver) (Version: - ) CSL 7.1 Gaming Headset (HKLM-x32\...\{71B53BA8-4BE3-49AF-BC3E-07F392006300}) (Version: 1.00.0001 - ) D3DX10 (x32 Version: 15.4.2368.0902 - Microsoft) Hidden DARK SOULS™ II: Scholar of the First Sin (HKLM-x32\...\Steam App 335300) (Version: - FromSoftware, Inc) Dead Rising 3 (HKLM-x32\...\Steam App 265550) (Version: - Capcom Game Studio Vancouver) Diablo III (HKLM-x32\...\Diablo III) (Version: - Blizzard Entertainment) Dino D-Day (HKLM-x32\...\Steam App 70000) (Version: - 800 North and Digital Ranch) DiRT Showdown (HKLM-x32\...\Steam App 201700) (Version: - Codemasters Racing Studio) Dirty Bomb (HKLM-x32\...\Steam App 333930) (Version: - Splash Damage®) Dragons and Titans (HKLM-x32\...\Steam App 263500) (Version: - Wyrmbyte) Dungeon Defenders (HKLM-x32\...\Steam App 65800) (Version: - Trendy Entertainment) F1 2010 (x32 Version: 1.0.0001.132 - Codemasters) Hidden Family Guy™: Back to the Multiverse (HKLM-x32\...\Steam App 214230) (Version: - Heavy Iron Studios) Far Cry® 3 (HKLM-x32\...\Steam App 220240) (Version: - Ubisoft Montreal, Massive Entertainment, and Ubisoft Shanghai) FormatFactory 3.3.5.0 (HKLM-x32\...\FormatFactory) (Version: 3.3.5.0 - Format Factory) Fotogalerie (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Fraps (remove only) (HKLM-x32\...\Fraps) (Version: - ) Free YouTube to MP3 Converter version 3.12.59.415 (HKLM-x32\...\Free YouTube to MP3 Converter_is1) (Version: 3.12.59.415 - DVDVideoSoft Ltd.) Gameforge Live 2.0.8 (HKLM-x32\...\{9C98989A-3A15-42DA-A3B9-D20331437D67}}_is1) (Version: 2.0.8 - Gameforge) Grand Theft Auto San Andreas (HKLM-x32\...\{086BADF8-9B1F-4E89-B207-2EDA520972D6}) (Version: 1.00.00001 - Rockstar Games) Grand Theft Auto V (HKLM-x32\...\Steam App 271590) (Version: - Rockstar North) How to Survive (HKLM-x32\...\Steam App 250400) (Version: - EKO Software) Insurgency (HKLM-x32\...\Steam App 222880) (Version: - New World Interactive) iO (HKLM-x32\...\Steam App 324070) (Version: - Gamious) Java 8 Update 31 (HKLM-x32\...\{26A24AE4-039D-4CA4-87B4-2F83218031F0}) (Version: 8.0.310 - Oracle Corporation) Junk Mail filter update (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Jurassic Park The Game (HKLM-x32\...\Jurassic Park The Game) (Version: 1.0.0.15 - Telltale Games) Left 4 Dead 2 (HKLM-x32\...\Steam App 550) (Version: - Valve) LogMeIn Hamachi (HKLM-x32\...\LogMeIn Hamachi) (Version: 2.2.0.328 - LogMeIn, Inc.) LogMeIn Hamachi (x32 Version: 2.2.0.328 - LogMeIn, Inc.) Hidden Lost Planet 2 (HKLM-x32\...\Steam App 45750) (Version: - CAPCOM CO., LTD.) LOST PLANET 2 (x32 Version: 1.0.0002.133 - CAPCOM CO., LTD.) Hidden Malwarebytes Anti-Malware Version 2.1.6.1022 (HKLM-x32\...\Malwarebytes Anti-Malware_is1) (Version: 2.1.6.1022 - Malwarebytes Corporation) Microsoft .NET Framework 4.5.1 (Deutsch) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1031) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Français) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1036) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.1 (Nederlands) (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1043) (Version: 4.5.50938 - Microsoft Corporation) Microsoft .NET Framework 4.5.2 (HKLM\...\{92FB6C44-E685-45AD-9B20-CADF4CABA132} - 1033) (Version: 4.5.51209 - Microsoft Corporation) Microsoft ASP.NET MVC 4 Runtime (HKLM-x32\...\{3FE312D5-B862-40CE-8E4E-A6D8ABF62736}) (Version: 4.0.40804.0 - Microsoft Corporation) Microsoft Chart Controls for Microsoft .NET Framework 3.5 (KB2500170) (HKLM-x32\...\{41785C66-90F2-40CE-8CB5-1C94BFC97280}) (Version: 3.5.30730.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE (HKLM-x32\...\{2C9EE786-1DDB-4C98-8FA4-B1B9B5A66B77}) (Version: 3.1.186.0 - Microsoft Corporation) Microsoft Games for Windows - LIVE Redistributable (HKLM-x32\...\{42AA4CA8-DCD8-4308-BCAB-0B6D75856A9D}) (Version: 3.5.95.0 - Microsoft Corporation) Microsoft Office (HKLM-x32\...\{90150000-0138-0409-0000-0000000FF1CE}) (Version: 15.0.4569.1506 - Microsoft Corporation) Microsoft OneDrive (HKU\S-1-5-21-81771348-503357986-749784082-1000\...\OneDriveSetup.exe) (Version: 17.0.4035.0328 - Microsoft Corporation) Microsoft Silverlight (HKLM\...\{89F4137D-6C26-4A84-BDB8-2E5A4BB71E00}) (Version: 5.1.40416.0 - Microsoft Corporation) Microsoft SQL Server 2005 Compact Edition [ENU] (HKLM-x32\...\{F0B430D1-B6AA-473D-9B06-AA3DD01FD0B8}) (Version: 3.1.0000 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{710f4c1c-cc18-4c49-8cbf-51240c89a1a2}) (Version: 8.0.61001 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{7299052b-02a4-4627-81f2-1818da5d550d}) (Version: 8.0.56336 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{837b34e3-7c30-493c-8f6a-2b0f04e2912c}) (Version: 8.0.59193 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (HKLM-x32\...\{A49F249F-0C91-497F-86DF-B2585E8E76B7}) (Version: 8.0.50727.42 - Microsoft Corporation) Microsoft Visual C++ 2005 Redistributable (x64) (HKLM\...\{ad8a2fa1-06e7-4b0d-927d-6e54b3d31028}) (Version: 8.0.61000 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.17 (HKLM\...\{8220EEFE-38CD-377E-8595-13398D740ACE}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.4148 (HKLM\...\{4B6C7001-C7D6-3710-913E-5BC23FCE91E6}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x64 9.0.30729.6161 (HKLM\...\{5FCE6D76-F5DC-37AB-B2B8-22AB8CEDB1D4}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.17 (HKLM-x32\...\{9A25302D-30C0-39D9-BD6F-21E6EC160475}) (Version: 9.0.30729 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.4148 (HKLM-x32\...\{1F1C2DFC-2D24-3E06-BCB8-725134ADF989}) (Version: 9.0.30729.4148 - Microsoft Corporation) Microsoft Visual C++ 2008 Redistributable - x86 9.0.30729.6161 (HKLM-x32\...\{9BE518E6-ECC6-35A9-88E4-87755C07200F}) (Version: 9.0.30729.6161 - Microsoft Corporation) Microsoft Visual C++ 2010 x64 Redistributable - 10.0.40219 (HKLM\...\{1D8E6291-B0D5-35EC-8441-6616F567A0F7}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2010 x86 Redistributable - 10.0.40219 (HKLM-x32\...\{F0C3E5D1-1ADE-321E-8167-68EF0DE699A5}) (Version: 10.0.40219 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.60610 (HKLM-x32\...\{a1909659-0a08-4554-8af1-2175904903a1}) (Version: 11.0.60610.1 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{b341426f-8543-4e0d-96c3-e976f8ec5ab6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x64) - 11.0.61030 (HKLM-x32\...\{ca67548a-5ebe-413a-b50c-4b9ceb6d66c6}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{33d1fd90-4274-48a1-9bc1-97e33d9c2d6f}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2012 Redistributable (x86) - 11.0.61030 (HKLM-x32\...\{4fd02573-5f12-4ae4-8027-c63f8e1115af}) (Version: 11.0.61030.0 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x64) - 12.0.21005 (HKLM-x32\...\{7f51bdb9-ee21-49ee-94d6-90afc321780e}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft Visual C++ 2013 Redistributable (x86) - 12.0.21005 (HKLM-x32\...\{ce085a78-074e-4823-8dc1-8a721b94b76d}) (Version: 12.0.21005.1 - Microsoft Corporation) Microsoft XNA Framework Redistributable 4.0 Refresh (HKLM-x32\...\{D69C8EDE-BBC5-436B-8E0E-C5A6D311CF4F}) (Version: 4.0.30901.0 - Microsoft Corporation) Minimum (HKLM-x32\...\Steam App 214190) (Version: - Human Head Studios) Mirror's Edge™ (HKLM-x32\...\{AEDBD563-24BB-4EE3-8366-A654DAC2D988}) (Version: 1.0.1.0 - Electronic Arts) Movie Maker (x32 Version: 16.4.3528.0331 - Microsoft Corporation) Hidden Mozilla Firefox 38.0.5 (x86 de) (HKLM-x32\...\Mozilla Firefox 38.0.5 (x86 de)) (Version: 38.0.5 - Mozilla) Mozilla Maintenance Service (HKLM-x32\...\MozillaMaintenanceService) (Version: 31.0 - Mozilla) Notepad++ (HKLM-x32\...\Notepad++) (Version: 6.6.8 - Notepad++ Team) NVIDIA 3D Vision Controller-Treiber 352.65 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.NVIRUSB) (Version: 352.65 - NVIDIA Corporation) NVIDIA 3D Vision Treiber 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.3DVision) (Version: 353.06 - NVIDIA Corporation) NVIDIA GeForce Experience 2.4.5.28 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.GFExperience) (Version: 2.4.5.28 - NVIDIA Corporation) NVIDIA Grafiktreiber 353.06 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.Driver) (Version: 353.06 - NVIDIA Corporation) NVIDIA HD-Audiotreiber 1.3.34.3 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_HDAudio.Driver) (Version: 1.3.34.3 - NVIDIA Corporation) NVIDIA PhysX-Systemsoftware 9.15.0428 (HKLM\...\{B2FE1952-0186-46C3-BAEC-A80AA35AC5B8}_Display.PhysX) (Version: 9.15.0428 - NVIDIA Corporation) OpenAL (HKLM-x32\...\OpenAL) (Version: - ) Origin (HKLM-x32\...\Origin) (Version: 9.4.12.2807 - Electronic Arts, Inc.) ORION: Prelude (HKLM-x32\...\Steam App 104900) (Version: - Spiral Game Studios) osu! (HKLM-x32\...\{a9575aa5-e624-4f15-a682-a25720a77c35}) (Version: latest - ppy Pty Ltd) PAYDAY 2 (HKLM-x32\...\Steam App 218620) (Version: - OVERKILL - a Starbreeze Studio.) PAYDAY: The Heist (HKLM-x32\...\Steam App 24240) (Version: - OVERKILL Software) PunkBuster Services (HKLM-x32\...\PunkBusterSvc) (Version: 0.986 - Even Balance, Inc.) Quake Live (HKLM-x32\...\Steam App 282440) (Version: - id Software) Rapture3D 2.4.11 Game (HKLM-x32\...\{D2FCA41E-AC01-4DCD-B3A7-DC9E32363065}}_is1) (Version: - Blue Ripple Sound) Rising Storm/Red Orchestra 2 Multiplayer (HKLM-x32\...\Steam App 35450) (Version: - Tripwire Interactive) Robocraft (HKLM-x32\...\Steam App 301520) (Version: - Freejam) Rockstar Games Social Club (HKLM-x32\...\Rockstar Games Social Club) (Version: 1.1.5.6 - Rockstar Games) S4 League (HKLM-x32\...\S4 League) (Version: - ) SHIELD Streaming (Version: 4.1.2000 - NVIDIA Corporation) Hidden SHIELD Wireless Controller Driver (Version: 2.4.5.28 - NVIDIA Corporation) Hidden Sirius MT2 Version 20.13 (HKLM-x32\...\{831D4B74-7A92-4363-869D-524876C480B1}_is1) (Version: 20.13 - Sirius MT2) Skype Click to Call (HKLM-x32\...\{6D1221A9-17BF-4EC0-81F2-27D30EC30701}) (Version: 7.4.0.9058 - Microsoft Corporation) Skype™ 7.5 (HKLM-x32\...\{24991BA0-F0EE-44AD-9CC8-5EC50AECF6B7}) (Version: 7.5.101 - Skype Technologies S.A.) Sniper Elite V2 (HKLM-x32\...\Steam App 63380) (Version: - Rebellion) Sniper Elite: Zombie Army 2 (HKLM-x32\...\Steam App 247930) (Version: - Rebellion) Spybot - Search & Destroy (HKLM-x32\...\{B4092C6D-E886-4CB2-BA68-FE5A99D31DE7}_is1) (Version: 2.4.40 - Safer-Networking Ltd.) Star Conflict (HKLM-x32\...\Steam App 212070) (Version: - Star Gem Inc.) Star Trek Online (HKLM-x32\...\Steam App 9900) (Version: - Cryptic Studios) Star Wars: The Old Republic (HKLM-x32\...\{3B11D799-48E0-48ED-BFD7-EA655676D8BB}) (Version: 1.00 - Electronic Arts, Inc.) Steam (HKLM-x32\...\Steam) (Version: - Valve Corporation) Symphony (HKLM-x32\...\Steam App 207750) (Version: - Empty Clip Studios) TeamSpeak 3 Client (HKLM\...\TeamSpeak 3 Client) (Version: 3.0.15 - TeamSpeak Systems GmbH) TeamViewer 10 (HKLM-x32\...\TeamViewer) (Version: 10.0.36897 - TeamViewer) TERA (HKLM-x32\...\{A2F166A0-F031-4E27-A057-C69733219434}_is1) (Version: 28 - Gameforge Productions GmbH) TrackMania² Stadium (HKLM-x32\...\Steam App 232910) (Version: - Nadeo) Trials Fusion (HKLM-x32\...\Uplay Install 297) (Version: - Ubisoft) Uplay (HKLM-x32\...\Uplay) (Version: 4.9 - Ubisoft) VSO Downloader 4.1.1.25 (HKLM-x32\...\{A0D0BA9E-F1A6-44FF-AA14-03ED96B3D56D}_is1) (Version: 4.1.1.25 - VSO Software) VSO EVE Network Driver version 1.0.0.27 (HKLM-x32\...\{AC0AFDC9-4FB1-44FE-B3E1-82300BF3D756}_is1) (Version: 1.0.0.27 - VSO Software) Windows Live Essentials (HKLM-x32\...\WinLiveSuite) (Version: 16.4.3528.0331 - Microsoft Corporation) WinPcap 4.1.3 (HKLM-x32\...\WinPcapInst) (Version: 4.1.0.2980 - CACE Technologies) WinRAR 5.11 (64-Bit) (HKLM\...\WinRAR archiver) (Version: 5.11.0 - win.rar GmbH) Xvid Video Codec (HKLM-x32\...\Xvid Video Codec 1.3.2) (Version: 1.3.2 - Xvid Team) Yet Another Zombie Defense (HKLM-x32\...\Steam App 270550) (Version: - Awesome Games Studio) YGOPro DevPro (HKLM-x32\...\{A115F80F-2B26-464E-97A3-8B13EC533C3D}) (Version: 2.1.2 - DevPro, LLC) ==================== Custom CLSID (Whitelisted): ========================== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) CustomCLSID: HKU\S-1-5-21-81771348-503357986-749784082-1000_Classes\CLSID\{A0396A93-DC06-4AEF-BEE9-95FFCCAEF20E}\InprocServer32 -> C:\Users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-81771348-503357986-749784082-1000_Classes\CLSID\{BBACC218-34EA-4666-9D7A-C78F2274A524}\InprocServer32 -> C:\Users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-81771348-503357986-749784082-1000_Classes\CLSID\{CB3D0F55-BC2C-4C1A-85ED-23ED75B5106B}\InprocServer32 -> C:\Users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-81771348-503357986-749784082-1000_Classes\CLSID\{F241C880-6982-4CE5-8CF7-7085BA96DA5A}\InprocServer32 -> C:\Users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\SkyDriveShell64.dll (Microsoft Corporation) CustomCLSID: HKU\S-1-5-21-81771348-503357986-749784082-1000_Classes\CLSID\{F8071786-1FD0-4A66-81A1-3CBE29274458}\InprocServer32 -> C:\Users\Gamer\AppData\Local\Microsoft\SkyDrive\17.0.4035.0328\amd64\FileSyncApi64.dll (Microsoft Corporation) ==================== Restore Points ========================= ATTENTION: System Restore is disabled ==================== Hosts content: =============================== (If needed Hosts: directive could be included in the fixlist to reset Hosts.) 2009-07-14 04:34 - 2015-06-19 17:01 - 00000027 ____A C:\Windows\system32\Drivers\etc\hosts 127.0.0.1 localhost ==================== Scheduled Tasks (Whitelisted) ============= (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) Task: {2196E2C6-6F72-4092-89AC-76158F586AAF} - System32\Tasks\avast! Emergency Update => C:\Program Files\AVAST Software\Avast\AvastEmUpdate.exe [2015-06-18] (Avast Software s.r.o.) Task: {88E2CCBA-316C-486F-90E8-CF50CF0D5D4C} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Scan the system => D:\Program Files (x86)\Spybot - Search & Destroy 2\SDScan.exe [2014-06-24] (Safer-Networking Ltd.) Task: {8E81B445-F81F-4B83-817D-826575BBFD6E} - System32\Tasks\Adobe Flash Player Updater => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe [2015-06-13] (Adobe Systems Incorporated) Task: {C6DAD9FC-0CC9-48CC-A895-BC38DE0A3BE5} - System32\Tasks\Microsoft\Windows\Windows Activation Technologies\ValidationTask => C:\Windows\system32\Wat\WatAdminSvc.exe [2014-11-21] (Microsoft Corporation) Task: {D28F8F25-6603-4359-85D0-9310DEC7D120} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Refresh immunization => D:\Program Files (x86)\Spybot - Search & Destroy 2\SDImmunize.exe [2014-06-24] (Safer-Networking Ltd.) Task: {FD3AA500-7A7E-4237-9131-31AA3B6A5720} - System32\Tasks\Safer-Networking\Spybot - Search and Destroy\Check for updates => D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe [2014-06-27] (Safer-Networking Ltd.) Task: C:\Windows\Tasks\Adobe Flash Player Updater.job => C:\Windows\SysWOW64\Macromed\Flash\FlashPlayerUpdateService.exe ==================== Loaded Modules (Whitelisted) ============== 2014-11-19 21:30 - 2015-05-28 06:15 - 00116368 _____ () C:\Program Files\NVIDIA Corporation\Display\NvSmartMax64.dll 2014-11-04 02:30 - 2014-11-04 02:30 - 00058368 _____ () C:\Program Files (x86)\ownCloud\shellext\OCUtil_x64.dll 2014-05-12 11:49 - 2014-05-12 11:49 - 00222720 _____ () C:\Program Files (x86)\Notepad++\NppShell_06.dll 2014-07-29 20:35 - 2015-03-19 18:56 - 00076152 _____ () C:\Windows\SysWOW64\PnkBstrA.exe 2015-05-28 21:03 - 2015-05-28 21:03 - 00104400 _____ () C:\Program Files\AVAST Software\Avast\log.dll 2015-05-28 21:03 - 2015-05-28 21:03 - 00081728 _____ () C:\Program Files\AVAST Software\Avast\JsonRpcServer.dll 2015-06-19 14:16 - 2015-06-19 14:16 - 02952704 _____ () C:\Program Files\AVAST Software\Avast\defs\15061901\algo.dll 2015-05-03 07:46 - 2015-05-23 03:48 - 00011920 _____ () C:\Program Files (x86)\NVIDIA Corporation\Update Core\detoured.dll 2015-03-19 11:01 - 2015-03-19 11:01 - 40540672 _____ () C:\Program Files\AVAST Software\Avast\libcef.dll 2015-06-19 18:52 - 2014-05-13 12:04 - 00109400 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\snlThirdParty150.bpl 2015-06-19 18:52 - 2014-05-13 12:04 - 00416600 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\DEC150.bpl 2015-06-19 18:52 - 2014-05-13 12:04 - 00167768 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\snlFileFormats150.bpl 2015-06-19 18:52 - 2012-08-23 10:38 - 00574840 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\sqlite3.dll 2015-06-19 18:52 - 2012-04-03 17:06 - 00565640 _____ () D:\Program Files (x86)\Spybot - Search & Destroy 2\av\BDSmartDB.dll ==================== Alternate Data Streams (Whitelisted) ========= (If an entry is included in the fixlist, only the ADS will be removed.) AlternateDataStreams: C:\ProgramData:NT2 AlternateDataStreams: C:\Users\All Users:NT2 AlternateDataStreams: C:\ProgramData\Anwendungsdaten:NT2 AlternateDataStreams: C:\ProgramData\Application Data:NT2 AlternateDataStreams: C:\ProgramData\MTA San Andreas All:NT2 AlternateDataStreams: C:\Users\Gamer\Anwendungsdaten:NT AlternateDataStreams: C:\Users\Gamer\Anwendungsdaten:NT2 AlternateDataStreams: C:\Users\Gamer\AppData\Roaming:NT AlternateDataStreams: C:\Users\Gamer\AppData\Roaming:NT2 ==================== Safe Mode (Whitelisted) =================== (If an item is included in the fixlist, it will be removed from the registry. The "AlternateShell" will be restored.) HKLM\SYSTEM\CurrentControlSet\Control\SafeBoot\Network\Hamachi2Svc => ""="Service" ==================== EXE Association (Whitelisted) =============== (If an entry is included in the fixlist, the registry item will be restored to default or removed.) ==================== Internet Explorer trusted/restricted =============== (If an entry is included in the fixlist, it will be removed from the registry.) ==================== Other Areas ============================ (Currently there is no automatic fix for this section.) HKU\S-1-5-21-81771348-503357986-749784082-1000\Control Panel\Desktop\\Wallpaper -> C:\Users\Gamer\AppData\Roaming\Microsoft\Windows\Themes\TranscodedWallpaper.jpg DNS Servers: 192.168.1.1 ==================== MSCONFIG/TASK MANAGER disabled items == (Currently there is no automatic fix for this section.) MSCONFIG\startupreg: Aeria Ignite => "C:\Program Files (x86)\Aeria Games\Ignite\aeriaignite.exe" silent MSCONFIG\startupreg: Akamai NetSession Interface => "C:\Users\Gamer\AppData\Local\Akamai\netsession_win.exe" MSCONFIG\startupreg: LogMeIn Hamachi Ui => "C:\Program Files (x86)\LogMeIn Hamachi\hamachi-2-ui.exe" --auto-start ==================== FirewallRules (Whitelisted) =============== (If an entry is included in the fixlist, it will be removed from the registry. The file will not be moved unless listed separately.) FirewallRules: [{39A31AFC-C4F4-4261-956B-6392A804F6AB}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{6AB7C5E9-7EEC-4906-87C6-90C83A0C57EA}] => (Allow) C:\Program Files (x86)\NVIDIA Corporation\NetService\NvNetworkService.exe FirewallRules: [{2607A8B5-DDFB-4375-80B9-355333BC498B}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{CEC8E287-9698-4576-A2C2-9FC58A261D75}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\NvStreamNetworkService.exe FirewallRules: [{39C48A81-EA0D-4655-8BA1-A92A6E01778C}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{EF87BE31-C54E-4B1C-B916-6FAE13852626}] => (Allow) C:\Program Files\NVIDIA Corporation\NvStreamSrv\nvstreamer.exe FirewallRules: [{CC04BF11-FF50-4924-96A6-8EB00DD7F0D6}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{2483FAF2-D23C-4F50-AA34-6B85A8C497ED}] => (Allow) C:\Program Files (x86)\AVG\AVG2014\avgmfapx.exe FirewallRules: [{E7E57017-1315-4496-8773-11403EFCFA5A}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{FECEB130-BDDF-422F-8916-CC0AE6411311}] => (Allow) C:\Program Files (x86)\Steam\Steam.exe FirewallRules: [{9B8DB2D0-FA9B-406E-9975-CADE8528D3C3}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [{99D0F1EC-8CB9-447F-AFF2-16A532C8926F}] => (Allow) C:\Program Files (x86)\Origin Games\Battlefield 3\bf3.exe FirewallRules: [TCP Query User{031D0230-F286-4C09-B4FC-A9361928182C}C:\users\gamer\appdata\local\apps\2.0\a14wxerg.whg\op879mgt.lml\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe] => (Allow) C:\users\gamer\appdata\local\apps\2.0\a14wxerg.whg\op879mgt.lml\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe FirewallRules: [UDP Query User{B9930BF6-0530-4628-BF2E-0B05B37F3736}C:\users\gamer\appdata\local\apps\2.0\a14wxerg.whg\op879mgt.lml\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe] => (Allow) C:\users\gamer\appdata\local\apps\2.0\a14wxerg.whg\op879mgt.lml\laun...app_59711684aa47878d_0001.0024_e509bd05d7b42c10\launcher.exe FirewallRules: [TCP Query User{6FAEA13C-D37D-4F3A-862A-9852F13C18C3}C:\ubisoft\ghost recon phantoms\pdc-live\ghostreconphantoms.exe] => (Block) C:\ubisoft\ghost recon phantoms\pdc-live\ghostreconphantoms.exe FirewallRules: [UDP Query User{6C9C6669-E3F0-474D-9E05-DF80403888D7}C:\ubisoft\ghost recon phantoms\pdc-live\ghostreconphantoms.exe] => (Block) C:\ubisoft\ghost recon phantoms\pdc-live\ghostreconphantoms.exe FirewallRules: [{782BDC16-943A-46BF-8163-D8AFBC02759E}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe FirewallRules: [{0403DB88-4F59-4A71-AD32-5FFE03479124}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\star conflict\game.exe FirewallRules: [{B6C5E6E5-53A9-4B8C-BBCE-AC4A38EBFDDC}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe FirewallRules: [{3CDF66D5-6293-4967-B151-376B8EE40FC7}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\bin\SniperEliteV2.exe FirewallRules: [TCP Query User{5828A5B9-83A8-4ACD-96D1-FFC141045B14}C:\program files (x86)\steam\steamapps\common\f1 2010\f1_2010_game.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\f1 2010\f1_2010_game.exe FirewallRules: [UDP Query User{AFE60ADA-C5EC-4845-AD35-85E58970022A}C:\program files (x86)\steam\steamapps\common\f1 2010\f1_2010_game.exe] => (Allow) C:\program files (x86)\steam\steamapps\common\f1 2010\f1_2010_game.exe FirewallRules: [TCP Query User{4772041A-B73E-4991-9BF8-127D54ADCDDE}D:\star conflict\launcher.exe] => (Allow) D:\star conflict\launcher.exe FirewallRules: [UDP Query User{BA5194C9-9A18-4B8C-A47B-4314CDB48CD4}D:\star conflict\launcher.exe] => (Allow) D:\star conflict\launcher.exe FirewallRules: [{53E6C511-35E4-462E-984F-080ED283D3B6}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{6A79F45E-B0F3-4ADC-B062-7C06AB95AC89}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{BF7D9516-5C29-4DF9-B44F-54736CAEA910}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{B39774CB-9D77-44F3-94A5-FF8E1CE15545}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{298B3EBE-9C0A-4A59-9534-C4DE54EE00CF}] => (Allow) D:\Steam\SteamApps\common\Robocraft\Robocraft.exe FirewallRules: [{ED4C5256-2FF1-4DA6-A9B3-ADB689619195}] => (Allow) D:\Steam\SteamApps\common\Robocraft\Robocraft.exe FirewallRules: [TCP Query User{682DCE8F-9311-42AF-A3A7-B6B1F1DF30CE}D:\games\world_of_tanks\wotlauncher.exe] => (Allow) D:\games\world_of_tanks\wotlauncher.exe FirewallRules: [UDP Query User{A7B63F16-21B9-481D-997E-401E0B1DA51C}D:\games\world_of_tanks\wotlauncher.exe] => (Allow) D:\games\world_of_tanks\wotlauncher.exe FirewallRules: [TCP Query User{8BE1FFC6-A721-4A7A-ACAA-348C6143A977}D:\games\world_of_tanks\worldoftanks.exe] => (Allow) D:\games\world_of_tanks\worldoftanks.exe FirewallRules: [UDP Query User{108D374E-C0FF-445C-99BF-D2B19B237797}D:\games\world_of_tanks\worldoftanks.exe] => (Allow) D:\games\world_of_tanks\worldoftanks.exe FirewallRules: [{C67E16E2-8AC0-43EE-BED2-72B085BC9FB7}] => (Allow) D:\Steam\SteamApps\common\GodMode\bin\GodMode.exe FirewallRules: [{AE4F3651-A966-47C9-81E4-C2FC79A8DA0D}] => (Allow) D:\Steam\SteamApps\common\GodMode\bin\GodMode.exe FirewallRules: [TCP Query User{5FB714D3-CBE2-49DA-AACD-DD60EC755AAF}D:\sirius mt2\metin2client_siriusmt2.bin] => (Allow) D:\sirius mt2\metin2client_siriusmt2.bin FirewallRules: [UDP Query User{8AE3B8CE-21FF-4799-B9C8-393B62AAFF8A}D:\sirius mt2\metin2client_siriusmt2.bin] => (Allow) D:\sirius mt2\metin2client_siriusmt2.bin FirewallRules: [TCP Query User{91548DB9-3CAC-4BEF-9AA3-D5BB14D20DFB}D:\sirius mt2\metin2client_sirius_mt2_01.bin] => (Block) D:\sirius mt2\metin2client_sirius_mt2_01.bin FirewallRules: [UDP Query User{D5A2F116-D46B-4431-971D-395E0C41FA85}D:\sirius mt2\metin2client_sirius_mt2_01.bin] => (Block) D:\sirius mt2\metin2client_sirius_mt2_01.bin FirewallRules: [TCP Query User{092112A0-BC3E-4E93-B5B2-EFF333AE907D}D:\sirius mt2\metin2client_sirius_mt2_c1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_c1.bin FirewallRules: [UDP Query User{C2759C2A-B1C8-43E4-8EEF-667FEB0C5592}D:\sirius mt2\metin2client_sirius_mt2_c1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_c1.bin FirewallRules: [TCP Query User{7D79D0B3-A850-4C8E-B4E4-BF28DDF2083F}D:\sirius mt2\metin2client_sirius_mt2_2.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_2.bin FirewallRules: [UDP Query User{37866652-EE29-496F-B9EF-C9DDCE8399D2}D:\sirius mt2\metin2client_sirius_mt2_2.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_2.bin FirewallRules: [TCP Query User{7D8E4A6A-491B-49AE-8B4F-A9B271F18340}D:\sirius mt2\metin2client_sirius.mt21.bin] => (Allow) D:\sirius mt2\metin2client_sirius.mt21.bin FirewallRules: [UDP Query User{0D07D7D6-F190-4DEF-8090-4396A1999A47}D:\sirius mt2\metin2client_sirius.mt21.bin] => (Allow) D:\sirius mt2\metin2client_sirius.mt21.bin FirewallRules: [TCP Query User{F7829B33-8702-4CC8-91FF-FD3A29D61A1E}D:\sirius mt2\metin2client_sirius_mt2_1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_1.bin FirewallRules: [UDP Query User{A91738B0-DA39-4057-9EFD-514E2FE444A3}D:\sirius mt2\metin2client_sirius_mt2_1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_1.bin FirewallRules: [TCP Query User{30C3248C-4F70-41F5-A10E-3FEC351D5D71}D:\steam\steamapps\common\uniserverz\unicontroller.exe] => (Allow) D:\steam\steamapps\common\uniserverz\unicontroller.exe FirewallRules: [UDP Query User{5D0D8790-E3FD-4E66-93A3-4A689EE2302E}D:\steam\steamapps\common\uniserverz\unicontroller.exe] => (Allow) D:\steam\steamapps\common\uniserverz\unicontroller.exe FirewallRules: [TCP Query User{3CFD67AD-EA70-42EF-886A-2D07E09EDAA1}D:\steam\steamapps\common\uniserverz\core\apache2\bin\httpd_z.exe] => (Allow) D:\steam\steamapps\common\uniserverz\core\apache2\bin\httpd_z.exe FirewallRules: [UDP Query User{9D744D72-50C9-45C4-B180-0E27C50E8A69}D:\steam\steamapps\common\uniserverz\core\apache2\bin\httpd_z.exe] => (Allow) D:\steam\steamapps\common\uniserverz\core\apache2\bin\httpd_z.exe FirewallRules: [TCP Query User{30CFF521-973F-411A-8410-EFD41A76ABD4}D:\sirius mt2\metin2client_sirius_mt2_b.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_b.bin FirewallRules: [UDP Query User{81D515DA-AA5C-4867-9414-8CFD579ACADC}D:\sirius mt2\metin2client_sirius_mt2_b.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_b.bin FirewallRules: [TCP Query User{199A4AD1-18F0-41FE-97F3-604045583955}D:\sirius mt2\metin2client_sirius_mt221.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt221.bin FirewallRules: [UDP Query User{9F8FDFF1-151F-463E-9521-478C25FBF7A1}D:\sirius mt2\metin2client_sirius_mt221.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt221.bin FirewallRules: [TCP Query User{598B6169-025C-4F40-80F9-C154E3511250}D:\sirius mt2\metin2client_sirius_mt241.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt241.bin FirewallRules: [UDP Query User{13BA1E1E-5FB4-4F98-9EE1-D552BCB10A78}D:\sirius mt2\metin2client_sirius_mt241.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt241.bin FirewallRules: [TCP Query User{F65E3B8F-3846-42F8-9881-948FBFBDEA2A}D:\sirius mt2\metin2client_sirius_mt2_a1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_a1.bin FirewallRules: [UDP Query User{BD397079-A415-4967-818A-17CF2BD37C0A}D:\sirius mt2\metin2client_sirius_mt2_a1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_a1.bin FirewallRules: [TCP Query User{D83662B5-3D7A-475F-98D3-085169AFC106}D:\sirius mt2\metin2client_sirius_mt2_11.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_11.bin FirewallRules: [UDP Query User{7D01A0A0-25FB-436C-84FA-16A66C8CAB50}D:\sirius mt2\metin2client_sirius_mt2_11.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_11.bin FirewallRules: [{A83AF8B6-2214-4D39-8E1C-1FB87C257B38}] => (Allow) C:\Users\Gamer\AppData\Local\Microsoft\SkyDrive\SkyDrive.exe FirewallRules: [{84D6FE06-FADC-463F-A0AB-D65ECE7B5C0C}] => (Allow) C:\Program Files (x86)\Windows Live\Contacts\wlcomm.exe FirewallRules: [{E3EE9D00-CC06-4208-A095-4D8383927F30}] => (Allow) LPort=2869 FirewallRules: [{6FA3FA20-5BE0-405B-8CC8-96553AB59459}] => (Allow) LPort=1900 FirewallRules: [{466D66BC-E2F3-4F8B-A3D6-0ECEC98BEDFA}] => (Allow) C:\Program Files (x86)\Windows Live\Messenger\msnmsgr.exe FirewallRules: [TCP Query User{2AFB4007-E31D-4850-A682-45374AB311B5}D:\sirius mt2\metin2client_sirius_mt2_a.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_a.bin FirewallRules: [UDP Query User{6636D9D0-09D0-46E9-A263-4E1461AE32AB}D:\sirius mt2\metin2client_sirius_mt2_a.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_a.bin FirewallRules: [TCP Query User{0BC1B7E8-3073-43A6-9649-5DC75F15891B}D:\sirius mt2\metin2client_sirius_mt2_b1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_b1.bin FirewallRules: [UDP Query User{4B5CBA7B-80A8-4726-85A5-5780DC579DBD}D:\sirius mt2\metin2client_sirius_mt2_b1.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_b1.bin FirewallRules: [TCP Query User{67B32463-9C12-4DD0-8683-16763DE1A765}D:\sirius mt2\metin2client_sirius_mt22.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt22.bin FirewallRules: [UDP Query User{F67E38C6-EF89-43DF-867E-51108F66DA9F}D:\sirius mt2\metin2client_sirius_mt22.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt22.bin FirewallRules: [TCP Query User{63602235-3930-4384-9109-754E74CAF615}D:\sirius mt2\metin2client_sirius_mt2_31.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_31.bin FirewallRules: [UDP Query User{1028B2C4-A1D5-431F-8599-C48B6BDC8D5D}D:\sirius mt2\metin2client_sirius_mt2_31.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_31.bin FirewallRules: [TCP Query User{D83769B9-7941-4652-A990-76F15B0F536D}D:\sirius mt2\metin2client_sirius_mt2_3.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_3.bin FirewallRules: [UDP Query User{287CEF02-6880-4422-BEF7-3D9D73C5CDD7}D:\sirius mt2\metin2client_sirius_mt2_3.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_3.bin FirewallRules: [TCP Query User{93458FC5-47F2-4407-9F80-2D7E70792A3A}D:\sirius mt2\metin2client_sirius_mt2_c.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_c.bin FirewallRules: [UDP Query User{C972C6A3-8134-421D-84C3-5CC15C8836CC}D:\sirius mt2\metin2client_sirius_mt2_c.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_c.bin FirewallRules: [TCP Query User{DFCDF4AA-51BB-4F60-B269-036A244EE382}D:\sirius mt2\metin2client_sirius_mt2_21.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_21.bin FirewallRules: [UDP Query User{A26018C6-8617-48FA-8BFF-74766BAA895B}D:\sirius mt2\metin2client_sirius_mt2_21.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_21.bin FirewallRules: [TCP Query User{53DF4E50-E068-444E-8EE1-9613CAE93D28}D:\sirius mt2\metin2client_siriusmt21.bin] => (Allow) D:\sirius mt2\metin2client_siriusmt21.bin FirewallRules: [UDP Query User{67587270-D6C1-46E2-8CE4-2B7DF7A35C67}D:\sirius mt2\metin2client_siriusmt21.bin] => (Allow) D:\sirius mt2\metin2client_siriusmt21.bin FirewallRules: [TCP Query User{309B22E2-B4E2-40FB-A230-24FB22B1A18B}D:\sirius mt2\metin2client_sirius_mt2_01.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_01.bin FirewallRules: [UDP Query User{0F147914-DB7C-4A8D-8059-CB6031ADA78C}D:\sirius mt2\metin2client_sirius_mt2_01.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_01.bin FirewallRules: [TCP Query User{B59AE542-5E0C-4CE0-B67F-A0881EA2704B}D:\sirius mt2 - kopie\metin2client_sirius_mt2_b.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_b.bin FirewallRules: [UDP Query User{0AEB9680-C37B-4BFB-93FE-059D9CA38E79}D:\sirius mt2 - kopie\metin2client_sirius_mt2_b.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_b.bin FirewallRules: [TCP Query User{B3D98918-8F52-4A52-97C1-E1FB920873E8}D:\sirius mt2\metin2client_sirius_mt23.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt23.bin FirewallRules: [UDP Query User{D4C6D6E2-2BA8-4CA7-ACDD-44FAEE337F38}D:\sirius mt2\metin2client_sirius_mt23.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt23.bin FirewallRules: [TCP Query User{C3854E7F-84C3-448F-8435-ABC94F12DDEE}D:\sirius mt2 - kopie\metin2client_sirius_mt241.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt241.bin FirewallRules: [UDP Query User{922F5253-FBB5-4CB6-8CD1-332BE65FA24B}D:\sirius mt2 - kopie\metin2client_sirius_mt241.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt241.bin FirewallRules: [TCP Query User{E56BC2FF-1659-4005-8C4F-1D18F1B8BE5B}D:\sirius mt2 - kopie\metin2client_sirius_mt23.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt23.bin FirewallRules: [UDP Query User{12540741-74C1-4F54-9BB6-28B0F51FB81D}D:\sirius mt2 - kopie\metin2client_sirius_mt23.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt23.bin FirewallRules: [TCP Query User{A417C644-D059-4253-ABB0-7733EF35742A}D:\sirius mt2 - kopie\metin2client_sirius_mt2_c.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_c.bin FirewallRules: [UDP Query User{09429F17-5E69-4071-90AA-CFFFBE7DCE42}D:\sirius mt2 - kopie\metin2client_sirius_mt2_c.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_c.bin FirewallRules: [TCP Query User{45235888-CE28-40C5-8ECC-734E038694FA}D:\sirius mt2 - kopie\metin2client_sirius_mt2_3.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_3.bin FirewallRules: [UDP Query User{C6D638B4-4A1E-4C85-AA78-C284E0175D23}D:\sirius mt2 - kopie\metin2client_sirius_mt2_3.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_3.bin FirewallRules: [TCP Query User{43415378-0921-4765-89B0-0E10A2BE1DA6}D:\sirius mt2 - kopie\metin2client_sirius_mt2_01.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_01.bin FirewallRules: [UDP Query User{49DBED3F-E520-4AA5-B24D-02F2C26126A5}D:\sirius mt2 - kopie\metin2client_sirius_mt2_01.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_01.bin FirewallRules: [TCP Query User{8CE16E34-F14A-4219-A95D-7333453B1538}D:\sirius mt2\metin2client_sirius_mt24.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt24.bin FirewallRules: [UDP Query User{F19F7626-8EE6-4723-90B9-63DCDE4636A4}D:\sirius mt2\metin2client_sirius_mt24.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt24.bin FirewallRules: [TCP Query User{B2E3A788-6940-4D14-A4A7-5FDC8C333575}D:\sirius mt2 - kopie\metin2client_sirius_mt2_1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_1.bin FirewallRules: [UDP Query User{C42524BB-868A-4DD0-BDF5-C9E43146A429}D:\sirius mt2 - kopie\metin2client_sirius_mt2_1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_1.bin FirewallRules: [TCP Query User{86C6A4B9-62F0-4BD6-811F-A07DD4B3245C}D:\sirius mt2\metin2client_sirius_mt2_0.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_0.bin FirewallRules: [UDP Query User{5FF26525-861F-4B05-9446-23C08518E0CC}D:\sirius mt2\metin2client_sirius_mt2_0.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt2_0.bin FirewallRules: [TCP Query User{1A08BAB4-ED53-4C33-B2A1-1BCC279BC757}D:\sirius mt2\metin2client_sirius_mt231.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt231.bin FirewallRules: [UDP Query User{713856F2-1B43-4BD7-A215-7CAEACD81426}D:\sirius mt2\metin2client_sirius_mt231.bin] => (Allow) D:\sirius mt2\metin2client_sirius_mt231.bin FirewallRules: [{E11FDB08-CA59-42A8-A41C-CEEE85BC8B6C}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{0E18CB02-1B19-4B72-B016-3379129C7C96}] => (Allow) C:\Program Files (x86)\Steam\bin\steamwebhelper.exe FirewallRules: [{436BBD85-9D76-4F4B-A3D2-2A46004012B0}] => (Allow) D:\Steam\SteamApps\common\Dragons&Titans\dnt.exe FirewallRules: [{6DBD4F17-CBDE-4EB2-BB28-D311033DC3FE}] => (Allow) D:\Steam\SteamApps\common\Dragons&Titans\dnt.exe FirewallRules: [TCP Query User{B2BA54E4-0701-4583-A2E7-EF9EF19B6B8B}D:\sirius mt2 - kopie\metin2client_sirius_mt231.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt231.bin FirewallRules: [UDP Query User{8B5D94C3-68EF-473A-8F34-69BFD8F2F830}D:\sirius mt2 - kopie\metin2client_sirius_mt231.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt231.bin FirewallRules: [TCP Query User{7C12892F-444B-4720-BF0F-7ED5E676B9C3}D:\sirius mt2 - kopie\metin2client_sirius_mt2_11.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_11.bin FirewallRules: [UDP Query User{0397C14B-4873-4F1F-9F3E-CC7FE1577B36}D:\sirius mt2 - kopie\metin2client_sirius_mt2_11.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_11.bin FirewallRules: [TCP Query User{33306558-ADF0-40F9-9972-0EFB96A1E58E}D:\sirius mt2 - kopie\metin2client_sirius_mt2_a.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_a.bin FirewallRules: [UDP Query User{3ECDAD63-7E48-4FDF-B874-F7518B22A8DB}D:\sirius mt2 - kopie\metin2client_sirius_mt2_a.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_a.bin FirewallRules: [TCP Query User{621B43BA-83DF-49C3-A09A-CE6E02E9F6F3}D:\sirius mt2\metin2client_sirius.mt2.bin] => (Allow) D:\sirius mt2\metin2client_sirius.mt2.bin FirewallRules: [UDP Query User{56C71449-92AF-4BE3-A21D-40C6EEA860FB}D:\sirius mt2\metin2client_sirius.mt2.bin] => (Allow) D:\sirius mt2\metin2client_sirius.mt2.bin FirewallRules: [TCP Query User{02999FAF-41BE-4340-A5E7-D7E893CF7E11}D:\sirius mt2 - kopie\metin2client_sirius_mt2_31.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_31.bin FirewallRules: [UDP Query User{8AA6D6E6-9837-49B2-8353-E092EAC95C54}D:\sirius mt2 - kopie\metin2client_sirius_mt2_31.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_31.bin FirewallRules: [{48C93A89-31CD-47F0-AF04-CFF8FCA86B04}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe FirewallRules: [{FC8A090A-DC7E-4462-9578-AEF737FAD549}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4sp.exe FirewallRules: [{2AE51290-DD5A-42F3-A189-58F12A6CE7B9}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe FirewallRules: [{6BF5AC37-D711-4618-B99D-D85F4559F846}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 2\iw4mp.exe FirewallRules: [{4158B3CC-0ADB-4340-A7E9-23282AB07D12}] => (Allow) D:\Steam\SteamApps\common\Dino D-Day\dinodday.exe FirewallRules: [{E792D2F0-AD8C-4970-BC00-A409D5F2E7D5}] => (Allow) D:\Steam\SteamApps\common\Dino D-Day\dinodday.exe FirewallRules: [{6E276744-802B-4180-8BBD-DF2F1DF38787}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [{60B9D192-A4F6-4191-B95E-7E1F4B21440D}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Global Offensive\csgo.exe FirewallRules: [TCP Query User{66ABD4AE-5827-42D8-BD40-678949B35062}D:\sirius mt2 - kopie\metin2client_sirius_mt2_b1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_b1.bin FirewallRules: [UDP Query User{02B097E5-933C-40B7-97B9-6FC441318F5F}D:\sirius mt2 - kopie\metin2client_sirius_mt2_b1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_b1.bin FirewallRules: [{3666C890-6CFB-4A91-8EF3-644C692F4E22}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_b1.bin FirewallRules: [{3F86527B-FA41-4CA2-895D-C1E1208630FB}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_b1.bin FirewallRules: [TCP Query User{B295554F-2A33-4213-AF31-D7BB399D8395}D:\sirius mt2 - kopie\metin2client_sirius_mt2_0.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_0.bin FirewallRules: [UDP Query User{15A1EB15-F334-4D9F-B703-3257F01229F3}D:\sirius mt2 - kopie\metin2client_sirius_mt2_0.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_0.bin FirewallRules: [{A0E7ECD1-051A-4E39-B2ED-A985F3C45F56}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_0.bin FirewallRules: [{A4603E66-1C5C-43D4-817A-3D97BCBD3E19}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_0.bin FirewallRules: [TCP Query User{14562639-C79C-4452-959A-44C11D0C6303}D:\sirius mt2 - kopie\metin2client_sirius.mt21.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius.mt21.bin FirewallRules: [UDP Query User{D8FF059A-4885-43B6-BA6D-336D7D19323D}D:\sirius mt2 - kopie\metin2client_sirius.mt21.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius.mt21.bin FirewallRules: [{9EDAF4A0-9174-4ADA-B772-A73C0AE366CF}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius.mt21.bin FirewallRules: [{9AE402E6-0E20-43BD-AEF9-BE31D4FFCC5A}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius.mt21.bin FirewallRules: [TCP Query User{E9EF8708-6A11-409A-802A-C4CCB9E24C47}D:\sirius mt2 - kopie\metin2client_siriusmt2.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_siriusmt2.bin FirewallRules: [UDP Query User{963063D1-D733-4987-A71B-B1AA1E761530}D:\sirius mt2 - kopie\metin2client_siriusmt2.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_siriusmt2.bin FirewallRules: [{D9EA5FAA-8168-4745-AD99-2DD338BAC389}] => (Block) D:\sirius mt2 - kopie\metin2client_siriusmt2.bin FirewallRules: [{B383DE86-3F35-47A4-932B-FCA36F867205}] => (Block) D:\sirius mt2 - kopie\metin2client_siriusmt2.bin FirewallRules: [{9321C459-F41A-4D46-B6D6-A8EB2125A684}] => (Allow) C:\Program Files (x86)\Skype\Phone\Skype.exe FirewallRules: [{F25C7DC9-74CB-45A6-B560-7829BB5AE225}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe FirewallRules: [{93CC630E-F445-48FC-B9F4-915919E8118B}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6sp.exe FirewallRules: [{C45CE5B5-F007-446C-98DF-BD8BE7271CF3}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe FirewallRules: [{66E2722B-54CA-4456-9D63-E2FB38721900}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6mp.exe FirewallRules: [{93DC4B9D-B31B-480A-8325-E9FEF7C55388}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe FirewallRules: [{B433DE80-7E35-472D-9490-371CB5F1CF84}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Black Ops II\t6zm.exe FirewallRules: [{C621961A-A4A2-4B42-AADD-B87646074B43}] => (Allow) D:\Steam\SteamApps\common\Orion Dino Beatdown\Binaries\Win32\DinoHordeGame.exe FirewallRules: [{EFD89F22-D84C-4359-8CDB-A0410489AF59}] => (Allow) D:\Steam\SteamApps\common\Orion Dino Beatdown\Binaries\Win32\DinoHordeGame.exe FirewallRules: [TCP Query User{7E64080F-C29B-41AA-B7E0-14E6F4D3DC13}D:\sirius mt2 - kopie\metin2client_sirius_mt2_2.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_2.bin FirewallRules: [UDP Query User{B00676C8-4609-4D4E-B151-DD136FFF7762}D:\sirius mt2 - kopie\metin2client_sirius_mt2_2.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_2.bin FirewallRules: [{56EB1274-CA34-465C-A92D-1486D7C758B2}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_2.bin FirewallRules: [{250DC635-B4F7-43A6-A2CE-52C36660088B}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_2.bin FirewallRules: [TCP Query User{D523A502-6CB7-458B-9634-FF08518FFE67}D:\sirius mt2 - kopie\metin2client_sirius_mt2_21.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_21.bin FirewallRules: [UDP Query User{AE07AC0D-E13B-4EE3-977D-E86B0628A690}D:\sirius mt2 - kopie\metin2client_sirius_mt2_21.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_21.bin FirewallRules: [{69A638F3-8080-4AF0-ADD0-B811D81E89F8}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_21.bin FirewallRules: [{53DAD546-C012-4E79-96DF-937BD702CA23}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt2_21.bin FirewallRules: [TCP Query User{CDF96BA2-027B-4BE3-9DA1-49EDE2F3A391}D:\sirius mt2 - kopie\metin2client_siriusmt21.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_siriusmt21.bin FirewallRules: [UDP Query User{794CBF68-DDFC-4806-BA88-BD68B8BC4D84}D:\sirius mt2 - kopie\metin2client_siriusmt21.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_siriusmt21.bin FirewallRules: [{4145F60D-B82E-469F-A465-66B42018FA17}] => (Block) D:\sirius mt2 - kopie\metin2client_siriusmt21.bin FirewallRules: [{844D8BF6-361B-4966-B2A3-9554F90D2762}] => (Block) D:\sirius mt2 - kopie\metin2client_siriusmt21.bin FirewallRules: [{B704D354-9496-4A40-A36F-EAAD25B81CAE}] => (Allow) D:\Steam\SteamApps\common\DiRT Showdown\showdown.exe FirewallRules: [{858101BC-B6F6-459A-BA2F-7E74BCAA8B14}] => (Allow) D:\Steam\SteamApps\common\DiRT Showdown\showdown.exe FirewallRules: [TCP Query User{89E64B49-EAAA-4C6E-866F-321088A4764F}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [UDP Query User{FB8E88CF-1117-40C2-A2E4-D0570355442D}C:\program files (x86)\java\jre7\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{C1127FF2-B955-4F7F-B523-78810C0B90E9}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [{835A39D5-9770-457B-A917-DA5578BCC66B}] => (Block) C:\program files (x86)\java\jre7\bin\javaw.exe FirewallRules: [TCP Query User{4F1C32C1-13D7-4327-8D1D-DBA72C1ACD6D}D:\sirius mt2 - kopie\metin2client_sirius_mt221.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt221.bin FirewallRules: [UDP Query User{A83C8039-CA3D-4B4A-A7C3-D5F7443F5FA8}D:\sirius mt2 - kopie\metin2client_sirius_mt221.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt221.bin FirewallRules: [{C5E72B0A-DAA2-4812-B764-11F1FDF66147}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt221.bin FirewallRules: [{F5B26EC1-E9F0-4B1B-AE9A-1B0034792D1A}] => (Block) D:\sirius mt2 - kopie\metin2client_sirius_mt221.bin FirewallRules: [{ADEDE4C2-7BC8-489F-8A02-54A7B495B8F5}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{0D905C12-6606-428C-8C7D-08FF42672EA7}] => (Allow) D:\Steam\SteamApps\common\Left 4 Dead 2\left4dead2.exe FirewallRules: [{2F098E34-B678-4CA1-870A-839CFFE53FD5}] => (Allow) D:\Steam\SteamApps\common\Warframe\Tools\Launcher.exe FirewallRules: [{300FC074-D75C-461D-8A96-6F3F3A745E68}] => (Allow) D:\Steam\SteamApps\common\Warframe\Tools\Launcher.exe FirewallRules: [{9B85DD14-3AE7-4506-AC8B-744B50FE8145}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{F1E28726-48BD-41AF-B445-52183314FF7C}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{A84CBDF9-A789-4DD5-A166-D2464CF6404E}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{5DA68188-505B-4F6C-8E85-067160190795}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{8BC4CA01-08E2-47EA-B500-080760C9B14C}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.exe FirewallRules: [{0ABF1207-D64A-47FA-9269-D354DB611FEA}] => (Allow) D:\Steam\steamapps\common\Warframe\Warframe.x64.exe FirewallRules: [{2CEA0902-F43A-4789-A06D-733B43C3C432}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\Launcher.exe FirewallRules: [{2A4A94B2-C843-4C35-80AF-3D27CEE81D25}] => (Allow) D:\Steam\steamapps\common\Warframe\Tools\RemoteCrashSender.exe FirewallRules: [{D42932F0-690C-49E0-9B60-E4E0D361C1CE}] => (Allow) D:\Steam\SteamApps\common\Audiosurf\engine\QuestViewer.exe FirewallRules: [{857BF2B8-ECC8-45AE-A5AC-D42B67215969}] => (Allow) D:\Steam\SteamApps\common\Audiosurf\engine\QuestViewer.exe FirewallRules: [{C3B0417A-1AC9-490C-A0F6-7E3A10343546}] => (Allow) D:\Steam\SteamApps\common\Quake Live\quakelive_steam.exe FirewallRules: [{BBD91CE4-3E1A-45E3-B75B-6B7735C655C0}] => (Allow) D:\Steam\SteamApps\common\Quake Live\quakelive_steam.exe FirewallRules: [{E1219F4A-E05C-4457-9A46-EC3EDB461083}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{986FD26C-1413-4E41-800C-3A267A523BD4}] => (Allow) D:\Steam\SteamApps\common\Counter-Strike Source\hl2.exe FirewallRules: [{584368DF-3BC7-4510-B629-33FE437D5F60}] => (Allow) D:\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe FirewallRules: [{6ECD16D4-92E0-456C-8FA9-0FD3299D3B81}] => (Allow) D:\Steam\SteamApps\common\CSNZ\Bin\cstrike-online.exe FirewallRules: [{E3E2EE6B-1DFF-44A0-B652-CFC6D65A7FE4}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe FirewallRules: [{A2B62059-BCA1-430A-8CE7-465859784A2D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3372\Agent.exe FirewallRules: [{F5BE55A5-6340-4022-824C-87E993B06597}] => (Allow) D:\Diablo III\Diablo III.exe FirewallRules: [{6996A95F-4053-467C-91DF-5899FF0C1F36}] => (Allow) D:\Diablo III\Diablo III.exe FirewallRules: [TCP Query User{29E4A093-08AD-4375-AE2B-421E50CE76D8}C:\programdata\battle.net\agent\agent.3427\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3427\agent.exe FirewallRules: [UDP Query User{9CA3CAB0-AD25-428D-AB5C-180411D67481}C:\programdata\battle.net\agent\agent.3427\agent.exe] => (Allow) C:\programdata\battle.net\agent\agent.3427\agent.exe FirewallRules: [{AF09EEB8-48E1-4C1C-9F9C-7A21B2483D84}] => (Allow) D:\Battle.net\Battle.net.exe FirewallRules: [{13C52580-EF39-4BA1-B6C4-F9055A4A92AA}] => (Allow) D:\Battle.net\Battle.net.exe FirewallRules: [{97E16CC6-AD36-4637-ADB9-9AD70B8D9C1D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe FirewallRules: [{7B4AB34C-CFE4-4775-B779-CDAA89FB25AE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3427\Agent.exe FirewallRules: [{082F9861-FCE7-4FC6-B1D3-85016705AFF3}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe FirewallRules: [{557D2113-4D38-4EA8-BA96-5A5356309918}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3454\Agent.exe FirewallRules: [{9DE2F138-38E4-40A0-8E35-B3B31A1129AF}] => (Allow) D:\Steam\SteamApps\common\Serious Sam Revolution\Bin\SeriousSam.exe FirewallRules: [{BAEA00B2-A30D-4FB2-BC45-9AE5C178C3F9}] => (Allow) D:\Steam\SteamApps\common\Serious Sam Revolution\Bin\SeriousSam.exe FirewallRules: [{542BAE2C-57D2-4955-9B47-8660D18C98A3}] => (Allow) D:\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe FirewallRules: [{16F7DF23-D824-46EB-A0CA-73425B8FA698}] => (Allow) D:\Steam\SteamApps\common\PAYDAY The Heist\payday_win32_release.exe FirewallRules: [{74292342-F02C-4551-AA34-2EABD1B969EA}] => (Allow) D:\Origin Games\Mirrors Edge\Binaries\MirrorsEdge.exe FirewallRules: [{41F7FF71-220A-4920-89AB-DC23806376A7}] => (Allow) D:\Origin Games\Mirrors Edge\Binaries\MirrorsEdge.exe FirewallRules: [{15179073-D30E-4BD1-8EBB-4922A2C83AB2}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [{78D499CC-A74D-42D3-92DD-6D5135E51DFC}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3478\Agent.exe FirewallRules: [TCP Query User{4E927420-6D35-4F0D-920B-67A8C82E370F}C:\programdata\battle.net\agent\agent.3507\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.3507\agent.exe FirewallRules: [UDP Query User{83D231BE-020F-4050-A6A2-DC026FFEB40F}C:\programdata\battle.net\agent\agent.3507\agent.exe] => (Block) C:\programdata\battle.net\agent\agent.3507\agent.exe FirewallRules: [{E5F6BA08-BE27-401C-86B6-8BA69E892859}] => (Allow) C:\programdata\battle.net\agent\agent.3507\agent.exe FirewallRules: [{987ADCCC-25AE-493E-839E-5065EC933877}] => (Allow) C:\programdata\battle.net\agent\agent.3507\agent.exe FirewallRules: [{D2B7A3E7-695C-4D7F-96D4-2CD8D66D3478}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{EDE4014C-AFCB-4679-A78F-BB32A360BE8D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [TCP Query User{BE8F184E-CB38-4B16-A907-DF3AE3CD4B4D}D:\steam\steamapps\common\happywars\happywars.exe] => (Block) D:\steam\steamapps\common\happywars\happywars.exe FirewallRules: [UDP Query User{4E440F32-5021-418C-ABBA-68C9BE6032DB}D:\steam\steamapps\common\happywars\happywars.exe] => (Block) D:\steam\steamapps\common\happywars\happywars.exe FirewallRules: [{F0E51D56-BFA4-4A4F-A389-5932472C2CB6}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [{53B4BEE1-B0B2-4CA0-AC2E-ACCD4E43AF25}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3526\Agent.exe FirewallRules: [TCP Query User{DAE1EAAD-97FF-491A-BEEF-E7ECA2D31994}D:\sirius mt2 - kopie\metin2client_sirius_mt2_c1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_c1.bin FirewallRules: [UDP Query User{DA13FD8C-4883-49BF-8754-75970CBE6D18}D:\sirius mt2 - kopie\metin2client_sirius_mt2_c1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_c1.bin FirewallRules: [TCP Query User{532C9148-A383-4006-8071-11B5ABC3BCC5}D:\sirius mt2 - kopie\metin2client_sirius_mt2_a1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_a1.bin FirewallRules: [UDP Query User{3E33886E-6370-4C29-9A2A-BA8D6EF46FDA}D:\sirius mt2 - kopie\metin2client_sirius_mt2_a1.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt2_a1.bin FirewallRules: [TCP Query User{7A174912-D7E5-460D-A5AA-69237D69CBF7}D:\sirius mt2 - kopie\metin2client_sirius_mt24.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt24.bin FirewallRules: [UDP Query User{9B720C17-1803-4E7D-9ACD-8C9C052BEF34}D:\sirius mt2 - kopie\metin2client_sirius_mt24.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt24.bin FirewallRules: [{BC0F7737-1AB6-433B-A8D4-DD3E3330B541}] => (Allow) D:\Steam\SteamApps\common\insurgency2\insurgency.exe FirewallRules: [{B80C3836-6EC7-4982-9E16-4DB72D5ABF2F}] => (Allow) D:\Steam\SteamApps\common\insurgency2\insurgency.exe FirewallRules: [TCP Query User{C83B7FA5-2982-4066-8C4B-8DF890AC1332}D:\sirius mt2 - kopie\metin2client_sirius_mt22.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt22.bin FirewallRules: [UDP Query User{DDF012D8-F224-4E6A-B0FA-C1535FC453EE}D:\sirius mt2 - kopie\metin2client_sirius_mt22.bin] => (Allow) D:\sirius mt2 - kopie\metin2client_sirius_mt22.bin FirewallRules: [TCP Query User{A0F49E31-8C1C-4DCC-A1D0-9C3222DA1F44}D:\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) D:\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe FirewallRules: [UDP Query User{3F0ABF1B-D753-415A-9D0B-E8F023332E84}D:\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe] => (Allow) D:\steam\steamapps\common\grand theft auto iv episodes from liberty city\eflc\eflc.exe FirewallRules: [{EDADDB3F-EDD4-4565-8831-2FA034CBF745}] => (Allow) D:\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe FirewallRules: [{AB203E55-F376-4E03-91AF-F682AB889275}] => (Allow) D:\Steam\SteamApps\common\Far Cry 3\bin\FC3UpdaterSteam.exe FirewallRules: [{B70870DD-6186-4358-B01D-00DD03B35593}] => (Allow) D:\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe FirewallRules: [{78F828F7-99E6-4AE4-A7FE-AA80485E9BCB}] => (Allow) D:\Steam\SteamApps\common\Far Cry 3\bin\farcry3.exe FirewallRules: [{79EB0B52-7B32-470F-B2A4-6CB369635E01}] => (Allow) D:\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe FirewallRules: [{6C1E879F-F151-42E4-84F9-37EB1CAB881E}] => (Allow) D:\Steam\SteamApps\common\Far Cry 3\bin\farcry3_d3d11.exe FirewallRules: [{AB193A50-D70A-4CB2-8BA9-E89E73B34CC8}] => (Allow) D:\Origin Games\Battlefield 4\bf4_x86.exe FirewallRules: [{BC4E6F9A-8B8E-4422-AD28-723C984B2C21}] => (Allow) D:\Origin Games\Battlefield 4\bf4_x86.exe FirewallRules: [{B34F15B5-C247-4031-8C83-616A398FBC57}] => (Allow) D:\Origin Games\Battlefield 4\bf4.exe FirewallRules: [{77913FB5-D874-4F21-A584-1E2917CA2FC1}] => (Allow) D:\Origin Games\Battlefield 4\bf4.exe FirewallRules: [TCP Query User{F90882A7-4EE7-4B38-8A19-A0CDA1F86ACF}D:\diablo iii\diablo iii.exe] => (Allow) D:\diablo iii\diablo iii.exe FirewallRules: [UDP Query User{E2FAC0E1-6539-40AF-B011-A0DB286C28F1}D:\diablo iii\diablo iii.exe] => (Allow) D:\diablo iii\diablo iii.exe FirewallRules: [{EB149077-08F3-41B8-9187-AACEF698243B}] => (Allow) D:\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{272FF4F8-5854-43C9-9F8F-7868D640BC67}] => (Allow) D:\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanetLauncher.exe FirewallRules: [{48180153-3155-4EDD-AEA6-319A97DF0846}] => (Allow) D:\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe FirewallRules: [{200CBB03-859A-4419-AB4C-ECE6AC26BFE0}] => (Allow) D:\Steam\SteamApps\common\ManiaPlanet_TMStadium\ManiaPlanet.exe FirewallRules: [{850DCDC2-D5DC-477F-9749-98E5A8B5696C}] => (Allow) D:\Steam\SteamApps\common\NASCAR 14\bin\NASCAR14.exe FirewallRules: [{275E9B77-6019-4344-BF76-4CF0F30DCA6D}] => (Allow) D:\Steam\SteamApps\common\NASCAR 14\bin\NASCAR14.exe FirewallRules: [{7D37552D-3189-4D57-A23B-C7B112AF62CD}] => (Allow) D:\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe FirewallRules: [{F19CA45B-6D15-4B3E-B49F-F080CAEE1232}] => (Allow) D:\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutParadise.exe FirewallRules: [{8B606FB4-9CBA-4A62-AA7C-7C09461ADF58}] => (Allow) D:\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe FirewallRules: [{F3AD4490-1779-4667-AE05-7F7CD489DC19}] => (Allow) D:\Steam\SteamApps\common\Burnout(TM) Paradise The Ultimate Box\BurnoutConfigTool.exe FirewallRules: [{5D9DE081-A8B9-447C-9756-F3D691B0D78B}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe FirewallRules: [{7461E112-DC75-45F6-A201-2BCDB4793CDF}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Ghosts\iw6mp64_ship.exe FirewallRules: [{C311B307-6B3C-4B5E-A551-9FC55278417C}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe FirewallRules: [{72AF6256-6767-4C8C-82A7-9788A4FA987D}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Ghosts\iw6sp64_ship.exe FirewallRules: [{C2232EB4-A3B5-4959-A383-B643711E3515}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe FirewallRules: [{BDCE0C04-E792-497C-B7D0-8808CE804141}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_mp64_ship.exe FirewallRules: [{5F3B0EAC-DE2B-49A8-86BF-8F5ADA670C9D}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe FirewallRules: [{E4A6AE39-009D-4E14-9375-66C3714A690F}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Advanced Warfare\s1_sp64_ship.exe FirewallRules: [{271569DE-0706-4A18-A584-83AD055E563E}] => (Allow) D:\Steam\SteamApps\common\Family Guy Back to the Multiverse\FGUY.exe FirewallRules: [{D4951E6A-0CDF-480A-81A4-C6D239E4FC4F}] => (Allow) D:\Steam\SteamApps\common\Family Guy Back to the Multiverse\FGUY.exe FirewallRules: [{BF4664D9-54C8-4230-9977-FF9FFDA4A0FA}] => (Allow) D:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe FirewallRules: [{F1C2AC33-6937-4FF7-89F8-4C48C5285220}] => (Allow) D:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win64\CMW.exe FirewallRules: [{D3C58E4E-9CEF-476F-B174-8F18B187749D}] => (Allow) D:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe FirewallRules: [{06E7F6D3-8C84-43A0-93C9-570B3DBB779E}] => (Allow) D:\Steam\SteamApps\common\chivalrymedievalwarfare\Binaries\Win32\CMW.exe FirewallRules: [{45F1D978-C821-4329-8E24-603FFEAF225A}] => (Allow) D:\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe FirewallRules: [{25374FA6-91B0-4B7D-9C95-DDD7D9C038D5}] => (Allow) D:\Steam\SteamApps\common\chivalrymedievalwarfare\ChivLauncher.exe FirewallRules: [{122EE298-5810-41C2-97CB-E10BE5A595FE}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{9919DC76-4F97-4A75-B15B-7D937F98F91A}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{F22D5A35-96D4-460E-9510-48A46B396ACA}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{10800152-454C-47EB-B2F3-204763A0625D}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer.exe FirewallRules: [{6FF8E859-2F98-4C8F-B27A-9639A2E6C30E}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [{8262AB87-233E-4C98-81D2-9E6A15E02B8F}] => (Allow) C:\Program Files (x86)\TeamViewer\TeamViewer_Service.exe FirewallRules: [TCP Query User{B01AD312-1311-4ED1-96E5-F636748181AF}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) D:\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [UDP Query User{2391D49D-0764-41EC-AE62-47B1F4F02F22}D:\steam\steamapps\common\planetside 2\planetside2_x64.exe] => (Allow) D:\steam\steamapps\common\planetside 2\planetside2_x64.exe FirewallRules: [{2385942A-B5D8-471A-8A84-96867587BB1B}] => (Allow) D:\Steam\SteamApps\common\Star Trek Online\Star Trek Online.exe FirewallRules: [{53C15C09-2B5C-4CEC-B604-9647ADEDC2AD}] => (Allow) D:\Steam\SteamApps\common\Star Trek Online\Star Trek Online.exe FirewallRules: [TCP Query User{B2FFCD3A-0CE8-412C-86DD-F709F3F3BF1C}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => (Allow) D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe FirewallRules: [UDP Query User{C02798BC-1E03-4D72-B9EC-A3FF0B717C50}D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe] => (Allow) D:\steam\steamapps\common\star trek online\star trek online\live\gameclient.exe FirewallRules: [{875317FB-B059-4B76-A5F4-817E52FFC579}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{0DDB7F5C-13C4-452B-8EDE-6D6E1EC465C9}] => (Allow) C:\Program Files (x86)\Mozilla Firefox\firefox.exe FirewallRules: [{5846AA95-793C-4AFF-9279-45CA055D346D}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{1C4F48D7-E4D4-467E-94AC-A0A7D7716E44}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3634\Agent.exe FirewallRules: [{93BCC3AB-CB3A-463D-B811-A5BD3ED38825}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{545DFB8A-D6DA-4E74-9570-C321F3A8CFAF}] => (Allow) C:\ProgramData\Battle.net\Agent\Agent.3689\Agent.exe FirewallRules: [{4EB54CDE-2337-4156-AFB8-136BE67CEED0}] => (Allow) D:\Steam\SteamApps\common\Minimum\Binaries\Win32\MinGame-Win32-F.exe FirewallRules: [{0C579FA4-9254-4378-9BB1-3A9B36AC4131}] => (Allow) D:\Steam\SteamApps\common\Minimum\Binaries\Win32\MinGame-Win32-F.exe FirewallRules: [{7372BE8A-E4EB-4117-B164-FD6E1D79621A}] => (Allow) D:\Steam\SteamApps\common\deadrising3\deadrising3.exe FirewallRules: [{F2188D90-0263-4C75-8E29-372A9C8A22B7}] => (Allow) D:\Steam\SteamApps\common\deadrising3\deadrising3.exe FirewallRules: [{9120AAA8-6F59-498D-8B7D-7580AB3B9AB9}] => (Allow) D:\Steam\SteamApps\common\Red Orchestra 2\Binaries\Win32\ROGame.exe FirewallRules: [{B6951458-2FB3-4EAC-A8DD-852CC293674E}] => (Allow) D:\Steam\SteamApps\common\Red Orchestra 2\Binaries\Win32\ROGame.exe FirewallRules: [{5FA67579-9910-403E-9D77-F26A8084ABEF}] => (Allow) D:\Steam\SteamApps\common\Battlefield Bad Company 2\BFBC2Game.exe FirewallRules: [{2D821E37-1ED0-471A-A7E4-0BBD90E9DD1E}] => (Allow) D:\Steam\SteamApps\common\Battlefield Bad Company 2\BFBC2Game.exe FirewallRules: [{04751397-3660-401C-BEA0-6548E814A2D1}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{5D421212-7964-44B8-9364-F81F51399F51}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{434BC100-BC85-4F92-92EF-9527CA86A4ED}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{C3766E01-5616-45CE-BA04-8D84CB165B51}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{2120B4D8-5E2B-4551-BEB7-784E818914EA}] => (Allow) D:\Steam\SteamApps\common\GodMode\bin\GodMode.exe FirewallRules: [{48F94F4E-4AE4-4C8E-A259-8628C256AC0B}] => (Allow) D:\Steam\SteamApps\common\GodMode\bin\GodMode.exe FirewallRules: [{EF4EEECE-FF17-437A-AF78-EF9766EA2BC2}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe FirewallRules: [{C41E00E2-1D24-4223-A1A3-D2F531988153}] => (Allow) C:\Program Files (x86)\Steam\SteamApps\common\Sniper Elite V2\Launcher\SniperV2Launcher.exe FirewallRules: [{DF9777F0-9867-474C-BC9F-80177A6A0760}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe FirewallRules: [{076042F7-9409-435A-AA99-C836F22D7F48}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe FirewallRules: [{74AA496A-B82F-4995-85D3-27DCC8D4CFD7}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe FirewallRules: [{D768084F-81E3-4C3B-9307-C9688A3DD75E}] => (Allow) D:\Games\Star Wars-The Old Republic\launcher.exe FirewallRules: [{CD793803-A4FC-4C87-A661-1991C90800EF}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{85015EB7-F480-44E9-87C0-D2BA9C52259B}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\APB.exe FirewallRules: [{E27B6CF7-FC52-40DD-8B54-3DAA961046EC}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{A168D1C7-02FE-4800-8D4F-4AAAA0706085}] => (Allow) D:\Steam\SteamApps\common\APB Reloaded\Binaries\VivoxVoiceService.exe FirewallRules: [{1F9EC67E-1F21-43EC-8844-E88EFF13F6DA}] => (Allow) D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{9B125B6C-0730-49AA-A52B-AE7306BDDF2C}] => (Allow) D:\Steam\SteamApps\common\PAYDAY 2\payday2_win32_release.exe FirewallRules: [{D1D61B40-B0A2-4F38-A5BB-FF2FCEFA35DE}] => (Allow) D:\Origin Games\Battlefield 4\bf4_x86.exe FirewallRules: [{2A1FE436-BF53-45EF-9A68-F678D415E78A}] => (Allow) D:\Origin Games\Battlefield 4\bf4_x86.exe FirewallRules: [{1F0603F9-5F71-4391-B6F4-C50678C052B7}] => (Allow) D:\Origin Games\Battlefield 4\bf4.exe FirewallRules: [{6F35E51F-3EAA-45AB-868F-871B048CFDC9}] => (Allow) D:\Origin Games\Battlefield 4\bf4.exe FirewallRules: [{00C1BBDA-202B-497D-8F84-483678E19D27}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Trials Fusion\datapack\trials_fusion.exe FirewallRules: [{C815EB9B-EDEC-4504-98AE-AA9B44F992C5}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Trials Fusion\datapack\trials_fusion.exe FirewallRules: [{F59211A0-E028-4613-B7C4-21F69892C7BE}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Trials Fusion\datapack\trials_fusion.exe FirewallRules: [{751EACBD-3EE8-4BCE-A225-C05CABB30D40}] => (Allow) D:\Program Files (x86)\Ubisoft\Ubisoft Game Launcher\games\Trials Fusion\datapack\trials_fusion.exe FirewallRules: [TCP Query User{A2CA600E-C970-475D-AD86-DF8A8754786D}D:\data\nfsw.exe] => (Allow) D:\data\nfsw.exe FirewallRules: [UDP Query User{7B0C7400-CB34-41A4-8EF8-DBDBBD4425CC}D:\data\nfsw.exe] => (Allow) D:\data\nfsw.exe FirewallRules: [{CD9D997F-03A7-4636-B994-2CF5EBD82CF1}] => (Block) D:\data\nfsw.exe FirewallRules: [{333CAFFE-F868-4222-BD66-43E2A42667FB}] => (Block) D:\data\nfsw.exe FirewallRules: [TCP Query User{8772556C-B7E9-4EA4-BC24-D90049EA8234}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [UDP Query User{361C1252-6F64-4502-9D15-0D477BA9D9E2}C:\program files (x86)\mozilla firefox\firefox.exe] => (Block) C:\program files (x86)\mozilla firefox\firefox.exe FirewallRules: [{3FC7C55F-9408-4098-9EFC-5D887FD51A4F}] => (Allow) D:\Steam\SteamApps\common\Minimum\Binaries\Win32\MinGame-Win32-F.exe FirewallRules: [{EBAD319F-EACF-4E00-A119-5A4A462C6EB1}] => (Allow) D:\Steam\SteamApps\common\Minimum\Binaries\Win32\MinGame-Win32-F.exe FirewallRules: [{0C1446BD-868D-40D5-B48E-30C79FE15EE8}] => (Allow) D:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [{5366837A-904C-4D25-85E6-1A0153F205C6}] => (Allow) D:\Steam\SteamApps\common\Grand Theft Auto V\GTAVLauncher.exe FirewallRules: [TCP Query User{7D9AE548-35F7-4BD1-B7E0-A9A746D8B83B}D:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [UDP Query User{2EB73BDE-BCE8-4335-BF49-FAE99E7DF881}D:\steam\steamapps\common\grand theft auto v\gta5.exe] => (Allow) D:\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [{F96D223E-066D-4986-BA14-F27DBA5CC246}] => (Block) D:\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [{1272932A-B624-4D20-83B6-17006F44AECC}] => (Block) D:\steam\steamapps\common\grand theft auto v\gta5.exe FirewallRules: [TCP Query User{3F9047CF-A19C-4B5F-9DCB-B912DA509434}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe FirewallRules: [UDP Query User{3CAE4700-BB1C-44BD-A838-15157A46CD1F}C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe] => (Allow) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe FirewallRules: [{A48D98FE-D66A-46D9-A422-5CD4673A529D}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe FirewallRules: [{7BE2C3A6-0F6F-43D4-AB9F-C97D728AACCE}] => (Block) C:\program files (x86)\java\jre1.8.0_31\bin\javaw.exe FirewallRules: [TCP Query User{77610B2D-C63F-4640-A36A-6D9F5EF8DCAD}C:\users\gamer\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\gamer\appdata\local\akamai\netsession_win.exe FirewallRules: [UDP Query User{A3716AB9-5350-4A0F-A673-0297566091E0}C:\users\gamer\appdata\local\akamai\netsession_win.exe] => (Allow) C:\users\gamer\appdata\local\akamai\netsession_win.exe FirewallRules: [{989D46C5-4796-4E84-866E-812BA71A15E3}] => (Block) C:\users\gamer\appdata\local\akamai\netsession_win.exe FirewallRules: [{4C0BDCDB-B7D4-49EE-B9E6-1732B712591A}] => (Block) C:\users\gamer\appdata\local\akamai\netsession_win.exe FirewallRules: [{8AFD7A8F-E41A-41FF-80D0-B988D20738A5}] => (Allow) D:\Steam\SteamApps\common\Sniper Elite Zombie Army 2\bin\ZA2.exe FirewallRules: [{76D6E884-997D-4222-9FD5-511FE20532D2}] => (Allow) D:\Steam\SteamApps\common\Sniper Elite Zombie Army 2\bin\ZA2.exe FirewallRules: [{C2FBCC54-0482-40D0-BCD2-B69A9EA1CFF7}] => (Allow) D:\Origin Games\BFH\bfh.exe FirewallRules: [{8C549278-F17C-4F52-B85F-7B7A055BFCF5}] => (Allow) D:\Origin Games\BFH\bfh.exe FirewallRules: [TCP Query User{99093ABF-65F2-499D-ACB2-32934910E580}D:\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) D:\gameforgelive\games\deu_deu\tera\tera-launcher.exe FirewallRules: [UDP Query User{AA905751-EBBB-4D90-B542-F2EB553ACC66}D:\gameforgelive\games\deu_deu\tera\tera-launcher.exe] => (Allow) D:\gameforgelive\games\deu_deu\tera\tera-launcher.exe FirewallRules: [{79A68E20-9068-45B9-8E46-0DCA4DD97539}] => (Block) D:\gameforgelive\games\deu_deu\tera\tera-launcher.exe FirewallRules: [{3CF8E125-BE7B-4ECE-9C82-C42D410781DE}] => (Block) D:\gameforgelive\games\deu_deu\tera\tera-launcher.exe FirewallRules: [TCP Query User{E9FC2913-31AD-4FF7-910F-7BBBA6C9E44A}D:\steam\steamapps\common\trine 2\trine2_32bit.exe] => (Block) D:\steam\steamapps\common\trine 2\trine2_32bit.exe FirewallRules: [UDP Query User{1A4EBB64-9B5E-48A5-8913-AD37521BE52A}D:\steam\steamapps\common\trine 2\trine2_32bit.exe] => (Block) D:\steam\steamapps\common\trine 2\trine2_32bit.exe FirewallRules: [{616002EC-16F4-45E5-919D-C6F0805F7239}] => (Allow) D:\Steam\SteamApps\common\Phantom Breaker Battle Grounds\bin\pbbg_win32.exe FirewallRules: [{C5250B87-BE75-42C3-A0F9-4A1756D32E62}] => (Allow) D:\Steam\SteamApps\common\Phantom Breaker Battle Grounds\bin\pbbg_win32.exe FirewallRules: [{04CE2ADB-3176-4674-B78C-5BC42A054B65}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{DA076793-EE7E-486C-ABC1-7BECF4B45BA9}] => (Allow) C:\Program Files\AVAST Software\Avast\ng\vbox\aswFe.exe FirewallRules: [{17ECC260-1156-4B86-8F3B-B3479FB8E9B3}] => (Allow) D:\GameforgeLive\gfl_client.exe FirewallRules: [{668A0916-5148-4ADD-9E0E-ADB601DE7D5C}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe FirewallRules: [{1C55794A-BD6B-4FA4-8A91-7D0CB0D870E7}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5mp.exe FirewallRules: [{181038CF-AF8C-4342-B8BC-AF9DB70EBEC4}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe FirewallRules: [{05D78C56-16C2-4A46-A189-1CD90AD7F06E}] => (Allow) D:\Steam\SteamApps\common\Call of Duty Modern Warfare 3\iw5sp.exe FirewallRules: [{7C75A621-EB5A-46D9-A62D-B894752CE9BD}] => (Allow) D:\Steam\SteamApps\common\Symphony\Symphony.exe FirewallRules: [{10137879-2C3C-44D7-AFA3-6BF93846BA1C}] => (Allow) D:\Steam\SteamApps\common\Symphony\Symphony.exe FirewallRules: [{17A3FBFF-4439-457A-8996-ACEB397CF514}] => (Allow) D:\Steam\SteamApps\common\iO\iO_PC_Full.exe FirewallRules: [{B952D743-2360-47FC-A22B-C6DEE092667D}] => (Allow) D:\Steam\SteamApps\common\iO\iO_PC_Full.exe FirewallRules: [{616E378B-C962-4F12-ADDD-6A331705A6DC}] => (Allow) D:\Steam\SteamApps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe FirewallRules: [{82EB7011-87AF-4A85-AB81-9B132D486185}] => (Allow) D:\Steam\SteamApps\common\Dark Souls II Scholar of the First Sin\Game\DarkSoulsII.exe FirewallRules: [{27E2B7BD-27FE-4DE5-B998-3126684F9BEC}] => (Allow) D:\Steam\SteamApps\common\Yet Another Zombie Defense\YetAnotherZombieDefense.exe FirewallRules: [{CE1E171E-3BB7-4740-A55C-8FCA4282FDA6}] => (Allow) D:\Steam\SteamApps\common\Yet Another Zombie Defense\YetAnotherZombieDefense.exe FirewallRules: [{8098FC68-1148-43C2-A11A-6016F3D56D21}] => (Allow) D:\Steam\SteamApps\common\How to Survive\HowToSurvive.exe FirewallRules: [{9D8093AA-BA53-4189-AD09-ACA68E2D3348}] => (Allow) D:\Steam\SteamApps\common\How to Survive\HowToSurvive.exe FirewallRules: [{04A1DF40-A46B-4110-920B-050BF98CFD16}] => (Allow) D:\Steam\SteamApps\common\How to Survive\Detect.exe FirewallRules: [{76BF6AFD-7A17-42B9-AD37-478DB018B683}] => (Allow) D:\Steam\SteamApps\common\How to Survive\Detect.exe FirewallRules: [{2D552456-6BDF-4505-BDB1-42A02EBE4DB9}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{F8A8CA4A-0465-46FC-9126-2063ECD20899}] => (Allow) C:\Windows\SysWOW64\PnkBstrA.exe FirewallRules: [{29DEF68A-3EF0-49A4-8C74-A733CFF94033}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{1FD687CF-E6A2-4098-857B-CDDFEF15DB37}] => (Allow) C:\Windows\SysWOW64\PnkBstrB.exe FirewallRules: [{490669F7-CDFB-49BE-97DE-40CC31E12CE0}] => (Allow) D:\Steam\SteamApps\common\Lost Planet 2\Launcher.exe FirewallRules: [{D2032C22-D1B8-41B0-B9A8-03B8DD2BA03F}] => (Allow) D:\Steam\SteamApps\common\Lost Planet 2\Launcher.exe FirewallRules: [TCP Query User{5D32B099-E9E0-4DCE-8DCD-4DC08C03F551}D:\steam\steamapps\common\lost planet 2\lp2dx9.exe] => (Allow) D:\steam\steamapps\common\lost planet 2\lp2dx9.exe FirewallRules: [UDP Query User{8650CA44-1153-4D30-AC4E-882000B030C2}D:\steam\steamapps\common\lost planet 2\lp2dx9.exe] => (Allow) D:\steam\steamapps\common\lost planet 2\lp2dx9.exe FirewallRules: [{90BB2826-01FC-43F3-A3F5-9D4B0BF40A5D}] => (Block) D:\steam\steamapps\common\lost planet 2\lp2dx9.exe FirewallRules: [{7CE25AC8-7DD3-4504-9E0E-395B11E05271}] => (Block) D:\steam\steamapps\common\lost planet 2\lp2dx9.exe FirewallRules: [{778C1F3C-778E-4588-B0B1-A7533A607C82}] => (Allow) D:\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe FirewallRules: [{DA1C2C79-D7A4-4FCC-9AEA-D3751F0BB1EB}] => (Allow) D:\Steam\SteamApps\common\Dirty Bomb\Binaries\Win32\ShooterGame-Win32-Shipping.exe FirewallRules: [{01021D89-816F-4881-9A78-1E967D6DA0E1}] => (Allow) D:\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe FirewallRules: [{8FDD60AE-2D06-442F-A72B-880EC69629EA}] => (Allow) D:\Steam\SteamApps\common\Dungeon Defenders\Binaries\Win32\DungeonDefenders.exe FirewallRules: [TCP Query User{D585EBF7-4B1C-47C9-BAC5-C6B025053E80}D:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe] => (Allow) D:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe FirewallRules: [UDP Query User{0158B250-F6A0-45C0-B120-AAA3AAD8DDC4}D:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe] => (Allow) D:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe FirewallRules: [{34B78CB9-57AF-4D56-B1D7-7DD8A000EDD2}] => (Block) D:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe FirewallRules: [{49A4EF77-A6FD-4E71-813D-B6DAD01E679C}] => (Block) D:\steam\steamapps\common\dungeon defenders\binaries\win32\dundefgame.exe StandardProfile\AuthorizedApplications: [D:\Program Files (x86)\Spybot - Search & Destroy 2\SDTray.exe] => Enabled:Spybot - Search & Destroy tray access StandardProfile\AuthorizedApplications: [D:\Program Files (x86)\Spybot - Search & Destroy 2\SDFSSvc.exe] => Enabled:Spybot-S&D 2 Scanner Service StandardProfile\AuthorizedApplications: [D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdate.exe] => Enabled:Spybot-S&D 2 Updater StandardProfile\AuthorizedApplications: [D:\Program Files (x86)\Spybot - Search & Destroy 2\SDUpdSvc.exe] => Enabled:Spybot-S&D 2 Background update service ==================== Faulty Device Manager Devices ============= ==================== Event log errors: ========================= Application errors: ================== Error: (06/19/2015 05:26:16 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/19/2015 05:01:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/19/2015 11:50:26 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: DunDefGame.exe, Version: 1.0.0.0, Zeitstempel: 0x5356e469 Name des fehlerhaften Moduls: DunDefGame.exe, Version: 1.0.0.0, Zeitstempel: 0x5356e469 Ausnahmecode: 0xc0000005 Fehleroffset: 0x001dc9f3 ID des fehlerhaften Prozesses: 0xa14 Startzeit der fehlerhaften Anwendung: 0xDunDefGame.exe0 Pfad der fehlerhaften Anwendung: DunDefGame.exe1 Pfad des fehlerhaften Moduls: DunDefGame.exe2 Berichtskennung: DunDefGame.exe3 Error: (06/19/2015 11:50:24 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: Name der fehlerhaften Anwendung: DunDefGame.exe, Version: 1.0.0.0, Zeitstempel: 0x5356e469 Name des fehlerhaften Moduls: DunDefGame.exe, Version: 1.0.0.0, Zeitstempel: 0x5356e469 Ausnahmecode: 0xc0000005 Fehleroffset: 0x001dc9f3 ID des fehlerhaften Prozesses: 0xa14 Startzeit der fehlerhaften Anwendung: 0xDunDefGame.exe0 Pfad der fehlerhaften Anwendung: DunDefGame.exe1 Pfad des fehlerhaften Moduls: DunDefGame.exe2 Berichtskennung: DunDefGame.exe3 Error: (06/19/2015 06:15:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/19/2015 06:13:59 AM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (NvVAD initialization failed [6]). Error: (06/19/2015 06:13:59 AM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (Failed to set NvVAD endpoint as default Audio endpoint [0]). Error: (06/19/2015 06:13:55 AM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (NvVAD endpoint registration failed [0]). Error: (06/18/2015 03:38:07 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/18/2015 03:37:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: An error has occurred (NvVAD initialization failed [6]). System errors: ============= Error: (06/19/2015 06:47:44 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Trend Micro RUBotted Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/19/2015 06:47:44 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Trend Micro RUBotted Service erreicht. Error: (06/19/2015 06:47:43 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Trend Micro RUBotted Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/19/2015 06:47:43 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Trend Micro RUBotted Service erreicht. Error: (06/19/2015 06:47:42 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Trend Micro RUBotted Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/19/2015 06:47:42 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Trend Micro RUBotted Service erreicht. Error: (06/19/2015 06:47:41 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Trend Micro RUBotted Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/19/2015 06:47:41 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Trend Micro RUBotted Service erreicht. Error: (06/19/2015 06:47:40 PM) (Source: Service Control Manager) (EventID: 7000) (User: ) Description: Der Dienst "Trend Micro RUBotted Service" wurde aufgrund folgenden Fehlers nicht gestartet: %%1053 Error: (06/19/2015 06:47:40 PM) (Source: Service Control Manager) (EventID: 7009) (User: ) Description: Das Zeitlimit (30000 ms) wurde beim Verbindungsversuch mit dem Dienst Trend Micro RUBotted Service erreicht. Microsoft Office: ========================= Error: (06/19/2015 05:26:16 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/19/2015 05:01:30 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/19/2015 11:50:26 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: DunDefGame.exe1.0.0.05356e469DunDefGame.exe1.0.0.05356e469c0000005001dc9f3a1401d0aa753bc8ede4D:\Steam\steamapps\common\Dungeon Defenders\Binaries\Win32\DunDefGame.exeD:\Steam\steamapps\common\Dungeon Defenders\Binaries\Win32\DunDefGame.exe9c06272d-1668-11e5-9045-74d435b29487 Error: (06/19/2015 11:50:24 AM) (Source: Application Error) (EventID: 1000) (User: ) Description: DunDefGame.exe1.0.0.05356e469DunDefGame.exe1.0.0.05356e469c0000005001dc9f3a1401d0aa753bc8ede4D:\Steam\steamapps\common\Dungeon Defenders\Binaries\Win32\DunDefGame.exeD:\Steam\steamapps\common\Dungeon Defenders\Binaries\Win32\DunDefGame.exe9a91d13a-1668-11e5-9045-74d435b29487 Error: (06/19/2015 06:15:05 AM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/19/2015 06:13:59 AM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] Error: (06/19/2015 06:13:59 AM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcFailed to set NvVAD endpoint as default Audio endpoint [0] Error: (06/19/2015 06:13:55 AM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD endpoint registration failed [0] Error: (06/18/2015 03:38:07 PM) (Source: WinMgmt) (EventID: 10) (User: ) Description: //./root/CIMV2SELECT * FROM __InstanceModificationEvent WITHIN 60 WHERE TargetInstance ISA "Win32_Processor" AND TargetInstance.LoadPercentage > 990x80041003 Error: (06/18/2015 03:37:29 PM) (Source: NvStreamSvc) (EventID: 2001) (User: ) Description: NvStreamSvcNvVAD initialization failed [6] CodeIntegrity Errors: =================================== Date: 2015-06-19 16:54:38.303 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. Date: 2015-06-19 16:54:38.265 Description: Windows konnte die Abbildintegrität der Datei "\Device\HarddiskVolume1\ComboFix\catchme.sys" nicht überprüfen, weil der Dateihash nicht im System gefunden wurde. Möglicherweise wurde durch eine kürzlich durchgeführte Hardware- oder Softwareänderung eine falsch signierte oder beschädigte Datei oder eine Datei, bei der es sich um schädliche Software aus einer unbekannten Quelle handelt, installiert. ==================== Memory info =========================== Processor: AMD FX(tm)-6300 Six-Core Processor Percentage of memory in use: 31% Total physical RAM: 8173.54 MB Available physical RAM: 5576.53 MB Total Pagefile: 16345.26 MB Available Pagefile: 13370.3 MB Total Virtual: 8192 MB Available Virtual: 8191.83 MB ==================== Drives ================================ Drive c: (System) (Fixed) (Total:160 GB) (Free:45.46 GB) NTFS ==>[Drive with boot components (obtained from BCD)] Drive d: (Data) (Fixed) (Total:771.51 GB) (Free:190.51 GB) NTFS ==================== MBR & Partition Table ================== ======================================================== Disk: 0 (MBR Code: Windows 7 or 8) (Size: 931.5 GB) (Disk ID: 58C7C07D) Partition 1: (Active) - (Size=160 GB) - (Type=07 NTFS) Partition 2: (Not Active) - (Size=771.5 GB) - (Type=07 NTFS) ==================== End of log ============================ |
20.06.2015, 12:04 | #5 |
/// the machine /// TB-Ausbilder | Festplatte füllt sich im Minuten Takt Downloade Dir bitte Malwarebytes Anti-Malware
Downloade Dir bitte AdwCleaner auf deinen Desktop.
Beende bitte Deine Schutzsoftware um eventuelle Konflikte zu vermeiden.
und ein frisches FRST log bitte.
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
21.06.2015, 17:30 | #6 |
| Festplatte füllt sich im Minuten Takt Hier der log vom AdwCleaner Code:
ATTFilter # AdwCleaner v4.206 - Bericht erstellt 20/06/2015 um 21:44:50 # Aktualisiert 01/06/2015 von Xplode # Datenbank : 2015-06-17.1 [Server] # Betriebssystem : Windows 7 Home Premium Service Pack 1 (x64) # Benutzername : Gamer - GAMER-PC # Gestarted von : C:\Users\Gamer\Desktop\AdwCleaner_4.206.exe # Option : Löschen ***** [ Dienste ] ***** [#] Dienst Gelöscht : 33479496 ***** [ Dateien / Ordner ] ***** Ordner Gelöscht : C:\Users\Gamer\AppData\Roaming\download Manager Datei Gelöscht : C:\END Datei Gelöscht : C:\Windows\System32\drivers\33479496.sys Datei Gelöscht : C:\Users\Gamer\AppData\Roaming\Mozilla\Firefox\Profiles\qjedzmm9.default\invalidprefs.js ***** [ Geplante Tasks ] ***** ***** [ Verknüpfungen ] ***** ***** [ Registrierungsdatenbank ] ***** Schlüssel Gelöscht : HKLM\SOFTWARE\Classes\CLSID\{00B11DA2-75ED-4364-ABA5-9A95B1F5E946} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Stats\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Ext\Settings\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKLM\SOFTWARE\Microsoft\Internet Explorer\Extensions\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : [x64] HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Browser Helper Objects\{EE932B49-D5C0-4D19-A3DA-CE0849258DE6} Schlüssel Gelöscht : HKCU\Software\ClickConnect Schlüssel Gelöscht : HKCU\Software\OCS Daten Gelöscht : HKCU\Software\Microsoft\Windows\CurrentVersion\Internet Settings [ProxyOverride] - <local> ***** [ Internetbrowser ] ***** -\\ Internet Explorer v11.0.9600.17840 -\\ Mozilla Firefox v38.0.5 (x86 de) -\\ Chromium v ************************* AdwCleaner[R0].txt - [1987 Bytes] - [20/06/2015 21:43:05] AdwCleaner[S0].txt - [1806 Bytes] - [20/06/2015 21:44:50] ########## EOF - C:\AdwCleaner\AdwCleaner[S0].txt - [1865 Bytes] ########## Code:
ATTFilter ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Junkware Removal Tool (JRT) by Thisisu Version: 7.0.3 (06.19.2015:1) OS: Windows 7 Home Premium x64 Ran by Gamer on 20.06.2015 at 21:52:26,87 ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ ~~~ Services ~~~ Tasks ~~~ Registry Values Successfully repaired: [Registry Value] HKEY_CURRENT_USER\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_LOCAL_MACHINE\Software\Wow6432Node\Microsoft\Internet Explorer\Main\\Default_Page_URL Successfully repaired: [Registry Value] HKEY_USERS\.DEFAULT\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-18\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-19\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-20\Software\Microsoft\Internet Explorer\Main\\Start Page Successfully repaired: [Registry Value] HKEY_USERS\S-1-5-21-81771348-503357986-749784082-1000\Software\Microsoft\Internet Explorer\Main\\Start Page ~~~ Registry Keys ~~~ Files ~~~ Folders Successfully deleted: [Folder] C:\Users\Gamer\appdata\local\crashrpt Successfully deleted: [Folder] C:\Windows\syswow64\ai_recyclebin ~~~ FireFox ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Scan was completed on 20.06.2015 at 21:55:45,13 End of JRT log ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~ Code:
ATTFilter Malwarebytes Anti-Malware www.malwarebytes.org Suchlauf Datum: 21.06.2015 Suchlauf-Zeit: 07:56:24 Logdatei: DICKE HODEN.txt Administrator: Ja Version: 2.01.6.1022 Malware Datenbank: v2015.06.20.05 Rootkit Datenbank: v2015.06.15.01 Lizenz: Premium Malware Schutz: Aktiviert Bösartiger Webseiten Schutz: Aktiviert Selbstschutz: Deaktiviert Betriebssystem: Windows 7 Service Pack 1 CPU: x64 Dateisystem: NTFS Benutzer: Gamer Suchlauf-Art: Bedrohungs-Suchlauf Ergebnis: Abgeschlossen Durchsuchte Objekte: 379145 Verstrichene Zeit: 28 Min, 8 Sek Speicher: Aktiviert Autostart: Aktiviert Dateisystem: Aktiviert Archive: Aktiviert Rootkits: Deaktiviert Heuristik: Aktiviert PUP: Aktiviert PUM: Aktiviert Prozesse: 0 (Keine schädliche Elemente gefunden) Module: 0 (Keine schädliche Elemente gefunden) Registrierungsschlüssel: 0 (Keine schädliche Elemente gefunden) Registrierungswerte: 0 (Keine schädliche Elemente gefunden) Registrierungsdaten: 0 (Keine schädliche Elemente gefunden) Ordner: 0 (Keine schädliche Elemente gefunden) Dateien: 0 (Keine schädliche Elemente gefunden) Physische Sektoren: 0 (Keine schädliche Elemente gefunden) (end) |
22.06.2015, 11:56 | #7 |
/// the machine /// TB-Ausbilder | Festplatte füllt sich im Minuten TaktESET Online Scanner
Downloade Dir bitte SecurityCheck und:
und ein frisches FRST log bitte. Noch Probleme?
__________________ gruß, schrauber Proud Member of UNITE and ASAP since 2009 Spenden Anleitungen und Hilfestellungen Trojaner-Board Facebook-Seite Keine Hilfestellung via PM! |
Themen zu Festplatte füllt sich im Minuten Takt |
analysieren, datei, festplatte, freund, füllt, heute, hoffe, minute, minuten, minutentakt, nicht mehr, nvbackend, platte, sekunden, speicher, versuche, video, virus |